[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 26.376230] kauditd_printk_skb: 7 callbacks suppressed [ 26.376239] audit: type=1800 audit(1541715207.675:29): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 26.402059] audit: type=1800 audit(1541715207.675:30): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.31' (ECDSA) to the list of known hosts. 2018/11/08 22:13:35 fuzzer started 2018/11/08 22:13:37 dialing manager at 10.128.0.26:41811 2018/11/08 22:13:37 syscalls: 1 2018/11/08 22:13:37 code coverage: enabled 2018/11/08 22:13:37 comparison tracing: enabled 2018/11/08 22:13:37 setuid sandbox: enabled 2018/11/08 22:13:37 namespace sandbox: enabled 2018/11/08 22:13:37 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/08 22:13:37 fault injection: enabled 2018/11/08 22:13:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/08 22:13:37 net packed injection: enabled 2018/11/08 22:13:37 net device setup: enabled 22:15:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f00007a8000)={&(0x7f0000000180)={0x18, 0x1, 0xb0302ae1f9c92e07, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x4, 0x7}]}, 0x18}}, 0x0) syzkaller login: [ 128.968389] IPVS: ftp: loaded support on port[0] = 21 22:15:10 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r0}, {r1}, {}, {r0, 0x8000}], 0x4, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={0x1}, 0x8) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) write(r1, &(0x7f00000001c0), 0xffffffea) syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x4, 0x10000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@in6, &(0x7f0000000280)=0x80) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xab040000}, &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) fgetxattr(r0, &(0x7f0000000340)=@known='system.posix_acl_access\x00', &(0x7f0000000440)=""/12, 0xc) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 129.193443] IPVS: ftp: loaded support on port[0] = 21 22:15:10 executing program 2: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b01000100020009b30000000000001c68f86800008b00000000000000000000"], 0x20) uselib(&(0x7f00000001c0)='./file0\x00') [ 129.556491] IPVS: ftp: loaded support on port[0] = 21 22:15:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="8a1af8ffff2cd147cea72c2b0563b42c00001dd76bf5"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x224) r1 = socket$inet6(0xa, 0x4000000000000003, 0x2) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 129.945284] IPVS: ftp: loaded support on port[0] = 21 22:15:11 executing program 4: prctl$seccomp(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) syz_open_dev$media(&(0x7f0000004c00)='/dev/media#\x00', 0x0, 0x0) clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) [ 130.467207] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.490871] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.499177] device bridge_slave_0 entered promiscuous mode [ 130.507677] IPVS: ftp: loaded support on port[0] = 21 [ 130.629543] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.657138] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.669459] device bridge_slave_1 entered promiscuous mode [ 130.785188] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.811628] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.824525] device bridge_slave_0 entered promiscuous mode 22:15:12 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000100)={0xb2, 0x0, [], {0x0, @reserved}}) [ 130.837791] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 130.907047] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.926437] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.940929] device bridge_slave_1 entered promiscuous mode [ 131.015976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.067569] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 131.119238] IPVS: ftp: loaded support on port[0] = 21 [ 131.220293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 131.446111] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.555870] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.581882] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.589223] device bridge_slave_0 entered promiscuous mode [ 131.600908] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.621822] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 131.690037] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.712488] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.720548] device bridge_slave_1 entered promiscuous mode [ 131.750120] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 131.862260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 131.978794] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.998232] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.006106] device bridge_slave_0 entered promiscuous mode [ 132.015465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 132.117160] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.131573] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.153006] device bridge_slave_1 entered promiscuous mode [ 132.260334] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 132.312737] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.338128] team0: Port device team_slave_0 added [ 132.355451] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 132.363262] team0: Port device team_slave_0 added [ 132.370115] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 132.389423] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.422178] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.435871] device bridge_slave_0 entered promiscuous mode [ 132.451385] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 132.463525] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.470652] team0: Port device team_slave_1 added [ 132.485780] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 132.505655] team0: Port device team_slave_1 added [ 132.527754] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.545826] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.563211] device bridge_slave_1 entered promiscuous mode [ 132.573598] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 132.610798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.635210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 132.702094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.732411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.797483] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 132.814422] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 132.841777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.873398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 132.882073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.890005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.929690] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 132.936955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.953354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.972820] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 133.002437] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.010779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.020714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.103732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 133.110632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.126704] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 133.155562] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 133.172807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.182987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.217456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 133.239136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.282419] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 133.354187] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.360593] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.370169] device bridge_slave_0 entered promiscuous mode [ 133.380291] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.396708] team0: Port device team_slave_0 added [ 133.419993] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 133.454144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.537252] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.545085] team0: Port device team_slave_1 added [ 133.552313] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.558671] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.582220] device bridge_slave_1 entered promiscuous mode [ 133.603206] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.610660] team0: Port device team_slave_0 added [ 133.645730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.719778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 133.735207] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 133.743135] team0: Port device team_slave_1 added [ 133.763999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.832951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.860329] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 133.880010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.890043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.900746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 133.911932] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 133.922356] team0: Port device team_slave_0 added [ 133.939771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.004343] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.021392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.037093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.055202] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.068633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.088187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.123731] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.137052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.158509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.174323] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 134.182227] team0: Port device team_slave_1 added [ 134.306482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 134.320790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 134.331127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 134.355416] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 134.465589] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 134.477611] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.484168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.491368] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.497734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.510373] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 134.523727] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 134.548595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 134.582204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 134.667559] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.682481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.692580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.702735] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.709112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.715979] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.722384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.730639] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 134.749935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.778391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.794430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.036475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.047690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.145791] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 135.160847] team0: Port device team_slave_0 added [ 135.271431] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 135.285415] team0: Port device team_slave_1 added [ 135.389703] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.396248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.402948] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.409292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.423689] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 135.452507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 135.490002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.503073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.548442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 135.591554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.602905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.703582] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 135.710755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.725180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.758585] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.765022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.771701] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.778057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.791887] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 135.804573] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 135.854869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.868905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.041562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.052871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.082386] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.088794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.095595] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.101994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.113683] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.010641] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.017082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.023772] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.030135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.063511] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.121525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.132094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.412430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.524741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.862417] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 139.980321] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 140.087911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.333300] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 140.339496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.348953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.512300] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 140.518505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 140.526499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 140.544095] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 140.660901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.828877] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.846382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.960125] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 140.982228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.012492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.041849] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.117754] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.328606] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.392317] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 141.562135] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 141.568520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.578610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 141.616537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.813610] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 141.819804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 141.828101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.012569] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.098177] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 142.268235] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.472498] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 142.478698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 142.492665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 142.872324] 8021q: adding VLAN 0 to HW filter on device team0 22:15:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x198, [0x0, 0x20000100, 0x20000238, 0x20000268], 0x0, &(0x7f0000000580), &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000000500000000000000000073797a5f74756e00000000000000000073797a6b616c6c65723100000000000073797a6b616c6c65723100000000000076657468305f746f5f7465616d000000000000000000000000000000aaaaaaaaaaaa0000000000000000dc000000dc0000000801000071756f7461000000000000000000000000000000000000000000000000000000180000000000002200000000000000000000000000000000000000006d61726b5f6d00000000000000000000000000000000000000000000000000000c0000000000000000000000000200006d61726b0000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x1e8) 22:15:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, &(0x7f0000001800)=""/130, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) write$vnet(r0, &(0x7f0000000340)={0x1, {&(0x7f0000000000), 0x0, &(0x7f0000000140)=""/139, 0x0, 0x2}}, 0x68) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) [ 143.933327] hrtimer: interrupt took 27155 ns 22:15:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, &(0x7f0000001800)=""/130, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) write$vnet(r0, &(0x7f0000000340)={0x1, {&(0x7f0000000000), 0x0, &(0x7f0000000140)=""/139, 0x0, 0x2}}, 0x68) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 22:15:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="8a1af8ffff2cd147cea72c2b0563b42c00001dd76bf5"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x224) r1 = socket$inet6(0xa, 0x4000000000000003, 0x2) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 22:15:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, &(0x7f0000001800)=""/130, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) write$vnet(r0, &(0x7f0000000340)={0x1, {&(0x7f0000000000), 0x0, &(0x7f0000000140)=""/139, 0x0, 0x2}}, 0x68) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 22:15:25 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r0}, {r1}, {}, {r0, 0x8000}], 0x4, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={0x1}, 0x8) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) write(r1, &(0x7f00000001c0), 0xffffffea) syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x4, 0x10000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@in6, &(0x7f0000000280)=0x80) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xab040000}, &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) fgetxattr(r0, &(0x7f0000000340)=@known='system.posix_acl_access\x00', &(0x7f0000000440)=""/12, 0xc) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:15:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001640)=""/211, 0xd3, &(0x7f0000001800)=""/130, 0x0, 0x2}}, 0x68) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) write$vnet(r0, &(0x7f0000000340)={0x1, {&(0x7f0000000000), 0x0, &(0x7f0000000140)=""/139, 0x0, 0x2}}, 0x68) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x3, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 22:15:26 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r0}, {r1}, {}, {r0, 0x8000}], 0x4, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={0x1}, 0x8) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) write(r1, &(0x7f00000001c0), 0xffffffea) syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x4, 0x10000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@in6, &(0x7f0000000280)=0x80) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xab040000}, &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) fgetxattr(r0, &(0x7f0000000340)=@known='system.posix_acl_access\x00', &(0x7f0000000440)=""/12, 0xc) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:15:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="8a1af8ffff2cd147cea72c2b0563b42c00001dd76bf5"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x224) r1 = socket$inet6(0xa, 0x4000000000000003, 0x2) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 22:15:26 executing program 0: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @broadcast}, {}, 0x0, {0x2, 0x0, @broadcast}, 'veth1_to_bridge\x00'}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x890b, &(0x7f00000000c0)={"6966623002000000006b2700", @ifru_map={0x0, 0x2}}) 22:15:26 executing program 4: prctl$seccomp(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) syz_open_dev$media(&(0x7f0000004c00)='/dev/media#\x00', 0x0, 0x0) clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) 22:15:26 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0) sendfile(r2, r1, &(0x7f000025d000), 0x734) 22:15:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0xfffffffffffffff8, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x0, 0x0, 0x0, 0x80000001, 0x6, 0x0, 0xffffffff, 0x1, 0x80, 0xffffffff, 0x3ff, 0x5, 0xffffffff, 0x0, 0x0, 0x1, 0x4, 0x4, 0x3, 0x1800000000000, 0x3a53, 0x687923fb, 0x1, 0x0, 0x8, 0xf6, 0x9, 0x1ff, 0x2, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x1000000000, 0x109, 0x4, 0x1, 0x8, 0x8}, r1, 0xd, r0, 0x8) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$SG_IO(r0, 0x2285, &(0x7f00000014c0)={0x0, 0x0, 0x5b, 0x3, @buffer={0x0, 0x1000, &(0x7f00000003c0)=""/4096}, &(0x7f00000013c0)="483527394c6c33b39b0e503349ba27eecbd578a833c38e1570c33eeb406e90c3084f5b28e9072cd97410b13c4037b655a405e9dc620f2aed3013c3644de7838bccc74f34af02f22f2202ba81ce88bfd5f656557e0b3f6c6320800e", &(0x7f0000001440)=""/88, 0x6, 0x22, 0x0, &(0x7f0000000340)}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) sched_getscheduler(r1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000001540)={'filter\x00'}, &(0x7f0000001500)=0x44) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 22:15:26 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="8a1af8ffff2cd147cea72c2b0563b42c00001dd76bf5"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0x224) r1 = socket$inet6(0xa, 0x4000000000000003, 0x2) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 22:15:26 executing program 4: prctl$seccomp(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) syz_open_dev$media(&(0x7f0000004c00)='/dev/media#\x00', 0x0, 0x0) clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) 22:15:26 executing program 4: prctl$seccomp(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) syz_open_dev$media(&(0x7f0000004c00)='/dev/media#\x00', 0x0, 0x0) clone(0x1002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) 22:15:26 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r0}, {r1}, {}, {r0, 0x8000}], 0x4, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={0x1}, 0x8) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) write(r1, &(0x7f00000001c0), 0xffffffea) syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x4, 0x10000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@in6, &(0x7f0000000280)=0x80) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xab040000}, &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) fgetxattr(r0, &(0x7f0000000340)=@known='system.posix_acl_access\x00', &(0x7f0000000440)=""/12, 0xc) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:15:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) 22:15:26 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000480)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f0000396000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000079f000/0x3000)=nil) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 22:15:26 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r0}, {r1}, {}, {r0, 0x8000}], 0x4, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={0x1}, 0x8) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) write(r1, &(0x7f00000001c0), 0xffffffea) syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x4, 0x10000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@in6, &(0x7f0000000280)=0x80) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xab040000}, &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) fgetxattr(r0, &(0x7f0000000340)=@known='system.posix_acl_access\x00', &(0x7f0000000440)=""/12, 0xc) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:15:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0xfffffffffffffff8, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x0, 0x0, 0x0, 0x80000001, 0x6, 0x0, 0xffffffff, 0x1, 0x80, 0xffffffff, 0x3ff, 0x5, 0xffffffff, 0x0, 0x0, 0x1, 0x4, 0x4, 0x3, 0x1800000000000, 0x3a53, 0x687923fb, 0x1, 0x0, 0x8, 0xf6, 0x9, 0x1ff, 0x2, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x1000000000, 0x109, 0x4, 0x1, 0x8, 0x8}, r1, 0xd, r0, 0x8) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$SG_IO(r0, 0x2285, &(0x7f00000014c0)={0x0, 0x0, 0x5b, 0x3, @buffer={0x0, 0x1000, &(0x7f00000003c0)=""/4096}, &(0x7f00000013c0)="483527394c6c33b39b0e503349ba27eecbd578a833c38e1570c33eeb406e90c3084f5b28e9072cd97410b13c4037b655a405e9dc620f2aed3013c3644de7838bccc74f34af02f22f2202ba81ce88bfd5f656557e0b3f6c6320800e", &(0x7f0000001440)=""/88, 0x6, 0x22, 0x0, &(0x7f0000000340)}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) sched_getscheduler(r1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000001540)={'filter\x00'}, &(0x7f0000001500)=0x44) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 22:15:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='ppp1selinux', 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:27 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000480)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f0000396000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000079f000/0x3000)=nil) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 22:15:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x3, 0x0, &(0x7f00000002c0)=""/160) 22:15:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0xfffffffffffffff8, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x0, 0x0, 0x0, 0x80000001, 0x6, 0x0, 0xffffffff, 0x1, 0x80, 0xffffffff, 0x3ff, 0x5, 0xffffffff, 0x0, 0x0, 0x1, 0x4, 0x4, 0x3, 0x1800000000000, 0x3a53, 0x687923fb, 0x1, 0x0, 0x8, 0xf6, 0x9, 0x1ff, 0x2, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x1000000000, 0x109, 0x4, 0x1, 0x8, 0x8}, r1, 0xd, r0, 0x8) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$SG_IO(r0, 0x2285, &(0x7f00000014c0)={0x0, 0x0, 0x5b, 0x3, @buffer={0x0, 0x1000, &(0x7f00000003c0)=""/4096}, &(0x7f00000013c0)="483527394c6c33b39b0e503349ba27eecbd578a833c38e1570c33eeb406e90c3084f5b28e9072cd97410b13c4037b655a405e9dc620f2aed3013c3644de7838bccc74f34af02f22f2202ba81ce88bfd5f656557e0b3f6c6320800e", &(0x7f0000001440)=""/88, 0x6, 0x22, 0x0, &(0x7f0000000340)}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) sched_getscheduler(r1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000001540)={'filter\x00'}, &(0x7f0000001500)=0x44) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) [ 145.809325] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 22:15:27 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000480)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f0000396000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000079f000/0x3000)=nil) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 22:15:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x3, 0x0, &(0x7f00000002c0)=""/160) 22:15:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='ppp1selinux', 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:27 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r0}, {r1}, {}, {r0, 0x8000}], 0x4, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={0x1}, 0x8) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) write(r1, &(0x7f00000001c0), 0xffffffea) syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x4, 0x10000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@in6, &(0x7f0000000280)=0x80) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xab040000}, &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) fgetxattr(r0, &(0x7f0000000340)=@known='system.posix_acl_access\x00', &(0x7f0000000440)=""/12, 0xc) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:15:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x3, 0x0, &(0x7f00000002c0)=""/160) 22:15:27 executing program 5: r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000480)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f0000396000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000079f000/0x3000)=nil) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x3) 22:15:27 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000480)=[{r0}, {r1}, {}, {r0, 0x8000}], 0x4, &(0x7f0000000500)={0x77359400}, &(0x7f0000000540)={0x1}, 0x8) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) write(r1, &(0x7f00000001c0), 0xffffffea) syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x4, 0x10000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockname(0xffffffffffffffff, &(0x7f00000003c0)=@in6, &(0x7f0000000280)=0x80) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xab040000}, &(0x7f00000004c0)={0x20}, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) fgetxattr(r0, &(0x7f0000000340)=@known='system.posix_acl_access\x00', &(0x7f0000000440)=""/12, 0xc) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:15:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='ppp1selinux', 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0xfffffffffffffff8, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x0, 0x0, 0x0, 0x80000001, 0x6, 0x0, 0xffffffff, 0x1, 0x80, 0xffffffff, 0x3ff, 0x5, 0xffffffff, 0x0, 0x0, 0x1, 0x4, 0x4, 0x3, 0x1800000000000, 0x3a53, 0x687923fb, 0x1, 0x0, 0x8, 0xf6, 0x9, 0x1ff, 0x2, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x1000000000, 0x109, 0x4, 0x1, 0x8, 0x8}, r1, 0xd, r0, 0x8) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$SG_IO(r0, 0x2285, &(0x7f00000014c0)={0x0, 0x0, 0x5b, 0x3, @buffer={0x0, 0x1000, &(0x7f00000003c0)=""/4096}, &(0x7f00000013c0)="483527394c6c33b39b0e503349ba27eecbd578a833c38e1570c33eeb406e90c3084f5b28e9072cd97410b13c4037b655a405e9dc620f2aed3013c3644de7838bccc74f34af02f22f2202ba81ce88bfd5f656557e0b3f6c6320800e", &(0x7f0000001440)=""/88, 0x6, 0x22, 0x0, &(0x7f0000000340)}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) sched_getscheduler(r1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000001540)={'filter\x00'}, &(0x7f0000001500)=0x44) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 22:15:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x800000000000260, 0x0, &(0x7f0000000000)={0x77359400}) 22:15:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x3, 0x0, &(0x7f00000002c0)=""/160) 22:15:27 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc00c9207, 0x8150000) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) read$eventfd(r1, &(0x7f0000000040), 0x8) tkill(r0, 0x15) 22:15:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) getdents64(r0, &(0x7f00000000c0)=""/11, 0xeb) 22:15:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='ppp1selinux', 0xfffffffffffffffe) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:15:28 executing program 3: ioprio_set$pid(0x2, 0xffffffffffffffff, 0x0) 22:15:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@ipx, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/112, 0x70}], 0x1, &(0x7f0000000700)=""/97, 0x61}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) times(&(0x7f0000000380)) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000040)=0x80, 0x0) 22:15:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x800000000000260, 0x0, &(0x7f0000000000)={0x77359400}) 22:15:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000840)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000100)={0x12, @tick=0xfffffffffffffffd}) 22:15:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') fdatasync(r0) 22:15:29 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10010012, r0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000000)) 22:15:29 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0x4) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xffffffff, 0x4) sendto$inet6(r0, &(0x7f0000000100)="020300000700000000000000fff55b4202938207d9fb3780398d5375000060007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2d1594c3b50035110f118d0000f55dc62600009b000000faffffff00010000aeb46245004bae1356642490a7b5fc88046a", 0x6c, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x2000000000d, @mcast2}, 0x1c) 22:15:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@dev}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @random="7d73cf61100f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x12, 0x0, 0x0, @multicast2=0xe000000a}}}}}, &(0x7f0000000180)) 22:15:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x800000000000260, 0x0, &(0x7f0000000000)={0x77359400}) 22:15:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@ipx, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/112, 0x70}], 0x1, &(0x7f0000000700)=""/97, 0x61}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) times(&(0x7f0000000380)) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000040)=0x80, 0x0) 22:15:32 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x20, 0x1, 0x4}, 0x2c) perf_event_open(&(0x7f0000000240)={0x0, 0x2de, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200000, 0xfffffffffffffffc, 0x0, 0x0, 0x1c00000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x41000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001700)={'team0\x00', 0x0}) sendmmsg(r1, &(0x7f0000009840)=[{{&(0x7f0000008500)=@nfc_llcp={0x27, 0x1, 0x1, 0x6, 0x4000, 0x3f, "e82705657ab6093a37364b6ea53af7335ab36d79c2b027a78a6d5f98a124251fd5082cd2bbcfc210b8eddfc5d1a296ec5d0929788156ac9bfcf4d2b55d6326", 0x20}, 0x80, &(0x7f0000008680), 0x0, &(0x7f00000086c0), 0x0, 0x1}, 0xffffffffffffffdc}], 0x1, 0x88c0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x6, 0x0, 0x7, 0x3, 0x8, 0x4, 0x3, 0x2, 0x5, 0x4, 0x40bcca1a, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x800) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$sock_proto_private(r2, 0x89e4, &(0x7f0000000500)="88057e23ac161c361d77a154619ecc1f2fcdfcb75333699416e619414a813607d9c9579932791a1b53a062c2f80336b4636b79b5a13759204dd0c39a9470502981417f9c60d5826243edd45eae69af323ec68c6cc0e8f5731119fd7903c5411342b9affe5ddae60a753d4f4321f0746f7286abee29af3b4b1deabc0d09372b4da2862fd02d7e137529300f40023d9b95958ed600505667bd9ed4be4e5ff7261dc14b712bd48d48464aa6c99d060321b213b2504517f65431e9d40d6f43bf4c8dddc8a0121542e70d0e3c485e32c77dcbfbd0de63e4bff40c83caeaccfcc71e9493f2a7") fcntl$getownex(r4, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) sendto$unix(r2, &(0x7f00000006c0)="57833fb4c17b12e837eed7f22c3c6ed1bc5f2234817a316d9de780b678e111c3989759ea3d158fd82e9337f91528f489d718e08d022cae74f47583867b6b17e44e04eeb68133daa0d8c4b4903b6b10aa0746fdec0048a98b51cc5a872d799f0fff705e2deca4f6d54801fc110f0048355b0f33f24e14018fd7f1a9d3865ee7719e17ff5e52e5ffe37cfe8d870ab948a9cb521afc7d17ed7479c5c0ce845beea31d0fae9b9de8625d0adfb9fac5a01c864b88cb31eb1a45e8bb4f2bf5c3042846beb13022487283", 0xc7, 0x0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/245, 0xf5) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x110, 0xffffffffffffffff, 0x24) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000240)=ANY=[]}) sendmmsg(r2, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f000000e180)=[{&(0x7f000000e0c0)="c8d7fc6deaacfbf62a1e4ee1db31be33537901802de802eddca32ac54597c050ba128ea214c5975513365fe42c1423e521acc67dd5c772dd5c07cac81b105270dc0463d75fbc6ede18b218911862aea52262a64e31a3afa3e37032701c702e496ac825e4f2713a30ddf8ebe9e8de1300ce50d69f66a445dff9148b00d33c5c2518cb1b8cbd9f9df1071395f28ed56eace8086c4d0bff", 0x96}], 0x1, &(0x7f000000e1c0), 0x0, 0x40000}, 0x1}], 0x1, 0x4000000) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000600)={@xdp={0x2c, 0x4, r3, 0x6}, {&(0x7f00000002c0)=""/201, 0xc9}, &(0x7f0000000200), 0x1}, 0x9c) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000007c0)=""/131, &(0x7f0000000480)=0x83) r6 = socket$inet6(0xa, 0x805, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000000000000000feffffffffffffff000000000000000000000018000000000000000000001500"]}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000880)={{0xa, 0x4e20, 0x0, @remote, 0x40}, {0xa, 0x4e21, 0x2, @ipv4={[], [], @local}, 0x10000}, 0x3, [0x62c5, 0x80000001, 0xffffffffffff7fac, 0x1, 0x8, 0x80000001, 0x8, 0x8001]}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000000c0), &(0x7f0000000180), 0x2}, 0x20) 22:15:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) getdents64(r0, &(0x7f00000000c0)=""/11, 0xeb) 22:15:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x800000000000260, 0x0, &(0x7f0000000000)={0x77359400}) 22:15:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@ipx, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/112, 0x70}], 0x1, &(0x7f0000000700)=""/97, 0x61}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) times(&(0x7f0000000380)) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000040)=0x80, 0x0) 22:15:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000280)=""/126) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000c80)) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') setrlimit(0x0, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7e, r2}, {0x3f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0xda5}, 0x5, 0x0, 0x1}, {{@in, 0x4d3}, 0x0, @in=@rand_addr=0x1, 0x3505, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffe01}}, 0xe8) setrlimit(0x0, &(0x7f0000000240)) 22:15:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') fdatasync(r0) [ 151.187580] ptrace attach of "/root/syz-executor2"[5694] was attempted by "/root/syz-executor2"[7446] 22:15:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000280)=""/126) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000c80)) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') setrlimit(0x0, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7e, r2}, {0x3f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0xda5}, 0x5, 0x0, 0x1}, {{@in, 0x4d3}, 0x0, @in=@rand_addr=0x1, 0x3505, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffe01}}, 0xe8) setrlimit(0x0, &(0x7f0000000240)) 22:15:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') fdatasync(r0) [ 151.418463] ptrace attach of "/root/syz-executor2"[5694] was attempted by "/root/syz-executor2"[7456] 22:15:32 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000280)=""/126) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000c80)) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') setrlimit(0x0, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7e, r2}, {0x3f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0xda5}, 0x5, 0x0, 0x1}, {{@in, 0x4d3}, 0x0, @in=@rand_addr=0x1, 0x3505, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffe01}}, 0xe8) setrlimit(0x0, &(0x7f0000000240)) 22:15:32 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000540)={&(0x7f0000000400), 0x10, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "7ff5ccd0211e6951"}}, 0x48}}, 0x0) 22:15:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='/exe\x00\x00\x00\x00\x00\x00') fdatasync(r0) 22:15:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x20, 0x1, 0x4}, 0x2c) perf_event_open(&(0x7f0000000240)={0x0, 0x2de, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200000, 0xfffffffffffffffc, 0x0, 0x0, 0x1c00000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x41000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001700)={'team0\x00', 0x0}) sendmmsg(r1, &(0x7f0000009840)=[{{&(0x7f0000008500)=@nfc_llcp={0x27, 0x1, 0x1, 0x6, 0x4000, 0x3f, "e82705657ab6093a37364b6ea53af7335ab36d79c2b027a78a6d5f98a124251fd5082cd2bbcfc210b8eddfc5d1a296ec5d0929788156ac9bfcf4d2b55d6326", 0x20}, 0x80, &(0x7f0000008680), 0x0, &(0x7f00000086c0), 0x0, 0x1}, 0xffffffffffffffdc}], 0x1, 0x88c0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x6, 0x0, 0x7, 0x3, 0x8, 0x4, 0x3, 0x2, 0x5, 0x4, 0x40bcca1a, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x800) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$sock_proto_private(r2, 0x89e4, &(0x7f0000000500)="88057e23ac161c361d77a154619ecc1f2fcdfcb75333699416e619414a813607d9c9579932791a1b53a062c2f80336b4636b79b5a13759204dd0c39a9470502981417f9c60d5826243edd45eae69af323ec68c6cc0e8f5731119fd7903c5411342b9affe5ddae60a753d4f4321f0746f7286abee29af3b4b1deabc0d09372b4da2862fd02d7e137529300f40023d9b95958ed600505667bd9ed4be4e5ff7261dc14b712bd48d48464aa6c99d060321b213b2504517f65431e9d40d6f43bf4c8dddc8a0121542e70d0e3c485e32c77dcbfbd0de63e4bff40c83caeaccfcc71e9493f2a7") fcntl$getownex(r4, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) sendto$unix(r2, &(0x7f00000006c0)="57833fb4c17b12e837eed7f22c3c6ed1bc5f2234817a316d9de780b678e111c3989759ea3d158fd82e9337f91528f489d718e08d022cae74f47583867b6b17e44e04eeb68133daa0d8c4b4903b6b10aa0746fdec0048a98b51cc5a872d799f0fff705e2deca4f6d54801fc110f0048355b0f33f24e14018fd7f1a9d3865ee7719e17ff5e52e5ffe37cfe8d870ab948a9cb521afc7d17ed7479c5c0ce845beea31d0fae9b9de8625d0adfb9fac5a01c864b88cb31eb1a45e8bb4f2bf5c3042846beb13022487283", 0xc7, 0x0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/245, 0xf5) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x110, 0xffffffffffffffff, 0x24) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000240)=ANY=[]}) sendmmsg(r2, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f000000e180)=[{&(0x7f000000e0c0)="c8d7fc6deaacfbf62a1e4ee1db31be33537901802de802eddca32ac54597c050ba128ea214c5975513365fe42c1423e521acc67dd5c772dd5c07cac81b105270dc0463d75fbc6ede18b218911862aea52262a64e31a3afa3e37032701c702e496ac825e4f2713a30ddf8ebe9e8de1300ce50d69f66a445dff9148b00d33c5c2518cb1b8cbd9f9df1071395f28ed56eace8086c4d0bff", 0x96}], 0x1, &(0x7f000000e1c0), 0x0, 0x40000}, 0x1}], 0x1, 0x4000000) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000600)={@xdp={0x2c, 0x4, r3, 0x6}, {&(0x7f00000002c0)=""/201, 0xc9}, &(0x7f0000000200), 0x1}, 0x9c) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000007c0)=""/131, &(0x7f0000000480)=0x83) r6 = socket$inet6(0xa, 0x805, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000000000000000feffffffffffffff000000000000000000000018000000000000000000001500"]}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000880)={{0xa, 0x4e20, 0x0, @remote, 0x40}, {0xa, 0x4e21, 0x2, @ipv4={[], [], @local}, 0x10000}, 0x3, [0x62c5, 0x80000001, 0xffffffffffff7fac, 0x1, 0x8, 0x80000001, 0x8, 0x8001]}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000000c0), &(0x7f0000000180), 0x2}, 0x20) 22:15:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)=@ipx, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/112, 0x70}], 0x1, &(0x7f0000000700)=""/97, 0x61}, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) times(&(0x7f0000000380)) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000040)=0x80, 0x0) [ 151.862551] ptrace attach of "/root/syz-executor2"[5694] was attempted by "/root/syz-executor2"[7481] 22:15:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) getdents64(r0, &(0x7f00000000c0)=""/11, 0xeb) 22:15:33 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x20, 0x1, 0x4}, 0x2c) perf_event_open(&(0x7f0000000240)={0x0, 0x2de, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200000, 0xfffffffffffffffc, 0x0, 0x0, 0x1c00000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x41000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001700)={'team0\x00', 0x0}) sendmmsg(r1, &(0x7f0000009840)=[{{&(0x7f0000008500)=@nfc_llcp={0x27, 0x1, 0x1, 0x6, 0x4000, 0x3f, "e82705657ab6093a37364b6ea53af7335ab36d79c2b027a78a6d5f98a124251fd5082cd2bbcfc210b8eddfc5d1a296ec5d0929788156ac9bfcf4d2b55d6326", 0x20}, 0x80, &(0x7f0000008680), 0x0, &(0x7f00000086c0), 0x0, 0x1}, 0xffffffffffffffdc}], 0x1, 0x88c0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x6, 0x0, 0x7, 0x3, 0x8, 0x4, 0x3, 0x2, 0x5, 0x4, 0x40bcca1a, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x800) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$sock_proto_private(r2, 0x89e4, &(0x7f0000000500)="88057e23ac161c361d77a154619ecc1f2fcdfcb75333699416e619414a813607d9c9579932791a1b53a062c2f80336b4636b79b5a13759204dd0c39a9470502981417f9c60d5826243edd45eae69af323ec68c6cc0e8f5731119fd7903c5411342b9affe5ddae60a753d4f4321f0746f7286abee29af3b4b1deabc0d09372b4da2862fd02d7e137529300f40023d9b95958ed600505667bd9ed4be4e5ff7261dc14b712bd48d48464aa6c99d060321b213b2504517f65431e9d40d6f43bf4c8dddc8a0121542e70d0e3c485e32c77dcbfbd0de63e4bff40c83caeaccfcc71e9493f2a7") fcntl$getownex(r4, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) sendto$unix(r2, &(0x7f00000006c0)="57833fb4c17b12e837eed7f22c3c6ed1bc5f2234817a316d9de780b678e111c3989759ea3d158fd82e9337f91528f489d718e08d022cae74f47583867b6b17e44e04eeb68133daa0d8c4b4903b6b10aa0746fdec0048a98b51cc5a872d799f0fff705e2deca4f6d54801fc110f0048355b0f33f24e14018fd7f1a9d3865ee7719e17ff5e52e5ffe37cfe8d870ab948a9cb521afc7d17ed7479c5c0ce845beea31d0fae9b9de8625d0adfb9fac5a01c864b88cb31eb1a45e8bb4f2bf5c3042846beb13022487283", 0xc7, 0x0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/245, 0xf5) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x110, 0xffffffffffffffff, 0x24) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000240)=ANY=[]}) sendmmsg(r2, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f000000e180)=[{&(0x7f000000e0c0)="c8d7fc6deaacfbf62a1e4ee1db31be33537901802de802eddca32ac54597c050ba128ea214c5975513365fe42c1423e521acc67dd5c772dd5c07cac81b105270dc0463d75fbc6ede18b218911862aea52262a64e31a3afa3e37032701c702e496ac825e4f2713a30ddf8ebe9e8de1300ce50d69f66a445dff9148b00d33c5c2518cb1b8cbd9f9df1071395f28ed56eace8086c4d0bff", 0x96}], 0x1, &(0x7f000000e1c0), 0x0, 0x40000}, 0x1}], 0x1, 0x4000000) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000600)={@xdp={0x2c, 0x4, r3, 0x6}, {&(0x7f00000002c0)=""/201, 0xc9}, &(0x7f0000000200), 0x1}, 0x9c) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000007c0)=""/131, &(0x7f0000000480)=0x83) r6 = socket$inet6(0xa, 0x805, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000000000000000feffffffffffffff000000000000000000000018000000000000000000001500"]}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000880)={{0xa, 0x4e20, 0x0, @remote, 0x40}, {0xa, 0x4e21, 0x2, @ipv4={[], [], @local}, 0x10000}, 0x3, [0x62c5, 0x80000001, 0xffffffffffff7fac, 0x1, 0x8, 0x80000001, 0x8, 0x8001]}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000000c0), &(0x7f0000000180), 0x2}, 0x20) 22:15:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x20, 0x1, 0x4}, 0x2c) perf_event_open(&(0x7f0000000240)={0x0, 0x2de, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200000, 0xfffffffffffffffc, 0x0, 0x0, 0x1c00000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x41000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001700)={'team0\x00', 0x0}) sendmmsg(r1, &(0x7f0000009840)=[{{&(0x7f0000008500)=@nfc_llcp={0x27, 0x1, 0x1, 0x6, 0x4000, 0x3f, "e82705657ab6093a37364b6ea53af7335ab36d79c2b027a78a6d5f98a124251fd5082cd2bbcfc210b8eddfc5d1a296ec5d0929788156ac9bfcf4d2b55d6326", 0x20}, 0x80, &(0x7f0000008680), 0x0, &(0x7f00000086c0), 0x0, 0x1}, 0xffffffffffffffdc}], 0x1, 0x88c0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x6, 0x0, 0x7, 0x3, 0x8, 0x4, 0x3, 0x2, 0x5, 0x4, 0x40bcca1a, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x800) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$sock_proto_private(r2, 0x89e4, &(0x7f0000000500)="88057e23ac161c361d77a154619ecc1f2fcdfcb75333699416e619414a813607d9c9579932791a1b53a062c2f80336b4636b79b5a13759204dd0c39a9470502981417f9c60d5826243edd45eae69af323ec68c6cc0e8f5731119fd7903c5411342b9affe5ddae60a753d4f4321f0746f7286abee29af3b4b1deabc0d09372b4da2862fd02d7e137529300f40023d9b95958ed600505667bd9ed4be4e5ff7261dc14b712bd48d48464aa6c99d060321b213b2504517f65431e9d40d6f43bf4c8dddc8a0121542e70d0e3c485e32c77dcbfbd0de63e4bff40c83caeaccfcc71e9493f2a7") fcntl$getownex(r4, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) sendto$unix(r2, &(0x7f00000006c0)="57833fb4c17b12e837eed7f22c3c6ed1bc5f2234817a316d9de780b678e111c3989759ea3d158fd82e9337f91528f489d718e08d022cae74f47583867b6b17e44e04eeb68133daa0d8c4b4903b6b10aa0746fdec0048a98b51cc5a872d799f0fff705e2deca4f6d54801fc110f0048355b0f33f24e14018fd7f1a9d3865ee7719e17ff5e52e5ffe37cfe8d870ab948a9cb521afc7d17ed7479c5c0ce845beea31d0fae9b9de8625d0adfb9fac5a01c864b88cb31eb1a45e8bb4f2bf5c3042846beb13022487283", 0xc7, 0x0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/245, 0xf5) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x110, 0xffffffffffffffff, 0x24) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000240)=ANY=[]}) sendmmsg(r2, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f000000e180)=[{&(0x7f000000e0c0)="c8d7fc6deaacfbf62a1e4ee1db31be33537901802de802eddca32ac54597c050ba128ea214c5975513365fe42c1423e521acc67dd5c772dd5c07cac81b105270dc0463d75fbc6ede18b218911862aea52262a64e31a3afa3e37032701c702e496ac825e4f2713a30ddf8ebe9e8de1300ce50d69f66a445dff9148b00d33c5c2518cb1b8cbd9f9df1071395f28ed56eace8086c4d0bff", 0x96}], 0x1, &(0x7f000000e1c0), 0x0, 0x40000}, 0x1}], 0x1, 0x4000000) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000600)={@xdp={0x2c, 0x4, r3, 0x6}, {&(0x7f00000002c0)=""/201, 0xc9}, &(0x7f0000000200), 0x1}, 0x9c) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000007c0)=""/131, &(0x7f0000000480)=0x83) r6 = socket$inet6(0xa, 0x805, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000000000000000feffffffffffffff000000000000000000000018000000000000000000001500"]}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000880)={{0xa, 0x4e20, 0x0, @remote, 0x40}, {0xa, 0x4e21, 0x2, @ipv4={[], [], @local}, 0x10000}, 0x3, [0x62c5, 0x80000001, 0xffffffffffff7fac, 0x1, 0x8, 0x80000001, 0x8, 0x8001]}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000000c0), &(0x7f0000000180), 0x2}, 0x20) 22:15:33 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, {0xf, 0xffff}, {0x8, 0xf}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x484880) r3 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r2, 0x0) clone(0x8000000800200, &(0x7f0000000480), &(0x7f0000744000), &(0x7f0000000540), &(0x7f0000000180)) fcntl$setflags(r2, 0x2, 0x1) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@int=0x9, 0x4) writev(r4, &(0x7f0000000040), 0x253) write$P9_RREMOVE(r4, &(0x7f00000000c0)={0xc8}, 0x5) creat(&(0x7f0000000140)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc1105511, &(0x7f0000001000)) 22:15:33 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000280)=""/126) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000c80)) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') setrlimit(0x0, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7e, r2}, {0x3f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0xda5}, 0x5, 0x0, 0x1}, {{@in, 0x4d3}, 0x0, @in=@rand_addr=0x1, 0x3505, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffe01}}, 0xe8) setrlimit(0x0, &(0x7f0000000240)) 22:15:33 executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)="2f2e2f2e2e00000074617000895059372f9199aa53f0bb5cf7b64cb7336b650264b1f1f81db62cc9399668f301b3668ad02b47dd439dcf453f1bceff3b4f5a2745f5", 0x2761, 0x0) [ 152.334984] ptrace attach of "/root/syz-executor2"[5694] was attempted by "/root/syz-executor2"[7503] [ 152.338016] ptrace attach of "/root/syz-executor5"[5813] was attempted by "/root/syz-executor5"[7497] 22:15:33 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000180)=0xffffffffffffffe2, 0x0) sendmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f0000000300), 0x10, &(0x7f00000001c0)={&(0x7f0000000340)=@can={{}, 0x0, 0x0, 0x0, 0x0, "2af74fa2bf1544bc"}, 0xb8}}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f00000000c0)) 22:15:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 22:15:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x20, 0x1, 0x4}, 0x2c) perf_event_open(&(0x7f0000000240)={0x0, 0x2de, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200000, 0xfffffffffffffffc, 0x0, 0x0, 0x1c00000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x41000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001700)={'team0\x00', 0x0}) sendmmsg(r1, &(0x7f0000009840)=[{{&(0x7f0000008500)=@nfc_llcp={0x27, 0x1, 0x1, 0x6, 0x4000, 0x3f, "e82705657ab6093a37364b6ea53af7335ab36d79c2b027a78a6d5f98a124251fd5082cd2bbcfc210b8eddfc5d1a296ec5d0929788156ac9bfcf4d2b55d6326", 0x20}, 0x80, &(0x7f0000008680), 0x0, &(0x7f00000086c0), 0x0, 0x1}, 0xffffffffffffffdc}], 0x1, 0x88c0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x6, 0x0, 0x7, 0x3, 0x8, 0x4, 0x3, 0x2, 0x5, 0x4, 0x40bcca1a, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x800) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$sock_proto_private(r2, 0x89e4, &(0x7f0000000500)="88057e23ac161c361d77a154619ecc1f2fcdfcb75333699416e619414a813607d9c9579932791a1b53a062c2f80336b4636b79b5a13759204dd0c39a9470502981417f9c60d5826243edd45eae69af323ec68c6cc0e8f5731119fd7903c5411342b9affe5ddae60a753d4f4321f0746f7286abee29af3b4b1deabc0d09372b4da2862fd02d7e137529300f40023d9b95958ed600505667bd9ed4be4e5ff7261dc14b712bd48d48464aa6c99d060321b213b2504517f65431e9d40d6f43bf4c8dddc8a0121542e70d0e3c485e32c77dcbfbd0de63e4bff40c83caeaccfcc71e9493f2a7") fcntl$getownex(r4, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) sendto$unix(r2, &(0x7f00000006c0)="57833fb4c17b12e837eed7f22c3c6ed1bc5f2234817a316d9de780b678e111c3989759ea3d158fd82e9337f91528f489d718e08d022cae74f47583867b6b17e44e04eeb68133daa0d8c4b4903b6b10aa0746fdec0048a98b51cc5a872d799f0fff705e2deca4f6d54801fc110f0048355b0f33f24e14018fd7f1a9d3865ee7719e17ff5e52e5ffe37cfe8d870ab948a9cb521afc7d17ed7479c5c0ce845beea31d0fae9b9de8625d0adfb9fac5a01c864b88cb31eb1a45e8bb4f2bf5c3042846beb13022487283", 0xc7, 0x0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/245, 0xf5) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x110, 0xffffffffffffffff, 0x24) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000240)=ANY=[]}) sendmmsg(r2, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f000000e180)=[{&(0x7f000000e0c0)="c8d7fc6deaacfbf62a1e4ee1db31be33537901802de802eddca32ac54597c050ba128ea214c5975513365fe42c1423e521acc67dd5c772dd5c07cac81b105270dc0463d75fbc6ede18b218911862aea52262a64e31a3afa3e37032701c702e496ac825e4f2713a30ddf8ebe9e8de1300ce50d69f66a445dff9148b00d33c5c2518cb1b8cbd9f9df1071395f28ed56eace8086c4d0bff", 0x96}], 0x1, &(0x7f000000e1c0), 0x0, 0x40000}, 0x1}], 0x1, 0x4000000) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000600)={@xdp={0x2c, 0x4, r3, 0x6}, {&(0x7f00000002c0)=""/201, 0xc9}, &(0x7f0000000200), 0x1}, 0x9c) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000007c0)=""/131, &(0x7f0000000480)=0x83) r6 = socket$inet6(0xa, 0x805, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000000000000000feffffffffffffff000000000000000000000018000000000000000000001500"]}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000880)={{0xa, 0x4e20, 0x0, @remote, 0x40}, {0xa, 0x4e21, 0x2, @ipv4={[], [], @local}, 0x10000}, 0x3, [0x62c5, 0x80000001, 0xffffffffffff7fac, 0x1, 0x8, 0x80000001, 0x8, 0x8001]}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000000c0), &(0x7f0000000180), 0x2}, 0x20) 22:15:33 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="c12c1346e5ee", @local, [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x6c, 0x0, @remote, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000140)) 22:15:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) [ 152.621066] ptrace attach of "/root/syz-executor2"[5694] was attempted by "/root/syz-executor2"[7523] 22:15:34 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="c12c1346e5ee", @local, [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x6c, 0x0, @remote, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000140)) [ 152.723639] IPVS: ftp: loaded support on port[0] = 21 [ 153.273038] IPVS: ftp: loaded support on port[0] = 21 22:15:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000200)) getdents64(r0, &(0x7f00000000c0)=""/11, 0xeb) 22:15:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 22:15:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 22:15:36 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x20, 0x1, 0x4}, 0x2c) perf_event_open(&(0x7f0000000240)={0x0, 0x2de, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200000, 0xfffffffffffffffc, 0x0, 0x0, 0x1c00000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x41000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001700)={'team0\x00', 0x0}) sendmmsg(r1, &(0x7f0000009840)=[{{&(0x7f0000008500)=@nfc_llcp={0x27, 0x1, 0x1, 0x6, 0x4000, 0x3f, "e82705657ab6093a37364b6ea53af7335ab36d79c2b027a78a6d5f98a124251fd5082cd2bbcfc210b8eddfc5d1a296ec5d0929788156ac9bfcf4d2b55d6326", 0x20}, 0x80, &(0x7f0000008680), 0x0, &(0x7f00000086c0), 0x0, 0x1}, 0xffffffffffffffdc}], 0x1, 0x88c0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x6, 0x0, 0x7, 0x3, 0x8, 0x4, 0x3, 0x2, 0x5, 0x4, 0x40bcca1a, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x800) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$sock_proto_private(r2, 0x89e4, &(0x7f0000000500)="88057e23ac161c361d77a154619ecc1f2fcdfcb75333699416e619414a813607d9c9579932791a1b53a062c2f80336b4636b79b5a13759204dd0c39a9470502981417f9c60d5826243edd45eae69af323ec68c6cc0e8f5731119fd7903c5411342b9affe5ddae60a753d4f4321f0746f7286abee29af3b4b1deabc0d09372b4da2862fd02d7e137529300f40023d9b95958ed600505667bd9ed4be4e5ff7261dc14b712bd48d48464aa6c99d060321b213b2504517f65431e9d40d6f43bf4c8dddc8a0121542e70d0e3c485e32c77dcbfbd0de63e4bff40c83caeaccfcc71e9493f2a7") fcntl$getownex(r4, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) sendto$unix(r2, &(0x7f00000006c0)="57833fb4c17b12e837eed7f22c3c6ed1bc5f2234817a316d9de780b678e111c3989759ea3d158fd82e9337f91528f489d718e08d022cae74f47583867b6b17e44e04eeb68133daa0d8c4b4903b6b10aa0746fdec0048a98b51cc5a872d799f0fff705e2deca4f6d54801fc110f0048355b0f33f24e14018fd7f1a9d3865ee7719e17ff5e52e5ffe37cfe8d870ab948a9cb521afc7d17ed7479c5c0ce845beea31d0fae9b9de8625d0adfb9fac5a01c864b88cb31eb1a45e8bb4f2bf5c3042846beb13022487283", 0xc7, 0x0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/245, 0xf5) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x110, 0xffffffffffffffff, 0x24) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000240)=ANY=[]}) sendmmsg(r2, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f000000e180)=[{&(0x7f000000e0c0)="c8d7fc6deaacfbf62a1e4ee1db31be33537901802de802eddca32ac54597c050ba128ea214c5975513365fe42c1423e521acc67dd5c772dd5c07cac81b105270dc0463d75fbc6ede18b218911862aea52262a64e31a3afa3e37032701c702e496ac825e4f2713a30ddf8ebe9e8de1300ce50d69f66a445dff9148b00d33c5c2518cb1b8cbd9f9df1071395f28ed56eace8086c4d0bff", 0x96}], 0x1, &(0x7f000000e1c0), 0x0, 0x40000}, 0x1}], 0x1, 0x4000000) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000600)={@xdp={0x2c, 0x4, r3, 0x6}, {&(0x7f00000002c0)=""/201, 0xc9}, &(0x7f0000000200), 0x1}, 0x9c) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000007c0)=""/131, &(0x7f0000000480)=0x83) r6 = socket$inet6(0xa, 0x805, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000000000000000feffffffffffffff000000000000000000000018000000000000000000001500"]}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000880)={{0xa, 0x4e20, 0x0, @remote, 0x40}, {0xa, 0x4e21, 0x2, @ipv4={[], [], @local}, 0x10000}, 0x3, [0x62c5, 0x80000001, 0xffffffffffff7fac, 0x1, 0x8, 0x80000001, 0x8, 0x8001]}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000000c0), &(0x7f0000000180), 0x2}, 0x20) 22:15:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="c12c1346e5ee", @local, [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x6c, 0x0, @remote, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000140)) 22:15:36 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, {0xf, 0xffff}, {0x8, 0xf}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x484880) r3 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r2, 0x0) clone(0x8000000800200, &(0x7f0000000480), &(0x7f0000744000), &(0x7f0000000540), &(0x7f0000000180)) fcntl$setflags(r2, 0x2, 0x1) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@int=0x9, 0x4) writev(r4, &(0x7f0000000040), 0x253) write$P9_RREMOVE(r4, &(0x7f00000000c0)={0xc8}, 0x5) creat(&(0x7f0000000140)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc1105511, &(0x7f0000001000)) [ 154.851634] ptrace attach of "/root/syz-executor5"[5813] was attempted by "/root/syz-executor5"[7555] 22:15:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="c12c1346e5ee", @local, [], {@ipv6={0x86dd, {0x0, 0x6, '?:T', 0x14, 0x6c, 0x0, @remote, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000140)) 22:15:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 22:15:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 22:15:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de000ee9a98f798058439ed554fa07424ada75af1f000000fb3e331ce39c5a000000000000000000a16ba9f8d4b9dd6a3962ae9f27c9feffffff8a37c2f4800000000000") ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e23, @remote}, {0x7, @random="3b33a15895f7"}, 0x10, {0x2, 0x4e24}, 'team_slave_0\x00'}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') syncfs(r0) 22:15:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) 22:15:36 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x20, 0x1, 0x4}, 0x2c) perf_event_open(&(0x7f0000000240)={0x0, 0x2de, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x200000, 0xfffffffffffffffc, 0x0, 0x0, 0x1c00000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x41000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001700)={'team0\x00', 0x0}) sendmmsg(r1, &(0x7f0000009840)=[{{&(0x7f0000008500)=@nfc_llcp={0x27, 0x1, 0x1, 0x6, 0x4000, 0x3f, "e82705657ab6093a37364b6ea53af7335ab36d79c2b027a78a6d5f98a124251fd5082cd2bbcfc210b8eddfc5d1a296ec5d0929788156ac9bfcf4d2b55d6326", 0x20}, 0x80, &(0x7f0000008680), 0x0, &(0x7f00000086c0), 0x0, 0x1}, 0xffffffffffffffdc}], 0x1, 0x88c0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x6, 0x0, 0x7, 0x3, 0x8, 0x4, 0x3, 0x2, 0x5, 0x4, 0x40bcca1a, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = inotify_init1(0x800) fcntl$setown(r4, 0x8, 0xffffffffffffffff) ioctl$sock_proto_private(r2, 0x89e4, &(0x7f0000000500)="88057e23ac161c361d77a154619ecc1f2fcdfcb75333699416e619414a813607d9c9579932791a1b53a062c2f80336b4636b79b5a13759204dd0c39a9470502981417f9c60d5826243edd45eae69af323ec68c6cc0e8f5731119fd7903c5411342b9affe5ddae60a753d4f4321f0746f7286abee29af3b4b1deabc0d09372b4da2862fd02d7e137529300f40023d9b95958ed600505667bd9ed4be4e5ff7261dc14b712bd48d48464aa6c99d060321b213b2504517f65431e9d40d6f43bf4c8dddc8a0121542e70d0e3c485e32c77dcbfbd0de63e4bff40c83caeaccfcc71e9493f2a7") fcntl$getownex(r4, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) sendto$unix(r2, &(0x7f00000006c0)="57833fb4c17b12e837eed7f22c3c6ed1bc5f2234817a316d9de780b678e111c3989759ea3d158fd82e9337f91528f489d718e08d022cae74f47583867b6b17e44e04eeb68133daa0d8c4b4903b6b10aa0746fdec0048a98b51cc5a872d799f0fff705e2deca4f6d54801fc110f0048355b0f33f24e14018fd7f1a9d3865ee7719e17ff5e52e5ffe37cfe8d870ab948a9cb521afc7d17ed7479c5c0ce845beea31d0fae9b9de8625d0adfb9fac5a01c864b88cb31eb1a45e8bb4f2bf5c3042846beb13022487283", 0xc7, 0x0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/245, 0xf5) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x110, 0xffffffffffffffff, 0x24) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000240)=ANY=[]}) sendmmsg(r2, &(0x7f000000e5c0)=[{{0x0, 0x0, &(0x7f000000e180)=[{&(0x7f000000e0c0)="c8d7fc6deaacfbf62a1e4ee1db31be33537901802de802eddca32ac54597c050ba128ea214c5975513365fe42c1423e521acc67dd5c772dd5c07cac81b105270dc0463d75fbc6ede18b218911862aea52262a64e31a3afa3e37032701c702e496ac825e4f2713a30ddf8ebe9e8de1300ce50d69f66a445dff9148b00d33c5c2518cb1b8cbd9f9df1071395f28ed56eace8086c4d0bff", 0x96}], 0x1, &(0x7f000000e1c0), 0x0, 0x40000}, 0x1}], 0x1, 0x4000000) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000600)={@xdp={0x2c, 0x4, r3, 0x6}, {&(0x7f00000002c0)=""/201, 0xc9}, &(0x7f0000000200), 0x1}, 0x9c) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000007c0)=""/131, &(0x7f0000000480)=0x83) r6 = socket$inet6(0xa, 0x805, 0x6) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000000000000000feffffffffffffff000000000000000000000018000000000000000000001500"]}) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000880)={{0xa, 0x4e20, 0x0, @remote, 0x40}, {0xa, 0x4e21, 0x2, @ipv4={[], [], @local}, 0x10000}, 0x3, [0x62c5, 0x80000001, 0xffffffffffff7fac, 0x1, 0x8, 0x80000001, 0x8, 0x8001]}, 0x5c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f00000000c0), &(0x7f0000000180), 0x2}, 0x20) [ 155.275505] ptrace attach of "/root/syz-executor5"[5813] was attempted by "/root/syz-executor5"[7583] [ 155.299999] IPVS: ftp: loaded support on port[0] = 21 22:15:38 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, {0xf, 0xffff}, {0x8, 0xf}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x484880) r3 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r2, 0x0) clone(0x8000000800200, &(0x7f0000000480), &(0x7f0000744000), &(0x7f0000000540), &(0x7f0000000180)) fcntl$setflags(r2, 0x2, 0x1) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@int=0x9, 0x4) writev(r4, &(0x7f0000000040), 0x253) write$P9_RREMOVE(r4, &(0x7f00000000c0)={0xc8}, 0x5) creat(&(0x7f0000000140)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc1105511, &(0x7f0000001000)) 22:15:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000000d000040050000a900000000000000000000004000000000010000000000000025000000fff0ffff04040000000000000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x38d, 0x0, 0x1f00000000000000}]}) 22:15:38 executing program 1: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000440)=0xc) getgid() getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) getgid() lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000700)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0xffffffff04000000, @dev, [0x0, 0x300000000000000, 0x2000000000000000, 0x0, 0x4000000]}}, 0x0, 0x0, 0x40000004, 0x0, 0x14}, 0x98) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0xa60, 0x5, 0x0, 0x8000, 0x6, 0x6, {0x0, @in={{0x2, 0x0, @local}}, 0x0, 0x100000000, 0x9f, 0x2, 0x100}}, &(0x7f0000000280)=0xb0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000740)={{0x2, 0x4e20, @remote}, {0x6}, 0x4, {0x2, 0x4e21, @remote}, 'bpq0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000), &(0x7f0000000380)=0x8) 22:15:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de000ee9a98f798058439ed554fa07424ada75af1f000000fb3e331ce39c5a000000000000000000a16ba9f8d4b9dd6a3962ae9f27c9feffffff8a37c2f4800000000000") ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e23, @remote}, {0x7, @random="3b33a15895f7"}, 0x10, {0x2, 0x4e24}, 'team_slave_0\x00'}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') syncfs(r0) 22:15:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340), &(0x7f0000000640)=0x18) socket(0xa, 0x0, 0x1ff) r0 = memfd_create(&(0x7f0000000440)="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", 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e173dc73ba964a4189007c7c40db8fb4b64dd8ec4d366") epoll_create(0x4) fcntl$setstatus(r1, 0x4, 0x4001) tee(r1, 0xffffffffffffffff, 0x8, 0xd) sendfile(r0, r1, &(0x7f0000000040), 0x1080005000) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000280)={0x0, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x15}}}, 0x8001, 0x7fff, 0x0, "228c124dae1d5578d1b24fcb8b05f7efa6b926fa9fd7750ac7d06dfd17bdb002967a4a850a39a5c346325e9763eafdec658aa3070fc98ae13897a5036c71f611cecc769f2d86b0fbc024c26d72111619"}, 0xd8) listen(0xffffffffffffffff, 0x20000000) dup(r0) accept4(0xffffffffffffffff, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000000c0)}) 22:15:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$KDGETKEYCODE(r1, 0x80487436, &(0x7f00000001c0)) 22:15:38 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='team0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x5a) 22:15:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de000ee9a98f798058439ed554fa07424ada75af1f000000fb3e331ce39c5a000000000000000000a16ba9f8d4b9dd6a3962ae9f27c9feffffff8a37c2f4800000000000") ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e23, @remote}, {0x7, @random="3b33a15895f7"}, 0x10, {0x2, 0x4e24}, 'team_slave_0\x00'}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') syncfs(r0) 22:15:39 executing program 2: socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0xfffffffffffffffd) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) syslog(0x3, &(0x7f0000000380)=""/214, 0xd6) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r2, &(0x7f0000000300)=0xfffffffffffffffa, 0x12) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'ipddp0\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000001000100ee000000ac1f92ff51304fcb40493352ac37b6a54b98c8e8629545ad43d4f0caab457411f6514232b7d460a31974f47ca35406786df686bc7e7ec31b2b96c3de05d7d604a40430e455318b5d0801be855d2de09d50e9207307e2f2bdc3d13a7819de2829b13c6b7ef48627f957c6485a54b7c7aecad321212bb408008c1b85e84a384dc473ffdcf327c296b3ec565f93a7d94c00be19b94152c48f1554896253e7f9ec2d5a6fb38915f075d6fd06447ad54158711844d66f412be031b53a98c5bc043de9f7ef2062f61ef3a154e8b85087890d46784aea31467e2f9039f34b5078a0da00000000000000"]}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x30, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000003800)={&(0x7f0000003840), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0xffffffffffffffff}, 0x14}}, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x8002, 0x10) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f00000009c0)={0x2, 0xffffffffffff26d8}, 0x2) linkat(r6, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1000) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) [ 157.812738] raw_sendmsg: syz-executor5 forgot to set AF_INET. Fix it! 22:15:39 executing program 1: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000440)=0xc) getgid() getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) getgid() lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000700)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0xffffffff04000000, @dev, [0x0, 0x300000000000000, 0x2000000000000000, 0x0, 0x4000000]}}, 0x0, 0x0, 0x40000004, 0x0, 0x14}, 0x98) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0xa60, 0x5, 0x0, 0x8000, 0x6, 0x6, {0x0, @in={{0x2, 0x0, @local}}, 0x0, 0x100000000, 0x9f, 0x2, 0x100}}, &(0x7f0000000280)=0xb0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000740)={{0x2, 0x4e20, @remote}, {0x6}, 0x4, {0x2, 0x4e21, @remote}, 'bpq0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000), &(0x7f0000000380)=0x8) 22:15:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de000ee9a98f798058439ed554fa07424ada75af1f000000fb3e331ce39c5a000000000000000000a16ba9f8d4b9dd6a3962ae9f27c9feffffff8a37c2f4800000000000") ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e23, @remote}, {0x7, @random="3b33a15895f7"}, 0x10, {0x2, 0x4e24}, 'team_slave_0\x00'}) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') syncfs(r0) 22:15:39 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='team0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x5a) [ 157.988833] IPVS: ftp: loaded support on port[0] = 21 [ 158.361993] syz-executor0 (7614) used greatest stack depth: 12968 bytes left 22:15:39 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, {0xf, 0xffff}, {0x8, 0xf}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x484880) r3 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r2, 0x0) clone(0x8000000800200, &(0x7f0000000480), &(0x7f0000744000), &(0x7f0000000540), &(0x7f0000000180)) fcntl$setflags(r2, 0x2, 0x1) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380), &(0x7f00000001c0)) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@int=0x9, 0x4) writev(r4, &(0x7f0000000040), 0x253) write$P9_RREMOVE(r4, &(0x7f00000000c0)={0xc8}, 0x5) creat(&(0x7f0000000140)='./file0\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc1105511, &(0x7f0000001000)) 22:15:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffff9b) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0x13, 0x4) write(r0, &(0x7f00000000c0), 0xfec9) 22:15:39 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='team0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x5a) 22:15:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340), &(0x7f0000000640)=0x18) socket(0xa, 0x0, 0x1ff) r0 = memfd_create(&(0x7f0000000440)="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", 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e173dc73ba964a4189007c7c40db8fb4b64dd8ec4d366") epoll_create(0x4) fcntl$setstatus(r1, 0x4, 0x4001) tee(r1, 0xffffffffffffffff, 0x8, 0xd) sendfile(r0, r1, &(0x7f0000000040), 0x1080005000) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000280)={0x0, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x15}}}, 0x8001, 0x7fff, 0x0, "228c124dae1d5578d1b24fcb8b05f7efa6b926fa9fd7750ac7d06dfd17bdb002967a4a850a39a5c346325e9763eafdec658aa3070fc98ae13897a5036c71f611cecc769f2d86b0fbc024c26d72111619"}, 0xd8) listen(0xffffffffffffffff, 0x20000000) dup(r0) accept4(0xffffffffffffffff, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000000c0)}) 22:15:40 executing program 3: unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x400033, &(0x7f0000000040)=0x100000000001f, 0xe9) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 22:15:40 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='team0\x00', 0x10) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x5a) 22:15:40 executing program 1: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000440)=0xc) getgid() getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) getgid() lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000700)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0xffffffff04000000, @dev, [0x0, 0x300000000000000, 0x2000000000000000, 0x0, 0x4000000]}}, 0x0, 0x0, 0x40000004, 0x0, 0x14}, 0x98) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0xa60, 0x5, 0x0, 0x8000, 0x6, 0x6, {0x0, @in={{0x2, 0x0, @local}}, 0x0, 0x100000000, 0x9f, 0x2, 0x100}}, &(0x7f0000000280)=0xb0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000740)={{0x2, 0x4e20, @remote}, {0x6}, 0x4, {0x2, 0x4e21, @remote}, 'bpq0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000), &(0x7f0000000380)=0x8) 22:15:40 executing program 2: socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0xfffffffffffffffd) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) syslog(0x3, &(0x7f0000000380)=""/214, 0xd6) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r2, &(0x7f0000000300)=0xfffffffffffffffa, 0x12) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'ipddp0\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000001000100ee000000ac1f92ff51304fcb40493352ac37b6a54b98c8e8629545ad43d4f0caab457411f6514232b7d460a31974f47ca35406786df686bc7e7ec31b2b96c3de05d7d604a40430e455318b5d0801be855d2de09d50e9207307e2f2bdc3d13a7819de2829b13c6b7ef48627f957c6485a54b7c7aecad321212bb408008c1b85e84a384dc473ffdcf327c296b3ec565f93a7d94c00be19b94152c48f1554896253e7f9ec2d5a6fb38915f075d6fd06447ad54158711844d66f412be031b53a98c5bc043de9f7ef2062f61ef3a154e8b85087890d46784aea31467e2f9039f34b5078a0da00000000000000"]}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x30, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000003800)={&(0x7f0000003840), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0xffffffffffffffff}, 0x14}}, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x8002, 0x10) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f00000009c0)={0x2, 0xffffffffffff26d8}, 0x2) linkat(r6, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1000) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) [ 159.549677] IPVS: ftp: loaded support on port[0] = 21 [ 159.614947] syz-executor0 (7662) used greatest stack depth: 12952 bytes left 22:15:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340), &(0x7f0000000640)=0x18) socket(0xa, 0x0, 0x1ff) r0 = memfd_create(&(0x7f0000000440)="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", 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e173dc73ba964a4189007c7c40db8fb4b64dd8ec4d366") epoll_create(0x4) fcntl$setstatus(r1, 0x4, 0x4001) tee(r1, 0xffffffffffffffff, 0x8, 0xd) sendfile(r0, r1, &(0x7f0000000040), 0x1080005000) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000280)={0x0, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x15}}}, 0x8001, 0x7fff, 0x0, "228c124dae1d5578d1b24fcb8b05f7efa6b926fa9fd7750ac7d06dfd17bdb002967a4a850a39a5c346325e9763eafdec658aa3070fc98ae13897a5036c71f611cecc769f2d86b0fbc024c26d72111619"}, 0xd8) listen(0xffffffffffffffff, 0x20000000) dup(r0) accept4(0xffffffffffffffff, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000000c0)}) 22:15:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x50, &(0x7f0000000340)}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") lstat(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000940)='./file2\x00', &(0x7f0000000980)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in=@local}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) stat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)) fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000f80)={{}, {0x1, 0x2}, [{0x2, 0x0, r1}, {0x2, 0x3}, {0x2, 0x1}, {}, {0x2, 0x4}, {0x2, 0x4}], {0x4, 0x6}, [], {0x10, 0x2}}, 0x54, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x40) perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x0, 0x0, 0x823, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9d51, 0x2, 0x100000001, 0x3, 0x7f, 0x1, 0x469efbd0, 0x280, 0x5, 0x100000000, 0x1, 0x0, 0x0, 0x4, 0x5, 0x1f, 0x5, 0x0, 0x8, 0xfffffffffffffffc, 0x5, 0x0, 0x6, 0x5, 0x20, 0x4, 0x0, 0x0, 0x0, 0x89, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x40, 0x8, 0x0, 0xd, 0x7, 0xffff, 0x47}, 0x0, 0x0, 0xffffffffffffffff, 0x2) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@sha1={0x1, "591c60f3bbce7ee896db453f1b3e8877e4c74714"}, 0x15, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x7, @local, 0x4}}, 0x3, 0x3f, 0x7}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000800)={r2, @in={{0x2, 0x4e22}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={r2, 0x100000001, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYPTR64], &(0x7f0000000240)=0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r3, 0x0, 0x7}, 0x8) 22:15:41 executing program 3: unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x400033, &(0x7f0000000040)=0x100000000001f, 0xe9) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 22:15:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000340), &(0x7f0000000640)=0x18) socket(0xa, 0x0, 0x1ff) r0 = memfd_create(&(0x7f0000000440)="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", 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e173dc73ba964a4189007c7c40db8fb4b64dd8ec4d366") epoll_create(0x4) fcntl$setstatus(r1, 0x4, 0x4001) tee(r1, 0xffffffffffffffff, 0x8, 0xd) sendfile(r0, r1, &(0x7f0000000040), 0x1080005000) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000280)={0x0, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x15}}}, 0x8001, 0x7fff, 0x0, "228c124dae1d5578d1b24fcb8b05f7efa6b926fa9fd7750ac7d06dfd17bdb002967a4a850a39a5c346325e9763eafdec658aa3070fc98ae13897a5036c71f611cecc769f2d86b0fbc024c26d72111619"}, 0xd8) listen(0xffffffffffffffff, 0x20000000) dup(r0) accept4(0xffffffffffffffff, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f00000000c0)}) 22:15:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x50, &(0x7f0000000340)}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") lstat(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000940)='./file2\x00', &(0x7f0000000980)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in=@local}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) stat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)) fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000f80)={{}, {0x1, 0x2}, [{0x2, 0x0, r1}, {0x2, 0x3}, {0x2, 0x1}, {}, {0x2, 0x4}, {0x2, 0x4}], {0x4, 0x6}, [], {0x10, 0x2}}, 0x54, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x40) perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x0, 0x0, 0x823, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9d51, 0x2, 0x100000001, 0x3, 0x7f, 0x1, 0x469efbd0, 0x280, 0x5, 0x100000000, 0x1, 0x0, 0x0, 0x4, 0x5, 0x1f, 0x5, 0x0, 0x8, 0xfffffffffffffffc, 0x5, 0x0, 0x6, 0x5, 0x20, 0x4, 0x0, 0x0, 0x0, 0x89, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x40, 0x8, 0x0, 0xd, 0x7, 0xffff, 0x47}, 0x0, 0x0, 0xffffffffffffffff, 0x2) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@sha1={0x1, "591c60f3bbce7ee896db453f1b3e8877e4c74714"}, 0x15, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x7, @local, 0x4}}, 0x3, 0x3f, 0x7}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000800)={r2, @in={{0x2, 0x4e22}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={r2, 0x100000001, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYPTR64], &(0x7f0000000240)=0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r3, 0x0, 0x7}, 0x8) 22:15:41 executing program 1: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000440)=0xc) getgid() getresgid(&(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)) getgid() lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000700)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0xffffffff04000000, @dev, [0x0, 0x300000000000000, 0x2000000000000000, 0x0, 0x4000000]}}, 0x0, 0x0, 0x40000004, 0x0, 0x14}, 0x98) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0xa60, 0x5, 0x0, 0x8000, 0x6, 0x6, {0x0, @in={{0x2, 0x0, @local}}, 0x0, 0x100000000, 0x9f, 0x2, 0x100}}, &(0x7f0000000280)=0xb0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000740)={{0x2, 0x4e20, @remote}, {0x6}, 0x4, {0x2, 0x4e21, @remote}, 'bpq0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000), &(0x7f0000000380)=0x8) 22:15:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x50, &(0x7f0000000340)}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") lstat(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000940)='./file2\x00', &(0x7f0000000980)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in=@local}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) stat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)) fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000f80)={{}, {0x1, 0x2}, [{0x2, 0x0, r1}, {0x2, 0x3}, {0x2, 0x1}, {}, {0x2, 0x4}, {0x2, 0x4}], {0x4, 0x6}, [], {0x10, 0x2}}, 0x54, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x40) perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x0, 0x0, 0x823, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9d51, 0x2, 0x100000001, 0x3, 0x7f, 0x1, 0x469efbd0, 0x280, 0x5, 0x100000000, 0x1, 0x0, 0x0, 0x4, 0x5, 0x1f, 0x5, 0x0, 0x8, 0xfffffffffffffffc, 0x5, 0x0, 0x6, 0x5, 0x20, 0x4, 0x0, 0x0, 0x0, 0x89, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x40, 0x8, 0x0, 0xd, 0x7, 0xffff, 0x47}, 0x0, 0x0, 0xffffffffffffffff, 0x2) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@sha1={0x1, "591c60f3bbce7ee896db453f1b3e8877e4c74714"}, 0x15, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x7, @local, 0x4}}, 0x3, 0x3f, 0x7}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000800)={r2, @in={{0x2, 0x4e22}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={r2, 0x100000001, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYPTR64], &(0x7f0000000240)=0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r3, 0x0, 0x7}, 0x8) 22:15:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x50, &(0x7f0000000340)}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") lstat(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000940)='./file2\x00', &(0x7f0000000980)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in=@local}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) stat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)) fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000f80)={{}, {0x1, 0x2}, [{0x2, 0x0, r1}, {0x2, 0x3}, {0x2, 0x1}, {}, {0x2, 0x4}, {0x2, 0x4}], {0x4, 0x6}, [], {0x10, 0x2}}, 0x54, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x40) perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x0, 0x0, 0x823, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9d51, 0x2, 0x100000001, 0x3, 0x7f, 0x1, 0x469efbd0, 0x280, 0x5, 0x100000000, 0x1, 0x0, 0x0, 0x4, 0x5, 0x1f, 0x5, 0x0, 0x8, 0xfffffffffffffffc, 0x5, 0x0, 0x6, 0x5, 0x20, 0x4, 0x0, 0x0, 0x0, 0x89, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x40, 0x8, 0x0, 0xd, 0x7, 0xffff, 0x47}, 0x0, 0x0, 0xffffffffffffffff, 0x2) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@sha1={0x1, "591c60f3bbce7ee896db453f1b3e8877e4c74714"}, 0x15, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x7, @local, 0x4}}, 0x3, 0x3f, 0x7}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000800)={r2, @in={{0x2, 0x4e22}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={r2, 0x100000001, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYPTR64], &(0x7f0000000240)=0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r3, 0x0, 0x7}, 0x8) 22:15:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x50, &(0x7f0000000340)}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") lstat(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000940)='./file2\x00', &(0x7f0000000980)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in=@local}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) stat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)) fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000f80)={{}, {0x1, 0x2}, [{0x2, 0x0, r1}, {0x2, 0x3}, {0x2, 0x1}, {}, {0x2, 0x4}, {0x2, 0x4}], {0x4, 0x6}, [], {0x10, 0x2}}, 0x54, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x40) perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x0, 0x0, 0x823, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9d51, 0x2, 0x100000001, 0x3, 0x7f, 0x1, 0x469efbd0, 0x280, 0x5, 0x100000000, 0x1, 0x0, 0x0, 0x4, 0x5, 0x1f, 0x5, 0x0, 0x8, 0xfffffffffffffffc, 0x5, 0x0, 0x6, 0x5, 0x20, 0x4, 0x0, 0x0, 0x0, 0x89, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x40, 0x8, 0x0, 0xd, 0x7, 0xffff, 0x47}, 0x0, 0x0, 0xffffffffffffffff, 0x2) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@sha1={0x1, "591c60f3bbce7ee896db453f1b3e8877e4c74714"}, 0x15, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x7, @local, 0x4}}, 0x3, 0x3f, 0x7}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000800)={r2, @in={{0x2, 0x4e22}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={r2, 0x100000001, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYPTR64], &(0x7f0000000240)=0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r3, 0x0, 0x7}, 0x8) 22:15:42 executing program 2: socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0xfffffffffffffffd) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) syslog(0x3, &(0x7f0000000380)=""/214, 0xd6) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r2, &(0x7f0000000300)=0xfffffffffffffffa, 0x12) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'ipddp0\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000001000100ee000000ac1f92ff51304fcb40493352ac37b6a54b98c8e8629545ad43d4f0caab457411f6514232b7d460a31974f47ca35406786df686bc7e7ec31b2b96c3de05d7d604a40430e455318b5d0801be855d2de09d50e9207307e2f2bdc3d13a7819de2829b13c6b7ef48627f957c6485a54b7c7aecad321212bb408008c1b85e84a384dc473ffdcf327c296b3ec565f93a7d94c00be19b94152c48f1554896253e7f9ec2d5a6fb38915f075d6fd06447ad54158711844d66f412be031b53a98c5bc043de9f7ef2062f61ef3a154e8b85087890d46784aea31467e2f9039f34b5078a0da00000000000000"]}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x30, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000003800)={&(0x7f0000003840), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0xffffffffffffffff}, 0x14}}, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x8002, 0x10) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f00000009c0)={0x2, 0xffffffffffff26d8}, 0x2) linkat(r6, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1000) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) 22:15:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x50, &(0x7f0000000340)}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") lstat(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000940)='./file2\x00', &(0x7f0000000980)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in=@local}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) stat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)) fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000f80)={{}, {0x1, 0x2}, [{0x2, 0x0, r1}, {0x2, 0x3}, {0x2, 0x1}, {}, {0x2, 0x4}, {0x2, 0x4}], {0x4, 0x6}, [], {0x10, 0x2}}, 0x54, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x40) perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x0, 0x0, 0x823, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9d51, 0x2, 0x100000001, 0x3, 0x7f, 0x1, 0x469efbd0, 0x280, 0x5, 0x100000000, 0x1, 0x0, 0x0, 0x4, 0x5, 0x1f, 0x5, 0x0, 0x8, 0xfffffffffffffffc, 0x5, 0x0, 0x6, 0x5, 0x20, 0x4, 0x0, 0x0, 0x0, 0x89, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x40, 0x8, 0x0, 0xd, 0x7, 0xffff, 0x47}, 0x0, 0x0, 0xffffffffffffffff, 0x2) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@sha1={0x1, "591c60f3bbce7ee896db453f1b3e8877e4c74714"}, 0x15, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x7, @local, 0x4}}, 0x3, 0x3f, 0x7}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000800)={r2, @in={{0x2, 0x4e22}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={r2, 0x100000001, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYPTR64], &(0x7f0000000240)=0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r3, 0x0, 0x7}, 0x8) 22:15:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffff9c, 0x50, &(0x7f0000000340)}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") lstat(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000940)='./file2\x00', &(0x7f0000000980)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in=@local}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000b00)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) stat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)) fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000f80)={{}, {0x1, 0x2}, [{0x2, 0x0, r1}, {0x2, 0x3}, {0x2, 0x1}, {}, {0x2, 0x4}, {0x2, 0x4}], {0x4, 0x6}, [], {0x10, 0x2}}, 0x54, 0x3) mkdir(&(0x7f0000000140)='./file0\x00', 0x40) perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x0, 0x0, 0x823, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9d51, 0x2, 0x100000001, 0x3, 0x7f, 0x1, 0x469efbd0, 0x280, 0x5, 0x100000000, 0x1, 0x0, 0x0, 0x4, 0x5, 0x1f, 0x5, 0x0, 0x8, 0xfffffffffffffffc, 0x5, 0x0, 0x6, 0x5, 0x20, 0x4, 0x0, 0x0, 0x0, 0x89, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x40, 0x8, 0x0, 0xd, 0x7, 0xffff, 0x47}, 0x0, 0x0, 0xffffffffffffffff, 0x2) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000300)=@sha1={0x1, "591c60f3bbce7ee896db453f1b3e8877e4c74714"}, 0x15, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x7, @local, 0x4}}, 0x3, 0x3f, 0x7}, &(0x7f00000004c0)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000800)={r2, @in={{0x2, 0x4e22}}}, &(0x7f0000000180)=0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={r2, 0x100000001, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYPTR64], &(0x7f0000000240)=0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={r3, 0x0, 0x7}, 0x8) 22:15:42 executing program 3: unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x400033, &(0x7f0000000040)=0x100000000001f, 0xe9) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 22:15:42 executing program 4: unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x400033, &(0x7f0000000040)=0x100000000001f, 0xe9) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 22:15:42 executing program 0: unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x400033, &(0x7f0000000040)=0x100000000001f, 0xe9) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 22:15:43 executing program 5: unshare(0x100000000000400) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000001) r1 = accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r1, &(0x7f0000004300), 0x0, 0x0, &(0x7f0000004480)) 22:15:43 executing program 4: unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x400033, &(0x7f0000000040)=0x100000000001f, 0xe9) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 22:15:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000003300)=ANY=[@ANYBLOB="1400000004011903000000000000000000000000"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000001cc0)=[{{&(0x7f0000001840)=@nfc, 0x80, &(0x7f0000001b40), 0x0, &(0x7f0000001bc0)=""/199, 0xc7}}], 0x1, 0x0, 0x0) 22:15:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0)) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/7, 0x4}], 0x200000000000031f) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, &(0x7f0000001680)) tkill(r1, 0x15) 22:15:43 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, {0x3012}}) 22:15:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0)) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/7, 0x4}], 0x200000000000031f) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, &(0x7f0000001680)) tkill(r1, 0x15) 22:15:43 executing program 2: socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0xfffffffffffffffd) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140)) syslog(0x3, &(0x7f0000000380)=""/214, 0xd6) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r2, &(0x7f0000000300)=0xfffffffffffffffa, 0x12) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'ipddp0\x00', &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000001000100ee000000ac1f92ff51304fcb40493352ac37b6a54b98c8e8629545ad43d4f0caab457411f6514232b7d460a31974f47ca35406786df686bc7e7ec31b2b96c3de05d7d604a40430e455318b5d0801be855d2de09d50e9207307e2f2bdc3d13a7819de2829b13c6b7ef48627f957c6485a54b7c7aecad321212bb408008c1b85e84a384dc473ffdcf327c296b3ec565f93a7d94c00be19b94152c48f1554896253e7f9ec2d5a6fb38915f075d6fd06447ad54158711844d66f412be031b53a98c5bc043de9f7ef2062f61ef3a154e8b85087890d46784aea31467e2f9039f34b5078a0da00000000000000"]}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x30, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000003800)={&(0x7f0000003840), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x1, 0x8, 0xffffffffffffffff}, 0x14}}, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x8002, 0x10) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f00000009c0)={0x2, 0xffffffffffff26d8}, 0x2) linkat(r6, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1000) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) 22:15:43 executing program 5: r0 = socket(0xa, 0x200000000080002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="4d000000000000008600000000000002"]}) 22:15:44 executing program 0: unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x400033, &(0x7f0000000040)=0x100000000001f, 0xe9) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 22:15:44 executing program 3: unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x400033, &(0x7f0000000040)=0x100000000001f, 0xe9) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 22:15:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x10a, 0x0, 0x4000009f]}) 22:15:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0189436, 0x0) 22:15:44 executing program 4: unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x400033, &(0x7f0000000040)=0x100000000001f, 0xe9) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 22:15:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x100000001, 0x2}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)) 22:15:44 executing program 3: syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x7fff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x2a}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:15:44 executing program 0: unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x400033, &(0x7f0000000040)=0x100000000001f, 0xe9) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 22:15:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0)) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/7, 0x4}], 0x200000000000031f) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, &(0x7f0000001680)) tkill(r1, 0x15) 22:15:44 executing program 5: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) r1 = epoll_create(0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003d6ff4)) open(&(0x7f00009b7000)='./bus\x00', 0x10b885, 0x0) 22:15:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0)) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/7, 0x4}], 0x200000000000031f) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, &(0x7f0000001680)) tkill(r1, 0x15) 22:15:45 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_ifreq(r1, 0x89b4, &(0x7f0000000100)={'bond0\x00', @ifru_data=&(0x7f0000000480)="00f835c57dcc8ed7054b1eee9ef72faaae53d6e453dc0098a1aeeef107828976"}) 22:15:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x4a}}) 22:15:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in, @in=@local}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr, @in=@remote}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xb14a, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)={0x1, 0xffffffffffffffa8, [0x5, 0x10000]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='veth1_to_bridge\x00', 0xffffffffffffff1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 22:15:45 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040), &(0x7f0000000180)=0x18) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, {}, {0x0, 0x21}}}}}}, 0x0) 22:15:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8f, &(0x7f0000000200), &(0x7f0000000300)=""/143}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 22:15:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in, @in=@local}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr, @in=@remote}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xb14a, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)={0x1, 0xffffffffffffffa8, [0x5, 0x10000]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='veth1_to_bridge\x00', 0xffffffffffffff1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 22:15:45 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040), &(0x7f0000000180)=0x18) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, {}, {0x0, 0x21}}}}}}, 0x0) 22:15:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in, @in=@local}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr, @in=@remote}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xb14a, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)={0x1, 0xffffffffffffffa8, [0x5, 0x10000]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='veth1_to_bridge\x00', 0xffffffffffffff1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 22:15:45 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040), &(0x7f0000000180)=0x18) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, {}, {0x0, 0x21}}}}}}, 0x0) 22:15:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in, @in=@local}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr, @in=@remote}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xb14a, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)={0x1, 0xffffffffffffffa8, [0x5, 0x10000]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='veth1_to_bridge\x00', 0xffffffffffffff1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 22:15:46 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040), &(0x7f0000000180)=0x18) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0xffffffffffffffff, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, {}, {0x0, 0x21}}}}}}, 0x0) 22:15:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in, @in=@local}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr, @in=@remote}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xb14a, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)={0x1, 0xffffffffffffffa8, [0x5, 0x10000]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='veth1_to_bridge\x00', 0xffffffffffffff1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 22:15:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in, @in=@local}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr, @in=@remote}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xb14a, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)={0x1, 0xffffffffffffffa8, [0x5, 0x10000]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='veth1_to_bridge\x00', 0xffffffffffffff1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 22:15:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in, @in=@local}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr, @in=@remote}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xb14a, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)={0x1, 0xffffffffffffffa8, [0x5, 0x10000]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='veth1_to_bridge\x00', 0xffffffffffffff1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 22:15:46 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f00000015c0), &(0x7f00000000c0)=0x2) 22:15:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8f, &(0x7f0000000200), &(0x7f0000000300)=""/143}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 22:15:46 executing program 1: sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newrule={0x20, 0x20, 0x1}, 0xf8}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 22:15:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in, @in=@local}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr, @in=@remote}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xb14a, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)={0x1, 0xffffffffffffffa8, [0x5, 0x10000]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='veth1_to_bridge\x00', 0xffffffffffffff1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 22:15:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in, @in=@local}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr, @in=@remote}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xb14a, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)={0x1, 0xffffffffffffffa8, [0x5, 0x10000]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='veth1_to_bridge\x00', 0xffffffffffffff1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 22:15:46 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0x3, {0x0, &(0x7f0000000340)}}, 0x20) [ 164.992828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. 22:15:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in, @in=@local}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@rand_addr, @in=@remote}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0xb14a, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)={0x1, 0xffffffffffffffa8, [0x5, 0x10000]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='veth1_to_bridge\x00', 0xffffffffffffff1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 22:15:46 executing program 5: r0 = memfd_create(&(0x7f0000000040)='keyring\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x6800000000000000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x0) timer_settime(0x0, 0x1, &(0x7f0000000380)={{}, {0x77359400}}, &(0x7f00000003c0)) signalfd(0xffffffffffffffff, &(0x7f0000000440), 0x8) execveat(r0, &(0x7f0000000100)='\x00', &(0x7f00000001c0), &(0x7f0000000340), 0x1000) 22:15:46 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000340)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1, &(0x7f00000003c0)}, 0x0) 22:15:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x20, 0x301}, 0x14}}, 0x0) 22:15:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000340)=0xbdb, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000037c0)=0xf10001, 0xfffffdef) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0xe3, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="736563757269747900000000000000000100880000000000000700934d5c09250d008ac7000000"], &(0x7f00000000c0)=0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x10000020}, 0xc) mmap$binder(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1000002, 0x100810, r1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000240), 0x4) 22:15:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8f, &(0x7f0000000200), &(0x7f0000000300)=""/143}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 22:15:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7a, 0x0, [0x4000009f, 0x810000c0]}) 22:15:46 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000340)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1, &(0x7f00000003c0)}, 0x0) 22:15:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x20, 0x301}, 0x14}}, 0x0) 22:15:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x20, 0x301}, 0x14}}, 0x0) 22:15:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x8f, &(0x7f0000000200), &(0x7f0000000300)=""/143}, 0x28) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x810) 22:15:47 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000340)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1, &(0x7f00000003c0)}, 0x0) 22:15:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7a, 0x0, [0x4000009f, 0x810000c0]}) 22:15:47 executing program 5: r0 = memfd_create(&(0x7f0000000040)='keyring\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x6800000000000000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x0) timer_settime(0x0, 0x1, &(0x7f0000000380)={{}, {0x77359400}}, &(0x7f00000003c0)) signalfd(0xffffffffffffffff, &(0x7f0000000440), 0x8) execveat(r0, &(0x7f0000000100)='\x00', &(0x7f00000001c0), &(0x7f0000000340), 0x1000) 22:15:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x14, 0x20, 0x301}, 0x14}}, 0x0) 22:15:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7a, 0x0, [0x4000009f, 0x810000c0]}) 22:15:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000340)=0xbdb, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000037c0)=0xf10001, 0xfffffdef) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0xe3, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="736563757269747900000000000000000100880000000000000700934d5c09250d008ac7000000"], &(0x7f00000000c0)=0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x10000020}, 0xc) mmap$binder(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1000002, 0x100810, r1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000240), 0x4) 22:15:47 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000340)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab6513", 0x55}], 0x1, &(0x7f00000003c0)}, 0x0) 22:15:47 executing program 0: creat(&(0x7f0000000700)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r1, 0x800000000100937e, &(0x7f0000006f80)="010000000000000098") 22:15:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000340)=0xbdb, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000037c0)=0xf10001, 0xfffffdef) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0xe3, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="736563757269747900000000000000000100880000000000000700934d5c09250d008ac7000000"], &(0x7f00000000c0)=0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x10000020}, 0xc) mmap$binder(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1000002, 0x100810, r1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000240), 0x4) 22:15:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7a, 0x0, [0x4000009f, 0x810000c0]}) 22:15:47 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="05a3bf7fbb992109b7fe0000951f070000003903cb71826cf930a51669c550b7c6b70d5a760386af53ab5507dd300fd91b9e7d3872f3eaab20867d68717972d9596f1b66eed6aa80f69dd4ecd88422947d86f073b323adead2eac4ffd51037273381d8ca5b97ca383b000000000000"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cgroup.max.depth\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x7, 0x800) ioctl$TIOCNOTTY(r1, 0x5422) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'bridge_slave_1\x00', @local}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0xffffffffffffff7f) ftruncate(0xffffffffffffffff, 0x7fff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$dspn(&(0x7f0000000580)='/dev/dsp#\x00', 0x6, 0x28480) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000480)=@xdp={0x2c, 0x5, r5}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000680)=[{0xc, 0x4522b984af6a0709, 0x5}], 0xc, 0x1}, 0x0) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)="d70d8bd33386c8561c4f345438dfad2b3d710c3b2dd63d07eaad52b49c215bc958ad4e6aca58689a82f7aa06079febe6153cace062b2df87db34a41600d61b2deecc749592187993d7c49fd45f31c2666488eeab31e45c", 0x57) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[]}}, 0x0) r6 = accept4(r2, 0x0, &(0x7f0000000080), 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x6, {0xfffffffffffffff9}}, 0x18) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)) shutdown(r6, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)) eventfd(0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x200000000000000, 0x12) 22:15:47 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f00000003c0)=[@free_buffer, @release={0x40046306, 0x3}, @acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000340)=[@ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1}, @fd={0x66642a85, 0x0, r0, 0x0, 0x6}], &(0x7f0000000200)=[0x18]}, 0xc5e}}, @acquire_done={0x40106309, 0x0, 0x4}, @acquire], 0x1, 0x0, &(0x7f0000000480)='\r'}) 22:15:47 executing program 5: r0 = memfd_create(&(0x7f0000000040)='keyring\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x6800000000000000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x0) timer_settime(0x0, 0x1, &(0x7f0000000380)={{}, {0x77359400}}, &(0x7f00000003c0)) signalfd(0xffffffffffffffff, &(0x7f0000000440), 0x8) execveat(r0, &(0x7f0000000100)='\x00', &(0x7f00000001c0), &(0x7f0000000340), 0x1000) [ 166.418765] binder: 7995:7996 BC_FREE_BUFFER u0000000000000000 no match [ 166.479895] binder: 7995:7996 Release 1 refcount change on invalid ref 3 ret -22 22:15:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424ab9b3f8683ecf89dee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca9fcf03cbf82bd13534737339245d3c70641be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf3ad8882947ffa1fb4c050727beb12c57e06ff590000000000000000000000000000008924578ad49ea1144c7448d640aa88a66a71b77d73a924ff027fdcb550161653d4cb57088385248286f5be9d8766c70c29e6f5063dfe74a1b0b52079159048210b4d271ac94c889b063ca34a09579af03631f128e6dd2c966daecd7c6f7e0f4ebcaf80250cfab07184838078c71d809d06dc0bac75db814525d1d1acaf4cb6f4890f397382ae636697f688094e38db5c22770f53076c630df9bb4c149189ffa975f52087311c5baafc11c90bdc25fc803b71153ddc3995b2df49cdd784bc5bea40861070dadb395e8dc93cdfa08e") mmap(&(0x7f0000000000/0x11000)=nil, 0x11000, 0x1000001, 0x10012, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000040)) [ 166.631035] binder: 7995:7996 BC_ACQUIRE_DONE u0000000000000000 no match 22:15:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000340)=0xbdb, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000037c0)=0xf10001, 0xfffffdef) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0xe3, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="736563757269747900000000000000000100880000000000000700934d5c09250d008ac7000000"], &(0x7f00000000c0)=0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x10000020}, 0xc) mmap$binder(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1000002, 0x100810, r1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000240), 0x4) [ 166.730214] binder: 7995:7996 got reply transaction with no transaction stack [ 166.812111] binder: 7995:7996 transaction failed 29201/-71, size 64-8 line 2741 [ 166.873810] binder: 7995:8017 BC_FREE_BUFFER u0000000000000000 no match 22:15:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1) 22:15:48 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="05a3bf7fbb992109b7fe0000951f070000003903cb71826cf930a51669c550b7c6b70d5a760386af53ab5507dd300fd91b9e7d3872f3eaab20867d68717972d9596f1b66eed6aa80f69dd4ecd88422947d86f073b323adead2eac4ffd51037273381d8ca5b97ca383b000000000000"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cgroup.max.depth\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x7, 0x800) ioctl$TIOCNOTTY(r1, 0x5422) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'bridge_slave_1\x00', @local}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0xffffffffffffff7f) ftruncate(0xffffffffffffffff, 0x7fff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$dspn(&(0x7f0000000580)='/dev/dsp#\x00', 0x6, 0x28480) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000480)=@xdp={0x2c, 0x5, r5}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000680)=[{0xc, 0x4522b984af6a0709, 0x5}], 0xc, 0x1}, 0x0) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)="d70d8bd33386c8561c4f345438dfad2b3d710c3b2dd63d07eaad52b49c215bc958ad4e6aca58689a82f7aa06079febe6153cace062b2df87db34a41600d61b2deecc749592187993d7c49fd45f31c2666488eeab31e45c", 0x57) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[]}}, 0x0) r6 = accept4(r2, 0x0, &(0x7f0000000080), 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x6, {0xfffffffffffffff9}}, 0x18) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)) shutdown(r6, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)) eventfd(0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x200000000000000, 0x12) [ 166.942207] binder: 7995:8017 Release 1 refcount change on invalid ref 3 ret -22 [ 166.971711] binder: 7995:8017 BC_ACQUIRE_DONE u0000000000000000 no match 22:15:48 executing program 5: r0 = memfd_create(&(0x7f0000000040)='keyring\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) dup2(r1, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r2, 0x6800000000000000) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x0) timer_settime(0x0, 0x1, &(0x7f0000000380)={{}, {0x77359400}}, &(0x7f00000003c0)) signalfd(0xffffffffffffffff, &(0x7f0000000440), 0x8) execveat(r0, &(0x7f0000000100)='\x00', &(0x7f00000001c0), &(0x7f0000000340), 0x1000) [ 166.995781] binder: 7995:8017 got reply transaction with no transaction stack 22:15:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x8c5ac8d5367169be) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) keyctl$revoke(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001f80)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000000640)) fstat(r1, &(0x7f0000001cc0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2, 0x31}, 0x1c) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="28100002030000001c00000000000000010000000000000007000000000000007175657565300000"], 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001e80), 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000600)=0x13656ea5e21669ef) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 167.072463] binder: 7995:8017 transaction failed 29201/-71, size 64-8 line 2741 22:15:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000340)=0xbdb, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000037c0)=0xf10001, 0xfffffdef) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0xe3, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="736563757269747900000000000000000100880000000000000700934d5c09250d008ac7000000"], &(0x7f00000000c0)=0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x10000020}, 0xc) mmap$binder(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1000002, 0x100810, r1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000240), 0x4) [ 167.215493] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:15:48 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f00000003c0)=[@free_buffer, @release={0x40046306, 0x3}, @acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000340)=[@ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1}, @fd={0x66642a85, 0x0, r0, 0x0, 0x6}], &(0x7f0000000200)=[0x18]}, 0xc5e}}, @acquire_done={0x40106309, 0x0, 0x4}, @acquire], 0x1, 0x0, &(0x7f0000000480)='\r'}) 22:15:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000340)=0xbdb, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000037c0)=0xf10001, 0xfffffdef) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0xe3, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="736563757269747900000000000000000100880000000000000700934d5c09250d008ac7000000"], &(0x7f00000000c0)=0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x10000020}, 0xc) mmap$binder(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1000002, 0x100810, r1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000240), 0x4) 22:15:48 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="05a3bf7fbb992109b7fe0000951f070000003903cb71826cf930a51669c550b7c6b70d5a760386af53ab5507dd300fd91b9e7d3872f3eaab20867d68717972d9596f1b66eed6aa80f69dd4ecd88422947d86f073b323adead2eac4ffd51037273381d8ca5b97ca383b000000000000"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cgroup.max.depth\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x7, 0x800) ioctl$TIOCNOTTY(r1, 0x5422) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'bridge_slave_1\x00', @local}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0xffffffffffffff7f) ftruncate(0xffffffffffffffff, 0x7fff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$dspn(&(0x7f0000000580)='/dev/dsp#\x00', 0x6, 0x28480) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000480)=@xdp={0x2c, 0x5, r5}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000680)=[{0xc, 0x4522b984af6a0709, 0x5}], 0xc, 0x1}, 0x0) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)="d70d8bd33386c8561c4f345438dfad2b3d710c3b2dd63d07eaad52b49c215bc958ad4e6aca58689a82f7aa06079febe6153cace062b2df87db34a41600d61b2deecc749592187993d7c49fd45f31c2666488eeab31e45c", 0x57) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[]}}, 0x0) r6 = accept4(r2, 0x0, &(0x7f0000000080), 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x6, {0xfffffffffffffff9}}, 0x18) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)) shutdown(r6, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)) eventfd(0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x200000000000000, 0x12) 22:15:48 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f00000003c0)=[@free_buffer, @release={0x40046306, 0x3}, @acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000340)=[@ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1}, @fd={0x66642a85, 0x0, r0, 0x0, 0x6}], &(0x7f0000000200)=[0x18]}, 0xc5e}}, @acquire_done={0x40106309, 0x0, 0x4}, @acquire], 0x1, 0x0, &(0x7f0000000480)='\r'}) [ 167.651033] binder: 8040:8041 BC_FREE_BUFFER u0000000000000000 no match [ 167.689533] binder: 8040:8041 Release 1 refcount change on invalid ref 3 ret -22 [ 167.703117] binder: 8040:8041 BC_ACQUIRE_DONE u0000000000000000 no match [ 167.710475] binder: 8040:8041 got reply transaction with no transaction stack [ 167.729743] binder: 8040:8041 transaction failed 29201/-71, size 64-8 line 2741 [ 167.730422] binder: 8050:8051 BC_FREE_BUFFER u0000000000000000 no match 22:15:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000340)=0xbdb, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000037c0)=0xf10001, 0xfffffdef) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0xe3, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="736563757269747900000000000000000100880000000000000700934d5c09250d008ac7000000"], &(0x7f00000000c0)=0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x10000020}, 0xc) mmap$binder(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1000002, 0x100810, r1, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000240), 0x4) [ 167.810985] binder: 8050:8051 Release 1 refcount change on invalid ref 3 ret -22 [ 167.853790] binder: 8050:8051 BC_ACQUIRE_DONE u0000000000000000 no match [ 167.889823] binder: 8050:8051 got reply transaction with no transaction stack [ 167.926158] binder: 8050:8051 transaction failed 29201/-71, size 64-8 line 2741 22:15:49 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f00000003c0)=[@free_buffer, @release={0x40046306, 0x3}, @acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000340)=[@ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1}, @fd={0x66642a85, 0x0, r0, 0x0, 0x6}], &(0x7f0000000200)=[0x18]}, 0xc5e}}, @acquire_done={0x40106309, 0x0, 0x4}, @acquire], 0x1, 0x0, &(0x7f0000000480)='\r'}) 22:15:49 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f00000003c0)=[@free_buffer, @release={0x40046306, 0x3}, @acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000340)=[@ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1}, @fd={0x66642a85, 0x0, r0, 0x0, 0x6}], &(0x7f0000000200)=[0x18]}, 0xc5e}}, @acquire_done={0x40106309, 0x0, 0x4}, @acquire], 0x1, 0x0, &(0x7f0000000480)='\r'}) [ 168.210612] binder: 8062:8064 BC_FREE_BUFFER u0000000000000000 no match [ 168.278017] binder: 8062:8064 Release 1 refcount change on invalid ref 3 ret -22 22:15:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x8c5ac8d5367169be) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) keyctl$revoke(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001f80)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000000640)) fstat(r1, &(0x7f0000001cc0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2, 0x31}, 0x1c) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="28100002030000001c00000000000000010000000000000007000000000000007175657565300000"], 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001e80), 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000600)=0x13656ea5e21669ef) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 168.328687] binder: 8062:8064 BC_ACQUIRE_DONE u0000000000000000 no match [ 168.336534] binder: 8062:8064 got reply transaction with no transaction stack [ 168.344481] binder: 8062:8064 transaction failed 29201/-71, size 64-8 line 2741 22:15:49 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f00000003c0)=[@free_buffer, @release={0x40046306, 0x3}, @acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000340)=[@ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1}, @fd={0x66642a85, 0x0, r0, 0x0, 0x6}], &(0x7f0000000200)=[0x18]}, 0xc5e}}, @acquire_done={0x40106309, 0x0, 0x4}, @acquire], 0x1, 0x0, &(0x7f0000000480)='\r'}) 22:15:49 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="05a3bf7fbb992109b7fe0000951f070000003903cb71826cf930a51669c550b7c6b70d5a760386af53ab5507dd300fd91b9e7d3872f3eaab20867d68717972d9596f1b66eed6aa80f69dd4ecd88422947d86f073b323adead2eac4ffd51037273381d8ca5b97ca383b000000000000"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='cgroup.max.depth\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x7, 0x800) ioctl$TIOCNOTTY(r1, 0x5422) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'bridge_slave_1\x00', @local}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0xffffffffffffff7f) ftruncate(0xffffffffffffffff, 0x7fff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$dspn(&(0x7f0000000580)='/dev/dsp#\x00', 0x6, 0x28480) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000bc0)={&(0x7f0000000480)=@xdp={0x2c, 0x5, r5}, 0x80, &(0x7f0000000640), 0x0, &(0x7f0000000680)=[{0xc, 0x4522b984af6a0709, 0x5}], 0xc, 0x1}, 0x0) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)="d70d8bd33386c8561c4f345438dfad2b3d710c3b2dd63d07eaad52b49c215bc958ad4e6aca58689a82f7aa06079febe6153cace062b2df87db34a41600d61b2deecc749592187993d7c49fd45f31c2666488eeab31e45c", 0x57) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380), 0xc, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[]}}, 0x0) r6 = accept4(r2, 0x0, &(0x7f0000000080), 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x6, {0xfffffffffffffff9}}, 0x18) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)) shutdown(r6, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)) eventfd(0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x200000000000000, 0x12) [ 168.407429] binder: 8066:8069 BC_FREE_BUFFER u0000000000000000 no match [ 168.462442] binder: 8066:8069 Release 1 refcount change on invalid ref 3 ret -22 [ 168.466238] binder: 8071:8072 BC_FREE_BUFFER u0000000000000000 no match [ 168.483724] binder: 8066:8069 BC_ACQUIRE_DONE u0000000000000000 no match [ 168.501586] binder: 8071:8072 Release 1 refcount change on invalid ref 3 ret -22 22:15:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x8c5ac8d5367169be) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) keyctl$revoke(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001f80)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000000640)) fstat(r1, &(0x7f0000001cc0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2, 0x31}, 0x1c) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="28100002030000001c00000000000000010000000000000007000000000000007175657565300000"], 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001e80), 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000600)=0x13656ea5e21669ef) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 168.532142] binder: 8066:8069 got reply transaction with no transaction stack [ 168.559941] binder: 8071:8072 BC_ACQUIRE_DONE u0000000000000000 no match [ 168.612970] binder: 8066:8069 transaction failed 29201/-71, size 64-8 line 2741 [ 168.683294] binder: 8071:8072 got reply transaction with no transaction stack [ 168.788435] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.795496] binder: 8071:8072 transaction failed 29201/-71, size 64-8 line 2741 22:15:50 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f00000003c0)=[@free_buffer, @release={0x40046306, 0x3}, @acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000340)=[@ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1}, @fd={0x66642a85, 0x0, r0, 0x0, 0x6}], &(0x7f0000000200)=[0x18]}, 0xc5e}}, @acquire_done={0x40106309, 0x0, 0x4}, @acquire], 0x1, 0x0, &(0x7f0000000480)='\r'}) 22:15:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x8c5ac8d5367169be) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) keyctl$revoke(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001f80)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000000640)) fstat(r1, &(0x7f0000001cc0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2, 0x31}, 0x1c) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="28100002030000001c00000000000000010000000000000007000000000000007175657565300000"], 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001e80), 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000600)=0x13656ea5e21669ef) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 169.042697] binder: 8086:8087 BC_FREE_BUFFER u0000000000000000 no match [ 169.050008] binder: 8086:8087 Release 1 refcount change on invalid ref 3 ret -22 [ 169.070035] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:15:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x8c5ac8d5367169be) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) keyctl$revoke(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001f80)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000000640)) fstat(r1, &(0x7f0000001cc0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2, 0x31}, 0x1c) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="28100002030000001c00000000000000010000000000000007000000000000007175657565300000"], 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001e80), 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000600)=0x13656ea5e21669ef) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 169.089211] binder: 8086:8087 BC_ACQUIRE_DONE u0000000000000000 no match 22:15:50 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f00000003c0)=[@free_buffer, @release={0x40046306, 0x3}, @acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000340)=[@ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1}, @fd={0x66642a85, 0x0, r0, 0x0, 0x6}], &(0x7f0000000200)=[0x18]}, 0xc5e}}, @acquire_done={0x40106309, 0x0, 0x4}, @acquire], 0x1, 0x0, &(0x7f0000000480)='\r'}) [ 169.126652] binder: 8086:8087 got reply transaction with no transaction stack [ 169.185361] binder: 8086:8087 transaction failed 29201/-71, size 64-8 line 2741 [ 169.213370] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:15:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x8c5ac8d5367169be) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) keyctl$revoke(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001f80)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000000640)) fstat(r1, &(0x7f0000001cc0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2, 0x31}, 0x1c) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="28100002030000001c00000000000000010000000000000007000000000000007175657565300000"], 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001e80), 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000600)=0x13656ea5e21669ef) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 22:15:50 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xe8a}, &(0x7f0000000100)=0x8) write$tun(r0, &(0x7f0000000000)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @dev={[], 0x1d}, @loopback, @local, @rand_addr=0x4}}, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r3, 0x80000001}, &(0x7f0000000180)=0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280), 0xb) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000400000000000002003e0000000000000001003800000040000000000000800000200001000000000000000000000001000000000000000010001f69509600be000000000040020000000000000000"], 0x58) uselib(&(0x7f00000001c0)='./file0\x00') sendto$inet6(r2, &(0x7f0000000100), 0xd3b1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0xab11, 0x0) [ 169.477575] binder: 8099:8100 BC_FREE_BUFFER u0000000000000000 no match [ 169.558516] binder: 8099:8100 Release 1 refcount change on invalid ref 3 ret -22 [ 169.622579] binder: 8099:8100 BC_ACQUIRE_DONE u0000000000000000 no match [ 169.645552] binder: 8099:8100 got reply transaction with no transaction stack [ 169.705641] binder: 8099:8100 transaction failed 29201/-71, size 64-8 line 2741 22:15:51 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x8c5ac8d5367169be) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) keyctl$revoke(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001f80)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000000640)) fstat(r1, &(0x7f0000001cc0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2, 0x31}, 0x1c) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="28100002030000001c00000000000000010000000000000007000000000000007175657565300000"], 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001e80), 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000600)=0x13656ea5e21669ef) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 22:15:51 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xe8a}, &(0x7f0000000100)=0x8) write$tun(r0, &(0x7f0000000000)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @dev={[], 0x1d}, @loopback, @local, @rand_addr=0x4}}, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r3, 0x80000001}, &(0x7f0000000180)=0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280), 0xb) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000400000000000002003e0000000000000001003800000040000000000000800000200001000000000000000000000001000000000000000010001f69509600be000000000040020000000000000000"], 0x58) uselib(&(0x7f00000001c0)='./file0\x00') sendto$inet6(r2, &(0x7f0000000100), 0xd3b1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0xab11, 0x0) 22:15:51 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x8c5ac8d5367169be) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) keyctl$revoke(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001f80)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000000640)) fstat(r1, &(0x7f0000001cc0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2, 0x31}, 0x1c) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="28100002030000001c00000000000000010000000000000007000000000000007175657565300000"], 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001e80), 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000600)=0x13656ea5e21669ef) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 22:15:51 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f00000003c0)=[@free_buffer, @release={0x40046306, 0x3}, @acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000340)=[@ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1}, @fd={0x66642a85, 0x0, r0, 0x0, 0x6}], &(0x7f0000000200)=[0x18]}, 0xc5e}}, @acquire_done={0x40106309, 0x0, 0x4}, @acquire], 0x1, 0x0, &(0x7f0000000480)='\r'}) 22:15:52 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xe8a}, &(0x7f0000000100)=0x8) write$tun(r0, &(0x7f0000000000)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @dev={[], 0x1d}, @loopback, @local, @rand_addr=0x4}}, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r3, 0x80000001}, &(0x7f0000000180)=0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280), 0xb) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000400000000000002003e0000000000000001003800000040000000000000800000200001000000000000000000000001000000000000000010001f69509600be000000000040020000000000000000"], 0x58) uselib(&(0x7f00000001c0)='./file0\x00') sendto$inet6(r2, &(0x7f0000000100), 0xd3b1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0xab11, 0x0) 22:15:52 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x8c5ac8d5367169be) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) keyctl$revoke(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001f80)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000000640)) fstat(r1, &(0x7f0000001cc0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2, 0x31}, 0x1c) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="28100002030000001c00000000000000010000000000000007000000000000007175657565300000"], 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001e80), 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000600)=0x13656ea5e21669ef) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 22:15:52 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xe8a}, &(0x7f0000000100)=0x8) write$tun(r0, &(0x7f0000000000)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @dev={[], 0x1d}, @loopback, @local, @rand_addr=0x4}}, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r3, 0x80000001}, &(0x7f0000000180)=0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280), 0xb) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000400000000000002003e0000000000000001003800000040000000000000800000200001000000000000000000000001000000000000000010001f69509600be000000000040020000000000000000"], 0x58) uselib(&(0x7f00000001c0)='./file0\x00') sendto$inet6(r2, &(0x7f0000000100), 0xd3b1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0xab11, 0x0) 22:15:52 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x8c5ac8d5367169be) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) keyctl$revoke(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001f80)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000000640)) fstat(r1, &(0x7f0000001cc0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2, 0x31}, 0x1c) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="28100002030000001c00000000000000010000000000000007000000000000007175657565300000"], 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001e80), 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000600)=0x13656ea5e21669ef) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 22:15:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x8c5ac8d5367169be) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) keyctl$revoke(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001f80)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000000640)) fstat(r1, &(0x7f0000001cc0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2, 0x31}, 0x1c) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="28100002030000001c00000000000000010000000000000007000000000000007175657565300000"], 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001e80), 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000600)=0x13656ea5e21669ef) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) [ 171.024031] binder: 8124:8125 BC_FREE_BUFFER u0000000000000000 no match [ 171.031552] binder: 8124:8125 Release 1 refcount change on invalid ref 3 ret -22 [ 171.051838] binder: 8124:8125 BC_ACQUIRE_DONE u0000000000000000 no match [ 171.058873] binder: 8124:8125 got reply transaction with no transaction stack [ 171.120779] binder: 8124:8125 transaction failed 29201/-71, size 64-8 line 2741 22:15:53 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x90, 0x0, &(0x7f00000003c0)=[@free_buffer, @release={0x40046306, 0x3}, @acquire_done, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000340)=[@ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1}, @fd={0x66642a85, 0x0, r0, 0x0, 0x6}], &(0x7f0000000200)=[0x18]}, 0xc5e}}, @acquire_done={0x40106309, 0x0, 0x4}, @acquire], 0x1, 0x0, &(0x7f0000000480)='\r'}) 22:15:53 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xe8a}, &(0x7f0000000100)=0x8) write$tun(r0, &(0x7f0000000000)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @dev={[], 0x1d}, @loopback, @local, @rand_addr=0x4}}, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r3, 0x80000001}, &(0x7f0000000180)=0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280), 0xb) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000400000000000002003e0000000000000001003800000040000000000000800000200001000000000000000000000001000000000000000010001f69509600be000000000040020000000000000000"], 0x58) uselib(&(0x7f00000001c0)='./file0\x00') sendto$inet6(r2, &(0x7f0000000100), 0xd3b1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0xab11, 0x0) 22:15:53 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x8c5ac8d5367169be) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) keyctl$revoke(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001f80)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000000640)) fstat(r1, &(0x7f0000001cc0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2, 0x31}, 0x1c) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="28100002030000001c00000000000000010000000000000007000000000000007175657565300000"], 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001e80), 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000600)=0x13656ea5e21669ef) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 22:15:53 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) r1 = socket$inet6(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000180)=0x8c5ac8d5367169be) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), &(0x7f0000000300)=0x4) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) inotify_add_watch(r2, &(0x7f0000000280)='./file0\x00', 0x0) sendto$inet6(r2, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000400)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000004c0)=0x301, 0x4) keyctl$revoke(0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000001f80)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000540)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b80), &(0x7f0000001bc0)=0xc) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000000640)) fstat(r1, &(0x7f0000001cc0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @mcast2, 0x31}, 0x1c) write$FUSE_NOTIFY_INVAL_ENTRY(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="28100002030000001c00000000000000010000000000000007000000000000007175657565300000"], 0x28) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000001e80), 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000600)=0x13656ea5e21669ef) r5 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r5, 0x280080) sendfile(r2, r5, &(0x7f0000d83ff8)=0x10, 0x2008000fffffffe) 22:15:53 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xe8a}, &(0x7f0000000100)=0x8) write$tun(r0, &(0x7f0000000000)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @dev={[], 0x1d}, @loopback, @local, @rand_addr=0x4}}, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r3, 0x80000001}, &(0x7f0000000180)=0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280), 0xb) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000400000000000002003e0000000000000001003800000040000000000000800000200001000000000000000000000001000000000000000010001f69509600be000000000040020000000000000000"], 0x58) uselib(&(0x7f00000001c0)='./file0\x00') sendto$inet6(r2, &(0x7f0000000100), 0xd3b1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0xab11, 0x0) [ 172.089920] binder: 8139:8144 BC_FREE_BUFFER u0000000000000000 no match [ 172.149891] binder: 8139:8144 Release 1 refcount change on invalid ref 3 ret -22 [ 172.201822] binder: 8139:8144 BC_ACQUIRE_DONE u0000000000000000 no match [ 172.234115] binder: 8139:8144 got reply transaction with no transaction stack [ 172.291848] binder: 8139:8144 transaction failed 29201/-71, size 64-8 line 2741 22:15:53 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xe8a}, &(0x7f0000000100)=0x8) write$tun(r0, &(0x7f0000000000)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @dev={[], 0x1d}, @loopback, @local, @rand_addr=0x4}}, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r3, 0x80000001}, &(0x7f0000000180)=0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280), 0xb) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000400000000000002003e0000000000000001003800000040000000000000800000200001000000000000000000000001000000000000000010001f69509600be000000000040020000000000000000"], 0x58) uselib(&(0x7f00000001c0)='./file0\x00') sendto$inet6(r2, &(0x7f0000000100), 0xd3b1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0xab11, 0x0) 22:15:53 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8100000008b0f, &(0x7f0000000040)={'veth0\x00', @ifru_mtu=0x6a}) 22:15:54 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xe8a}, &(0x7f0000000100)=0x8) write$tun(r0, &(0x7f0000000000)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @dev={[], 0x1d}, @loopback, @local, @rand_addr=0x4}}, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r3, 0x80000001}, &(0x7f0000000180)=0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280), 0xb) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000400000000000002003e0000000000000001003800000040000000000000800000200001000000000000000000000001000000000000000010001f69509600be000000000040020000000000000000"], 0x58) uselib(&(0x7f00000001c0)='./file0\x00') sendto$inet6(r2, &(0x7f0000000100), 0xd3b1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0xab11, 0x0) 22:15:54 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8100000008b0f, &(0x7f0000000040)={'veth0\x00', @ifru_mtu=0x6a}) 22:15:54 executing program 1: rt_sigaction(0x13, &(0x7f00000000c0)={&(0x7f0000000040)="67662ef2a56744e0b48f297812ccc4e119d9acc01099a16d0f18c9c421537cd2c481396541c08f08e0a2dfb0c4016972f25cc4c1e5655030", {}, 0x0, &(0x7f0000000080)="3400652e263e66430fd63c95a1000000c42279256a0b0fab2241db4d0f6647d9f4440f18732e672e420fc70dfcfffffff30f105300c4215c157fa0"}, &(0x7f0000000200)={&(0x7f0000000100)="dce3c4c2b92b4eafc44295bbfac4c37917d76ec461fb700459646447f6c7940faeae0000000067430f38033500000000c481cd71d127660ff897c2a20000", {}, 0x0, &(0x7f00000001c0)="660fd389070000002e804e9400f20f38f173fe0f8cfeefffff660f5f04d0c4c32968273dc4e178524a0c660f6ae4672667f3440f161af3400f5826"}, 0x8, &(0x7f0000000240)) 22:15:54 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xe8a}, &(0x7f0000000100)=0x8) write$tun(r0, &(0x7f0000000000)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @dev={[], 0x1d}, @loopback, @local, @rand_addr=0x4}}, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r3, 0x80000001}, &(0x7f0000000180)=0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280), 0xb) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000400000000000002003e0000000000000001003800000040000000000000800000200001000000000000000000000001000000000000000010001f69509600be000000000040020000000000000000"], 0x58) uselib(&(0x7f00000001c0)='./file0\x00') sendto$inet6(r2, &(0x7f0000000100), 0xd3b1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0xab11, 0x0) 22:15:54 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8100000008b0f, &(0x7f0000000040)={'veth0\x00', @ifru_mtu=0x6a}) 22:15:54 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xe8a}, &(0x7f0000000100)=0x8) write$tun(r0, &(0x7f0000000000)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @dev={[], 0x1d}, @loopback, @local, @rand_addr=0x4}}, 0x1c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r3, 0x80000001}, &(0x7f0000000180)=0x8) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280), 0xb) r5 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600000000000400000000000002003e0000000000000001003800000040000000000000800000200001000000000000000000000001000000000000000010001f69509600be000000000040020000000000000000"], 0x58) uselib(&(0x7f00000001c0)='./file0\x00') sendto$inet6(r2, &(0x7f0000000100), 0xd3b1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0xab11, 0x0) 22:15:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv4_newaddr={0x34, 0x14, 0x41b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r1}, [@IFA_CACHEINFO={0x14}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x34}}, 0x0) 22:15:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', &(0x7f00000001c0)=@v3, 0x18, 0x0) 22:15:54 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40106308}], 0x0, 0x0, &(0x7f0000000f4d)}) 22:15:54 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8100000008b0f, &(0x7f0000000040)={'veth0\x00', @ifru_mtu=0x6a}) [ 173.103436] binder: 8185:8189 BC_INCREFS_DONE u0000000000000000 no match [ 173.142522] binder: 8185:8193 BC_INCREFS_DONE u0000000000000000 no match 22:15:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={"0061a40000ffebf9000000000200", 0x9d01}) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) close(r1) 22:15:54 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x4}, 0x2c) 22:15:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x8188aea6, &(0x7f0000000280)) 22:15:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000680)=0x1000000008004) read(r1, &(0x7f0000000000)=""/143, 0xfffffe5e) dup3(r2, r1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1004000000016) 22:15:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000040)=0x24) 22:15:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) gettid() perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[]}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000440)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7"], 0xb) io_setup(0x101, &(0x7f0000000040)) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x3}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000240)=""/211) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) 22:15:54 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) [ 173.310701] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.320272] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 22:15:54 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000200)=[@in6]}, &(0x7f0000000340)=0x3) 22:15:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @loopback}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) dup2(r0, r2) dup3(r0, r1, 0x0) 22:15:54 executing program 2: pipe2(&(0x7f0000001140), 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x75, 0x6b, &(0x7f0000000140)="291d9d13f0902ee76abb0cce33033ec14b52f9089ba3c5568898f20f32a41157a7ac76e7a4aba0af495daa4d6f7b5204e2d10ff317c64865fb6ab56f89c698a3d89daf79ab367f0049df81599675cfd0a886f42c745f52fe4bdd8bd7e4d2fc39c565561c59e3f785e202c045a58a3dc9004f47befd", &(0x7f0000000040)=""/107}, 0x28) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0x4f2, 0x0, 0x0, @tick, {}, {}, @time=@tick=0x5}], 0xb234ef0f) 22:15:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000040)=0x24) 22:15:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000040)=0x24) [ 173.525070] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:15:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) gettid() perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[]}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000440)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7"], 0xb) io_setup(0x101, &(0x7f0000000040)) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x3}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000240)=""/211) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) 22:15:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) gettid() perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[]}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000440)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7"], 0xb) io_setup(0x101, &(0x7f0000000040)) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x3}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000240)=""/211) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) 22:15:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a00010200000000000000000000fadd54711662d343cc769bf88b12b49e00000000000000000000"], 0x1}}, 0x0) 22:15:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @loopback}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) dup2(r0, r2) dup3(r0, r1, 0x0) 22:15:55 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000004b1a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000800"}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) 22:15:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000100)={'raw\x00'}, &(0x7f0000000040)=0x24) 22:15:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) [ 173.818780] input: syz1 as /devices/virtual/input/input5 22:15:55 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x1, r0, 0x0) 22:15:55 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000300)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 22:15:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) gettid() perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[]}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000440)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7"], 0xb) io_setup(0x101, &(0x7f0000000040)) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x3}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000240)=""/211) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) [ 174.001823] binder_alloc: 8268: binder_alloc_buf failed to map page at 20002000 in userspace 22:15:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @loopback}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) dup2(r0, r2) dup3(r0, r1, 0x0) [ 174.113456] binder: 8268:8272 transaction failed 29201/-12, size 0-12288 line 2973 22:15:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[]) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000007061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 22:15:55 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"766574000000000000000000bd6800", 0x43732e5398416f1b}) 22:15:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) gettid() perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[]}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000440)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7"], 0xb) io_setup(0x101, &(0x7f0000000040)) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x3}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000240)=""/211) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) [ 174.162324] binder_alloc: binder_alloc_mmap_handler: 8268 20001000-20004000 already mapped failed -16 [ 174.237723] binder: BINDER_SET_CONTEXT_MGR already set [ 174.256504] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 174.265891] binder: 8268:8284 ioctl 40046207 0 returned -16 22:15:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) gettid() perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[]}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000440)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7"], 0xb) io_setup(0x101, &(0x7f0000000040)) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x3}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000240)=""/211) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) [ 174.296423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 174.308983] binder_alloc: 8268: binder_alloc_buf, no vma [ 174.322076] netlink: 'syz-executor0': attribute type 1 has an invalid length. 22:15:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) gettid() perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[]}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000440)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7"], 0xb) io_setup(0x101, &(0x7f0000000040)) fcntl$lock(r0, 0x6, &(0x7f0000000100)={0x0, 0x3}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000240)=""/211) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) [ 174.354567] binder: undelivered TRANSACTION_ERROR: 29201 [ 174.380503] binder: 8268:8300 transaction failed 29189/-3, size 0-12288 line 2973 [ 174.387755] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 22:15:55 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x31424752}}) 22:15:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @loopback}}) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) dup2(r0, r2) dup3(r0, r1, 0x0) [ 174.531593] binder: undelivered TRANSACTION_ERROR: 29189 22:15:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x101, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x2}]}]}, 0x28}}, 0x0) 22:15:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000001c0)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000003c0)) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000380)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = socket$inet(0x2, 0x5, 0x401) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@ipv4}}, &(0x7f00000002c0)=0xe8) r5 = getegid() fchown(r4, 0x0, r5) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffe) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x6, 0x0, 0x97, 0x0, 0x3, 0x10200, 0xd, 0x2, 0x799, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6d6, 0x0, 0x1, 0x9, 0x0, 0x0, 0x3, 0x8000, 0x4f20fb6f, 0x1, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x4, 0x10000, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x9}, 0x80a8, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1ff}) [ 174.586424] netlink: 'syz-executor0': attribute type 1 has an invalid length. 22:15:55 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cgroup.max.depth\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) ftruncate(0xffffffffffffffff, 0x7fff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)="d70d8bd33386c8561c4f345438dfad2b3d710c", 0x13) r3 = accept4(r1, 0x0, &(0x7f0000000080), 0x0) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@ll, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000005c0)=""/176, 0xb0}, {&(0x7f0000000680)=""/183, 0xb7}], 0x3, &(0x7f0000000880)=""/20, 0x14, 0x8}, 0x40000000) shutdown(r3, 0x1) eventfd(0x991) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x3e, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000140)=&(0x7f00000000c0)) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000380)) [ 174.670602] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 174.713432] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 174.749341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 22:15:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc2c85512, &(0x7f00000002c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00'}) 22:15:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[]) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000007061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 22:15:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) fcntl$setstatus(r1, 0x4, 0x42000) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) 22:15:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)={0x2, 0x0, [{0x1}, {0x80000008, 0x101}]}) 22:15:56 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x84, 0x0, @local={0xfe, 0x8a00}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) [ 175.044913] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 175.062310] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 22:15:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) fcntl$setstatus(r1, 0x4, 0x42000) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) 22:15:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000001c0)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000003c0)) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000380)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = socket$inet(0x2, 0x5, 0x401) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@ipv4}}, &(0x7f00000002c0)=0xe8) r5 = getegid() fchown(r4, 0x0, r5) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffe) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x6, 0x0, 0x97, 0x0, 0x3, 0x10200, 0xd, 0x2, 0x799, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6d6, 0x0, 0x1, 0x9, 0x0, 0x0, 0x3, 0x8000, 0x4f20fb6f, 0x1, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x4, 0x10000, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x9}, 0x80a8, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1ff}) [ 175.071293] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 175.126364] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 22:15:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000001c0)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000003c0)) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000380)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = socket$inet(0x2, 0x5, 0x401) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@ipv4}}, &(0x7f00000002c0)=0xe8) r5 = getegid() fchown(r4, 0x0, r5) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffe) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x6, 0x0, 0x97, 0x0, 0x3, 0x10200, 0xd, 0x2, 0x799, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6d6, 0x0, 0x1, 0x9, 0x0, 0x0, 0x3, 0x8000, 0x4f20fb6f, 0x1, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x4, 0x10000, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x9}, 0x80a8, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1ff}) 22:15:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/24, &(0x7f0000000480)=0x18) 22:15:56 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cgroup.max.depth\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) ftruncate(0xffffffffffffffff, 0x7fff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)="d70d8bd33386c8561c4f345438dfad2b3d710c", 0x13) r3 = accept4(r1, 0x0, &(0x7f0000000080), 0x0) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@ll, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000005c0)=""/176, 0xb0}, {&(0x7f0000000680)=""/183, 0xb7}], 0x3, &(0x7f0000000880)=""/20, 0x14, 0x8}, 0x40000000) shutdown(r3, 0x1) eventfd(0x991) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x3e, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000140)=&(0x7f00000000c0)) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000380)) 22:15:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[]) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000007061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 22:15:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) fcntl$setstatus(r1, 0x4, 0x42000) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) [ 175.404553] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 175.436701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 175.506938] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 175.553920] syz-executor3 (8364) used greatest stack depth: 9064 bytes left 22:15:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000001c0)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000003c0)) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000380)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = socket$inet(0x2, 0x5, 0x401) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@ipv4}}, &(0x7f00000002c0)=0xe8) r5 = getegid() fchown(r4, 0x0, r5) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffe) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x6, 0x0, 0x97, 0x0, 0x3, 0x10200, 0xd, 0x2, 0x799, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6d6, 0x0, 0x1, 0x9, 0x0, 0x0, 0x3, 0x8000, 0x4f20fb6f, 0x1, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x4, 0x10000, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x9}, 0x80a8, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1ff}) 22:15:56 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f000082f000)='./control\x00', 0x0) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000200)='./control\x00') [ 175.647380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 22:15:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7) fcntl$setstatus(r1, 0x4, 0x42000) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) 22:15:57 executing program 1: getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000880)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x24a, 0x4}, &(0x7f0000000580)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@rand_addr, @multicast1}, 0x8) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffb) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040), 0xc) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x30, &(0x7f0000000300)=""/103, &(0x7f00000001c0)=0x67) 22:15:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000001c0)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000003c0)) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000380)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = socket$inet(0x2, 0x5, 0x401) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@ipv4}}, &(0x7f00000002c0)=0xe8) r5 = getegid() fchown(r4, 0x0, r5) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffe) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x6, 0x0, 0x97, 0x0, 0x3, 0x10200, 0xd, 0x2, 0x799, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6d6, 0x0, 0x1, 0x9, 0x0, 0x0, 0x3, 0x8000, 0x4f20fb6f, 0x1, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x4, 0x10000, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x9}, 0x80a8, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1ff}) 22:15:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[]) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000007061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 175.843306] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 175.875240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 175.919216] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 175.950884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 22:15:57 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0x500000000000053, 0x2}], 0x3bf) 22:15:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000001c0)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000003c0)) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000380)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = socket$inet(0x2, 0x5, 0x401) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@ipv4}}, &(0x7f00000002c0)=0xe8) r5 = getegid() fchown(r4, 0x0, r5) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffe) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x6, 0x0, 0x97, 0x0, 0x3, 0x10200, 0xd, 0x2, 0x799, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6d6, 0x0, 0x1, 0x9, 0x0, 0x0, 0x3, 0x8000, 0x4f20fb6f, 0x1, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x4, 0x10000, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x9}, 0x80a8, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1ff}) 22:15:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f00000001c0)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000003c0)) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000380)=0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r4 = socket$inet(0x2, 0x5, 0x401) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@ipv4}}, &(0x7f00000002c0)=0xe8) r5 = getegid() fchown(r4, 0x0, r5) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffe) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000300)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x6, 0x0, 0x97, 0x0, 0x3, 0x10200, 0xd, 0x2, 0x799, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6d6, 0x0, 0x1, 0x9, 0x0, 0x0, 0x3, 0x8000, 0x4f20fb6f, 0x1, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x4, 0x10000, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x9}, 0x80a8, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1ff}) 22:15:57 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cgroup.max.depth\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) ftruncate(0xffffffffffffffff, 0x7fff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)="d70d8bd33386c8561c4f345438dfad2b3d710c", 0x13) r3 = accept4(r1, 0x0, &(0x7f0000000080), 0x0) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@ll, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000005c0)=""/176, 0xb0}, {&(0x7f0000000680)=""/183, 0xb7}], 0x3, &(0x7f0000000880)=""/20, 0x14, 0x8}, 0x40000000) shutdown(r3, 0x1) eventfd(0x991) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x3e, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000140)=&(0x7f00000000c0)) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000380)) 22:15:57 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000004c0)={0x7, [0x7, 0x91, 0x6, 0x2, 0x80000000, 0x0, 0x5]}) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) vmsplice(r2, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x0, @empty, 0xab}], 0x1c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xffffffffffffffff) 22:15:57 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='erspan0\x00', 0x10) sendto$inet(r0, &(0x7f0000000340)="0340", 0x2, 0x800000000008000, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)="9e5b", 0x2, 0x8000, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000140)="0c550c76d552e31cdd5d68cf5b116634802fa1b87ebb242a", 0x18, 0x0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) 22:15:57 executing program 1: getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000880)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x24a, 0x4}, &(0x7f0000000580)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@rand_addr, @multicast1}, 0x8) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffb) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040), 0xc) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x30, &(0x7f0000000300)=""/103, &(0x7f00000001c0)=0x67) 22:15:57 executing program 3: getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000880)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x24a, 0x4}, &(0x7f0000000580)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@rand_addr, @multicast1}, 0x8) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffb) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040), 0xc) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x30, &(0x7f0000000300)=""/103, &(0x7f00000001c0)=0x67) 22:15:57 executing program 0: getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000880)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x24a, 0x4}, &(0x7f0000000580)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@rand_addr, @multicast1}, 0x8) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffb) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040), 0xc) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x30, &(0x7f0000000300)=""/103, &(0x7f00000001c0)=0x67) 22:15:57 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x8}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000500)) r2 = socket$inet6(0xa, 0x2, 0xb46000000000000) close(r2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x2012}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x50, &(0x7f0000000580)}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) write$P9_RXATTRCREATE(r5, &(0x7f0000000140)={0x7}, 0x7) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x3) 22:15:58 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000004c0)={0x7, [0x7, 0x91, 0x6, 0x2, 0x80000000, 0x0, 0x5]}) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) vmsplice(r2, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x0, @empty, 0xab}], 0x1c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xffffffffffffffff) 22:15:58 executing program 1: getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000880)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x24a, 0x4}, &(0x7f0000000580)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@rand_addr, @multicast1}, 0x8) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffb) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040), 0xc) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x30, &(0x7f0000000300)=""/103, &(0x7f00000001c0)=0x67) [ 177.172242] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.183384] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:15:58 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000004c0)={0x7, [0x7, 0x91, 0x6, 0x2, 0x80000000, 0x0, 0x5]}) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) vmsplice(r2, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x0, @empty, 0xab}], 0x1c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xffffffffffffffff) 22:15:58 executing program 0: getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000880)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x24a, 0x4}, &(0x7f0000000580)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@rand_addr, @multicast1}, 0x8) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffb) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040), 0xc) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x30, &(0x7f0000000300)=""/103, &(0x7f00000001c0)=0x67) 22:15:58 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cgroup.max.depth\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xffffffffffffff7f) ftruncate(0xffffffffffffffff, 0x7fff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000180)="d70d8bd33386c8561c4f345438dfad2b3d710c", 0x13) r3 = accept4(r1, 0x0, &(0x7f0000000080), 0x0) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000480)=@ll, 0x80, &(0x7f0000000840)=[{&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000005c0)=""/176, 0xb0}, {&(0x7f0000000680)=""/183, 0xb7}], 0x3, &(0x7f0000000880)=""/20, 0x14, 0x8}, 0x40000000) shutdown(r3, 0x1) eventfd(0x991) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x3e, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000140)=&(0x7f00000000c0)) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000380)) 22:15:58 executing program 1: getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000880)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x24a, 0x4}, &(0x7f0000000580)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@rand_addr, @multicast1}, 0x8) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffb) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040), 0xc) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x30, &(0x7f0000000300)=""/103, &(0x7f00000001c0)=0x67) 22:15:59 executing program 3: getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000880)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x24a, 0x4}, &(0x7f0000000580)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@rand_addr, @multicast1}, 0x8) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffb) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040), 0xc) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x30, &(0x7f0000000300)=""/103, &(0x7f00000001c0)=0x67) 22:15:59 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000004c0)={0x7, [0x7, 0x91, 0x6, 0x2, 0x80000000, 0x0, 0x5]}) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) vmsplice(r2, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x0, @empty, 0xab}], 0x1c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xffffffffffffffff) 22:15:59 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000004c0)={0x7, [0x7, 0x91, 0x6, 0x2, 0x80000000, 0x0, 0x5]}) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) vmsplice(r2, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x0, @empty, 0xab}], 0x1c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xffffffffffffffff) 22:15:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000140)={0x29a}, 0x14) inotify_init() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0xffffffffffff8000, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000900)=ANY=[], &(0x7f0000000480)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r1, r0, &(0x7f0000000100)=0x5d, 0x79ffff00000011) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @remote}}, [0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x9, 0x9, 0x0, 0x20, 0x0, 0x7f, 0x7, 0x0, 0x6]}, &(0x7f0000000600)=0x100) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000680)="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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x6000b00) 22:15:59 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000004c0)={0x7, [0x7, 0x91, 0x6, 0x2, 0x80000000, 0x0, 0x5]}) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) vmsplice(r2, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x0, @empty, 0xab}], 0x1c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xffffffffffffffff) [ 178.265899] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:00 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x8}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000500)) r2 = socket$inet6(0xa, 0x2, 0xb46000000000000) close(r2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x2012}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x50, &(0x7f0000000580)}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) write$P9_RXATTRCREATE(r5, &(0x7f0000000140)={0x7}, 0x7) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x3) 22:16:00 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000eed000)={0x2, 0x6e21}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000de6fd6)={@link_local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 22:16:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000140)={0x29a}, 0x14) inotify_init() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0xffffffffffff8000, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000900)=ANY=[], &(0x7f0000000480)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r1, r0, &(0x7f0000000100)=0x5d, 0x79ffff00000011) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @remote}}, [0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x9, 0x9, 0x0, 0x20, 0x0, 0x7f, 0x7, 0x0, 0x6]}, &(0x7f0000000600)=0x100) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000680)="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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x6000b00) 22:16:00 executing program 0: getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000880)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x24a, 0x4}, &(0x7f0000000580)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@rand_addr, @multicast1}, 0x8) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffb) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040), 0xc) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x30, &(0x7f0000000300)=""/103, &(0x7f00000001c0)=0x67) 22:16:00 executing program 3: getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000880)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x24a, 0x4}, &(0x7f0000000580)=0x98) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={@rand_addr, @multicast1}, 0x8) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) add_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000440), 0x0, 0xfffffffffffffffb) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040), 0xc) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@loopback, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x30, &(0x7f0000000300)=""/103, &(0x7f00000001c0)=0x67) 22:16:00 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f00000004c0)={0x7, [0x7, 0x91, 0x6, 0x2, 0x80000000, 0x0, 0x5]}) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000280)) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000140)) vmsplice(r2, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x0, @empty, 0xab}], 0x1c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0xffffffffffffffff) 22:16:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000140)={0x29a}, 0x14) inotify_init() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0xffffffffffff8000, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000900)=ANY=[], &(0x7f0000000480)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r1, r0, &(0x7f0000000100)=0x5d, 0x79ffff00000011) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @remote}}, [0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x9, 0x9, 0x0, 0x20, 0x0, 0x7f, 0x7, 0x0, 0x6]}, &(0x7f0000000600)=0x100) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000680)="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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x6000b00) 22:16:00 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000000700000000f4ff009500000000000000"], &(0x7f0000000200)="73797a6b616c6c65722c493d6c2b78db01beb8234b8301e2918b8b33e703f173263d15127d1c5309a0593d0f6dbe9cd5434619dfff6e61ba74ed3776315503f2d22b3ecd7a62819bc2345afd348344bed224a114267fd4cd1e55f8cf69c16cfffd3a4dc7721aacdfb55e39d507f86531752d2affc30318f5da65be34374a24f6", 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096}, 0x48) [ 179.160154] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000140)={0x29a}, 0x14) inotify_init() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000240)=0xffffffffffff8000, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000900)=ANY=[], &(0x7f0000000480)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r1, r0, &(0x7f0000000100)=0x5d, 0x79ffff00000011) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @remote}}, [0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x9, 0x9, 0x0, 0x20, 0x0, 0x7f, 0x7, 0x0, 0x6]}, &(0x7f0000000600)=0x100) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000680)="076e644ae8389283178bc64ee0f3bffb4aba89709c9b5b9cd7056f3c42b6515308db46468e29b5e6c9676b9ce7efd0fbe7bf08d66954dea0406c55e42354cd69e97b48882eb3bb061f1b3c3db36ce0065f3f5a424faf5475cc93ed37d7ecab539a0a3f93033a6c2227dfbadda8ff708397009814ae1e5281e6d963f2e580c6b0ba105dac5c31ed4f167ff873addf2940d60e83e6e879bf4d0e0adea5ba01a48a5ac995ce8eb7214aa266c9de91105b7c060d864acc1f2eef7e13154503dcca1364da1b3f373e8915c3174b1331b9b2906936ebf4da359664bc83a34f36f128d00537b562ed4b280b01a3fe66afd6a25f7b79dd841b6559a98bdd1bb355e10319") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x6000b00) 22:16:00 executing program 5: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r6 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r4}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r5}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0xbe2, "91b39b38d1d349596956857af2f4cf920bc31fee10a93b0214184504cada25d43d532ac937cf6de55c8f80370879db4c8cb1b297d291ba3a71200238995bc4e84dc4fca14e63fe756289c941846710f565d70f726ab679bacee3864a802b6f6bf94f99a848070b9512159cc70cb6958d36f956ad8149d39d610b5070929a3098"}}) 22:16:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000240)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000640)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x4247, 0x0, [{}, {}, {0x0, 0x9}]}}) 22:16:00 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="240000000c061f001cfffd946fa2830020200a005100010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 179.598008] netlink: 16 bytes leftover after parsing attributes in process `syz-executor1'. 22:16:01 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x8}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000500)) r2 = socket$inet6(0xa, 0x2, 0xb46000000000000) close(r2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x2012}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x50, &(0x7f0000000580)}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) write$P9_RXATTRCREATE(r5, &(0x7f0000000140)={0x7}, 0x7) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x3) 22:16:01 executing program 5: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r6 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r4}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r5}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0xbe2, "91b39b38d1d349596956857af2f4cf920bc31fee10a93b0214184504cada25d43d532ac937cf6de55c8f80370879db4c8cb1b297d291ba3a71200238995bc4e84dc4fca14e63fe756289c941846710f565d70f726ab679bacee3864a802b6f6bf94f99a848070b9512159cc70cb6958d36f956ad8149d39d610b5070929a3098"}}) 22:16:01 executing program 4: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r6 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r4}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r5}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0xbe2, "91b39b38d1d349596956857af2f4cf920bc31fee10a93b0214184504cada25d43d532ac937cf6de55c8f80370879db4c8cb1b297d291ba3a71200238995bc4e84dc4fca14e63fe756289c941846710f565d70f726ab679bacee3864a802b6f6bf94f99a848070b9512159cc70cb6958d36f956ad8149d39d610b5070929a3098"}}) 22:16:01 executing program 0: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r6 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r4}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r5}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0xbe2, "91b39b38d1d349596956857af2f4cf920bc31fee10a93b0214184504cada25d43d532ac937cf6de55c8f80370879db4c8cb1b297d291ba3a71200238995bc4e84dc4fca14e63fe756289c941846710f565d70f726ab679bacee3864a802b6f6bf94f99a848070b9512159cc70cb6958d36f956ad8149d39d610b5070929a3098"}}) 22:16:01 executing program 1: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r6 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r4}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r5}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0xbe2, "91b39b38d1d349596956857af2f4cf920bc31fee10a93b0214184504cada25d43d532ac937cf6de55c8f80370879db4c8cb1b297d291ba3a71200238995bc4e84dc4fca14e63fe756289c941846710f565d70f726ab679bacee3864a802b6f6bf94f99a848070b9512159cc70cb6958d36f956ad8149d39d610b5070929a3098"}}) 22:16:01 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000180), 0x20000180) 22:16:01 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/34) 22:16:01 executing program 0: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r6 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r4}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r5}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0xbe2, "91b39b38d1d349596956857af2f4cf920bc31fee10a93b0214184504cada25d43d532ac937cf6de55c8f80370879db4c8cb1b297d291ba3a71200238995bc4e84dc4fca14e63fe756289c941846710f565d70f726ab679bacee3864a802b6f6bf94f99a848070b9512159cc70cb6958d36f956ad8149d39d610b5070929a3098"}}) [ 180.113667] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:01 executing program 5: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r6 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r4}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r5}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0xbe2, "91b39b38d1d349596956857af2f4cf920bc31fee10a93b0214184504cada25d43d532ac937cf6de55c8f80370879db4c8cb1b297d291ba3a71200238995bc4e84dc4fca14e63fe756289c941846710f565d70f726ab679bacee3864a802b6f6bf94f99a848070b9512159cc70cb6958d36f956ad8149d39d610b5070929a3098"}}) 22:16:01 executing program 0: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r6 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r4}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r5}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0xbe2, "91b39b38d1d349596956857af2f4cf920bc31fee10a93b0214184504cada25d43d532ac937cf6de55c8f80370879db4c8cb1b297d291ba3a71200238995bc4e84dc4fca14e63fe756289c941846710f565d70f726ab679bacee3864a802b6f6bf94f99a848070b9512159cc70cb6958d36f956ad8149d39d610b5070929a3098"}}) 22:16:01 executing program 1: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r6 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r4}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r5}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0xbe2, "91b39b38d1d349596956857af2f4cf920bc31fee10a93b0214184504cada25d43d532ac937cf6de55c8f80370879db4c8cb1b297d291ba3a71200238995bc4e84dc4fca14e63fe756289c941846710f565d70f726ab679bacee3864a802b6f6bf94f99a848070b9512159cc70cb6958d36f956ad8149d39d610b5070929a3098"}}) 22:16:01 executing program 4: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r6 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r4}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r5}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0xbe2, "91b39b38d1d349596956857af2f4cf920bc31fee10a93b0214184504cada25d43d532ac937cf6de55c8f80370879db4c8cb1b297d291ba3a71200238995bc4e84dc4fca14e63fe756289c941846710f565d70f726ab679bacee3864a802b6f6bf94f99a848070b9512159cc70cb6958d36f956ad8149d39d610b5070929a3098"}}) 22:16:02 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x8}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000500)) r2 = socket$inet6(0xa, 0x2, 0xb46000000000000) close(r2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x2012}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x50, &(0x7f0000000580)}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) write$P9_RXATTRCREATE(r5, &(0x7f0000000140)={0x7}, 0x7) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r2, r5, &(0x7f0000d83ff8), 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000040)=0x3) 22:16:02 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1, 0x4}}, 0x20) 22:16:02 executing program 1: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r6 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r4}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r5}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0xbe2, "91b39b38d1d349596956857af2f4cf920bc31fee10a93b0214184504cada25d43d532ac937cf6de55c8f80370879db4c8cb1b297d291ba3a71200238995bc4e84dc4fca14e63fe756289c941846710f565d70f726ab679bacee3864a802b6f6bf94f99a848070b9512159cc70cb6958d36f956ad8149d39d610b5070929a3098"}}) 22:16:02 executing program 5: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r6 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r4}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r5}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0xbe2, "91b39b38d1d349596956857af2f4cf920bc31fee10a93b0214184504cada25d43d532ac937cf6de55c8f80370879db4c8cb1b297d291ba3a71200238995bc4e84dc4fca14e63fe756289c941846710f565d70f726ab679bacee3864a802b6f6bf94f99a848070b9512159cc70cb6958d36f956ad8149d39d610b5070929a3098"}}) 22:16:02 executing program 4: ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) r3 = getpgid(0x0) syz_open_procfs(r3, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r6 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r4}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r5}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r6}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'\x00', &(0x7f00000001c0)=@ethtool_flash={0x33, 0xbe2, "91b39b38d1d349596956857af2f4cf920bc31fee10a93b0214184504cada25d43d532ac937cf6de55c8f80370879db4c8cb1b297d291ba3a71200238995bc4e84dc4fca14e63fe756289c941846710f565d70f726ab679bacee3864a802b6f6bf94f99a848070b9512159cc70cb6958d36f956ad8149d39d610b5070929a3098"}}) 22:16:02 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000002c0), 0x1) 22:16:02 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) mlock2(&(0x7f0000aa3000/0x2000)=nil, 0x2000, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000d4) 22:16:02 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x34, 0x1) mmap(&(0x7f0000000000/0x24e000)=nil, 0x24e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x40045731, &(0x7f0000000100)) 22:16:02 executing program 5: r0 = inotify_init() r1 = creat(&(0x7f0000000180)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x80000003) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='\''], 0x1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 180.966735] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 22:16:02 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0xffffffffffffffff}, 0xc) preadv(r1, &(0x7f00000001c0), 0x0, 0x4e) socket$inet_udp(0x2, 0x2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) ioctl$FICLONERANGE(r0, 0xc0189436, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xffffffff00000000}) 22:16:02 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$cont(0xf, r0, 0x0, 0x0) 22:16:02 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0xa, 0xfa00, {&(0x7f0000000040)}}, 0x9) write(r0, &(0x7f0000000180), 0x36c) [ 181.143584] syz-executor0 (8638) used greatest stack depth: 8248 bytes left 22:16:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) 22:16:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0x80800) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001a80)=0x14) connect(r0, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x1, 0x0, 0x0, 0x0, "82b41c883b380e9b095ba6d64b3070bbd96122455e094ee765bd1b8be059b9bbdf203af56e4d6f0ac7c29ee98f5ee5ebd2d5e9160b530882bc83a5d0d6dc99"}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r1 = getpgid(0xffffffffffffffff) waitid(0x2, r1, &(0x7f0000000380), 0x0, &(0x7f00000003c0)) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@ax25, &(0x7f0000000100)=0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x6fee0002, 0xf8bd010000000000, 0x29c7e}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0xf0ffffff, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 22:16:02 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 22:16:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xad60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:16:02 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000280)=0xffffffffffffff93, 0x0) dup3(r0, r1, 0x0) 22:16:02 executing program 3: mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x100000002532, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000100), 0x85, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0x34000000) 22:16:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) 22:16:02 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x3, &(0x7f0000000980)) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 22:16:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000040)) quotactl(0x80000101, 0x0, 0x0, &(0x7f00000003c0)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000007700)={0x18, 0x0, {0x5, @link_local, 'ip6gre0\x00'}}, 0x1e) dup(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)='ip6gre0\x00'}, 0x30) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) 22:16:03 executing program 3: ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2000000000000000}) munmap(&(0x7f0000443000/0x400000)=nil, 0x400000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) 22:16:03 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$cont(0xf, r0, 0x0, 0x0) 22:16:03 executing program 2: r0 = socket(0x4000000000000a, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x220, [0x20001b40, 0x0, 0x0, 0x20001d00, 0x20001d30], 0x0, &(0x7f0000000000), &(0x7f0000001b40)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x15, 0x0, 0x0, 'irlan0\x00', 'nr0\x00', 'ifb0\x00', "766c616eddf40000d608ce0d00", @empty, [], @empty, [], 0x98, 0xc8, 0xf8, [@state={'state\x00', 0x4}]}, [@arpreply={'arpreply\x00', 0xc, {{@remote}}}]}, @arpreply={'arpreply\x00', 0xc, {{@link_local}}}}, {{{0x13, 0x0, 0x0, 'erspan0\x00', 'teql0\x00', 'veth1_to_team\x00', 'vethU\x00to_te!m\x00', @random="825b005378b7", [], @remote, [], 0x70, 0x70, 0x98}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x270) 22:16:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) 22:16:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0x80800) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001a80)=0x14) connect(r0, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x1, 0x0, 0x0, 0x0, "82b41c883b380e9b095ba6d64b3070bbd96122455e094ee765bd1b8be059b9bbdf203af56e4d6f0ac7c29ee98f5ee5ebd2d5e9160b530882bc83a5d0d6dc99"}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r1 = getpgid(0xffffffffffffffff) waitid(0x2, r1, &(0x7f0000000380), 0x0, &(0x7f00000003c0)) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@ax25, &(0x7f0000000100)=0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x6fee0002, 0xf8bd010000000000, 0x29c7e}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0xf0ffffff, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 22:16:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0) 22:16:03 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$cont(0xf, r0, 0x0, 0x0) [ 182.038545] cannot load conntrack support for proto=7 22:16:03 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000009580)=[{&(0x7f0000008040)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000009340), 0x0, &(0x7f0000009380)=[@sndinfo={0x1c, 0x84, 0x2, {0x0, 0x8000}}], 0x1c}], 0x1, 0x0) 22:16:03 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f0000000700)=0xe8) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) setresuid(r0, r1, r3) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000780)) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x101400) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000005c0)=0x2, 0x4) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_int(r6, 0x0, 0xc8, &(0x7f0000000100), 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x118, r7, 0x6, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 22:16:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000040)) quotactl(0x80000101, 0x0, 0x0, &(0x7f00000003c0)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000007700)={0x18, 0x0, {0x5, @link_local, 'ip6gre0\x00'}}, 0x1e) dup(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)='ip6gre0\x00'}, 0x30) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) 22:16:03 executing program 3: ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2000000000000000}) munmap(&(0x7f0000443000/0x400000)=nil, 0x400000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) 22:16:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000040)) quotactl(0x80000101, 0x0, 0x0, &(0x7f00000003c0)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000007700)={0x18, 0x0, {0x5, @link_local, 'ip6gre0\x00'}}, 0x1e) dup(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)='ip6gre0\x00'}, 0x30) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) 22:16:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0x80800) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001a80)=0x14) connect(r0, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x1, 0x0, 0x0, 0x0, "82b41c883b380e9b095ba6d64b3070bbd96122455e094ee765bd1b8be059b9bbdf203af56e4d6f0ac7c29ee98f5ee5ebd2d5e9160b530882bc83a5d0d6dc99"}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r1 = getpgid(0xffffffffffffffff) waitid(0x2, r1, &(0x7f0000000380), 0x0, &(0x7f00000003c0)) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@ax25, &(0x7f0000000100)=0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x6fee0002, 0xf8bd010000000000, 0x29c7e}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0xf0ffffff, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 22:16:04 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f0000000700)=0xe8) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) setresuid(r0, r1, r3) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000780)) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x101400) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000005c0)=0x2, 0x4) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_int(r6, 0x0, 0xc8, &(0x7f0000000100), 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x118, r7, 0x6, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 22:16:04 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$cont(0xf, r0, 0x0, 0x0) 22:16:04 executing program 3: ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2000000000000000}) munmap(&(0x7f0000443000/0x400000)=nil, 0x400000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) 22:16:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000040)) quotactl(0x80000101, 0x0, 0x0, &(0x7f00000003c0)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000007700)={0x18, 0x0, {0x5, @link_local, 'ip6gre0\x00'}}, 0x1e) dup(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)='ip6gre0\x00'}, 0x30) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) 22:16:04 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f0000000700)=0xe8) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) setresuid(r0, r1, r3) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000780)) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x101400) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000005c0)=0x2, 0x4) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_int(r6, 0x0, 0xc8, &(0x7f0000000100), 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x118, r7, 0x6, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 22:16:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0x80800) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001a80)=0x14) connect(r0, &(0x7f0000000280)=@nfc_llcp={0x27, 0x0, 0x1, 0x0, 0x0, 0x0, "82b41c883b380e9b095ba6d64b3070bbd96122455e094ee765bd1b8be059b9bbdf203af56e4d6f0ac7c29ee98f5ee5ebd2d5e9160b530882bc83a5d0d6dc99"}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r1 = getpgid(0xffffffffffffffff) waitid(0x2, r1, &(0x7f0000000380), 0x0, &(0x7f00000003c0)) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@ax25, &(0x7f0000000100)=0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x6fee0002, 0xf8bd010000000000, 0x29c7e}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0xf0ffffff, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 22:16:05 executing program 3: ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2000000000000000}) munmap(&(0x7f0000443000/0x400000)=nil, 0x400000) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) 22:16:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000040)) quotactl(0x80000101, 0x0, 0x0, &(0x7f00000003c0)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000007700)={0x18, 0x0, {0x5, @link_local, 'ip6gre0\x00'}}, 0x1e) dup(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)='ip6gre0\x00'}, 0x30) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) 22:16:05 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@rand_addr}}, &(0x7f0000000700)=0xe8) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000100)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000800)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) setresuid(r0, r1, r3) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000780)) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x101400) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000005c0)=0x2, 0x4) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_int(r6, 0x0, 0xc8, &(0x7f0000000100), 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x118, r7, 0x6, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 22:16:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000000), 0x4) 22:16:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="66ffa6"], 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:16:05 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000380), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="06006d5f61446a00") writev(r1, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="c87d3c2fb5fffe55b4660deb304aa4534a9522debf81c52eff37d38c18a961dcd0b9d8eb34c0055af8d38eebee9c7613d27760d1da0673cdff3264b4c04bbd0eec1058903c1cbb3894ddd9d77fee", 0x4e, 0x4010, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000700)='/dev/dmmidi#\x00', 0x0, 0x101000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r3, 0x4, 0x443fc) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000240)) dup3(r0, r4, 0x80000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)={0x9e}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x99, 0x1}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet6_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000340)=0x4) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000012c0)={@empty, @multicast2}, &(0x7f0000001300)=0xc) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x7, &(0x7f00000000c0)=0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001340)={@local, @ipv4={[], [], @loopback}, @dev, 0x0, 0xa300, 0x0, 0x500, 0x7fff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) 22:16:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000040)) quotactl(0x80000101, 0x0, 0x0, &(0x7f00000003c0)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000007700)={0x18, 0x0, {0x5, @link_local, 'ip6gre0\x00'}}, 0x1e) dup(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)='ip6gre0\x00'}, 0x30) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) 22:16:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x10000000000063) read(r0, &(0x7f0000000000)=""/11, 0xb) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 22:16:05 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000380), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="06006d5f61446a00") writev(r1, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="c87d3c2fb5fffe55b4660deb304aa4534a9522debf81c52eff37d38c18a961dcd0b9d8eb34c0055af8d38eebee9c7613d27760d1da0673cdff3264b4c04bbd0eec1058903c1cbb3894ddd9d77fee", 0x4e, 0x4010, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000700)='/dev/dmmidi#\x00', 0x0, 0x101000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r3, 0x4, 0x443fc) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000240)) dup3(r0, r4, 0x80000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)={0x9e}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x99, 0x1}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet6_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000340)=0x4) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000012c0)={@empty, @multicast2}, &(0x7f0000001300)=0xc) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x7, &(0x7f00000000c0)=0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001340)={@local, @ipv4={[], [], @loopback}, @dev, 0x0, 0xa300, 0x0, 0x500, 0x7fff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) 22:16:05 executing program 1: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(r0, &(0x7f0000665ff4)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) connect$unix(r0, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) 22:16:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001740)="c89ee2ddda72d11a4a0968f8bee1eedd26c17a828b01cb084b8cf319b4ca3c4dafa5baf8617238270f27137a71816c33fea289e5bfbf0ed254c52de999fe5533c7b5a4e30672d114226b9150751edf8389af38ea424abc3444d8ab741a5e8ae41142a2b277aa12bbc8", 0x69, 0xfffffffffffffffd, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f00000017c0)='./file0\x00', 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xffffffffffffffff, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) sendmsg$alg(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="ca57c6f071e2ebe3670374a04016a2ef0318cd1d6b51619433402fe807b849af64e83bd21ddb59354f053368f572a9359c5a3151d019d3c628a3d238d94d2820429849b73bdd206c4b80545feb6acd9656e74881477e9aed71dae6a665ba3cdbfe3ae5577effcc48e09ec5b2668845699660d22c84efe13221f115c0d323446c12026fa235ae79ea951e27bdd29e13fb5639e353eedec2319ab48613bc19a37400a2c10f1c25f0811cb8a6d68cdd3c8ea2c4", 0xb2}], 0x1, &(0x7f0000000680)=[@iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0xc930}, @op={0x10, 0x117, 0x3, 0x1}], 0x1040, 0x44804}, 0x80) socket$packet(0x11, 0x2, 0x300) 22:16:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x7, 0x309a81) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000780)={&(0x7f0000000100)=[0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], 0x1, 0x1, 0x5, 0x2}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000003c0)={0x0, 0xfffffffffffffffc}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x98, @loopback, 0x21}}}, &(0x7f0000000040)=0x84) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0xa00000000000000}, 0x44801) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000480)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty, [0x0, 0x3e8]}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000500)=@assoc_value={0x0}, &(0x7f0000000400)=0xfffffffffffffe88) setsockopt$sock_timeval(r2, 0x1, 0x10000, &(0x7f0000000440), 0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={r3, 0xa068, 0x0, 0xffff, 0x0, 0x2}, 0x14) 22:16:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:16:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000040)) quotactl(0x80000101, 0x0, 0x0, &(0x7f00000003c0)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000007700)={0x18, 0x0, {0x5, @link_local, 'ip6gre0\x00'}}, 0x1e) dup(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)='ip6gre0\x00'}, 0x30) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) 22:16:06 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000380), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="06006d5f61446a00") writev(r1, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="c87d3c2fb5fffe55b4660deb304aa4534a9522debf81c52eff37d38c18a961dcd0b9d8eb34c0055af8d38eebee9c7613d27760d1da0673cdff3264b4c04bbd0eec1058903c1cbb3894ddd9d77fee", 0x4e, 0x4010, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000700)='/dev/dmmidi#\x00', 0x0, 0x101000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r3, 0x4, 0x443fc) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000240)) dup3(r0, r4, 0x80000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)={0x9e}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x99, 0x1}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet6_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000340)=0x4) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000012c0)={@empty, @multicast2}, &(0x7f0000001300)=0xc) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x7, &(0x7f00000000c0)=0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001340)={@local, @ipv4={[], [], @loopback}, @dev, 0x0, 0xa300, 0x0, 0x500, 0x7fff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) [ 184.961678] sd 0:0:1:0: [sg0] tag#3617 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 184.970471] sd 0:0:1:0: [sg0] tag#3617 CDB: Test Unit Ready [ 184.976251] sd 0:0:1:0: [sg0] tag#3617 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 184.985165] sd 0:0:1:0: [sg0] tag#3617 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 184.994088] sd 0:0:1:0: [sg0] tag#3617 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.002990] sd 0:0:1:0: [sg0] tag#3617 CDB[30]: 00 00 00 22:16:06 executing program 5: r0 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x0) fcntl$addseals(r0, 0xd, 0x0) [ 185.030637] sd 0:0:1:0: [sg0] tag#3617 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 185.039447] sd 0:0:1:0: [sg0] tag#3617 CDB: Test Unit Ready [ 185.045259] sd 0:0:1:0: [sg0] tag#3617 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.054189] sd 0:0:1:0: [sg0] tag#3617 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.064088] sd 0:0:1:0: [sg0] tag#3617 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.073033] sd 0:0:1:0: [sg0] tag#3617 CDB[30]: 00 00 00 22:16:06 executing program 5: r0 = socket$packet(0x11, 0x100000000000003, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x402172, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}, 0x10) 22:16:06 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x7a, &(0x7f0000000300), &(0x7f0000000340)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 22:16:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001740)="c89ee2ddda72d11a4a0968f8bee1eedd26c17a828b01cb084b8cf319b4ca3c4dafa5baf8617238270f27137a71816c33fea289e5bfbf0ed254c52de999fe5533c7b5a4e30672d114226b9150751edf8389af38ea424abc3444d8ab741a5e8ae41142a2b277aa12bbc8", 0x69, 0xfffffffffffffffd, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f00000017c0)='./file0\x00', 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xffffffffffffffff, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) sendmsg$alg(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="ca57c6f071e2ebe3670374a04016a2ef0318cd1d6b51619433402fe807b849af64e83bd21ddb59354f053368f572a9359c5a3151d019d3c628a3d238d94d2820429849b73bdd206c4b80545feb6acd9656e74881477e9aed71dae6a665ba3cdbfe3ae5577effcc48e09ec5b2668845699660d22c84efe13221f115c0d323446c12026fa235ae79ea951e27bdd29e13fb5639e353eedec2319ab48613bc19a37400a2c10f1c25f0811cb8a6d68cdd3c8ea2c4", 0xb2}], 0x1, &(0x7f0000000680)=[@iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0xc930}, @op={0x10, 0x117, 0x3, 0x1}], 0x1040, 0x44804}, 0x80) socket$packet(0x11, 0x2, 0x300) 22:16:06 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000002ac0)=0x1000, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 185.351374] sd 0:0:1:0: [sg0] tag#3617 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 185.361185] sd 0:0:1:0: [sg0] tag#3617 CDB: Test Unit Ready [ 185.366965] sd 0:0:1:0: [sg0] tag#3617 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.375847] sd 0:0:1:0: [sg0] tag#3617 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.384730] sd 0:0:1:0: [sg0] tag#3617 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.393613] sd 0:0:1:0: [sg0] tag#3617 CDB[30]: 00 00 00 22:16:06 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000380), 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="06006d5f61446a00") writev(r1, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="c87d3c2fb5fffe55b4660deb304aa4534a9522debf81c52eff37d38c18a961dcd0b9d8eb34c0055af8d38eebee9c7613d27760d1da0673cdff3264b4c04bbd0eec1058903c1cbb3894ddd9d77fee", 0x4e, 0x4010, 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000700)='/dev/dmmidi#\x00', 0x0, 0x101000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r3, 0x4, 0x443fc) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000240)) dup3(r0, r4, 0x80000) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)={0x9e}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x99, 0x1}) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) getsockopt$inet6_dccp_int(r3, 0x21, 0xb, &(0x7f0000000140), &(0x7f0000000340)=0x4) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000012c0)={@empty, @multicast2}, &(0x7f0000001300)=0xc) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000)=0x7, &(0x7f00000000c0)=0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001340)={@local, @ipv4={[], [], @loopback}, @dev, 0x0, 0xa300, 0x0, 0x500, 0x7fff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x14) 22:16:06 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x42) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000580)={@local}, &(0x7f00000005c0)=0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) lremovexattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=ANY=[]) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000004c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) write(r3, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffff8) getsockname$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, &(0x7f0000000480)=0x10) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000680)) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:16:06 executing program 5: keyctl$dh_compute(0x14, &(0x7f0000000080), &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, &(0x7f00000001c0)}) 22:16:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001740)="c89ee2ddda72d11a4a0968f8bee1eedd26c17a828b01cb084b8cf319b4ca3c4dafa5baf8617238270f27137a71816c33fea289e5bfbf0ed254c52de999fe5533c7b5a4e30672d114226b9150751edf8389af38ea424abc3444d8ab741a5e8ae41142a2b277aa12bbc8", 0x69, 0xfffffffffffffffd, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f00000017c0)='./file0\x00', 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xffffffffffffffff, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) sendmsg$alg(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="ca57c6f071e2ebe3670374a04016a2ef0318cd1d6b51619433402fe807b849af64e83bd21ddb59354f053368f572a9359c5a3151d019d3c628a3d238d94d2820429849b73bdd206c4b80545feb6acd9656e74881477e9aed71dae6a665ba3cdbfe3ae5577effcc48e09ec5b2668845699660d22c84efe13221f115c0d323446c12026fa235ae79ea951e27bdd29e13fb5639e353eedec2319ab48613bc19a37400a2c10f1c25f0811cb8a6d68cdd3c8ea2c4", 0xb2}], 0x1, &(0x7f0000000680)=[@iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0xc930}, @op={0x10, 0x117, 0x3, 0x1}], 0x1040, 0x44804}, 0x80) socket$packet(0x11, 0x2, 0x300) 22:16:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x20000000000002d8, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 22:16:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:16:07 executing program 5: keyctl$dh_compute(0x14, &(0x7f0000000080), &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, &(0x7f00000001c0)}) [ 185.893330] sd 0:0:1:0: [sg0] tag#3617 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 185.902147] sd 0:0:1:0: [sg0] tag#3617 CDB: Test Unit Ready [ 185.907975] sd 0:0:1:0: [sg0] tag#3617 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.916904] sd 0:0:1:0: [sg0] tag#3617 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.925793] sd 0:0:1:0: [sg0] tag#3617 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 185.934689] sd 0:0:1:0: [sg0] tag#3617 CDB[30]: 00 00 00 22:16:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:16:07 executing program 5: keyctl$dh_compute(0x14, &(0x7f0000000080), &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, &(0x7f00000001c0)}) 22:16:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:16:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x20000000000002d8, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 22:16:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001740)="c89ee2ddda72d11a4a0968f8bee1eedd26c17a828b01cb084b8cf319b4ca3c4dafa5baf8617238270f27137a71816c33fea289e5bfbf0ed254c52de999fe5533c7b5a4e30672d114226b9150751edf8389af38ea424abc3444d8ab741a5e8ae41142a2b277aa12bbc8", 0x69, 0xfffffffffffffffd, &(0x7f0000000080)={0x2, 0x4e23}, 0x10) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = creat(&(0x7f00000017c0)='./file0\x00', 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000000)={0x53, 0xffffffffffffffff, 0x133, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), &(0x7f0000000340)=""/128, 0x0, 0x0, 0x0, &(0x7f0000000040)}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000140)) sendmsg$alg(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="ca57c6f071e2ebe3670374a04016a2ef0318cd1d6b51619433402fe807b849af64e83bd21ddb59354f053368f572a9359c5a3151d019d3c628a3d238d94d2820429849b73bdd206c4b80545feb6acd9656e74881477e9aed71dae6a665ba3cdbfe3ae5577effcc48e09ec5b2668845699660d22c84efe13221f115c0d323446c12026fa235ae79ea951e27bdd29e13fb5639e353eedec2319ab48613bc19a37400a2c10f1c25f0811cb8a6d68cdd3c8ea2c4", 0xb2}], 0x1, &(0x7f0000000680)=[@iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0xc930}, @op={0x10, 0x117, 0x3, 0x1}], 0x1040, 0x44804}, 0x80) socket$packet(0x11, 0x2, 0x300) 22:16:07 executing program 5: keyctl$dh_compute(0x14, &(0x7f0000000080), &(0x7f0000000140)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}, &(0x7f00000001c0)}) [ 186.198584] sd 0:0:1:0: [sg0] tag#3520 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 186.207366] sd 0:0:1:0: [sg0] tag#3520 CDB: Test Unit Ready [ 186.213165] sd 0:0:1:0: [sg0] tag#3520 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 186.222069] sd 0:0:1:0: [sg0] tag#3520 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 186.230919] sd 0:0:1:0: [sg0] tag#3520 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 186.239823] sd 0:0:1:0: [sg0] tag#3520 CDB[30]: 00 00 00 22:16:07 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000680)=ANY=[@ANYBLOB="81208823982a8dceb18c553ba60c7745e03f5daa6703b4a9", @ANYRES32=r0, @ANYRESOCT=r0, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], @ANYRESDEC], @ANYRES32=r0], &(0x7f0000000200)=0x5) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000340)={0x7f, 0x3, 0x8, 0x7b, 0x6, 0x10001}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x4, 0x7fffffff}, &(0x7f0000000300)=0x90) mkdir(&(0x7f0000000140)='./file0\x00', 0x21) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000879e5536d006261ba100000000ff0000000000000000b77b60d3041f4cad6212f29b53f6f0e456243b43431a97d73e6a78283ab9adaa25895b9d181fd62c80107500413f8170133d648c44ffa174a02b82cea57c27403a1a3f8a5d26c1912a60c72ff68393ad01830b474b177270e9269a49b8c7a0183461735570e3a41b1b335b14fb48624962c0bd0b3d4bbe71260cc2a76df5a13c3911876140ca4b61645fd4bd3fbd7643d436a3c3256aa55cd4a829358a5af349e3783ec03400000000"]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x1, 0x1, 0x0, 0x1, 0x101, 0x1, 0x2}, 0x20) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000209000/0x3000)=nil, 0x3000}, 0x1}) r3 = gettid() fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x3) process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f000034afa4)=""/1, 0x2c8}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r2) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x18) 22:16:07 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[], 0x0) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=""/136, 0x88) 22:16:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x20000000000002d8, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 22:16:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x0, 0x2, 0x0, 0x1}]}, 0x8) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) shutdown(r2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) tkill(r0, 0x1004000000016) 22:16:07 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000034c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, &(0x7f0000002300)}, &(0x7f0000002380)="1535aa7a0725", &(0x7f0000002480)=""/4096, 0x0, 0x0, 0x0, &(0x7f0000003480)}) [ 186.449388] ================================================================== [ 186.456831] BUG: KASAN: use-after-free in __lock_acquire+0x36d9/0x4c20 [ 186.464492] Read of size 8 at addr ffff8801882c9f50 by task syz-executor3/8941 [ 186.471847] [ 186.473495] CPU: 1 PID: 8941 Comm: syz-executor3 Not tainted 4.20.0-rc1+ #229 [ 186.480769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.490123] Call Trace: [ 186.492724] dump_stack+0x244/0x39d [ 186.496379] ? dump_stack_print_info.cold.1+0x20/0x20 [ 186.501575] ? printk+0xa7/0xcf [ 186.504867] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 186.509635] print_address_description.cold.7+0x9/0x1ff [ 186.515007] kasan_report.cold.8+0x242/0x309 [ 186.519426] ? __lock_acquire+0x36d9/0x4c20 [ 186.523798] __asan_report_load8_noabort+0x14/0x20 [ 186.528740] __lock_acquire+0x36d9/0x4c20 [ 186.532901] ? __free_pages+0x149/0x190 [ 186.536883] ? free_unref_page+0x960/0x960 [ 186.541126] ? mark_held_locks+0x130/0x130 [ 186.545369] ? kasan_check_write+0x14/0x20 [ 186.549609] ? finish_task_switch+0x615/0x910 [ 186.554116] ? __switch_to_asm+0x40/0x70 [ 186.558194] ? preempt_notifier_register+0x200/0x200 [ 186.564204] ? __switch_to_asm+0x34/0x70 [ 186.568273] ? __switch_to_asm+0x34/0x70 [ 186.572342] ? __switch_to_asm+0x40/0x70 [ 186.576411] ? __switch_to_asm+0x34/0x70 [ 186.580484] ? __switch_to_asm+0x40/0x70 [ 186.584548] ? __switch_to_asm+0x34/0x70 [ 186.588617] ? __switch_to_asm+0x40/0x70 [ 186.592683] ? __switch_to_asm+0x34/0x70 [ 186.596744] ? __switch_to_asm+0x34/0x70 [ 186.600803] ? __switch_to_asm+0x40/0x70 [ 186.600816] ? __switch_to_asm+0x34/0x70 [ 186.600831] ? __switch_to_asm+0x40/0x70 [ 186.600842] ? __switch_to_asm+0x34/0x70 [ 186.600853] ? __switch_to_asm+0x40/0x70 [ 186.600866] ? __schedule+0x8d7/0x21d0 [ 186.600879] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 186.600891] ? __sched_text_start+0x8/0x8 [ 186.600904] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 186.600919] ? find_held_lock+0x36/0x1c0 [ 186.600930] ? mark_held_locks+0xc7/0x130 [ 186.600944] lock_acquire+0x1ed/0x520 [ 186.651504] ? vhost_transport_send_pkt+0x12e/0x380 [ 186.656532] ? lock_release+0xa00/0xa00 [ 186.661501] ? preempt_schedule+0x4d/0x60 [ 186.665654] ? ___preempt_schedule+0x16/0x18 [ 186.670074] ? __local_bh_enable_ip+0x1a3/0x260 [ 186.674751] _raw_spin_lock_bh+0x31/0x40 [ 186.678825] ? vhost_transport_send_pkt+0x12e/0x380 [ 186.683846] vhost_transport_send_pkt+0x12e/0x380 [ 186.688697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 186.694242] ? vhost_vsock_dev_open+0x5a0/0x5a0 [ 186.698919] ? virtio_transport_send_pkt_info+0x2e7/0x460 [ 186.704473] ? __local_bh_enable_ip+0x160/0x260 [ 186.709147] virtio_transport_send_pkt_info+0x31d/0x460 [ 186.714517] virtio_transport_connect+0x17c/0x220 [ 186.719377] ? virtio_transport_send_pkt_info+0x460/0x460 [ 186.724923] ? vsock_auto_bind+0xa9/0xe0 [ 186.724951] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 186.724966] vsock_stream_connect+0x4ed/0xe40 [ 186.724980] ? vsock_dgram_connect+0x500/0x500 [ 186.724997] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 186.734589] ? aa_label_sk_perm+0x91/0x100 [ 186.734606] ? finish_wait+0x430/0x430 [ 186.734624] ? aa_af_perm+0x5a0/0x5a0 [ 186.734642] ? apparmor_socket_connect+0xb6/0x160 [ 186.734657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 186.734672] ? security_socket_connect+0x94/0xc0 [ 186.734687] __sys_connect+0x37d/0x4c0 [ 186.734702] ? __ia32_sys_accept+0xb0/0xb0 [ 186.734721] ? kasan_check_read+0x11/0x20 [ 186.789693] ? _copy_to_user+0xc8/0x110 [ 186.793660] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 186.799183] ? put_old_timespec32+0x110/0x280 [ 186.803670] ? do_fast_syscall_32+0x150/0xfb2 [ 186.808154] ? do_fast_syscall_32+0x150/0xfb2 [ 186.812635] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 186.817204] ? trace_hardirqs_on+0xbd/0x310 [ 186.821515] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 186.827040] ? entry_SYSENTER_compat+0x70/0x7f [ 186.831609] ? trace_hardirqs_off_caller+0x310/0x310 [ 186.836700] __ia32_sys_connect+0x72/0xb0 [ 186.840837] do_fast_syscall_32+0x34d/0xfb2 [ 186.845146] ? do_int80_syscall_32+0x890/0x890 [ 186.849718] ? entry_SYSENTER_compat+0x68/0x7f [ 186.854287] ? trace_hardirqs_off_caller+0xbb/0x310 [ 186.860269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 186.865101] ? trace_hardirqs_on_caller+0x310/0x310 [ 186.870118] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 186.875125] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 186.881781] ? __switch_to_asm+0x40/0x70 [ 186.885832] ? __switch_to_asm+0x34/0x70 [ 186.889883] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 186.894729] entry_SYSENTER_compat+0x70/0x7f [ 186.899122] RIP: 0023:0xf7fa8a29 [ 186.902479] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 186.921365] RSP: 002b:00000000f5f830cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 186.929057] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000200 [ 186.936325] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.943578] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.950835] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 186.958088] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.966346] [ 186.967960] Allocated by task 8938: [ 186.971580] save_stack+0x43/0xd0 [ 186.975023] kasan_kmalloc+0xc7/0xe0 [ 186.978720] __kmalloc_node+0x50/0x70 [ 186.982509] kvmalloc_node+0xb9/0xf0 [ 186.986209] vhost_vsock_dev_open+0xa2/0x5a0 [ 186.990600] misc_open+0x3ca/0x560 [ 186.994125] chrdev_open+0x25a/0x710 [ 186.997820] do_dentry_open+0x499/0x1250 [ 187.001861] vfs_open+0xa0/0xd0 [ 187.005127] path_openat+0x12bc/0x5150 [ 187.008997] do_filp_open+0x255/0x380 [ 187.012793] do_sys_open+0x568/0x700 [ 187.016492] __ia32_compat_sys_openat+0x98/0xf0 [ 187.021147] do_fast_syscall_32+0x34d/0xfb2 [ 187.025455] entry_SYSENTER_compat+0x70/0x7f [ 187.029839] [ 187.031451] Freed by task 8937: [ 187.034719] save_stack+0x43/0xd0 [ 187.038158] __kasan_slab_free+0x102/0x150 [ 187.042379] kasan_slab_free+0xe/0x10 [ 187.046163] kfree+0xcf/0x230 [ 187.049252] kvfree+0x61/0x70 [ 187.052342] vhost_vsock_dev_release+0x4f4/0x720 [ 187.057084] __fput+0x385/0xa30 [ 187.061358] ____fput+0x15/0x20 [ 187.064622] task_work_run+0x1e8/0x2a0 [ 187.068495] exit_to_usermode_loop+0x318/0x380 [ 187.073063] do_fast_syscall_32+0xcd5/0xfb2 [ 187.077378] entry_SYSENTER_compat+0x70/0x7f [ 187.081767] [ 187.083380] The buggy address belongs to the object at ffff8801882c1240 [ 187.083380] which belongs to the cache kmalloc-64k of size 65536 [ 187.096217] The buggy address is located 36112 bytes inside of [ 187.096217] 65536-byte region [ffff8801882c1240, ffff8801882d1240) [ 187.108424] The buggy address belongs to the page: [ 187.113341] page:ffffea000620b000 count:1 mapcount:0 mapping:ffff8801da802500 index:0x0 compound_mapcount: 0 [ 187.123313] flags: 0x2fffc0000010200(slab|head) [ 187.127971] raw: 02fffc0000010200 ffffea000620a808 ffffea000620b808 ffff8801da802500 [ 187.135845] raw: 0000000000000000 ffff8801882c1240 0000000100000001 0000000000000000 [ 187.143757] page dumped because: kasan: bad access detected [ 187.149443] [ 187.151052] Memory state around the buggy address: [ 187.155967] ffff8801882c9e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.164305] ffff8801882c9e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.171649] >ffff8801882c9f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.178986] ^ [ 187.184948] ffff8801882c9f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.192290] ffff8801882ca000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 187.199630] ================================================================== [ 187.206968] Disabling lock debugging due to kernel taint [ 187.212410] Kernel panic - not syncing: panic_on_warn set ... [ 187.218282] CPU: 1 PID: 8941 Comm: syz-executor3 Tainted: G B 4.20.0-rc1+ #229 [ 187.227011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.236347] Call Trace: [ 187.238930] dump_stack+0x244/0x39d [ 187.242546] ? dump_stack_print_info.cold.1+0x20/0x20 [ 187.247740] panic+0x2ad/0x55c [ 187.250922] ? add_taint.cold.5+0x16/0x16 [ 187.255057] ? add_taint.cold.5+0x5/0x16 [ 187.260049] ? trace_hardirqs_off+0xaf/0x310 [ 187.264445] kasan_end_report+0x47/0x4f [ 187.268413] kasan_report.cold.8+0x76/0x309 [ 187.272737] ? __lock_acquire+0x36d9/0x4c20 [ 187.277043] __asan_report_load8_noabort+0x14/0x20 [ 187.281955] __lock_acquire+0x36d9/0x4c20 [ 187.286090] ? __free_pages+0x149/0x190 [ 187.290052] ? free_unref_page+0x960/0x960 [ 187.294274] ? mark_held_locks+0x130/0x130 [ 187.298497] ? kasan_check_write+0x14/0x20 [ 187.302720] ? finish_task_switch+0x615/0x910 [ 187.307200] ? __switch_to_asm+0x40/0x70 [ 187.311247] ? preempt_notifier_register+0x200/0x200 [ 187.316343] ? __switch_to_asm+0x34/0x70 [ 187.320396] ? __switch_to_asm+0x34/0x70 [ 187.324445] ? __switch_to_asm+0x40/0x70 [ 187.328490] ? __switch_to_asm+0x34/0x70 [ 187.332542] ? __switch_to_asm+0x40/0x70 [ 187.336587] ? __switch_to_asm+0x34/0x70 [ 187.340635] ? __switch_to_asm+0x40/0x70 [ 187.344682] ? __switch_to_asm+0x34/0x70 [ 187.348731] ? __switch_to_asm+0x34/0x70 [ 187.352777] ? __switch_to_asm+0x40/0x70 [ 187.356824] ? __switch_to_asm+0x34/0x70 [ 187.361866] ? __switch_to_asm+0x40/0x70 [ 187.365915] ? __switch_to_asm+0x34/0x70 [ 187.369960] ? __switch_to_asm+0x40/0x70 [ 187.374006] ? __schedule+0x8d7/0x21d0 [ 187.377879] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 187.383322] ? __sched_text_start+0x8/0x8 [ 187.387459] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 187.392205] ? find_held_lock+0x36/0x1c0 [ 187.396252] ? mark_held_locks+0xc7/0x130 [ 187.400398] lock_acquire+0x1ed/0x520 [ 187.404192] ? vhost_transport_send_pkt+0x12e/0x380 [ 187.409195] ? lock_release+0xa00/0xa00 [ 187.413157] ? preempt_schedule+0x4d/0x60 [ 187.417301] ? ___preempt_schedule+0x16/0x18 [ 187.421696] ? __local_bh_enable_ip+0x1a3/0x260 [ 187.426354] _raw_spin_lock_bh+0x31/0x40 [ 187.430409] ? vhost_transport_send_pkt+0x12e/0x380 [ 187.435420] vhost_transport_send_pkt+0x12e/0x380 [ 187.440252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 187.446276] ? vhost_vsock_dev_open+0x5a0/0x5a0 [ 187.450932] ? virtio_transport_send_pkt_info+0x2e7/0x460 [ 187.456457] ? __local_bh_enable_ip+0x160/0x260 [ 187.461856] virtio_transport_send_pkt_info+0x31d/0x460 [ 187.467209] virtio_transport_connect+0x17c/0x220 [ 187.472040] ? virtio_transport_send_pkt_info+0x460/0x460 [ 187.477562] ? vsock_auto_bind+0xa9/0xe0 [ 187.481613] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 187.487135] vsock_stream_connect+0x4ed/0xe40 [ 187.491619] ? vsock_dgram_connect+0x500/0x500 [ 187.496187] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 187.501713] ? aa_label_sk_perm+0x91/0x100 [ 187.505933] ? finish_wait+0x430/0x430 [ 187.509815] ? aa_af_perm+0x5a0/0x5a0 [ 187.513604] ? apparmor_socket_connect+0xb6/0x160 [ 187.518433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 187.523962] ? security_socket_connect+0x94/0xc0 [ 187.528706] __sys_connect+0x37d/0x4c0 [ 187.532588] ? __ia32_sys_accept+0xb0/0xb0 [ 187.536813] ? kasan_check_read+0x11/0x20 [ 187.540945] ? _copy_to_user+0xc8/0x110 [ 187.544921] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 187.550449] ? put_old_timespec32+0x110/0x280 [ 187.554931] ? do_fast_syscall_32+0x150/0xfb2 [ 187.560289] ? do_fast_syscall_32+0x150/0xfb2 [ 187.564772] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 187.569338] ? trace_hardirqs_on+0xbd/0x310 [ 187.573661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 187.579183] ? entry_SYSENTER_compat+0x70/0x7f [ 187.583750] ? trace_hardirqs_off_caller+0x310/0x310 [ 187.588842] __ia32_sys_connect+0x72/0xb0 [ 187.592977] do_fast_syscall_32+0x34d/0xfb2 [ 187.597283] ? do_int80_syscall_32+0x890/0x890 [ 187.601849] ? entry_SYSENTER_compat+0x68/0x7f [ 187.606433] ? trace_hardirqs_off_caller+0xbb/0x310 [ 187.611437] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 187.616269] ? trace_hardirqs_on_caller+0x310/0x310 [ 187.621279] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 187.626299] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 187.632950] ? __switch_to_asm+0x40/0x70 [ 187.636995] ? __switch_to_asm+0x34/0x70 [ 187.641041] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 187.645877] entry_SYSENTER_compat+0x70/0x7f [ 187.650272] RIP: 0023:0xf7fa8a29 [ 187.653628] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 187.673472] RSP: 002b:00000000f5f830cc EFLAGS: 00000296 ORIG_RAX: 000000000000016a [ 187.681169] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020000200 [ 187.688424] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.695678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.702930] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 187.710184] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.718613] Kernel Offset: disabled [ 187.722240] Rebooting in 86400 seconds..