[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 99.406865] audit: type=1800 audit(1550080920.457:25): pid=11318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 99.426126] audit: type=1800 audit(1550080920.457:26): pid=11318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 99.445594] audit: type=1800 audit(1550080920.477:27): pid=11318 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.209' (ECDSA) to the list of known hosts. 2019/02/13 18:02:14 fuzzer started 2019/02/13 18:02:20 dialing manager at 10.128.0.26:43529 2019/02/13 18:02:20 syscalls: 1 2019/02/13 18:02:20 code coverage: enabled 2019/02/13 18:02:20 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/02/13 18:02:20 extra coverage: extra coverage is not supported by the kernel 2019/02/13 18:02:20 setuid sandbox: enabled 2019/02/13 18:02:20 namespace sandbox: enabled 2019/02/13 18:02:20 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/13 18:02:20 fault injection: enabled 2019/02/13 18:02:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/13 18:02:20 net packet injection: enabled 2019/02/13 18:02:20 net device setup: enabled 18:05:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) truncate(&(0x7f00000000c0)='./bus\x00', 0x10000) syzkaller login: [ 286.705611] IPVS: ftp: loaded support on port[0] = 21 [ 286.869523] chnl_net:caif_netlink_parms(): no params data found [ 286.957386] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.964111] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.972738] device bridge_slave_0 entered promiscuous mode [ 286.982418] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.988926] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.997441] device bridge_slave_1 entered promiscuous mode [ 287.033678] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 287.045287] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 287.078596] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 287.087261] team0: Port device team_slave_0 added [ 287.094317] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 287.103076] team0: Port device team_slave_1 added [ 287.109294] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 287.118508] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 287.277515] device hsr_slave_0 entered promiscuous mode [ 287.532583] device hsr_slave_1 entered promiscuous mode [ 287.793512] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 287.801250] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 287.833668] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.840260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.847525] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.854121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.870066] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.878838] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.980851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.996952] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 288.009778] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 288.016787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.025094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.042499] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 288.048609] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.064032] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 288.071261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.080438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.089121] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.095686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.109681] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 288.117233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.126518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.134900] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.141392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.157429] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 288.164622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.180236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 288.187951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.206296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 288.213507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.223192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.237624] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 288.245543] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 288.253932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.262999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.278607] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 288.292611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 288.299848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.308435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.316947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 288.325499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.341362] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 288.347520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.376734] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 288.395876] 8021q: adding VLAN 0 to HW filter on device batadv0 18:05:09 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x88000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 18:05:10 executing program 0: pipe(&(0x7f0000bbc000)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000000200)={0x7fffffff}, 0x0, 0x8) dup2(r1, r0) io_setup(0x5, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0xff61}]) 18:05:10 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="3900030000ddfd59169ce7cbe2971a14caa08fda4bf50000000048a7e40002002000000000002143223cf72f7eba0b71be7e0c079987bca5fe"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) 18:05:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3f26b7b2) 18:05:11 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net\x00', 0x200002, 0x0) 18:05:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0xf5, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000100001000000000000000000e0000001000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000007a69a288af853ab5b3"], 0xffffffffffffffdc}}, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000500)={0xfffffffffffffffd, 0x5, 0x7, 0x6, 0x0}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000580)={r2, 0x464}, &(0x7f00000005c0)=0x8) 18:05:11 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0004000000000000000006000000000009000000010011040000000002002104000000000100ffffff7f000001000100010000000200050000000000020006000000000002000500000000000200080000000000010006000000240707000c00040007000000000000000c00030005000000000000000800010040000000040001001400050008000100657468000800010065746800a0cefe0b0b88f0cc62438070ef5433e22e765d14058d82fddae54c5e1d1d614525fec3df3de1aa9c8e6e8476d8110510631aa0b3eae5728650bf"], 0x58}, 0x1, 0x0, 0x0, 0x80000000}, 0xfffffffffffffffe) r1 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000440)={{0x0, @addr=0x3}, "9b0a3d7026c967c5f3c632f663427c96dedebd7b18853dbf8a318ae18209a1fc", 0x2}) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xdae, 0x7ff, 0x9, 0x1ff}, 0x8) ioctl(r1, 0x2000c0984124, &(0x7f0000000080)) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000040)=""/89) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000340)={{0x3, @addr=0xfffffffffffffffc}, "1a599768641e5eda0d0f317ae6e8888ffabab469b38a1acbc80ee788032a57da"}) 18:05:11 executing program 0: syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x800) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000010}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r1, 0x603, 0x70bd27, 0x3, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xdaee}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x15}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x57}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffff63e}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8850}, 0x40800) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0xfffffffffffffffc, 0x3016}) [ 290.590534] IPVS: ftp: loaded support on port[0] = 21 18:05:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000380)='fdinfo/3\x00') r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)=0x0) ptrace$getsig(0x4202, r4, 0x101, &(0x7f0000000240)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syncfs(r2) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80200, 0x0) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f00000004c0)="be72d7bc00881f5d452a0dce07c04626a0a22e65afbd633eba27068a9e2d28f87e9d5b3cf5630c5abb0d9bc6cecf90558d6947d818374379e351b754ec0a6a5208") ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYRESOCT]) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="73797a31dd1023bdb03d4c9e441976c25c6d0486a0867647430f0b4cd1c5649f0d2a854303c0f662330f5b8fdb666ba3e2c8a83a5429fd64aa79c19eb3b417a7860773e33d3882cf2378f84877af18edab0a22dc89840c4f3d124042dcf6b50682f15005b38d14af2ba264bb5b94fe90e42790662aed2e438c5a5e7794a9f4b26204e1eae202aaa28dc2caab29b69b100dad90f5cc11b91fc36a43497b472f7201260ed4d858f1f5298c3145e0cf7f320b5b9314801bc8936da2"], 0xba) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000040)={0x7d, 0x0, [0x485, 0xfffffffffffffffe]}) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="66ba4100ed0ff83dd5a984f266b81f010f00d0b9800000c00f3235008000000f30c4e13573fd00c4c2fd32490766baf80cb8efe70c84ef66bafc0cb0d3ee66ba420066b8050066ef66ba4000b80c000000ef36640f07", 0x56}], 0x1, 0x20, &(0x7f00000001c0)=[@cstype0={0x4, 0xf}, @vmwrite={0x8, 0x0, 0x1ff, 0x0, 0x3, 0x0, 0x400, 0x0, 0x7}], 0x2) bind$netlink(r6, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfd}, 0xc) write$FUSE_LK(r6, &(0x7f0000000300)={0x28, 0xffffffffffffffda, 0x5, {{0x2, 0x5, 0x0, r1}}}, 0x28) [ 290.815926] chnl_net:caif_netlink_parms(): no params data found [ 290.861324] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 290.918219] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.924846] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.933353] device bridge_slave_0 entered promiscuous mode [ 290.942703] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.949220] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.957857] device bridge_slave_1 entered promiscuous mode [ 290.994078] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 291.006348] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 291.060751] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 291.069623] team0: Port device team_slave_0 added [ 291.098658] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready 18:05:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000380)='fdinfo/3\x00') r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000200)=0x0) ptrace$getsig(0x4202, r4, 0x101, &(0x7f0000000240)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syncfs(r2) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x80200, 0x0) ioctl$PIO_FONT(r6, 0x4b61, &(0x7f00000004c0)="be72d7bc00881f5d452a0dce07c04626a0a22e65afbd633eba27068a9e2d28f87e9d5b3cf5630c5abb0d9bc6cecf90558d6947d818374379e351b754ec0a6a5208") ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYRESOCT]) write$binfmt_misc(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="73797a31dd1023bdb03d4c9e441976c25c6d0486a0867647430f0b4cd1c5649f0d2a854303c0f662330f5b8fdb666ba3e2c8a83a5429fd64aa79c19eb3b417a7860773e33d3882cf2378f84877af18edab0a22dc89840c4f3d124042dcf6b50682f15005b38d14af2ba264bb5b94fe90e42790662aed2e438c5a5e7794a9f4b26204e1eae202aaa28dc2caab29b69b100dad90f5cc11b91fc36a43497b472f7201260ed4d858f1f5298c3145e0cf7f320b5b9314801bc8936da2"], 0xba) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000040)={0x7d, 0x0, [0x485, 0xfffffffffffffffe]}) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000000c0)="66ba4100ed0ff83dd5a984f266b81f010f00d0b9800000c00f3235008000000f30c4e13573fd00c4c2fd32490766baf80cb8efe70c84ef66bafc0cb0d3ee66ba420066b8050066ef66ba4000b80c000000ef36640f07", 0x56}], 0x1, 0x20, &(0x7f00000001c0)=[@cstype0={0x4, 0xf}, @vmwrite={0x8, 0x0, 0x1ff, 0x0, 0x3, 0x0, 0x400, 0x0, 0x7}], 0x2) bind$netlink(r6, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfd}, 0xc) write$FUSE_LK(r6, &(0x7f0000000300)={0x28, 0xffffffffffffffda, 0x5, {{0x2, 0x5, 0x0, r1}}}, 0x28) [ 291.107524] team0: Port device team_slave_1 added [ 291.129674] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 291.144106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 291.217067] device hsr_slave_0 entered promiscuous mode 18:05:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) [ 291.272372] device hsr_slave_1 entered promiscuous mode [ 291.333214] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 291.340839] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 18:05:12 executing program 0: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000480)='/proc/capi/capi20\x00', 0x101400, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x4, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="2500000300000000115a0000004000f4ffccfeffff00003349cab4b3cc1b0000009467f7d8b5aa2a13000410013812952fa0343d93eeee3982c1affbc441aa4f6449f6c1856a01d2a4dae894e9aea63c68766f5a79e7ecb85b94394ef0c62df64916f65c306b5c5ecba9431b4eb0c892980a7cbf95c53d083653a410a57daa94fbb3c700ae1c2303e983e6fb46279614b3a742e970e581f36cc6436a7dbcf0c20a25a2788a8bd5cae7dc1739156e2e0cebab878958370688580182dbf8a1abd2322b95"], 0x25) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e21, 0xcb4b, @rand_addr="6b6fe5e9274c527ed87eb7afa29d0c54", 0x7}, {0xa, 0x4e24, 0x100, @loopback}, 0x0, [0x4, 0x80, 0x476f, 0x4, 0xac, 0x101, 0xfffffffffffffffa, 0x1000]}, 0x5c) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 291.414850] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.421383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.428661] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.435280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.580628] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 291.588005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.603123] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 291.625231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.635814] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.656707] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.682876] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 291.710745] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 291.717486] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.738469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.747082] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.753641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.806932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.815532] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.822083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.832131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.841319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 18:05:12 executing program 0: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@mcast2, 0x800, 0x8000000000000000, 0xfb}, 0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f0000000100)=""/119, &(0x7f0000000180)=0x77) unshare(0x40000000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000200)={{0x0, 0xfffffffffffff000, 0x5, 0xff, 0x2}, 0x9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) fcntl$getown(r1, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'erspan0\x00', {0x2, 0x4e22, @loopback}}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000580)='%,-\x00'}, 0x30) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="240000000a061f83f11f200a000900010006e700000000a3a20404ff7e6cfff37183dafb3d2106cab2fc13c97399d5f6a30c4ba8b4c5b3e91e01a4c22da5a9727dc715a3de3003358215e18e9d48fa988c78", 0x52}], 0x1}, 0x0) [ 291.854599] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.905613] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 291.917270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.925625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.957657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 291.964876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.973335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.999526] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 291.999583] IPVS: ftp: loaded support on port[0] = 21 [ 292.005689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.097434] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 292.127162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.156536] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 292.205777] IPVS: ftp: loaded support on port[0] = 21 [ 292.252402] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 18:05:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="23e67c2dbbd00ecb95642e61386d9bd432c9a2995eaa4fe5b229b451cf4833463b99b316548decb3a99fc0ce2c05", 0x2e, 0xfffffffffffffffb) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x100, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f0000000240)={{}, {r4, r5+10000000}}, &(0x7f00000002c0)) keyctl$get_keyring_id(0x0, r2, 0x90b) 18:05:13 executing program 0: ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@mcast2, 0x800, 0x8000000000000000, 0xfb}, 0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f0000000100)=""/119, &(0x7f0000000180)=0x77) unshare(0x40000000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000200)={{0x0, 0xfffffffffffff000, 0x5, 0xff, 0x2}, 0x9}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) fcntl$getown(r1, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'erspan0\x00', {0x2, 0x4e22, @loopback}}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000580)='%,-\x00'}, 0x30) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)="240000000a061f83f11f200a000900010006e700000000a3a20404ff7e6cfff37183dafb3d2106cab2fc13c97399d5f6a30c4ba8b4c5b3e91e01a4c22da5a9727dc715a3de3003358215e18e9d48fa988c78", 0x52}], 0x1}, 0x0) [ 292.531643] IPVS: ftp: loaded support on port[0] = 21 18:05:13 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0xa, 0x0, 0x0, @remote}, r1}}, 0x48) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="23e67c2dbbd00ecb95642e61386d9bd432c9a2995eaa4fe5b229b451cf4833463b99b316548decb3a99fc0ce2c05", 0x2e, 0xfffffffffffffffb) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x100, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f0000000240)={{}, {r4, r5+10000000}}, &(0x7f00000002c0)) keyctl$get_keyring_id(0x0, r2, 0x90b) 18:05:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(pcrypt(aegis256-generic))\x00'}, 0x58) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) [ 292.720299] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 18:05:13 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xe5db, 0xc00) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x9, @ipv4={[], [], @rand_addr=0xffff}, 0x984e}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r1, 0x84, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20}, @in6={0xa, 0x4e23, 0x8, @mcast2, 0xbb}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x3f, @dev={0xfe, 0x80, [], 0x23}, 0x7}, @in={0x2, 0x4e20, @empty}]}, &(0x7f00000002c0)=0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 18:05:14 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x200000) write$P9_RLERROR(r2, &(0x7f0000000080)={0xa, 0x7, 0x2, {0x1, '^'}}, 0xa) setsockopt$inet_mreqsrc(r1, 0x0, 0x2000000000000008, &(0x7f0000013ff4)={@local, @rand_addr, @empty}, 0xc) close(r0) 18:05:14 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r1, 0x80000, r2}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x3c}}, 0x0) 18:05:14 executing program 0: r0 = msgget$private(0x0, 0x12) msgsnd(r0, &(0x7f0000000140)={0x3, "9dd44401596f749c974e9285cf0914769c135e5228abec4521add2799ef3b9389f26be0459020b82976bf0c3d7ec3d1202f0b96f8ab52d4deec2daa06925653f163758dcdbe19bbbd7cfd37878aa91723d77aeb5239fdbbcc2172a8639c647f89fc182"}, 0x6b, 0x800) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x5, 0xc0000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r2, 0x508, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x48044) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) r4 = msgget$private(0x0, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000440)) msgrcv(r4, &(0x7f0000000000)={0x0, ""/36}, 0x2c, 0x0, 0x0) msgrcv(r4, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x48400, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000400)=0x4) ioctl$KDDISABIO(r5, 0x4b37) msgrcv(r4, &(0x7f0000000100)={0x0, ""/38}, 0x2e, 0x0, 0x0) msgctl$IPC_RMID(r4, 0x0) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x503f1c32, 0x800) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 293.507755] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 293.555470] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled 18:05:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x501200, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000440)=[0x1, 0x1], 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="3a0ca421e72d50432dd34344"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:05:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8000, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0xc0) write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a000000290100070000001002000000070000000000000001878ac98befe1f5de800000000000000107"], 0x2a) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000001240)={{&(0x7f0000000200)=""/4096, 0x1000}, &(0x7f0000001200), 0x4}, 0x20) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000a2", @ANYRES16=r1, @ANYBLOB="000226bd7000fbdbdf250c0000001c0004000c00010073797a30000000000c00010073797a31000000002400090008000200060000000800020005000000080001000100000008000100000001001c0007000c00030001800000000000000c000300faffffffffffffff0800060004000200"], 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) 18:05:15 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x3b, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="10000000000000000000000000000000", 0x10}]) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x400002) 18:05:15 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000040)={0x95a6de8da94bfb20, 0x6}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) ppoll(&(0x7f0000000580)=[{r0}, {r1}], 0x2, 0x0, 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 18:05:15 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x74) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) getsockopt$sock_int(r1, 0x1, 0x3b, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000340)={@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x4, 0x0, 0x2, {0xa, 0x4e20, 0xfff, @empty, 0x2}}}, {&(0x7f0000000240)=""/209, 0xffffffffffffffaa}, &(0x7f0000000180), 0x1}, 0x38c) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f00000001c0)=0x9, 0x4) 18:05:15 executing program 0: ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x5) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x4, 0x7, [0x1f, 0x5ad, 0x18c, 0x1, 0x1, 0x3f, 0x2]}, 0x16) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f00000000c0)={0x40327, 0x4, 0x0, 0x9, 0x9}) [ 294.539639] vhci_hcd: default hub control req: 2703 v0004 i0004 l0 18:05:15 executing program 1: unshare(0x20403) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x4d, 0x4) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000180)) [ 294.583146] vhci_hcd: default hub control req: 2703 v0004 i0004 l0 18:05:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x33, @remote, 0x4e22, 0x4, 'lblc\x00', 0x14, 0x1a, 0x1c}, 0x2c) sendmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000050) 18:05:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000265ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000400)=0xfffffffffffffff8) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x20100, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)) [ 294.806310] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 294.825575] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 18:05:15 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x5f) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1700250049b03eb8faee00000000000000000000000000ea48e89a9d0b87acd6353c987b000000000000080000060000000000000000000000"]}) 18:05:16 executing program 1: mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='afs\x00', 0x200840, &(0x7f0000000240)='/dev/sequencer\x00') r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)=0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000280)={0x2, 0x8, 0x0, [{0xc24e, 0x5, 0xfffffffffffffff7, 0xfffffffffffff878, 0x2, 0x200}, {0x7, 0x1, 0x9427, 0x5, 0x8, 0x1, 0x6}, {0x2b1, 0x7, 0x4, 0x4, 0x45, 0x6aa, 0x4544}, {0x3855, 0x1, 0xffffffffffffb0ff, 0x1d, 0x10000, 0x1f, 0xffffffffffffff80}, {0x2a97, 0xfe, 0x800, 0x2, 0x3, 0xfffffffffffffffe, 0x1}, {0x1, 0x7f, 0x8, 0x2, 0x8, 0x2, 0x8}, {0x2, 0x0, 0x3ff, 0x100000001, 0x1, 0x3f, 0x124a92ce}, {0x8, 0x8, 0x7, 0x6, 0x6, 0x1, 0x3}]}) io_submit(r1, 0x1, &(0x7f0000000840)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)="e6", 0x1}]) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r2, 0x0}]) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000004c0)=ANY=[@ANYBLOB="03007b007a10247e8798191e548e5dd679fd59da3eae3b321efe7ddf79c89b7b1de5faedc15c35bf617e03afcf6df2813d2e0a66da004b0ceb18649883471bc1d03d4f5d375514e81bf93630bf6df8b1d7adcf4b7a6a644e51466a4e2722e5160d57f1339a3c7a481cd577032fa8e5b2175adaaf710e91d90829fe4abb8350"]) 18:05:16 executing program 0: syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000301f9ff848fdbfa028500800010ae1b"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000013c0), 0x34b, 0x200002, &(0x7f0000000c40)={0x77359400}) 18:05:16 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x44, 0x0, 0x0, 0x9}, {0x6}]}) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x4002, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000140)={0x3000, &(0x7f00000000c0), 0x2, r1, 0x2}) 18:05:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getpeername(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x80) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x1a000) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x3, 0x1, 0x0, [], 0x0}) [ 295.417064] kauditd_printk_skb: 3 callbacks suppressed [ 295.417102] audit: type=1326 audit(1550081116.467:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11648 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 18:05:16 executing program 0: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newneigh={0x3c, 0x1c, 0x200, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x0, r1, 0x40, 0x2, 0xb}, [@NDA_PORT={0x8, 0x6, 0x4e22}, @NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NDA_PORT={0x8, 0x6, 0x4e22}, @NDA_IFINDEX={0x8, 0x8, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, &(0x7f00000000c0)) ptrace(0x10, r3) ioctl$KDSKBLED(r0, 0x4b65, 0x4) ptrace$setopts(0x4200, r3, 0x0, 0x0) [ 296.201369] audit: type=1326 audit(1550081117.247:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11648 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 18:05:17 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x44, 0x0, 0x0, 0x9}, {0x6}]}) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x4002, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000140)={0x3000, &(0x7f00000000c0), 0x2, r1, 0x2}) [ 296.390939] audit: type=1326 audit(1550081117.437:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11663 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 18:05:17 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v2={0x3, 0x1, 0x0, 0x8, 0xee, "272fcef318f75b90cf2604cacfedb6577038624c82fc3bf92039a34c7a080691e80f42b85111ab483e4098d2f6773d2e52f29a13f3e9f15c911c9e7769ae9a6073f65e1fdff37f60713dda44e795719a844c747a53ecff3f5f4689b446218e646cd25fe03cd125b577d1c466cb2b94e9b3f5b034b83d894b0f6e5ec21283d6119d540fdce48567a2e2f83077014380c13156d085cfe8234db8a3496a92a685abce484b1a3e4692f888f0e812499b3308295c942696320706a6f12e2cb0a8e7c6891852a2cc83ea5088bbed26b161a5768c6060b6f9e6ca45e333cd5c2851dad76845cb8bc18d0002c407a6ec2d01"}, 0xf8, 0x3) read(r1, &(0x7f00000005c0)=""/144, 0x14c) [ 296.711705] hrtimer: interrupt took 171731 ns 18:05:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x40) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@int=0xfffffffffffffff8, 0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getrule={0x14, 0x22, 0x401}, 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00800014003102000000000000000000000000000000608a1e8cb4d61aaca6254bbaa325c12b0000017f00000100000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5c}, 0x8}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000280)={0x10000004}) 18:05:18 executing program 2: lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1f, 0x2) recvmmsg(r0, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f00000001c0)=""/208, 0xd0}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/180, 0xb4}], 0x5, &(0x7f0000001400)=""/46, 0x2e}, 0x5}, {{&(0x7f0000001440)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f00000014c0)=""/16, 0x10}, {&(0x7f0000001500)=""/196, 0xc4}, {&(0x7f0000001600)=""/203, 0xcb}, {&(0x7f0000001700)=""/80, 0x50}], 0x4}, 0xfffffffffffffff9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f00000017c0)=""/140, 0x8c}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/244, 0xf4}], 0x3}, 0x6}, {{&(0x7f00000029c0)=@ax25={{}, [@bcast, @remote, @remote, @bcast, @bcast, @remote, @null, @default]}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002a40)=""/101, 0x65}, {&(0x7f0000002ac0)=""/172, 0xac}, {&(0x7f0000002b80)=""/245, 0xf5}, {&(0x7f0000002c80)=""/238, 0xee}, {&(0x7f0000002d80)=""/168, 0xa8}, {&(0x7f0000002e40)=""/169, 0xa9}, {&(0x7f0000002f00)=""/1, 0x1}], 0x7, &(0x7f0000002fc0)=""/141, 0x8d}, 0x73}, {{&(0x7f0000003080)=@xdp, 0x80, &(0x7f0000003440)=[{&(0x7f0000003100)=""/18, 0x12}, {&(0x7f0000003140)=""/183, 0xb7}, {&(0x7f0000003200)=""/147, 0x93}, {&(0x7f00000032c0)=""/164, 0xa4}, {&(0x7f0000003380)=""/131, 0x83}], 0x5, &(0x7f00000034c0)=""/90, 0x5a}}, {{&(0x7f0000003540)=@ax25={{0x3, @bcast}, [@bcast, @remote, @rose, @netrom, @bcast, @bcast, @netrom, @netrom]}, 0x80, &(0x7f00000057c0)=[{&(0x7f00000035c0)=""/94, 0x5e}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/95, 0x5f}, {&(0x7f00000046c0)=""/235, 0xeb}, {&(0x7f00000047c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005840)=""/215, 0xd7}, 0x7}, {{&(0x7f0000005940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005bc0)=[{&(0x7f00000059c0)=""/120, 0x78}, {&(0x7f0000005a40)=""/180, 0xb4}, {&(0x7f0000005b00)}, {&(0x7f0000005b40)=""/117, 0x75}], 0x4, &(0x7f0000005c00)=""/141, 0x8d}, 0x3}, {{&(0x7f0000005cc0)=@nfc, 0x80, &(0x7f00000062c0)=[{&(0x7f0000005d40)=""/228, 0xe4}, {&(0x7f0000005e40)=""/231, 0xe7}, {&(0x7f0000005f40)=""/222, 0xde}, {&(0x7f0000006040)=""/65, 0x41}, {&(0x7f00000060c0)=""/214, 0xd6}, {&(0x7f00000061c0)=""/6, 0x6}, {&(0x7f0000006200)=""/187, 0xbb}], 0x7, &(0x7f0000006340)=""/72, 0x48}, 0xffff}], 0x8, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000006ec0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000006e00)=[{{0x0, 0x0, &(0x7f0000006600)=[{&(0x7f00000065c0)=""/16, 0x10}], 0x1}, 0xfffffffffffffffd}, {{&(0x7f0000006640)=@nfc, 0x80, &(0x7f0000006a40)=[{&(0x7f00000066c0)=""/65, 0x41}, {&(0x7f0000006740)=""/170, 0xaa}, {&(0x7f0000006800)=""/111, 0x6f}, {&(0x7f0000006880)=""/145, 0x91}, {&(0x7f0000006940)=""/214, 0xd6}], 0x5, &(0x7f0000006ac0)=""/189, 0xbd}, 0x80}, {{0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f0000006b80)=""/191, 0xbf}, {&(0x7f0000006c40)=""/121, 0x79}, {&(0x7f0000006cc0)=""/191, 0xbf}], 0x3, &(0x7f0000006dc0)=""/8, 0x8}, 0x5cc18705}], 0x3, 0x100, &(0x7f0000006f00)={r2, r3+30000000}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000006f40)) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000006f80)={&(0x7f0000ffb000/0x3000)=nil, 0x9, 0x5, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0x1}) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000006fc0)={0x4, 0x4, 0x4, 0x7}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007040)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000007140)=0xe8) lstat(&(0x7f0000007180)='./file0\x00', &(0x7f00000071c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() r7 = getgid() setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000007800)=@broute={'broute\x00', 0x20, 0x3, 0x5b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20007240], 0x0, &(0x7f0000007000), &(0x7f0000007240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x1, 0x892f, 'lapb0\x00', 'dummy0\x00', 'yam0\x00', 'veth0_to_team\x00', @broadcast, [0xff, 0x0, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xe0, 0x190, 0x1c8, [@mark_m={'mark_m\x00', 0x18, {{0xffffffffffffffff, 0x7fffffff, 0x2, 0x3}}}, @state={'state\x00', 0x8, {{0x9}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@random="32781484647e", 0xfffffffffffffffd}}}, @common=@nflog={'nflog\x00', 0x50, {{0x8, 0x3, 0xfffffffffffffff9, 0x0, 0x0, "7a3df80e5441f638f7cd52bf5dc7d3b017137dd3b2086bb000f41e18def6949a33007b573314e5bc632c2a9c4e9fcddb83240d063c8f219b874a77b87db4894a"}}}]}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}}, {{{0x0, 0x20, 0x81f, 'nr0\x00', 'bpq0\x00', 'bcsh0\x00', 'nr0\x00', @local, [0x0, 0x0, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0x0, 0xff], 0x120, 0x168, 0x198, [@owner={'owner\x00', 0x18, {{r4, r5, r6, r7, 0x7, 0x7}}}, @rateest={'rateest\x00', 0x48, {{'veth0_to_team\x00', 'lapb0\x00', 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x6, 0x91e6}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x401, 0x7, 0x3}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0x0, 0x1, [{{{0x11, 0x8, 0x88b5, 'irlan0\x00', 'ipddp0\x00', 'nr0\x00', 'tunl0\x00', @dev={[], 0x21}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @empty, [0xff], 0x110, 0x190, 0x1c0, [@rateest={'rateest\x00', 0x48, {{'veth1\x00', 'vlan0\x00', 0x8, 0x0, 0xaa5, 0x2, 0x200, 0x6, 0xff, 0x3f}}}, @state={'state\x00', 0x8, {{0x9}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x3ff, 0x7ff}}}]}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x628) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000007880)=0x80) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000078c0)="a18c72d12ca64d5647a9c85a1d599ae7", 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000007900)={{0xffffffffffffffff, 0x2, 0x42, 0x3, 0x401}}) pivot_root(&(0x7f0000007940)='./file0\x00', &(0x7f0000007980)='./file0\x00') r8 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r8, 0xb) umount2(&(0x7f00000079c0)='./file0/../file0\x00', 0x2) r9 = request_key(&(0x7f0000007a00)='user\x00', &(0x7f0000007a40)={'syz', 0x2}, &(0x7f0000007a80)='@\x00', 0xfffffffffffffff8) keyctl$get_keyring_id(0x0, r9, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000007ac0)={0x8001, 0x3, 0x44d, 0x9}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000007b00)={0x7b, 0x0, [0x690c, 0x7, 0x3ff]}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000007b80)={{0xfffffffffffff474, 0x4}, {0x2, 0x2}, 0x1, 0x2}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000007c00)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5f9c, 0x10000000, 0x3, 0x9, 0x9}, &(0x7f0000007cc0)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000007d00)=@sack_info={r10, 0x81, 0x9c1}, &(0x7f0000007d40)=0xc) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000007d80), &(0x7f0000007dc0)=0x4) shmat(r8, &(0x7f0000ffc000/0x4000)=nil, 0x4000) 18:05:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x7fffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r2}, 0x8) 18:05:18 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000080), 0x4) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f00000000c0)=0x3, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x81) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="b5ddb529130798cb2622c7cc9396f10b77b9393a258a19f547d8910e8b8ca878a42188f31c5271327a1387b5af2534b0f6da1fd7ca49a66681fd9b6026db274e022e8aba98ae1c3c7f3538927f7dccd91c1a1c78fb28d63392408acb83", @ANYRES16=r2, @ANYBLOB="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"], 0x1f8}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000050) prctl$PR_GET_TIMERSLACK(0x1e) 18:05:18 executing program 1: socketpair$unix(0x1, 0x4000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) io_setup(0x8, &(0x7f0000000140)=0x0) socket(0x9, 0xa, 0x8) io_getevents(r2, 0x0, 0x0, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x22000, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000040)={0x3, 0x1, @raw_data=[0xcca, 0x7303, 0xc00000000000000, 0x3, 0x2, 0x1ff, 0x2, 0x3, 0x8, 0x163, 0x0, 0x9926, 0x8, 0x90d, 0x2a3, 0x101]}) 18:05:18 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0xfffffffffffffffd, @sliced={0x8, [0x81, 0x4, 0x9, 0x7fff, 0x7, 0x1, 0x6, 0x8d27, 0x6, 0x6, 0x8000, 0x10000, 0x2, 0xf0, 0xffffffe000000000, 0x21, 0x80, 0x9, 0x8, 0xfffffffffffffffe, 0x7, 0x7, 0xbae6, 0x101, 0x4, 0xffff, 0x1, 0x0, 0x6, 0x6096, 0x20, 0xfffffffffffffffd, 0x1ff, 0x8, 0xff, 0x8, 0xd590, 0x400, 0x80000001, 0x7ff, 0x2, 0x2, 0xffffffff, 0x5, 0x1, 0x6, 0x8, 0x8], 0xe4a5}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x8001, &(0x7f00000001c0)=0x2) [ 297.784150] IPVS: ftp: loaded support on port[0] = 21 18:05:19 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) pread64(r0, &(0x7f0000000000)=""/207, 0xcf, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1, 0x9, 0x100000001, 0x8000000001}, 0x2c) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x740000, 0x0, 0x20820000, r1}, 0x2c) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x2}, 0x80, &(0x7f0000000000), 0x159, &(0x7f00000002c0)}, 0x0) 18:05:19 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x8, 0x0, 0x4, 0x200000000000, 0x3, 0x3, 0xe144, 0x330, 0x38, 0x392, 0x3, 0x7, 0x20, 0x2, 0xc0, 0x401, 0x9}, [{0x3, 0x8000, 0x0, 0x2, 0x8, 0x0, 0x1ff, 0x6}], "60d34315a11ad2393aac0a1e1c63dd8c1feb78c2574e5d307a8ecd2fff897ba0870653d36598daf0847a04dc72c29bd093034f04fff74629f8738fd7c28401bc5ec22399fe5830969c4d6215d746debff5d0c36cc38c53f2d3de79bb3f3edbe755892d51b787ed7a49cbd48b8678845306eb4035fde454eb1b", [[], [], []]}, 0x3d1) r1 = semget$private(0x0, 0x207, 0x0) semop(r1, &(0x7f0000000040)=[{0x2, 0x41}, {0x2}], 0x2aaaaaaaaaaaa9b4) semop(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x30000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f00000000c0)) write$capi20(r2, &(0x7f0000000100)={0x10, 0x1, 0x9, 0x0, 0x9, 0x7}, 0x10) [ 298.161465] chnl_net:caif_netlink_parms(): no params data found 18:05:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x177, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x6100, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000040)={0x2, [0x1, 0x6, 0x5, 0x2, 0x3, 0x9, 0x1, 0x9, 0x3ff, 0x6, 0x0, 0x6, 0x10000, 0x800, 0x2, 0x3, 0x5, 0x0, 0x0, 0x2, 0x1, 0x3d, 0x800, 0x2, 0x88a, 0x9, 0xad, 0x1, 0x4, 0x9, 0x10000, 0x7, 0x5, 0xc6b, 0xee76, 0x6, 0x400, 0x78fe, 0x6d3, 0x2d0bac61, 0x8001, 0xffff, 0x101, 0xd7, 0x3, 0x2, 0xfb60, 0x3839], 0xf}) recvmmsg(r1, &(0x7f0000f61000), 0x353, 0x2040, 0x0) [ 298.259648] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.266395] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.274790] device bridge_slave_0 entered promiscuous mode 18:05:19 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xb2\x1d\xbe\v\x8e\t\x1b\xeb\xc9\x02\x12m\x88\x84\a\xc5;\x84\xed\xf3*-4\xbf%v\xf0\xa9\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) prctl$PR_SET_THP_DISABLE(0x29, 0xffffffdffffffffe) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xa041, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000280)={0x21, 0x2, &(0x7f00000001c0)="7401306857b8a2e48886af06ee200ae05d55b0b3a96328a391b97a205a1d60cc128c348cc3857b8735afcd22e3e175e3a4106816f792838e7921df4204471227b5a9fd4f32258774d9bd90fb6f9e67e8a7773faf2509be48a4e8af568892dbf3909afba054a3981234913561775cb5a8ba3af6d0f3ada2791c5156d52739d1dc58bfda702e6e14e8fdd9fd463e9a3767638982921c8b989ead62840ddd3c231a5b7757df785e8e45a690465b28e338919282b4efdb0811d2c8", {0x0, 0x4, 0x317b5657, 0xf, 0x1ebc5ca, 0x0, 0x4, 0xe3b9}}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) [ 298.333994] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.340578] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.348941] device bridge_slave_1 entered promiscuous mode [ 298.387050] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 298.443421] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 298.470804] bond0: Enslaving bond_slave_1 as an active interface with an up link 18:05:19 executing program 1: r0 = perf_event_open(&(0x7f0000000280)={0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000280), 0xcc) splice(r1, &(0x7f0000000000), r1, &(0x7f0000000040), 0xc20, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fe) setsockopt$sock_attach_bpf(r1, 0x29, 0x22, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000100)={0x8, [0x400, 0xf8d, 0xfffffffffffffff9, 0x6, 0xf1b, 0x9, 0x1f, 0x200]}, 0x14) setsockopt$inet6_buf(r3, 0x29, 0x36, &(0x7f00000000c0)="176eb5a42c6cab8792da49da320a5a5bd1b1af75cc90478ff1c8e39716b2c9da7b31a48cda458684a760", 0x2a) [ 298.553349] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 298.562178] team0: Port device team_slave_0 added [ 298.583085] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 298.591901] team0: Port device team_slave_1 added [ 298.599217] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 298.624397] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 18:05:19 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x15, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r2) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x880) write$capi20_data(r3, &(0x7f0000000240)={{0x10, 0x7ff, 0x0, 0x83, 0x20, 0x7}, 0x1000, "d9662363cf2e162ad239baf601587eeb5afb53385e1d6d6cb3bb4fd2b93a62093aa7660bd36240a9bfd4f8099f0a76b86924b58ca207f8c179f06d99f8c0ef27f0bc24ea64cc9e12b011cb977b2ca6531f81816954a317b7352eab6a11f64d83c461322dc291eae38b62bdec59444804966e51e27c09f909b0a2a35083e3f353479b436285e9eb25a095800730bdaf15f9791db312334e8e66669c4798cef8b742908ab325075e4c3251dd5abca566793b06186f8f581ef20d9831ef5ef949cff522f1d6808df859fd674b47a01b54be661725900e56420e2cadfcff146cb529748db0a0b925215a421a5aa98b076521328487c663459bf6953a0aab062fdd467b001c45eb79cc4bdfc119689b096c6500172ef9085d2b863c9acf756e8aea3837d6fc680b4073879f9691b099e2f64a635c908f0e6c4bc8b0132a96712c5d86fdd655ee40faa8797eb5a80a2b61e067034f1b8d2c5bb2e83dc87f813ba79852dbb15ccb4387ae711307df5be0de879412b62915c4d843b4be07946278348ace893dcfa79ec2d2a6cb56ba739d1f30ea42b6b28bff84bbfe567a87dde09675c59a67263a9db2a0f8f5701d6107fe3a9fe922a99cb7fca1ce40c116519d2ffb81ee0c3a8b31a83b709a3c0d41dac4b9dcc5f13900008fe9095e4e05521b6a2d8bf8276bcc728497c39db6c926d79557e2ffe20a6dde42ba497317f95e19bf373351d74a6466decb7d7fbcafcce09cdba7e1809627d62886ca37c426ac502e10a014161f096211925462e6dc2e325bf3e0137550891a3a1464cf8ccc4be3d8260fac09d55400f4fa75d67462a76bddeda55474b23df78ffdcd2d87f48dd39776b9cd27b2eabc43868422f7be81daba92f24d2fe9bae8b0f3612d63d9999543e8c13b79c1fd7705820389b610336cefecf4f33ec971af97834c9638efb3338d4720a767a117589e966c0f2111020a87ea94471cd07bdeb569d626a1db2f575481ff001c4f6b2da2e02c31feae6f96e53391ef3fefb7942bb1ec133e8d9025cd1701770953bee9ebb4899edf56360fca80270416da7dffc013fd2939fd62f5d04c99738a952f743d8eed9b5172b504803973396946d9bc85d0d915b0ab0dc52a6cd0cad25616b5cf818431830bc6c7a5ec77b73aa62e60a520bf025fe6f19ae885686dc4160aae3b94567f2935575248f9599333d038999bea90afe12068d7492368a671ba9db7c3dadc8e47ef90963ffc77d1fb20bb47e8c9c21ff16c2c0bc5f3cac94998f5fa5c3793f7be13737b8c8e4c1dcc08cf69c3cd3216b34c815fca75eaca482c0a6c571001023e431b1413f44b70c2f4cd720a87d3348fa34da9a3d9c545a4e713028c277ddd06fdbc0edee994b52931144371579f33c56127a421b4bdcfbfe78e7967d17d42cdb12ab055b75ab82a945343a5e90a0325bd37cc85901b8e2b50782fa0b9096e479a04602f6f36bc1c264d2c160bcfafb2a30fe4ff01278074f57881f7f66b1623f286d17f0631c103d357a69ed8e0d337d52731f531e49e230719b3f768bd75cb86be86f1ca844a7831f54d6985086d78874f178a7c4a30de97361765196a4c5fad0105b2f005e93d9891c63e8d11a1b4f340bea7df118df10483ccd93d2ca9fc209f88ffa506401ad2b22f0fc10620c309f64ba29b3a55f22008c46438a4a7785bb85f4c6fca5f7c86249969243e89f6cc16b28acdc17223acb110f98faacbf3117d073c9626f42f5fd0c4f6ee54e0b69f93fff69f250e7626a91ac674e05544f8cd169015a7fc99319626fcb468b63281e4b8f7765fc15942ecf2da12f92c1428c7beb719d8375ea72f2e9976dfab4a77f259e22e6f520b8853f00d433cce5e213af41891f167702b8aa333e409aaa3b41853e9817e3b15c2bd425b2777bf2a6de5f1b21c36fb79a107dac6f492f6722d7b8ed38b3e0ee0a8a532db572159df2d8cd051fdb5b376b754bce83f2f1bf86d732b7183bbd740544d6048c2be94ad7bbbe6aa1f974b341f6528ec993f8b90edba870d6713cb562581edc4654030561b5c3f44fb2f6e262bb9a4aff5e885c8e1320183b5163b1a1a3de77346b28579866356af019fbc92def399d9bbae9c371f1c42fa065f708c245a2dfc8ae512f3291b208e42bcf11646906de8f98b94a2c658988c7be0f029a39ded36feb6a6f94e95f7ac43e621b626b5f779ae4789d061d26b987c5f7c1f72aabb551653e6a80685d14276e4998420ccc547ad76012f85c55ba8d561b14efea5f174b026d75bce646d0b4439a9cf6805622c662a9d7d613a6a82cdaa614bf1d0a793d062da91778eaafe0a475b352dd5bc3dab07d3fdee128cd1797e29a8ef394cb25455520d7e3ff332a345beaa97faeb392896f669d4acb1178fbebb524dd35c91aa0e0a114f74ac5192b28bfc4b72eb73ccd3b8b8a533e7bb8e2c0d055c421ebd19424833c9e6e5f2889e53d4abe17b7485e76679b9450a35c08f90c116abcdd60665abbcd6a81ce701477a423e5469ee03aba91cea75bebbc898af111f0bf5a58da103ef5b25a40856db5c764d3c06117587ad730f0020c56eb509cd6837ae8624793a9a4d690e01be718edbf037a0aaaaf60a853c067b7168855bbf2d3a92392803bbfafd9b56714fd2fae2e524a1a5dd66595840865ce46a0692ebbc5bdf7526933ec64420f1835a0409087b206a1e737bad5184d070d96e5c53e3891ee3ff7a7965f537e32a1dc3e1ee5533926c30bbfef80625d22874b0de5a8167d95613b1e8c0644ec65ecd4d8a375c5928995123a181388ddd473890a19234a27d4d429526b2e6447685e57142a3c55a192b5eec343ab5a6f45869ad5fdea8220c293e331a94e234a0f029cd0cc3b0263f98661591f598765db583fbcc9d9fc42c18ce2f3401c5792ab9baeb36bedbcbc3baea8e1269e5225ca95a1e92f577b434b04cc4fa0034d665af21642b47e8c101116a34c0b059b7906415612efdb3351d342b90bcea34a15c94be2e599ba1509a228cc4bca681529527d2513ffb9d7fd25ba05c845fa7ee38329fcb8bbcb9a0b3d58ebcaf63a098b0b86ee2d6247bb2377581725923b3d65513e7be07e174af4e6590767ca9eabb938b007e742fecfa24071c579359c66b93de6cad5aaec387ca05bc3d4f65229fb9482c78afd6292d01bc69b4fd32f8c637dc517febd6c00a5ebbf9496923a1f9d048fe639beb92fea6cb7fb33f42b9f49a27fbae6c0a76a30e4552d52a84688fe5b77fe7895e118383d0427520a3450d23af483686c9e811b0a0e4a1e7eca7f960e647e6f93c1b1de981d32cd64632cc084e31f97267a15830a935332b73ba79e09b70b1f5ec5e948fd717cfe07d8702d378665cdb713c079f0c37d63ad9d5a95f185d56dd6bbbac4540af2dc8ab01a7f79d7eadaeb648da86e4d02809f76fa80efda054d45925f04e39f907f64ab10aa7b176df71b214b353e11f777ddf60b952c67b6c19c70eaf42878d933176a6861204dbd2795715119ccae482b0eb9a4cc778487240456a1e673f2c4f7c15aa42913ca23081b7514997202fe5614fb7c836114aaed3ce5fdeed5d3572af5e5b8524ee0bdf51f01e256ad6877dac46688c1d0ed8da08ed714ff921f73b968ed32eedb3050a1fe5b83a1dd4f4e3f6583022545b3fe9c9bb6b665ef2350b54ce311d7e45578a89be963449476e07678bed272471fb91d71a89ad826fdd50c70da85b690a697c74a5139d2df6eda9c579f3e5b7577332fa7b36691f6d3b6bd80053ff631a039314b8367e662fcfc296aece5d5051bb10a3256b7d8ad3a8ca293dcdd4583061cb9cbd1b2601b96ebab85002416ebc13a5dd24e832e77e71dc62b281bc4e10f4d407bb17a9d2ce4c4939b3c83bade4551bcd16d6e86c3d2668e258d9d27f6743d42ffae51df4f5fbdbb21dad5afaff1f7954fd6a89bf1892890914250ddb1dcf528f487ead447ed3b11b991aee10246d800f3eea432c862d1ad772b1fb6a89bc3288cc753c55b55e46a1b82d8c771a2bb4e14812baf68788f116ef1f68ffa6db2ac08ac5ca21583c9e2ef6c702657da9f2751cbc3dffc8fbad492080874e201f679b4dbd97f3d54507d4309c8d13e9f2f2db8629976d6f6c0d4c0b861794ff8efafbe38ce609030f23587ff9b3e6aa00fcd02fd620003a5ca509c97ad6ab824a2e77447e9c26c007d33ee4b7ae70c8e156b8fa52abfe19894e373f52d5bad519ef17192b873e1f55abb6375be0d4ab66d23fc3675dea82fb15f53b5bc0d92c9203d216f15dcc3d6530605100e8cf20bb182e54eb3456edfcf2266427540c71df902b69b0bd6adf900f6869ce78d45789e9199ef7c035d2120528c21f2cf2ecf7e7d7244f870d1109de0671bf7974b2fcfd77f3ebdc7b8104db5b4cfabec8194aad6c3392aada266ce941ceb8567a4954aef91f69b32757caecfd8a7bebf1715cfae3934126138646a7f4b1ac9d9626fb28550c9db6b9ea10db95a75f8a4018f311d793c0466b625362667d2eda72d4e957b66749ebd93f0f64f1899d78f93d348aba66631f676e41c331f6f09f47a713224801f1010c0311cfe1e63f20b9d94456fccc987fa1ecc24fc72b240a2d2d07136a4d834af5798a2dab0937befbd73f7a8b7542ce8db94492c3c398ab11943c35293d937c3075088f6d2e26581831ec58d54a7becedc5a7b44228a596112016bcb5139b983cdbbbf3c1e9251d88c92b91a43147c98e821c4cb8f0fdcd114807c5feae0cbcc4347aec36e0433fe0b7872cf75d10dfd2775db7f809a7f5bee8939faad7bc51c26caf75fe66db94744a9be4f677cdad32fb09e68517788c105ef16b38ced66ead41a11d1aa6ad1627525984f5ca48f36c1730b293c233d6a46ccdd559ea4eb6cdf4546a5286e52d814dffa9e17c316b4316de3d5ab98b03f5a230aaa677a363e8631c8be3b27e3fbf670fae700698e4d6510be5ff7d73520aabcc20dc256406ef0dfa0f5a4d42b90abb2803f7f7338c4e059de3ada5bd1e69fbd40faa61954208e95f4e5b3d99442e5cc3b479a8dab93c3749467325dc9621f988a55328f579067713dff495fe606b2b102ed6e09bd9b79287722b1dcafac8ef9b6b550c8e324b8a97118713b1d7f9a34bd9dbef0bd9f92964da3e37c8135f9ccfb680e29167cdce69831b205eb4669d78be095b952630537c17dfccdfafebfe33b582ee38037f440131a8a5436b780845c9908855e47fb71fa78fd91f21c92450d077e0a7c47570f38cfe8e81fcf0ef193a08eb9428dc3ade95380adc6077d6fcf8c94a2f59c30e02dbc8d6a57c75519c143de79db7ea2e0a103d904f1466ba8f65bb0ebc51cfe72ca08d5e07b46bfdbca4b49c6cd0684370608c8828b48df312de6b40e20dcc5d698f6c4b1db65b9e858f760d81fdb04aac91454cdde1ec417f0bb66aa9e6bd4d062a2cb245967066508572eba79765c8c6db0a189f2b8e733e7a7b592b905342c0337b62dcc5d2076a26e197db1beb901c5bd520bfc26b36d975176f6b3c4f02b8d2096490e0444cf5a500fccf7f2c7583acacc1b66fd47d592dd2a4f3d202ec463e0104e967781790d7e6cab7c6859b90ba22a67355b37fcd44779d451918faa35687d31900d85150472d88c0793cd228eb95a5833fe4838ec412c53d57958cafdcfb139e50aa13bbf37097f86155ccf488f34062b6db67bdd5e214554bf98b4c24b7eaa77667bf3f8430040129690099bf63c034ac2139d3168e025339c4bcadc2e772b5aa028d9df45a9dac2523aa9bc448f84f12588c482c06"}, 0x1012) r4 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r5 = add_key(&(0x7f0000001440)='ciDsY\x00\x00\x00\x88\x99\xa0\x86\x13\xa4\xd1\x00e\xb0UpM\xfd\xe0:d\xa8R\x01`\x9c\xfa\x95\xe2vT\xbd\xb2\xd8\xff\x80\x92\xb9\xf6\xef\xdc\xe4F5\x8d\"\tu\x8a.\xb1\xdc#\xc4vQP/\x9e:\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000001340)={'syz', 0x1}, &(0x7f00000014c0)="788a5e715bcbfeb2571383e5e475fd02511dad18ce3b1b09e07351bc5082763e437dd50100000000000000d12abfef8d48a65601b1f15430eb6eaa12a38ea8dbc2", 0x3fa, r4) keyctl$reject(0x13, r4, 0x280e2b63, 0x1000, r5) userfaultfd(0x80800) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xffffffff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r6, 0xff}, 0x8) close(r1) [ 298.727517] device hsr_slave_0 entered promiscuous mode [ 298.782651] device hsr_slave_1 entered promiscuous mode [ 298.824449] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 298.832069] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 298.868498] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.875058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.882296] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.888802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.995566] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 299.001762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.033493] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 18:05:20 executing program 1: pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000280)) pselect6(0x40, &(0x7f0000000080)={0x0, 0x7, 0x0, 0x0, 0x140000000000000}, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000200)={&(0x7f0000000240), 0x8}) sched_setattr(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x800, 0x4040) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140)=0x4, 0x4) r3 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r3, 0x2000c2604110, &(0x7f0000000080)) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000002c0)={@multicast1, @remote}, 0x8) [ 299.047356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.057972] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.071845] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.101124] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 299.126803] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 299.132973] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.183867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 299.191266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.200171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.208608] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.215193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.239680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 299.265453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.274245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.282673] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.289165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.305245] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 299.313357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.338988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 299.347992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.370932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 299.378067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.387427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.416096] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 299.427200] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.435534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.444604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.462499] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 299.483507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.492030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.506380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 299.513360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.522239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.540187] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 299.546405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.598468] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 299.639344] 8021q: adding VLAN 0 to HW filter on device batadv0 18:05:20 executing program 2: mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000000100)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000001c0)='./control\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001980)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000001a80)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001ac0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2b, r1}) r2 = openat(r0, &(0x7f0000000180)='./control\x00', 0x0, 0xffffffffffffffff) lseek(r2, 0x2, 0x0) unlinkat(r2, &(0x7f00000000c0)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000200)={{0x101, 0xaf}, {0x6c8, 0x1}, 0x5, 0x2, 0x101}) 18:05:20 executing program 1: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000780)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000800)=0x80, 0x80000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, r1, 0x304, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf02}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f00000005c0)='/dev/dmmidi#\x00', 0x7ff, 0x2800) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, &(0x7f00000002c0)) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000640)='/dev/urandom\x00', 0x2000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000500)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x80003, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000580)=0x9) ioctl$KDMKTONE(r4, 0x4b30, 0xb65) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000700)={{0x1, 0x3, 0x4, 0x2, 0x2743}, 0x5, 0x5}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000006c0)=0x1) connect$inet(r3, &(0x7f0000000600)={0x2, 0x4e20, @empty}, 0x10) syz_open_dev$vivid(&(0x7f0000000680)='/dev/video#\x00', 0x0, 0x2) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000000)) 18:05:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="153f6234488dd25d766070") r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="2e90ee8b", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2}, &(0x7f00000002c0)=0x8) 18:05:21 executing program 2: unshare(0x20400) prctl$PR_SET_PDEATHSIG(0x1, 0x20) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000100)) 18:05:21 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) pread64(r0, 0x0, 0xffffffe0, 0x20000000003) r1 = dup2(r0, r0) r2 = geteuid() setfsuid(r2) connect$caif(r1, &(0x7f0000000000)=@rfm={0x25, 0x5, "933ff2e418bf8e6c0938a4f8424dc268"}, 0x18) 18:05:21 executing program 2: r0 = socket(0x2, 0x802, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x4, 0x0, 0x0) r1 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) ftruncate(r1, 0x8007ffc) sendfile(r0, r1, 0x0, 0xffffffff000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x140}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @local}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2f}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffff9f96}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x3}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x1}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}]}, 0x130}, 0x1, 0x0, 0x0, 0x80}, 0x0) 18:05:21 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="b486e079ef0b42351762b2c0426a71acc98c1c912cad7419e9e61d6b55dbbb89da2013e27fe748fcda8697acc327b8fbef862694228d9443a54c8d03326299ad5ef9cd52dfd1491095a98844edab545331e2593b283cae23fe078440ade8354b1c0f8f8b1f6ef279b6d57584d679d87339f0d4818eac02379437e30263ff5c89884058b7ee2e2fb644886e8aacb257d3254e37e9282390dd83ce1b39c05608dad18a23bc4bb665fea20b177bc421378affff33a67b0817240546ba6b"]) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='veth0\x00') 18:05:21 executing program 2: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x101) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000080)) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) r2 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x10, r0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000180)="a96d55a756") ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f00000002c0)) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0}) 18:05:21 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x80000000000b) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000000)={0x81, 0x0, 0x0, 0x1, 0x9}) syz_open_pts(r0, 0xc0000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0xfffffffffffffff7, 0x0, 0x0, 0x4}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2, @ANYBLOB="08022abd7000fddbdf250a0000004c00070008000100090000000c0003000000000000000000080002007f0000000800020001000100080002000100000008000100060000000c000400010000800000000008000100000000003000070008000200090000000c000400082fffffffffffff0c00040004000000000000000c0004000900000000000000240004000c00010073797a30000000001400010062726f6164636173742d6c696e6b0000"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x48010) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000100)=@can, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/229, 0xe5}], 0x1, &(0x7f0000000280)=""/97, 0x61}, 0x1) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0x195, r1}) 18:05:21 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7fff, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000180)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000140)="0af51f023c123f3188a070") close(r0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xfd1c, 0x0, 0x0, 0x1e6) 18:05:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000000e0607031dfffd946fa2830020200a0009000100071d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0xa7}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7fff, 0x40) sendto$packet(r2, &(0x7f0000002240)="26b4cf1a72a9c5777b0b22ce62f3e59a19b87d5f13aa50bfed9aae6c06512d923bc61063753c777476b992c486a513d48ac64ea0139f5e6f8c11c621c60c5f788b58041b221eb1561829905d7d45b66b4899e81f9cc27911a8a2e7d24811fe80a699aef70f5d55078175fcdb3b1a65920808b27641690b2150e4ef6483b259ce96a1c38fe094c612944c59e98ac55309f6d3f10e89ad87c102c445e7366db4e2aa79d1c8bb2e6d940b8db2766c1ce2a8fe523dd6613d2cca2806e06c6bd5e032eff94e8fd7ab8c2c09d4ef3622ff73ee0c2c52cf8b71c618e1fa3c5ae642a5e061992f9ffdd7e478ac033618aa75ca0ef2df1d09db85f13c", 0xf8, 0x4000000, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f00000001c0)={0x0, 0x0, 0x2080}) [ 300.997723] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 301.005759] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 18:05:22 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) setpgid(r2, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000220001040000000000007fda51da0001"], 0x14}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@allocspi={0xf8, 0x16, 0x311, 0x0, 0x0, {{{@in, @in=@broadcast, 0x4e24, 0xffff, 0x4e20, 0x0, 0x2, 0x20, 0x80, 0x32}, {@in6=@local, 0x4d5, 0x6c}, @in6, {}, {0x0, 0x0, 0x0, 0x2}, {0x4, 0x3, 0x8}, 0x70bd25}, 0x0, 0x9}}, 0xf8}, 0x8}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) [ 301.060036] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 301.067973] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 18:05:22 executing program 0: migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x60e, &(0x7f0000000080)=0x100000001) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x1, 0x1, 0x4) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000540)={0x2, 0x6, 0xfffffffffffff8ce, 0x8, 0x6, 0x401}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000340)=""/240) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8) socket$inet6_dccp(0xa, 0x6, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000500)=[r2, r2]) bind$inet(r1, &(0x7f0000000040)={0x22, 0x0, @local}, 0x6) r3 = syz_open_dev$usbmon(&(0x7f00000006c0)='/dev/usbmon#\x00', 0x1, 0x10400) timer_create(0x3, &(0x7f0000000200)={0x0, 0x2d}, &(0x7f0000000600)=0x0) timer_delete(r4) ioctl$TCSBRKP(r3, 0x5425, 0xfffffffbffffffff) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xfffffffffffffed6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev={0xac, 0x14, 0x14, 0x2a}, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4e23, 0xce9, 0x4e21, 0x0, 0xa, 0x20, 0xa0, 0x89, r5, r6}, {0x9, 0x1, 0x10001, 0x6, 0x1f, 0x1, 0x9, 0xffffffff00000000}, {0x0, 0xffffffffffffffff, 0x8, 0x7ff}, 0x7d2, 0x6e6bb7, 0x1, 0x1, 0x3}, {{@in=@multicast2, 0x7}, 0x0, @in6=@rand_addr="f5bc9ba67eff45d0a246b1faea127b7f", 0x3500, 0x7, 0x2, 0x100, 0x19d3, 0x4, 0x80000001}}, 0xe8) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f00000005c0)) connect$vsock_stream(r1, &(0x7f0000000580)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) [ 301.177929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.215642] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 18:05:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x800001000008912, &(0x7f0000000100)="0adc1f121e0d3f3188a070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x100, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x1ff) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffeffff, 0x101000) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f00000000c0)={0x13, 0x27}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f00000001c0)={{0xcef0, 0x7, 0x0, 0x3, 0x10000}, 0x1, 0x80000000, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000140)) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x100000001, 0x4) listen(r4, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4000000000004e22, 0x0, @loopback}, 0x1c) 18:05:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x5b9, 0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='fuse\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=',rootmode=000040000']) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x21, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000080b33e46aafa08e96808dd3ffb4225914e707b77d7d7b67f1d6ef1967bf05bbd38f50aefa43e6cd0bf838e1aab75899bfbfd820ca8c7215159d4970f456eb3eb889b44562f7804e2d84b495985c52a9aa6a9"], &(0x7f0000000080)=0x144) [ 301.427734] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:05:22 executing program 0: migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x60e, &(0x7f0000000080)=0x100000001) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x1, 0x1, 0x4) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000540)={0x2, 0x6, 0xfffffffffffff8ce, 0x8, 0x6, 0x401}) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000340)=""/240) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8) socket$inet6_dccp(0xa, 0x6, 0x0) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000500)=[r2, r2]) bind$inet(r1, &(0x7f0000000040)={0x22, 0x0, @local}, 0x6) r3 = syz_open_dev$usbmon(&(0x7f00000006c0)='/dev/usbmon#\x00', 0x1, 0x10400) timer_create(0x3, &(0x7f0000000200)={0x0, 0x2d}, &(0x7f0000000600)=0x0) timer_delete(r4) ioctl$TCSBRKP(r3, 0x5425, 0xfffffffbffffffff) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xfffffffffffffed6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev={0xac, 0x14, 0x14, 0x2a}, @in=@dev={0xac, 0x14, 0x14, 0xe}, 0x4e23, 0xce9, 0x4e21, 0x0, 0xa, 0x20, 0xa0, 0x89, r5, r6}, {0x9, 0x1, 0x10001, 0x6, 0x1f, 0x1, 0x9, 0xffffffff00000000}, {0x0, 0xffffffffffffffff, 0x8, 0x7ff}, 0x7d2, 0x6e6bb7, 0x1, 0x1, 0x3}, {{@in=@multicast2, 0x7}, 0x0, @in6=@rand_addr="f5bc9ba67eff45d0a246b1faea127b7f", 0x3500, 0x7, 0x2, 0x100, 0x19d3, 0x4, 0x80000001}}, 0xe8) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f00000005c0)) connect$vsock_stream(r1, &(0x7f0000000580)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) 18:05:22 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x1, 0x0, 0xfffffffffffffffc}) 18:05:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc008ae67, &(0x7f00000003c0)) 18:05:22 executing program 2: r0 = msgget$private(0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001100)='/dev/vfio/vfio\x00', 0x40, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000001140)) msgrcv(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b25e978ef402316f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1008, 0x2, 0x2000) msgsnd(r0, &(0x7f0000001040)={0x3}, 0x8, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000001080)='/dev/vcs\x00', 0x20000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000011c0)) 18:05:23 executing program 1: r0 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f00000003c0)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffd0fd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df53191387109ec8b3a92c725e03a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f05a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72", 0xc1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000100)=0xffffffffffff0400) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r0, r1}, &(0x7f00000009c0)=""/240, 0x4bc, 0x0) r2 = msgget$private(0x0, 0x480) msgsnd(r2, &(0x7f0000000240)={0x3, "3219efd6c51d67a80b4c7d64ac9c585afc52863e5d7ec11d087b0d5df0f037dc7a606ec1fab4c71a4b718aa69543c1973b9aab9312eab347d7917e3bcaa58fa039cea90e272dc155101f811a96903293839ac4513b3d3802189e3e30081e240dfad24f68fc57d8ba96276142ea88d878eac1874cf427fc6f3ceabead88a024e3190c18031702a19435f3f65a55fb7135b859dfaca42264b2b8ed594c6076b9954e5e0e9121fb3cc0adbc86135a074c812920184847"}, 0xbd, 0x800) 18:05:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000040)=0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'team_slave_1\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x18}}) 18:05:23 executing program 0: r0 = socket$inet(0x2, 0x8008000000003, 0x2f) sendto$inet(r0, &(0x7f0000000040), 0x395, 0xfffffffffffffffc, &(0x7f00000000c0), 0x10) clock_nanosleep(0x3, 0x0, &(0x7f0000000000), &(0x7f0000000040)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x220080, 0x0) write$apparmor_current(r1, &(0x7f0000000100)=@hat={'changehat ', 0x4, 0x5e, ['keyringeth0]\x00']}, 0x2a) 18:05:23 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=@known='security.capability\x00', &(0x7f0000000100)='\x00\x00\x00\x02\x01\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00', 0x14, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000300)={0x78}, 0xfffffe5b) 18:05:23 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2400000008061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80000, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) [ 302.490963] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 302.498557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.508087] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 302.515567] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:05:23 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) [ 302.564981] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 302.572551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.581241] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 302.588786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 18:05:23 executing program 0: unshare(0x20400) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x79, 0x1) mq_notify(r0, &(0x7f0000000180)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000040)="d9fbb4797df79da44d0ed4450f105c1030d5383c7c44666f4d6152ae2e3dcbb3da20effcfced65878609391ade4490c849af126a79ebb2394d298b2596f79fa40c2a342349564b0e5169f8c89c7339b2a26ae0552b9e4166c451d401002a0dc6118d396931ffb9ed0786fd63028412fc36e22a275f16fccdfbba2111074592fa77c939cc3ade9d5d58f602667e548517c0f2c4df926da4b946584f85cc16", &(0x7f0000000100)="b07a57f788125e7f3a45970a1dd1206e5ec8ba802624c086fdd0ca35a97fd3cf3fb76c83b3534afb2ee60bd955041ca62536a1efcf79b9920199f3404cdb3d1edb560e2639dcb489bfbaafd8844a374e4e4727a0fea7460419b33a8f73c83085b82590e498e3999d2af55fae35b1a171787b7acbb515c6dfbe6cfba032b6"}}) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 18:05:23 executing program 1: timer_create(0x0, &(0x7f00000001c0)={0x0, 0x9, 0x0, @thr={&(0x7f00000000c0), &(0x7f0000000100)}}, &(0x7f0000000240)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='timers\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/152}, {&(0x7f0000000380)=""/7}, {&(0x7f00000005c0)=""/4096}, {&(0x7f00000003c0)=""/244}], 0x100001f7, 0x200000000003) 18:05:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=0x0, &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2, 0x9}, 0x8) close(0xffffffffffffffff) [ 303.082396] sctp: [Deprecated]: syz-executor.1 (pid 11861) Use of int in maxseg socket option. [ 303.082396] Use struct sctp_assoc_value instead 18:05:24 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3000005, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000000000)) unshare(0x28020400) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000000240)) pwrite64(r0, &(0x7f0000000040)="52c63f7b022f96ce82947035cef32286c429752cdf1ae10bed608698af2e55f280fbe112a390c4151a282fd6f856bcf677849fe8b5687e30fcb9329ea98140ddb4057247b61cb8b793bd7193633d6e1a4d88ee9e9fcbfd3df5e6c8e12832a011e7269eeb0ad1a14b96ebdc2ac48e8ef3ef806eb20aadbb9aebbc5572f06b3563499c6babf869e235404249e861f82a4e2a911169c438fd46b4ec2754d8058c9d66b9f510f8a8ad0f297f0cca084d752e55dc4736e6ff7ff8cb7ee08e61da4a804fcf2e16e227e2fb3ede7ecc6941c2d048a5001e56f50e64fd1dcaddfc1e43a5c8464322", 0xe4, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8) [ 303.135952] sctp: [Deprecated]: syz-executor.1 (pid 11863) Use of int in maxseg socket option. [ 303.135952] Use struct sctp_assoc_value instead 18:05:24 executing program 1: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/32, 0x20}, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/29, 0x1d}], 0x1, 0x0, 0xfffffffffffffefa}}], 0x1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000002180)=""/223, 0x1f4}], 0x1}, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/224, 0xe0}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0)=@hci, 0x80, 0x0, 0x306, &(0x7f00000024c0)=""/129, 0x81}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000280)={0x3, 0x89, "213e12b59816b3962055baae8648496af87a1392c23fcea9fdada0916ddd76fd0efd6c9ad74dc9111ac5bcd02342dc456e96c17975b25dee40eb9f70217bff376657b1cbfefc78526042617263d59af560e46d64f974eae44ad3ee0dc8adfc70d38a758bc9585b9367f0b865c457f97eff998e3ab535a64a1a921046eff4f3a933f5e577486aacce83"}) process_vm_writev(0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/39, 0x27}, {&(0x7f0000000bc0)=""/139, 0x8b}], 0x2, &(0x7f0000000e40)=[{&(0x7f0000000cc0)=""/243, 0xf3}, {&(0x7f0000000dc0)=""/51, 0x33}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 18:05:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.stat\x00', 0x0, 0x0) timer_create(0x5, &(0x7f0000000340)={0x0, 0x2e, 0x4, @thr={&(0x7f0000000140)="a4fb74622980fffb306e1a7fb84c67a518b4a5f844f79c9d584d5fde51374eb2357628a71f150ab457360886caab153ff5eba2e1fa2d94bc562a672933111deb02e6382d221ac3c46d368d56637d3832d31435fa2f506f5f5c2dd23d8e484bef605d5db1ba220efa1793e2f9b36dda3174e7edc6dc65c10ab3f383dbf40729aade1166703727e6b15f17970834acc75d7ed983503cfd06aed9ccee19c56f7c1faf8f8b21de50dbcce9794e471a12628813c53533543bd02b01e558eab20e147c1291b759d0cfdd5f2605056de50d2a9ee62d68fe53ef21853d0a9662325c353055ba758ea2d38e7d0a5f81243d4b", &(0x7f0000000240)="f922d440ee9f92d69b3bee4e0b338ad2d5f7217eac3b52c83bfebde5d6b7309ec0eaced95f77cae083355afbbb7cfd739b49152e13ebbf241c77d40b30522fbd23d7af3fcf4460a6d831ea996e3cda540f13d1b8f28350b2ceaf0712e9799c1bffa06acbcc9b04a1223bff9d1999f1ea66d2a68e938ede7aaab6c0dc2e13492c55442592e355ae0bfeb981e4bd3f7c7d0bd3caf1a1f44ffea373f18efeb5e444cacdbce228931b14a9b403b42c16aa92bf1bcc399df531fd045dff828aa77a65647bb276b656676a5032445812bb0f983c4442fd5c89455a57c29f20990d9375dd1098e732aa28df75d43384c7350d99240be7cb"}}, &(0x7f0000000380)) connect$rxrpc(r1, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x24) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000040)='fd/\xe7\x00') ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000400)=""/148) connect$vsock_dgram(r3, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @host}, 0x10) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x0, 0x2}) 18:05:24 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x6) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$binfmt_elf64(r0, 0x0, 0x0) 18:05:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c00000001b0001006f73adb800000000e0000002000000000000000000000000fe8000000000000000000000000800aa000000000000000000000000000000085b65759c3bbdcc8537fc792542fcee9a988e707eec", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba6b6e0000000000000000000000000000000000"], 0xc0}, 0x8}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20600, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x1, @rand_addr="4b02b6531900b84c193c9e38ca8e27b1", 0xe47}, 0x1c, &(0x7f0000000080), 0x0, &(0x7f0000000080)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}], 0x38, 0x80}, 0x81) prctl$PR_GET_SECCOMP(0x15) [ 303.651670] sg_write: process 109 (syz-executor.1) changed security contexts after opening file descriptor, this is not allowed. 18:05:24 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x2ac00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f00000000c0)={{0x81, 0x3}}) r1 = dup3(r0, r0, 0x80000) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x7, 0x3}) 18:05:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 18:05:24 executing program 2: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) setpgid(r0, r0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000001640), 0x4) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000100)={0xfffffffffffffffc, 0x3, 0x3f, 0x9}) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x1}, 0x0) sendmsg(r1, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x2}, 0x80, &(0x7f0000000000), 0x159, &(0x7f00000002c0)}, 0x0) 18:05:25 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000903000)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="f979185faafa164ed3418b37f91c2b00c20be085a0a3d7f6c61fba8c76"], 0x0, 0x0, 0x5010, 0x0) mount$fuseblk(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x20000, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo@') remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0xffff, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 18:05:25 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8001, 0x400000) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x42, 0xaaef, 'lo\x00', 'veth0_to_bond\x00', 'irlan0\x00', 'team_slave_0\x00', @remote, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0xf0, 0x140}, [@common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xffffffffffffffff}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x5, 0x3, 0xd06}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x4, 0x5}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x248) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) [ 304.047087] mmap: syz-executor.1 (11904) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 18:05:25 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1000000000000, 0x0) ioctl(r0, 0x40044160, &(0x7f0000001f64)) 18:05:25 executing program 1: r0 = dup(0xffffffffffffffff) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20100, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000380)=""/109) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) close(r2) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000180)) splice(r2, 0x0, r3, 0x0, 0xfffffffffffffffd, 0x0) socket$rds(0x15, 0x5, 0x0) 18:05:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x94, 0x0, [0x9e]}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x480a00, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000100)=0x4) 18:05:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)) fcntl$notify(r0, 0x402, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd}, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x200) preadv(r0, &(0x7f0000000000), 0x1000000000000293, 0x0) 18:05:25 executing program 1: syz_execute_func(&(0x7f0000000100)="3642926433ef93f6c89c430f18b03300000067f2440f34a2bef717b2dc7518ffc4e24d3ed8d6722b9e66460fd9cc000000615167660fda9803000000aec4817911350e000000e567066672dd896544447e") 18:05:25 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x86d, 0x90800) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f00000001c0)=0xffffffff, 0x4) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x38, "4a599d6c97043d3380fd3d8516fe1ef269d551437bf0a5c07cd610192a6cdf907c4805b76ce8c2bc73ab8e238da19d301ade4950916e48de"}, &(0x7f0000000140)=0x40) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000180)={r5, 0x9}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 18:05:25 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x1000004, 0x10000032, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000000080)) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x20, 0x20000) 18:05:25 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x4000, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) sendmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=@canfd={{0x0, 0x4, 0x0, 0x801a}, 0x2d, 0x1, 0x0, 0x0, "de5bee74a7a4ff655a78344a4a8d60db48ec87cae53c64788ef570e7886aa66e186a339e0813ba0735158b08c2c5f630eb03a7cb5fe72db883f57000800d03e8"}, 0x48}}, 0x4000004) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x2, 0x0, 0x201, 0x8, 0x1, 0x8, 0x8, 0x7d, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={r3, 0xab, 0x1, [0x101]}, 0xa) mincore(&(0x7f000000c000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/28) 18:05:25 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xc12b520cb2cb8229, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000002c0)={r3, @broadcast, @remote}, 0xc) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) recvmsg(r1, &(0x7f0000000580)={0x0, 0xfffffffffffffe6c, 0x0, 0x0, &(0x7f0000000080)=""/81, 0x8}, 0x40002102) [ 304.902991] protocol 88fb is buggy, dev hsr_slave_0 [ 304.908807] protocol 88fb is buggy, dev hsr_slave_1 18:05:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x800) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast1}}, 0x4, 0x3f, 0x9, 0x59}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3, 0x7fffffff}, &(0x7f0000000240)=0x8) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020012, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x4, 0x0, &(0x7f00000004c0)='8)1z'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 305.036685] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:05:26 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x20) mount(&(0x7f0000000380)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240), &(0x7f0000000080)='.', &(0x7f0000000040)='\x04[\x89\x8fs', 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000080), &(0x7f0000000100)='.', &(0x7f00000001c0)='mslos\x00', 0x5010, &(0x7f0000000580)) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)={0x2f, 0x4, 0x0, {0x0, 0x0, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000002c0)=0x2a, 0x4) mount$fuse(0x20000000, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x7a04, &(0x7f0000000440)=ANY=[]) [ 305.167622] binder: 11947 RLIMIT_NICE not set [ 305.215820] binder: send failed reply for transaction 2 to 11946:11949 [ 305.223260] binder: undelivered TRANSACTION_COMPLETE [ 305.228418] binder: undelivered TRANSACTION_ERROR: 29189 [ 305.241128] binder: 11949 RLIMIT_NICE not set [ 305.246366] binder: BINDER_SET_CONTEXT_MGR already set [ 305.251979] binder: 11946:11950 ioctl 40046207 0 returned -16 [ 305.266258] binder_alloc: 11946: binder_alloc_buf, no vma [ 305.272131] binder: 11946:11947 transaction failed 29189/-3, size 0-0 line 3035 [ 305.286777] binder: undelivered TRANSACTION_ERROR: 29189 18:05:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x800) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast1}}, 0x4, 0x3f, 0x9, 0x59}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3, 0x7fffffff}, &(0x7f0000000240)=0x8) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x0, 0x100000000020012, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4, 0x0, &(0x7f0000000480)=[@enter_looper], 0x4, 0x0, &(0x7f00000004c0)='8)1z'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 18:05:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000080)={0x3, 0x70, 0xb866, 0x3, 0x1, 0xc1, 0x0, 0x2, 0x19004, 0x4, 0x9, 0x0, 0x200, 0x6, 0x100000001, 0x2c1, 0x7, 0x5, 0x4, 0x7fff, 0x0, 0x3f, 0x100, 0xd9b, 0x1, 0x0, 0x8, 0x40, 0x6, 0x8, 0x0, 0x80, 0x8001, 0x0, 0xbedd, 0x301e7096, 0x273, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000040)}, 0x8, 0x0, 0x5, 0x9, 0x3ff, 0x1f, 0x7f}) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 18:05:26 executing program 2: close(0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000980), 0xffffff4d) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x8041) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x80) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) [ 305.520106] binder: 11958 RLIMIT_NICE not set [ 305.583411] binder: release 11957:11963 transaction 5 out, still active [ 305.590476] binder: undelivered TRANSACTION_COMPLETE [ 305.597513] binder: send failed reply for transaction 5, target dead 18:05:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x20002, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @dev}, 'ip6_v\x06i0\x00'}) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000400)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{}, {0x20000000304, @link_local}, 0x3, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0x34c, r2, 0x600, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x138, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4c13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2bd5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd23d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb805}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x95}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4800000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8831}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x513}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40041) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000000c0)="a93ef71f643544272d1d1c63cedb9f80371c89441d57ca494beaaf35871903ad79ab7fa87e5ad90a88d0af1034d2760e3e2b4545cd", 0x35, r0}, 0x68) 18:05:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0af51f023c123f3188a070") pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) r4 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10008, 0x0) 18:05:26 executing program 2: move_pages(0x0, 0x7, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f000036c000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000029e000/0xf000)=nil, &(0x7f0000157000/0x4000)=nil, &(0x7f00008ea000/0x3000)=nil, &(0x7f0000a83000/0x4000)=nil], 0x0, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0xffffffff, 0x2) ioctl$EVIOCGKEY(r0, 0xc0487c04, &(0x7f0000000000)=""/226) 18:05:26 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept4(r1, &(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x800) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 18:05:27 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x30b, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080), 0x10}]) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000280)='\'', 0x1}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x2, 0x290000) tee(r4, r2, 0x8, 0x0) 18:05:27 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r2 = open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) timerfd_create(0x3, 0x80000) futimesat(r2, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r3, 0x5422) 18:05:27 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000003c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000140), r2, 0x1}}, 0x18) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000400)={0x0, 0x0, r1}) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000440)={r3, 0x80000, r1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd00000010000100080c1000000000000004fcff", 0x58}], 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000480)) 18:05:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000000)="36d38e843f1e4bc580eea3efcd84d9aea70d730e92b250841d", 0x19) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r2}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r3, &(0x7f00000000c0)="e68acaad54d26c9ff18cc906e0bc9ca7b839140bfa1f95e0b3802e4e0656e22c633851f98cf17a010000000000000054a823746567a718c3aeb6461bc5c41964c6e96f083510c2ac2963bac181c0d3b8"}, 0xffffffffffffffe2) 18:05:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sctp\x00') openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x10000, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) fcntl$getown(r0, 0x9) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00'}, 0xffffffffffffff94) sendfile(r1, r0, 0x0, 0x8) 18:05:27 executing program 0: r0 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r0, 0x29, 0x2000000000002e, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xc21) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 18:05:27 executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)=0x4c6d647d2af85ede) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000540)={@remote, 0xb, r2}) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000180)) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000140)) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000580)=@nfc={0x103, 0x2}, 0x17, &(0x7f0000000000)=[{&(0x7f00000001c0)="4db5c6bbf148f09eef00", 0xa}], 0x1}, 0x48041) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'gretap0\x00', 0x9}) 18:05:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f000058f000)="440d22030004000000001700ec", 0xd) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000000c0)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x6000, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)={0x5, 0x1, [{0x9, 0x0, 0x4}, {0x20, 0x0, 0x5}, {0x5}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0xd6}]}) 18:05:27 executing program 3: r0 = socket$inet(0x2, 0xa, 0xffffffffffffffe5) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x1f, 0x9, 0x8, 0x1, 0x0, 0x1, 0x4, {0x0, @in6={{0xa, 0x4e24, 0x10000, @mcast2, 0xc33}}, 0xaca, 0x0, 0x4, 0x0, 0xaab}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e24, 0x2b22, @rand_addr="2ef40411dcafaa71842699e39622ffac", 0x5}}, 0x7, 0x0, 0x2b8994f2, 0x4, 0x52}, 0x98) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000200)=0x10) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x40000, 0x40) write$FUSE_WRITE(r3, &(0x7f00000002c0)={0x18, 0x0, 0x7, {0x9}}, 0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={r1, 0xfffffffffffffffe}, &(0x7f0000000340)=0x8) ioctl$KVM_NMI(r3, 0xae9a) prctl$PR_GET_FP_MODE(0x2e) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000380)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000003c0)) ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0104320, &(0x7f0000000480)={0x3, &(0x7f0000000400)="41527248df37691b00c8da19926ed6bfae80df5ea4f867ee98466ec48cca52ef0f2ea87e185fecd11b1a2fa463ebf66fee65be9ec4b2ed08b4b8ba3741e760031343a3c28c102ea75f69122ea9def1838943dcff84b7aa8efe470215a2198b6c61b82ab4fe2d45896b93181ab2e5e4"}) listen(r3, 0x3f) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000004c0)=""/12) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, 0x10, "d0326457575363d124538b7731a84b72"}, 0x16) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)={0x3, {{0x2, 0x4e24, @rand_addr=0x200}}, 0x1, 0x1, [{{0x2, 0x4e24, @local}}]}, 0x110) sendto$rxrpc(r3, &(0x7f0000000680)="633ca5672772cbeeac111b7987f570318c2f50aafb25f33dc9eb41a9ffadf1f983e837532fef882a1640249c2e50f68b98e2ae51813fe8c16cd66c4f444d701a47d73103cd8c398378ed5287d125e74f5cbe46fc394e4dc019be5df6a918b11dea91e810de2c844928771c89c2911687d5166fa171b3cbd528585fa287a85fda8cb712d0aef8ccb8500566c103aacd05c0e390b33cc23e8cdcc71628392606ee953199bb28deeeab862602", 0xab, 0x0, &(0x7f0000000740)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @rand_addr="425aa10fb3f232078f08e0c487253a75", 0xffffffffffffffff}}, 0x24) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000780)) getsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f00000007c0), &(0x7f0000000800)=0x4) mount(&(0x7f0000000840)=@md0='/dev/md0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='selinuxfs\x00', 0x14048, &(0x7f0000000900)='@({\x00') ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000940)={{0x2, @addr=0x8}, "864b48f7fd1cc8a6ba224bec2ba9fb615cdfbd7dbd9569f94c9d21b286ab569d", 0x2}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000a40)=0x1) sendto$rxrpc(r3, &(0x7f0000000a80)="a59386cb064784cf2a51b4806e4701e8ddbfd49b5739c99d9a8d3e72d6843ee377ac18a02cff00f2071714cc802a1ef82fd96a7c859f4234aba3b0d6d24a8ba3f38b16161c3dafb11a14af0ac5b5cb6559780aad13277b215304bded658edd5a87b3b3687341f2a8c970166fe037010c204c2599f6cf318c47b26ec3cf2850183613491722ec207b18aed00ad6986040b582194ff4dc9f5d19c7faaf608908313a9c4e9d65a368b9f3ee27da51d3a5936aff9c2a6191e684b08c37ee274d2b", 0xbf, 0x40, &(0x7f0000000b40)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x800, @dev={0xfe, 0x80, [], 0xb}, 0x3f}}, 0x24) r5 = socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_LSEEK(r3, &(0x7f0000000b80)={0x18, 0x0, 0x8, {0x2}}, 0x18) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000bc0), 0x10) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000c00)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000c40)={0x4c}, 0x4) 18:05:27 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000140)=0x54) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000040)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) setsockopt(r4, 0x101, 0xdb83, &(0x7f0000000080)='~', 0x1) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000380)="29f42be182b8dfecfdea3b448fabae9650b80e8be11f6feddc6b4ea9baabb295edcaaa7d6fbd281050b7fe475e4af2c78b9c5da7385011ff6dc29029e5651e436d49adfb40ef877d73", 0x49}, {&(0x7f0000000400)}, {&(0x7f0000000440)="ed97625474a2c2d36043606bf8f3a1591d28f86c40faf30a34912b8566933a8d58b654256450630751110989b2a3abe14b728e4e192e6d476a6ada4100fb533ffcfdb09d6c14076dbb4b68c288739d9b9f04f616657a4c142d080719b35881ec674546bbee436cf4989a0e0cc4e039933d1b847eb4553807ac496143b80079c9db3c887a9cc78225416dfcbadc3c1db0569f6a807696a5b18a07173dc5d7af0541cbf1cf36def4d7c6d7da46dd58543f00ae4dec2964f72b3bfef723d0b16899a178e09a4cfdf5371abe94489edae5aac6eb245ba69b512008a27faf", 0xdc}], 0x3) 18:05:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:05:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@sha1={0x1, "1062cf6a33e1b440d878313e0d951f71dd8e2c99"}, 0x15, 0x3) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000f8f2bf144cec02fe0000000000000000148cce670aa0f58d87f78acd060700000000ef000000000000000000"], 0x16}}, 0x8000000000000000) 18:05:28 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001740)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$FUSE_BMAP(r1, &(0x7f0000001780)={0x18, 0xfffffffffffffff5, 0x7, {0x1}}, 0x18) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)=0x1000) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001800)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000001880)={{0x6, 0x5, 0x1000, 0x4c5, 'syz0\x00', 0xe5}, 0x5, 0x10000100, 0x4, r2, 0x0, 0x3, 'syz1\x00', &(0x7f0000001840), 0x0, [], [0x7ff00, 0x80000000, 0x101]}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/.roup.stat\x00<#\xfbWKM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc4\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,\xeb\xd3\xb6\xab\xf6-\x99j\xdd\xb0z\xa3\xcd\xe4pe+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x00\x00\x00\x00K\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) select(0x40, &(0x7f0000000140)={0x1f}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) openat$autofs(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/autofs\x00', 0x10000, 0x0) recvmsg(r3, &(0x7f0000001700)={&(0x7f00000000c0)=@ipx, 0x80, &(0x7f0000001600)=[{&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/188, 0xbc}, {&(0x7f00000013c0)=""/196, 0xc4}, {&(0x7f00000014c0)=""/94, 0x5e}, {&(0x7f0000001540)=""/179, 0xb3}], 0x6, &(0x7f0000001680)=""/93, 0x5d}, 0x1) 18:05:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b4000000000000002d0a0000000010009500000000000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) 18:05:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2e, 0xa, 0x0, "17ff030000000000005a0f9cc0fbda7643ed12de15d5036177e48500"}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) ioctl(r0, 0x2, &(0x7f0000000000)="b7b9a94e2538affa1d8990821a6bb195306bebef89623e1d48d780fe44bcaac3046dc01032ec33") socket$kcm(0x29, 0xfb1a8a2f4c977a4e, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0xa0000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000280)={0x9, 0x5, 0x4199, 0x8, '\x00', 0x7f}) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000380)={0x0, 0x9, 0x100009, [], &(0x7f00000002c0)=0x200}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r2, 0x80044323, &(0x7f0000000340)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @pic={0x6d, 0x1, 0x5, 0xa7, 0x3, 0x7, 0x8, 0x1, 0x2, 0xffffffff, 0x400, 0x6, 0x3, 0xab, 0x3a1, 0x3}}) 18:05:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @broadcast}, 0x17f}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'\x00', 0x100}) 18:05:28 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b4000000000000002d0a0000000010009500000000000000"], &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) 18:05:28 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) accept$unix(r3, &(0x7f0000000040), &(0x7f0000000180)=0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x19, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, 0x20) 18:05:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0) fchdir(r1) mkdir(&(0x7f00000001c0)='./file0\x00', 0x2) r2 = inotify_init1(0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x99}, 0x28, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}) r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') dup2(r2, r3) 18:05:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000002c0)=0x5, 0x4) r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d", 0x5, 0xfffffffffffffffe) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000200)={@local, @multicast2}, &(0x7f0000000240)=0xc) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r2, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) [ 307.878936] IPVS: ftp: loaded support on port[0] = 21 [ 308.208340] chnl_net:caif_netlink_parms(): no params data found [ 308.295627] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.302293] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.310754] device bridge_slave_0 entered promiscuous mode [ 308.323213] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.329721] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.338480] device bridge_slave_1 entered promiscuous mode [ 308.377196] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 308.388674] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 308.420648] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 308.429493] team0: Port device team_slave_0 added [ 308.439378] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 308.448257] team0: Port device team_slave_1 added [ 308.457221] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 308.466034] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 308.607472] device hsr_slave_0 entered promiscuous mode [ 308.862556] device hsr_slave_1 entered promiscuous mode [ 309.083641] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 309.091242] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 309.127313] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.133933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.141110] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.147752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.163688] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.175381] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.283550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.299430] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 309.313941] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 309.321953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.329881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.346600] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 309.353389] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.369608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 309.378306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.387545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 309.396064] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.402620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.427307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 309.436187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 309.446903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.455252] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.461789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.475650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 309.483229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 309.498268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 309.505334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 309.529156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 309.537585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 309.547626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 309.564344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.578134] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 309.586024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.596420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.614219] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 309.627859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 309.635298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 309.643922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.652814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.661574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.676427] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 309.682571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.708236] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 309.730672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.827570] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 18:05:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x21c1) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000001140)={0x3, 0xbff, &(0x7f0000000080)="589274ff0467dbf5122b31a4519750e7be73e7a6e2c64985e460c33c4634c7a9a61f7168a45e01b984f062bc1e44250e47d848116a8f95fb192468b4d615ec7b6152cd7324e7206450332225c0705d5e591fc5a9ea36fb3b0976e9406b3c38da80798dca4d22c042f140c762d8c94add97b0ef0cae5acb868b79b7c13644ca770eb52f383268e957dd00dbbe3c209fdde5957aae7c86f3bb8cfc843fb63b6c8963f997ad0853adc7e066dc45a9171fc97c4f1dd0a46c04e44ba82029de66943bf8a59225504d8170abfef761bf7c25317031844486b539bfba5fb5a59fb6029fd7138ac5a76b2da7d48c6ee3c1955fed600641816fd01d795bab75636b005c0a1ffb90b2475cab9f0f9d9db3e08bf6847368f2383c4ab3dc747fa2bab4cd904ffdc1b9a1f776c2700634a703af407ada9ba5231d6e981b180117612ba97f37a9f5fa2d65ed8a9cf98834e1da11b13a79549cd958618398f72152c2e71564cf664d0c6032d54822efbd4bc912d483b7d2e554e35e7350528b405dfb0336d5079872056e9d5637e5a1d611e2844346cadb458586d75b99087f0eeeb9df614f11fc1a1be3150ab399533e521aac4b88b4cc63d4c5cc0605fe32a0fed3b1f6eca1c3f5a8c4e45f0f7300e7b7a65d470c1306b1315d30336ba106b0a3b8f2c02f6500cfe2915ae1a2d7b4cd63703f882102be70ad6cd831a25ac54d3b42ae3cb338682dd8566e85a6cdd9712092b0bca802decc93e243923e270f497466e2be5367df69dd09fdab10e1b7ec7ecd38b4b124f49dbd7ea90ddef8874104f3ac6b348b78ead50272bb3d18758cf1e32205954eecbc0593e9a20d17f10a0f908ed3ebff920cc89bddc03d79ab2252f7147e664c8dda35b242f91fce074f808810479c2d5ef157bc88bc7409d77ca31a1a475be34e71ba17d92deb32fec53ec5b89a2fc12b2e12f8abbf7bfd59b231137a50bfad6a1ce0c5ce4b05eea3c9279385e883623446f19f12eec747ef736860ac7a40c93973e5b5733f2b96ff799e79dda1118421bbe16990981cc27f078c62f513600d4a964a910de1d55d64b052a3277bf5ab65b7085a752bde6a3a2c2980ecc65c7db4b84ba9fadb8a8b18829249701750e3fa835eb8339113afd30e41d6255fe384d811ed218fb2e4cf9b16a1246ceeb651fc08278225153a85cd14afe7b542ca21ec7f2b577243d8b7732101544e2361a06de84cb8da454eac278ea8c37019ca6f72fafe01d827731aed2ac50dabe10fb64a4f93d6aab9bb90d43bf7833850c276c90315742b21d78c0befddcec4997f04d9489f200463c9e5ba33a619d669d4a916c7076b5a2e57731fac741829df1f26fa767c129b176df5acee933a6709a05647892a4f12634152874d6e6c978281d93c3fe2820baa24cc6c105b23bd236cedc9a742b8c429a19cd16dc06bc344245c2766795f9bc07a289cb6cbfeefaf2fc20f3a7cd4617a2a110a3900db77d86720725d7d30090a4e8a72d028ef917d2a56952be18fec9e321a5f76c7349654c4e454bba248033289999dff87e1ad8ef174c2a97400b4c86f00d309575e24687a334ec5d59adc1811b12894b3b210f625406c01cb904a196c5ef69bf58b81c480a9d84f04fcace8082a066cf7fdc15c06035307ce3de388b243d2d92ea4ee6cdc3b619e05872f693a4d19fdd3ffd359e76bc1dedb88c3127abbf0cac334ecc26866b5de63e52b98a7029671a38897902bad002f29bf0bbae574452d77a3820336fe479e46b30c866c19ce2b6889b3f265d04af756bbb0f7dd2392abd614beece5971bdca0ed784027fa4e02813abc83f28f79072b48aaa1af1ef2c44950e77211640800d98fc228c21984729aac56b8a2a1935712f06f34a04e0411490591a2024c11769571280961b121ebd8bc47f6620e7a9f4cb029d990ed4aefa3ae5ca23a572cca04e92c9232aa2cfc8a432481e52fec9a6ed07567a32934bade24c960da20c4cbb9fe215dc8406c38711aea654958bbc67194ae91b8a441a89164ec77ad020b7b8af3531e0e805782c0e4e6b98dc8ba8cf577cb0720ad6e1a51212235fa55540e97b6cd11bfa14a988e344eb631db61b4e03b0d9eb2952c5b7f4e6aa64775fc9305d479c74abab03db0aff4447aff025c1372d4e4137808abf92c2233f63f18e9185b1e7adc985639c5ac7d9296fb5f2347fb1cd0b346a6c21aaa19dba9ec05f51ac65f18975c0d85ffb15a88c959ed3250ebf3047b4a67f2de312fd791dfe075da1e9a94010d5e5f350629fe90cbf3532f5a9acaa5321fe2579c016b538a74f4ffe871a4012ca415ee925d8c644a91a99e666456a33de32dd8011c8ca1588c69ca77dac4f116fa5caa6fa1f3b76f4ca55ba69c547728b7336c086fae4a9d145d0f75c6382a55a4c98a3ef2ddec6fac807b3ebcc31fe189aee0e54c60eddc8d9027d290dcb9494222cc6218487567561f9ee1cf3a6fb63d3f2410f8cf600a2b65b08c2416c9b902245840aa71a99b7ccbd1e95c2b0a1c93dfe19f1bd080db9e07e442db0e312d75dbabcd860a9eb71df472db6d9835cc62196eb16ee6f94bdac3097293c4d24ab8494bb13b4589a91c2fb52681448ddc89842881b5908610f834e55c72601d4975cf7b922395a7dcd636308a1578b793b93473f3f30f96aca79441a79ac1c5f334a01d131ff3facc91a03ca98a20c2f4f1ee66d6056ff06d4a6b39618f267027b07eda2ebabf2e34af9f5939ac7b12f52844623c11a33fc8e6e11784affe0699148ff0b3fed1bdc43d600d384e562674444877e6e12d34193ab06aa7d1ef6d4bde13f20566328fd977fc609c393406ed03204696c3f2683932101dc03e987bdceeaf590e7641281bd19df95f1ddcbb0a62938844b85874b51607be24086aab619e54c3c859a9993a68947faf4afcbca047c7fdce028060f3c5b4aa3fec2c3a7f65f04dbc68a0c25a00baff16114659ffa53798b65782ba863d22032eedcbff3d193a331dc62f90886c0ba6ba4086d825f56efb9ec519d4c0c6ef914f04f2100dcc7ee1f186890bf5cfef8f5d774e086bb54f4b37efc8e000c2ac669bc2217dcf79f0a0c05ecec9dea09b572c650a70d71a8faf09064b9e0eaa8abdf4cdad8871555e4b8b3aa26f331c153bb24e5430257b6b2cf21f515b32b93c497edd5083ca8a33dbd5734677c6c3d817cefd742c5179b6150f92088b1c4241733a602a4b004aae8fe8897a62b4df8eb6ba15b6c032105ab7c9bdc0df3c79e012bf98483160d3ecd27b22a5c8203592457be7274c35107f390f29468626ca8f66108b0445fec2142a161678e7b6126496797a5ce277bf8a01468cc9aaedbfb147232dda005c23fe784227011d37510e0b6059f8e8921cfbda4fee460a2f90504e82c972b34d01a13b81a964d1f2b438caffe83abf73273b3050d87fd5e5b9d96122214a99c0b50100867c7872fc3077d3e7e04ffd0654a2715551e5dfc21285f8ca8d8254e5a69621d29eae287545db15d36c854042a6c9513e9ad04e17c75dbdd674134765c6987e4be61a1dedd2f5e6d39fa04474b9f009e14563b4c231fd3aa6f46e9cdccf53e4cfcec03c3bbb9c7a1fb673207344aceaa18cc9434996f71265b81c50d4c1000db59a7a851c9d87186116bebc76a84bd3b4a856bf02d1a039166a55732a490384a042b920fd222b2ba04491f2481f08aaee087fb21ac73025d511f638d12719987788b4e47b8ab91065ffe8e562f0ab42309b9bb6343e103314cb055a87e7dfc333f9878173c31000987e8512fb15ff6f3e01095797a65f78b72c22ba256375f898f09adad6a0b8f073697b4a3ef84db7580936feaf1e34a5c1b3df8d174187bf3885e26d4bcdb840395065a84a54a234e7ec726eee65d72b19c57c920dc187bad8c8a5c61e0657bb35257c7ffdb411cf6d14c61ae09a3991a8f41d70be6459b067b00f41545e882a9fb06545b76b7f5ceb1b6dcfe7c5799048cd3fe475d190382543fbfd605ed2a960b9e942cb40eef32d07f6ac3e58e606f6b1998946a9842146fb1f1d82dbe86e378b96a6ece15e1216a8cdd5623e96668ccb8f923cf7aef034696b3492a87dea3a8bd228482bdee2563767f05e5b9d79a9ad3148b84fc32765d663bcecc6848b1b3b173a6a0620efed7a7fad4b022a208b9cc384d5103f1586b7e9c06afc3dd9f3140f9a79af65bc84629b879987e8dc1d4d69d76e3c7090df59276e4fbe2a95feb99c72a9121bd7ad7e9011fe9c1b3b09ab04b3a9eb9023de4cbe6423262fd7135485efba49f1d892589e8b7ff7677adc80be3d35feb4974ce686c34b576d2172f8f224c460d6ae024c8fd154da5652b721054aeb4d8d52fa9944e314c3da4cfdcd0e818a3f23cfd3f59112c5be1ca91d73014e0864bf39d94725e37f333fb9a696f60e4237b26566aaafe24e80158f63a52873763fc52ee1d6e50891ffb9b61cffeb03d7e9e24f7cfeacb4ca89bae3a356dca7ea4939947dd0bc848de574fe90676aa7f1042377cfbb95668d8c009bf570ae42836e8bc132a69a7dd0772ecb651d8e0ca3debb2d1e056903879a2112ebe94ce0c29248dc443846171253984ddb0532ccc8197fa12b7a105bac5ff23e600413235989d64fd035ff03d50e9cb3b98fbe00c8a85bce25e7a4560b829fe703360eaa5330418ac92d32742c38e7dbe358cafd3582b60ca083e435e280fc2ed4518509654c200e34e4badb9e0d1a8fa31cca4f9f8e82753f6d073248eceef4127a601b4212f9fc9779bbaf181c7952cf9af2fe0219342d4da062057eb8c5e7aec307b4739be81a1675ec0340d7aab540c8ebdfdef69cb14a4ea5cdce0a8f02835be361d46721079378fb0d139d321b9d8c99a8e7d83c669b737dfbdd73ec6bb029f1b15175256973efd9184176fb38268c179a23e280a16a007bfdbc66ddba96f5afcb0352cef096893afbac05855c9ebd11950ca0759e13ac29a573b0cc41fb0d4eeb1b8b40e4778f37fd2231eb0d79783e7e297a79c3c94fe24b05002f28507c13931107bee1850fa80e52485c92fb13d18759b9ecc5ec64b5ccfb141504284d30383aa5139566c7f134f40c15fbe870c42f1c8123ce8dc4f6b877ba48233aa8cf733b2fb160c1fdd12b5977c30148976a1b6434ea8c5436043ba7809656d28dd727fdb7b18013d364ad5cebd937e0a0e7cb14494aea66a54640dd962a61d74512d72c6c48964a8e31ba90a8568ccf91dd6ea0f836f5fc248bc1cb3046508e9edba10ca61116adc157fc2f1c2d9201a63833e803db8c1422d1279857055edd4e008edae91162784f080cfc751dfaba82f886b4e6a24bee433e058466e929b37a65fbde4535f26fd030b68be7af5da966b43ff03e0310a00df5c48a22cce17d28bac2ecb43cab6963ccb3c333cc9445df88b771cd35dce7ef1230a9735b477b48f3931aa19530fd337bc81f9461f10a5b19f852b9473f1076239e94e64b76fffb941eb9f3d0f3038dc7ccc7146e01b2f9a9981c96fed7486553ddadf85fc7375642bd4ba6bfb3ba86aa30748e5b7aae9d8b0caab3c45203f809462d581aae8966aa4d1835587ecf2180e54df825ce7ea195b265aee1870451c179a77e9d690730ad20809af4ce6eb8d4a3dd448215ea819cddbb41d45fb70fc6d5b5f404db55085aabcfd11ef102002612ff430c4526c92dde84769a5bb01e1cd7178b78a1569de3cdedd6ed35c4ea5052a2b78186b64c224cd41bacd066edcb0e2a77535f869a1706b516a876ff7926373a855af36e95c3dea46d56a6abe560891aa1", &(0x7f0000001080)="f5aa8c0a40bdcb6521ebbf352fcff9058cde00348f40a9dc27d8ee78ecd55dfe58473583939ebece477445cf7ff3c5ef3d79bd9932b69a43e6d9cdcdf73dbe7dc68cbaa0da7784e6f174a5250a8a5bda08de9b76376bab186f52a644899384c7ded5c5b2be492a1af42cfd534354021f4e95c6ce3b04e543c6daf89f951c60774e14d0e1170fa285d5", 0x1000, 0x89}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000031000)) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000001200)={0x0, 0x0, 0x2080}) ioctl$sock_ifreq(r0, 0x895e, &(0x7f00000011c0)={'veth1_to_team\x00', @ifru_mtu=0xfffffffffffffffe}) 18:05:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0xf, 0x5, 'sha1-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x800, @ipv4={[], [], @multicast2}, 0x4}}, [0x1, 0x1, 0x0, 0x80, 0x81, 0x10000, 0x8000, 0x3dc, 0x7, 0x6, 0x7c9, 0x7, 0x80000000, 0xcb5, 0xfffffffffffffffc]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0xe2c, 0x20}, 0x8) 18:05:31 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x6, 0x0) listen(r1, 0x0) r2 = socket$inet(0x10, 0x3, 0x4) fcntl$addseals(r2, 0x409, 0x4) write$capi20_data(0xffffffffffffffff, &(0x7f0000000240)={{0x10, 0x3f, 0x1, 0xfa5e0ddc158966e2, 0x8001, 0x8000}, 0xe3, "a07287cb74d8a7ef9e6430223de24e5a361d612bffde2960510e066fe56481b181ed9cad0ef536ef13b28107f8c6d1a710a0831862953aa8ec6a75439b6bf8c35d0dd09cc57c5724b7c87b9c2c5117881077bb1952aa24b2aae936b58cd3c3dd6b5230ff3757981ce82de7ce005deb7292b67eb9185ca30be1c298229db35fd6f99e29edd29cf57e2a2612de6e14fec190d7e8a4f90f5ab0008a9e269c6f49b5f15f6e4e45cf81851a6d9bd644409010376d6be7e439e83a21d105e07770b595919c468d49dc11a734b570d8d7299502b1ac29b99bc367bdccf0e2a0980a2203bf0b7e"}, 0xf5) pipe2(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000000c0)=0x5) sendmsg(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffeae, &(0x7f000000d000)=[{&(0x7f00000001c0)="4c0000001300ff09fffd956fa283b70000ffff1c000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b07988100", 0x172}], 0x1}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) r5 = getuid() stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={r4, r5, r6}, 0xc) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000040)) sendmsg$inet_sctp(r2, &(0x7f0000000880)={&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000440)="dfa8e7ad02552df37be70589e700c6a7653d681151dbde536b2ba63614e5469599c7c35e77d88fa6dd9e40ab6c447b731308994d07c2934bde", 0x39}, {&(0x7f0000000480)="53673aefa985530b4c751522737f38afe92ed3910b42cb81d136ee04176b28366bb0e26a155bb92be347b9025b44479dcc3e", 0x32}, {&(0x7f00000004c0)="ff42befb", 0x4}, {&(0x7f0000000500)="b32335c13d7af80fd7a7d95612957149863e53219403192c25c7557c32d2dac7e3054a2c81396a139511d6fec0f3b72e683f70d6e2a6e14bb2927369acd4042157d3eb867da803d80de19742cd44cc8f02dfb516dd28e8a3b42ad7b69cf593f9fe993277f85e5a2850601a230e74aac8990dab10eead77b5eb44dc421176ae8913a51eb1d0b230cf816db020ffeef0a1748123379824e461bcf70b7de7ab419768", 0xa1}, {&(0x7f00000005c0)="82aa5ed3770102e5697593a6ce0858f84e9df6bd51b31a6e822a8278dd922a146f4ab0cda3123ff0e623abc133ace5361dc6faf16e639dafae5857d8bb961cec0ec02772bbf814687750611416f5d93c342d40b952ba55c986934743a182e0b6e68130b1445345123f809d0e3c896775", 0x70}, {&(0x7f0000000640)="667abf8b133f4db6434f67b6c4d62a95b572b211328eda068f38bbdd73c283eb173d4fad99667ec0a71008d87af8e565ecc97a63f9a7d7a1bf9f2acce621d3a5a4ace5db685f58b55f642cf3747fc6bd7d747b0354a8255865ea9ddb3b0bdb726685c8b5f13ad2ac20aec874a59d000c1b935da2c854cdf3b44cc33478b7aa2eaffe1135a626ca8ac7da259e6d4313605bf42f06bbc9808eb42cfd69fd2a3773f379c16888f1cdde7e14fda8aa38e5270f99", 0xb2}, {&(0x7f0000000700)="cafd37b8b029e22bc25030716fcedc3fced51525eba4736209deffd9995511a004db4bd2bfc01f04ecd4678caf230966", 0x30}, {&(0x7f0000000740)="cc40bd2cee217ac2da811618cda1153a25e1e22e4cfa62f444badea14cd4d3cc7bf314bbbadd8c3c5cebcdcad78954702ac38816a0f3aabca0f83e34e2687cde1efb60f14924a4ee0073f67a91e01f801cec57a5a4b84abb6aec0c385e7b487954e2d5eb09611ae37c4b853ceefed1a23c9eb74d877898f3e345caf7362683ec3b6b35c95c7576ef07785bc675e5f20014601e9e574b7f4cbfae07c74f9c59ef4a8838", 0xa3}], 0x8, 0x0, 0x0, 0x7ba4de83868716ba}, 0x10) openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) 18:05:31 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000080)="a98914e3200725484f085877e53ea60bed0e2d1a88cb820f940da419a4b5215ba3c543f11e762b9abece3e7dbf85b1c534765fd1e286b7a898d1bc5f6f5fe5021fecd88224cd14da83fa43fccec648d587d37941e855c38e9d5a6e6ac98b87"}, 0x10) write$P9_RSETATTR(r0, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000200)={0x0, 0x10000, 0x8, [], &(0x7f00000001c0)=0x5}) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x40, 0x2, 0x1}}, 0x14) socket$key(0xf, 0x3, 0x2) setrlimit(0x7, &(0x7f0000000000)={0x3}) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) [ 310.112488] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 18:05:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) flock(r0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x0, 0x1}) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x5, 0x4) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000063000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) 18:05:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0}) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={r2, 0x0, r3}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000240)={@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e20}, 0x4, 0x4, 0x0, 0x1}}, {&(0x7f0000000140)=""/182, 0xb6}, &(0x7f0000000200), 0x64}, 0xa0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x0, @remote}], 0xffffffffffffff38) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000662000), 0x4) mmap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000aca000)={0x0, 0x10, "8252cc7051f5e05e71ee63b76f6c3c92"}, &(0x7f0000abaffc)=0x18) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000300)=0x16, 0x4) 18:05:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x80) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f00000000c0)={0x6b23f328, @random="993c39c330e8"}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x2c, 0x0, 0x0, 0xfffff000}, {0x80000006}]}, 0x10) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x404100, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='ifb0\x00', 0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000001c0), 0x4) 18:05:31 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000072f000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = socket(0x4, 0x4, 0x7fff) recvfrom$inet(r1, &(0x7f0000000080)=""/223, 0xdf, 0x2021, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sigaltstack(&(0x7f0000a1f000/0x3000)=nil, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) 18:05:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0xec4}}, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x80000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$CAPI_GET_SERIAL(r1, 0xc0044306, &(0x7f0000000000)) lseek(r2, 0x17, 0x0) 18:05:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r1, 0x409, 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1b) [ 310.850605] netlink: 3760 bytes leftover after parsing attributes in process `syz-executor.2'. 18:05:31 executing program 1: r0 = socket(0x11, 0x800000003, 0x600081) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r1 = dup2(r0, r0) write$tun(r1, &(0x7f0000001300)={@void, @val, @ipx={0xffff, 0xfe6, 0x0, 0x0, {@random=0x88a8ffff, @broadcast}, {@random, @random="d7b52e2ab5df"}, "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"}}, 0xff0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000000)={0xf, @capture={0x1000, 0x1, {0x80000001, 0x1}, 0x7f, 0x7f}}) [ 310.942759] netlink: 3760 bytes leftover after parsing attributes in process `syz-executor.2'. 18:05:32 executing program 3: r0 = dup(0xffffffffffffffff) getsockopt$inet_buf(r0, 0x0, 0x3d, &(0x7f0000000800)=""/91, &(0x7f0000000880)=0x5b) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x28, 0x29, 0x2, "b51e5ee97f1020a1dacce2d282e7b4d88d"}], 0x28}}], 0x1, 0x0) 18:05:32 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x5) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)=""/202) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffc, 0x1) unshare(0x400) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@remote, @multicast1, @dev={0xac, 0x14, 0x14, 0xa}}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x33ef}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r2, 0x6}, 0x8) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045515, &(0x7f0000000240)={0x1d}) 18:05:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0xffffffffffffffff, @thr={0x0, 0x0}}, &(0x7f0000000240)) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r2, 0x0, 0x3d1) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x80089203, 0x20000000) read$eventfd(r2, 0x0, 0x0) membarrier(0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x2000000000000014) 18:05:32 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x401, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000040)={0xffff, 0x1}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000eb3000/0x1000)=nil, 0x2) 18:05:32 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x80080, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r1 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r2, 0x4) write(r1, &(0x7f00000003c0)="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", 0xfc) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000001}]}]}, 0x70}}, 0x20000000) [ 311.483662] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 311.521510] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. 18:05:32 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x80000000003, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x80000000008) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f0000000100), r1}}, 0x18) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000080)=0x900) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x800, 0x10000, 0xfffffffffffffff9, 0x5}, 'syz0\x00', 0x4e}) 18:05:32 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x3ff) r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x0) ioctl(r1, 0xffffffffffffffbd, &(0x7f0000000200)) 18:05:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x3cd) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x109000, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x5, 0x7, 0x3, 0x0, 0x0, [{r2, 0x0, 0x6}, {r1, 0x0, 0x101}, {r0, 0x0, 0x3}]}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000000c0)={{0x7, 0x7}, {0xffffffffffffffff, 0x5}, 0x1f, 0x6, 0x1ff}) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000f421000000060000000000000000000000af0000000000004000000000000000000000000000000000000000000038000000000000000000"], 0x40) 18:05:32 executing program 0: clone(0x7ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init() fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0x36, 0x2, 0x9, "b78dad19efffc38dcba77e1144a1ca98", "45fb61c6bf0c7802bf0c26514d148e014a3c9f437b78b22fb8c99fbdc6aa420b4c"}, 0x36, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') exit(0x7fffffff) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/47, 0x2f) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10400600}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000027155abc1db8ccb215836240d764a99178710681713973ee4cd760994acc1595e6db860bde63d5497d7ed8359eac0dc01bdea5ce24bf36422256e7f19d04b527c8f480119784d8b90c3ab62ecfde5d03e0ed5928a932dc518090cf25182f70f8e5f1cd1c19cfd9e7b2c64debab03d891c3f3a9f64503f6ac96aa", @ANYRES16=r4, @ANYBLOB="000026bd7000ffdbdf2503000000080001004e240000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendfile(r1, r2, 0x0, 0x1) write$UHID_CREATE(r0, &(0x7f0000000400)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000340)=""/135, 0x87, 0x3, 0x8, 0x6, 0x2, 0x80000000}, 0x120) 18:05:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x40, 0x3, 0x5}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000043000b0600000000000000000a000000080001000000000008ef1a2db5de5f7ef34bab9449ca9a0428ca93706c2a06ae21d0addfd87bbaf46fcf6eae46a5ca396502ef4b0e85e892cd2fcf620123deb7d64c75c38668c3dd51e1f81b5922736f7cb6a093fb64605d80856842aab55d5bfd85feddf07507227c543636eef587c04612b5442d99f48710f72cd56441"], 0x1c}}, 0x0) 18:05:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndctrl(&(0x7f0000000580)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f000062f000/0x3000)=nil, 0x3000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/dev_mcast\x00') ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000180)={0x3, &(0x7f0000000040)=[{0x6, 0x6}, {0x1, 0x5}, {0x5, 0x7}]}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000001c0)) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045500, &(0x7f0000000080)=""/218) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x8001, 0x6, [0x10000, 0x100000001, 0x4, 0xfffffffffffffffb, 0x6b6f, 0x457]}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={r3, 0x772}, 0x8) 18:05:33 executing program 2: openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000300), 0x0, &(0x7f00000003c0)={0x8}, &(0x7f0000000400)={0x0, 0x989680}, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 18:05:33 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x4}, 0x8) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000300)={0x0, 0x4be, 0x1, [], &(0x7f00000002c0)=0x81}) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x42f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x200048d0) prctl$PR_GET_PDEATHSIG(0x2a, &(0x7f0000000000)) 18:05:33 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) r1 = getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f00000007c0)=0xe8) r3 = getgid() r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$isdn(0x22, 0x3, 0x35) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000900)='/dev/udmabuf\x00', 0x2) r8 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r9 = msgget(0x1, 0xa) msgctl$IPC_SET(r9, 0x1, &(0x7f0000000e80)={{0x0, r2, r3, r2, r3, 0x41, 0x9}, 0x3, 0x1, 0xffff, 0x879c, 0x800, 0xc98, r1, r1}) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$bt_cmtp(0x1f, 0x3, 0x5) r12 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000940)='/dev/video2\x00', 0x2, 0x0) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ppp\x00', 0x2000, 0x0) socketpair(0x0, 0x0, 0x1f, &(0x7f00000009c0)={0xffffffffffffffff}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000840)) r15 = accept4$unix(0xffffffffffffffff, &(0x7f0000000a00), &(0x7f0000000a80)=0x6e, 0x80000) r16 = syz_open_dev$usbmon(&(0x7f0000000ac0)='/dev/usbmon#\x00', 0x6, 0xa2440) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000b00)='\x00'}, 0x30) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000b80)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000cc0)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000e40)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)="36b2ad58eb98971d3b25c8f73b46b3ae9d23a9fedfbe3688c1e882d4dd37d3a92c9e99677a1d574c38f3a192e3300bac57ac9132db943b99af0df5ba92b4558276b11832cba0f1be45bb68aad17d6f6cdfd63610e0ba55307312784a2a225bfa6529d07d4b77f4fc37ef529ca36a15c6029f40e1adb19bee1e41c70ecad33fc281471ede2c6ad342edb3d88c333c9d23fcc3ec94a21a2e6d0a32952c28b3fbe025d4b2d277e78316aaccd5d854d484e6137c6921fffadda08d554b8b43e30fbe593b3c9879849718e7c65da31fb69f0b224684f667854b45d77ba7", 0xdb}, {&(0x7f0000000240)="2ff9fcecddaf53bbcd8b3023263ee453f94c22b924533f9a50b7b5d7de02ed098d80a8b79c807379702a157e00a95fad78522a905645cb2a9153b626ff60d9d33a5ab3d1ee9caea0660666378eeec39e5213be65a9c697cd8b73a6109c2f5a0fbe6a35380deeb76b435084aeaf3e0de54533675211aa6a4f28d99740e13515ec9154d03b9975e8b025f1c9cd991c9b067e7016185f5d1c16ff898dc55b8d80396805397cae3207c3fe680d732aeaebdb436f6a7a9fd084134ff55fca70c015c495687ba9ce5e6c54b40c46a850f86c4373568de3ead9a41e3682cb41b919252556118f715061b0b462f097bdc11bea190b2e33", 0xf3}, {&(0x7f0000000340)="ebaba325d8448a28a751e646dfe60eb7710e42923000cac906bd6e0d65cb6d189dbe4e9b66aed548886f6260839541190964d376e72c6c23dfdc03112f94173218c9d46be03b8c73a6a0374ab5dafc79ca50f694f9", 0x55}, {&(0x7f00000003c0)="3d85bb993718e80a26bf57d7fded52422a4916c92bc4d89e900d3b026b297016d6fdf49916dc1611032ff739e9323c1f8d10c07be614aafd42016c63ff60371d7bc89a2e777a3a78331e38e7da4ba276536eb0ab0eaf7fda7a7462377d2e583fbe8ce5c0b2caae89c6435dae76022ebd9e405eb92082ac6a7075d294b1c874413d8531743fb2b9af18c285281fbef37b1bc73dd97f5d613550991a6e721ddd5c843aeb58b1d053fd124ca381315fcb8cee2adc8c7652e3b8c0bfed90d9b1d0be654474e30acc7ab1d2a07b", 0xcb}, {&(0x7f00000004c0)="2df37d029e94e2189de50021d4f8673b87291c0c5676dcedb64114e70460cb32b8b007ef9a5c4c6b2d91b6afe1bb323ddeac2a45ac59903ad164ff1595ce0fa095babe6d7fb78614c83bc5f44a88fb242b37962495398350181838e0c4f0da4a2c5e1f647e9d51b25c8a8b745a0cb7eadb9ccd0663eb0c3c597527d3542289ffc011f1b6224e006616e8189a259f1e683a6515a5816e10b87617a706e80947195eb24f7cf61bf9bfb966f40993e15c25413ba2e474c50b322c16b9984f6ad493fd8a2ecfd902", 0xc6}, {0x0}, {&(0x7f00000005c0)="3eb34ef5b8db8e819a3853f1dfba7e4c5023a834cdaa5e96ec4025d45f025bc111b5b0f55c49b667319a4606162367cc0fb54d5b4971e583faacf08cd92ae70587adc2f515be9936f0582b77ccf1420337a39f392154ac4f721ee6e72d4e67f6", 0x60}], 0x7, &(0x7f0000000d80)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x20, 0x1, 0x1, [r4, r5, r6]}, @rights={0x20, 0x1, 0x1, [r7, r8, r10, r11]}, @rights={0x28, 0x1, 0x1, [r12, r13, r14, r15, r16, r17]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}], 0xa8, 0x40000}, 0x4000000) r21 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x574f, 0xc06) ioctl$FS_IOC_FSGETXATTR(r21, 0xc0185500, &(0x7f0000000000)={0x80323, 0xd932}) [ 312.422587] protocol 88fb is buggy, dev hsr_slave_0 [ 312.428218] protocol 88fb is buggy, dev hsr_slave_1 18:05:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0xffffffffffffffff, @thr={0x0, 0x0}}, &(0x7f0000000240)) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r2, 0x0, 0x3d1) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x80089203, 0x20000000) read$eventfd(r2, 0x0, 0x0) membarrier(0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x2000000000000014) 18:05:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400204) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r0, 0xc0045540, &(0x7f0000000000)) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f00000000c0)={0x2b, 0x3}) 18:05:35 executing program 2: io_setup(0x3, &(0x7f0000000240)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x3, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000040)=0x8001) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000140)="e5c0a98ee4ca49ab51", 0x9}], 0x1) 18:05:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev}, 0x6) 18:05:35 executing program 4: r0 = semget$private(0x0, 0x4, 0x0) semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000000)=""/4096) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001000)='/dev/dlm-control\x00', 0x210200, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000001040)="0831adb7ecaa50393ab4fda07fbe80338786b181e7f52fc846225a7cc09b157ca30c11f4e5bff968da8ad73477946713394399f3469d408aee0044808efe6e73f30f7ca65f25b4104bd7709849ed3ede6539876aab38d4a2f990107e07c3100ece6377c56ffe830abea6c4", 0x6b) fremovexattr(r1, &(0x7f00000010c0)=@known='trusted.overlay.redirect\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f00000011c0)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000001200)={r2, 0x3bced8bf, 0xae2790d026b050bb, 0x7f, 0x4}, &(0x7f0000001240)=0x18) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000012c0)={0x5, &(0x7f0000001280)=[{0x4351, 0x6, 0x1, 0x6}, {0x80000, 0xcc, 0x5, 0x401}, {0x0, 0x9, 0x100, 0x8001}, {0x5, 0x10001, 0xb3, 0x1f}, {0x7, 0x3, 0x5}]}) r3 = fcntl$getown(r1, 0x9) fcntl$setown(r1, 0x8, r3) r4 = syz_genetlink_get_family_id$team(&(0x7f0000001340)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001500)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000001600)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001640)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000001740)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001880)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x90, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x74, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/dlm-monitor\x00', 0x109002, 0x0) write$nbd(r7, &(0x7f0000001900)={0x67446698, 0x1, 0x0, 0x3, 0x4, "7d604f96705b0910868f736d4c39270ddf7c3c66cc35466edfa488f6d965225e5df3a255db43b7911fe044039fb71cff42ff33728207180cb857855363e40566e65dc00d5b68ffee1cd7c33e4cd0065e781fcccef25841e64f43ed72f2b9021e9bddd713647c27ab20a9f6c8ed9dee71f1769d6c015d178ec661d71539552adce2eca9ee8d"}, 0x95) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000019c0), 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000001a00)={r2, @in={{0x2, 0x4e23, @empty}}, 0x6, 0x86, 0x3, 0x7, 0x8}, 0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000001ac0)=@assoc_value={r2, 0x3}, 0x8) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r7, 0xc008551b, &(0x7f0000001b00)={0xdeb, 0x8, [0x81, 0xffff]}) prctl$PR_SET_ENDIAN(0x14, 0x2) sendmsg$xdp(r1, &(0x7f0000002d40)={&(0x7f0000001b40)={0x2c, 0x3, r5, 0x29}, 0x10, &(0x7f0000002d00)=[{&(0x7f0000001b80)="4bcc193be17534238057fd1535ee84e17e2368579c04fef6c853a84c4bc5e52c64236736b3fb6d90255aa43d4a477e00b535cc8489ccf89c79e08d053f71a8aa16bff31fefda616fe66ca66e1b01304fa6ae214f8d1ca0366c844db4254b54873bbbbb9d39fdd198631f0ced138c6360ff6a42cedf0d4986177e02199e19988c86b4095153a00d2395d3dbf4aaba70b5725a130e2fea97fa7280e40b", 0x9c}, {&(0x7f0000001c40)="6cc2c7756186ebbf7bc89e71482c44574f7d08c9b4dba004d2e9046b6be868b5b0a804ae4685faac31e72911424a96b0379afe694b09eab59d23f58a2e9c1e6bbea74eac476f0e95d3c6a8ccb48e05ae32e918b2ffa8436093090d9d11ddf79995ab4c871668dc41b4b016a1ac248d07ef0d1eca6efcd8d81cd4f4a248c400f542f29545d5a321626d999f6e80f134a92037edd08c5f1be89215a2baf3d3baa387113bc53ff2d50620a9585dca6b0ba6ef19f5637b16c93f83cd445f49c3", 0xbe}, {&(0x7f0000001d00)="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", 0x1000}], 0x3, 0x0, 0x0, 0x10}, 0x0) ioctl$VT_OPENQRY(r7, 0x5600, &(0x7f0000002d80)) r8 = syz_open_dev$sndpcmp(&(0x7f0000002dc0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x101000) timerfd_gettime(r8, &(0x7f0000002e00)) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r7, &(0x7f0000002e40)={r7, r8, 0x1}) sendmsg$rds(r1, &(0x7f00000060c0)={&(0x7f0000002e80)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000002f80)=[{&(0x7f0000002ec0)=""/179, 0xb3}], 0x1, &(0x7f0000005dc0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x40, 0x8}, &(0x7f0000002fc0)=0x401, &(0x7f0000003000)=0xa3b, 0xfffffffffffffff8, 0xfff, 0x7ff, 0x3, 0x4, 0x5}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x150}, &(0x7f0000003040)=0x7044, &(0x7f0000003080)=0x3, 0xffffffff, 0x3, 0x300, 0x8, 0x7e, 0x10001}}, @cswp={0x58, 0x114, 0x7, {{0x67, 0x2}, &(0x7f00000030c0)=0x6, &(0x7f0000003100)=0x2, 0x1, 0xffffffffffffffff, 0x1ff, 0xadd0, 0x10, 0x4}}, @rdma_args={0x48, 0x114, 0x1, {{0x8, 0x10000}, {&(0x7f0000003140)=""/164, 0xa4}, &(0x7f0000003740)=[{0xffffffffffffffff}, {&(0x7f0000003200)=""/146, 0x92}, {&(0x7f00000032c0)=""/176, 0xb0}, {&(0x7f0000003380)=""/236, 0xec}, {&(0x7f0000003480)=""/132, 0x84}, {&(0x7f0000003540)=""/238, 0xee}, {&(0x7f0000003640)=""/174, 0xae}, {&(0x7f0000003700)=""/53, 0x35}], 0x8, 0x1, 0x1}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfff, 0xcdf}, &(0x7f00000037c0)=0x5, &(0x7f0000003800)=0x10000, 0x7, 0x1ff, 0x7, 0x1f, 0xd, 0x9}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000003840)=""/116, 0x74}, &(0x7f00000038c0), 0x14}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000003900)=""/4096, 0x1000}, &(0x7f0000004900), 0x10}}, @fadd={0x58, 0x114, 0x6, {{0x4, 0x400}, &(0x7f0000004940), &(0x7f0000004980)=0x1, 0x1, 0x1, 0x6, 0x3ff, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x1, 0x4}, &(0x7f00000049c0)=0x4, &(0x7f0000004a00)=0x1, 0x5, 0x1, 0x8, 0x4, 0x8, 0x17858cf5}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffffffffffffe, 0x3}, {&(0x7f0000004a40)=""/25, 0x19}, &(0x7f0000005d40)=[{&(0x7f0000004a80)=""/77, 0x4d}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/238, 0xee}, {&(0x7f0000005c00)=""/171, 0xab}, {&(0x7f0000005cc0)=""/97, 0x61}], 0x5, 0x20, 0x2}}], 0x300, 0x80}, 0x0) sendmsg$inet_sctp(r7, &(0x7f0000006280)={&(0x7f0000006100)=@in6={0xa, 0x4e21, 0x40, @mcast2, 0x2d7}, 0x1c, &(0x7f0000006240)=[{&(0x7f0000006140)="7fbb02ac0a73b8d64b3fbe89d0259d7a37142ade298173dd0c5116e1cf5b24e088", 0x21}, {&(0x7f0000006180)="4461edfd2702bb1557acf5e1941429d684cee246bb53782dce11baac9bb5fe6b3a6ac766f7a4ebd17b47d20d84e1454139b63a6a", 0x34}, {&(0x7f00000061c0)="4a8abd2e392bda15ab71fd4e54c0a3ca58be21d464ebbb7a8522328dec705f27434b0b495abfbab57e6dbe24cad6429bb53fe4fdabe8b0c085cdafd59e996afb8e8ba4d111", 0x45}], 0x3, 0x0, 0x0, 0x400c0}, 0x8000) connect$inet(r7, &(0x7f00000062c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) fcntl$getown(r7, 0x9) 18:05:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev}, 0x6) 18:05:35 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f0000000080)=""/176, 0xb0) connect$inet6(r0, &(0x7f0000000c80)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x68, "7285582d8b377f7312ab5adb56fb76946398f95e8b37a66e18bef8590a2ac3c82fad1069a0b5cb72525abefec9e6a50364f5ff8c592061431aba57917399a89a68cc1f719b3ba4b5e1531b73e1372aabff6a2a3671850f500cf7f387ce55b0aa224e2c3d0f876ab7"}, &(0x7f0000000340)=0x70) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={r2, @in6={{0xa, 0x4e24, 0xfffffffffffffc00, @empty, 0x810000000000000}}, 0x7, 0x7fff}, 0x90) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@empty, @remote, @mcast1, 0x81, 0x10000, 0x9da, 0x100, 0x3fa9, 0x1080102, r3}) sendto$inet(r1, &(0x7f0000000440)="e4b9a088b45877d0bf18b9e94a4373196050585f692b06b15e3f012029d45ab5eac4819d51d81d31ba7febc6377842c664979fa6e2ae41726c68f05f46ea3b4cf39c2e6c7f3f1d6993d739093537fa2a56200c49d868480573f0842f6fa94592726b3c38", 0x64, 0x40000, &(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10) getsockname$packet(r0, &(0x7f0000001500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001540)=0xfffffffffffffff0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000500)="9f334d588d7ff11cd1fbb45d0eabba5cba67ab48307258c6c7fcb251702f4a3306eb63f9399be3f4131a6673f85fe8f085fbaa9fc63e3161c31ba7b5fea0707e5239e9558e23e4606eb760b5baf1adffdf11beff8c6a82e255263972b8641008a8521dec99a65c2efbd42f6836b60c66099e0958969b7c76cc99f3322c3cf7e135fd47f515c87af2d9ccb9f62835a0f2d6ed9f6066f1cb806ec950a6178266efd1fe22ac2443331b13cc95f09c8afa19e10331fd79c5673a220115f8778932cefe59f5", 0xc3}], 0x1, 0x0) 18:05:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x6, 0x526, 0x8000000001}, 0x126) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x1000003, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, &(0x7f00000002c0), 0x0}, 0x18) 18:05:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev}, 0x6) 18:05:36 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0xf1fb) sendmmsg(r1, &(0x7f0000007f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/vga_arbiter\x00', 0x200000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000024c0)={r2, &(0x7f0000002380)="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", &(0x7f0000002480)=""/51}, 0x18) recvmmsg(r1, &(0x7f0000002140)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/52, 0x34}, {&(0x7f00000000c0)=""/216, 0xd8}, {&(0x7f00000001c0)=""/54, 0x36}, {&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/167, 0xa7}, {&(0x7f0000000380)=""/43, 0x2b}, {&(0x7f00000003c0)=""/141, 0x8d}], 0x7}, 0x2}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/165, 0xa5}], 0x1}, 0x1000}, {{&(0x7f0000000600)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/239, 0xef}, {&(0x7f0000000780)=""/53, 0x35}, {&(0x7f00000007c0)=""/124, 0x7c}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/100, 0x64}, {&(0x7f00000018c0)=""/12, 0xc}, {&(0x7f0000001900)=""/64, 0x40}, {&(0x7f0000001940)=""/240, 0xf0}, {&(0x7f0000001a40)=""/160, 0xa0}], 0x9, &(0x7f0000001bc0)=""/96, 0x60}, 0x7}, {{0x0, 0x0, &(0x7f0000001c40)}, 0x2}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/99, 0x63}, {&(0x7f0000001d80)=""/31, 0x1f}, {&(0x7f0000001dc0)=""/152, 0x98}, {&(0x7f0000001e80)=""/186, 0xba}, {&(0x7f0000001f40)=""/124, 0x7c}], 0x6, &(0x7f0000002040)=""/205, 0xcd}, 0x9}], 0x5, 0x40000022, &(0x7f0000002280)={0x77359400}) r3 = dup(r0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000022c0)) 18:05:36 executing program 1: r0 = gettid() getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r1, 0x4) getpriority(0x100000000000001, r0) sched_setattr(r0, &(0x7f0000000000)={0x30, 0x6, 0x0, 0xfff, 0xfaf, 0x7f, 0x8001}, 0x0) 18:05:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="e821d0023c123f3188a070") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007021dfffd946f610500020000001f00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 315.326218] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 315.334110] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 315.561405] IPVS: ftp: loaded support on port[0] = 21 [ 315.927737] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 315.935412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 316.065749] chnl_net:caif_netlink_parms(): no params data found [ 316.153086] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.159626] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.168175] device bridge_slave_0 entered promiscuous mode [ 316.179993] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.186714] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.195389] device bridge_slave_1 entered promiscuous mode [ 316.236351] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 316.250470] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 316.283021] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 316.291988] team0: Port device team_slave_0 added [ 316.300828] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 316.309689] team0: Port device team_slave_1 added [ 316.316024] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 316.324834] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 316.507268] device hsr_slave_0 entered promiscuous mode [ 316.732650] device hsr_slave_1 entered promiscuous mode [ 316.983577] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 316.991226] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 317.028874] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.035487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.042817] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.049355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.065125] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.076661] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.184119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.200860] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 317.214395] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 317.223199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.231025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.245659] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 317.252331] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.266432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 317.273789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.282348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.290573] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.297139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.313750] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 317.327485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 317.335351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.344106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.352482] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.358993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.368765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 317.389706] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 317.402550] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 317.415978] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 317.424377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.434055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.443435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.452572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.461865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.476726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 317.489475] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 317.499369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.509139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.521535] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 317.528693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 18:05:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0xffffffffffffffff, @thr={0x0, 0x0}}, &(0x7f0000000240)) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r2, 0x0, 0x3d1) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x80089203, 0x20000000) read$eventfd(r2, 0x0, 0x0) membarrier(0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x2000000000000014) 18:05:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev}, 0x6) 18:05:38 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x3234564e, 0x0, @stepwise}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x100) 18:05:38 executing program 2: [ 317.537203] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.545671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.554448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.563205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.575061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.646990] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 317.701157] 8021q: adding VLAN 0 to HW filter on device batadv0 18:05:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0}}], 0x0, 0x0, 0x0}) 18:05:39 executing program 1: capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)={0x0, 0x40}) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = dup2(r0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000700)={'lo\x00', &(0x7f00000000c0)=@ethtool_dump}) 18:05:39 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000200)=""/58) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000240)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000000c0)=0x6) read(r1, &(0x7f0000000040)=""/11, 0x9c) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000080)) r3 = syz_open_pts(r2, 0xffffffffffffffff) ioctl$TCFLSH(r3, 0x540b, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000140)={'vcan0\x00', {0x2, 0x4e24, @empty}}) ioctl$VT_ACTIVATE(r1, 0x5606, 0xffffffffffff7fff) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xe0000, 0x0) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) 18:05:39 executing program 0: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev}, 0x6) 18:05:39 executing program 5: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000040)="1a9b0597db9d37ad12ecd611c7982ca5b1a6315032572f250509587f769d49fd15923fe2dc980dc36e6c3c9897bb82039161ccdf2287deec9f1e80e47123f96cdb5d1d0b632c986f0fada96bdd8d2ccc4a4b3a1ec90fcaca9f57df7619a23f68151f3dae8f781a5a329cb6dd01570a247a95f1", &(0x7f00000000c0)="82c86e4b63ecd9074f56889d4e8cbb59ff0ae47a1008fe866020d211fb71f45371feada40e6057062fdb5a5cd84a912456986d12678fce9dc6494d8eb67da704ab175ee623ec4be9d6756a1d9c34e9125b572159c43b8b1c102ee645cb27d50e1b2e2e70d4353d46c7e3d3cb6ceb0ee197f39ab6cb8893b5a804eea680daa7a9bf1c0095bf8442f03f011830208221705d8f503b946d8d2078fbb2e2278f7d3f", 0x1}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0)={0x82d4}, 0x1) fsetxattr$security_ima(r0, &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@md5={0x1, "bfe2ba7d59934f88adf5b6d7cfac2e48"}, 0x11, 0x3) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000002c0)={r1, 0x21}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000300)) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000340)={0xff, 0x1ff, 0xfffffffffffffff8, 0x8}) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000380)) r2 = syz_open_dev$dri(&(0x7f00000003c0)='/dev/dri/card#\x00', 0x800, 0x40000) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400)={0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000440)={r3, 0x0, 0x4}) fremovexattr(r0, &(0x7f0000000480)=@random={'user.', '/dev/radio#\x00'}) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) socket$rxrpc(0x21, 0x2, 0xa) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000004c0)={0x3, [0x0, 0x0, 0x0]}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r0, &(0x7f0000000500)="3c7f90a0581ac528cc21f6d96a1ea9784ea1c6fad73f32addecff983f1f471c76a34dd71000aff066b788cea4687bbe2e1c247e07ccc0b2385eb1ecbce24f7f5e05597ac5c1e70ead1047f9a6e62cb", &(0x7f0000000580)=""/209}, 0x18) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00000006c0)={0x5, 0x6, 0x6, 0x7fff, 0x9, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x512, 0x10000}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000780)={r4, @in={{0x2, 0x4e23, @rand_addr=0x3}}, 0x7, 0x7, 0x80000001, 0x2, 0x20}, &(0x7f0000000840)=0x98) fcntl$getflags(r2, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000880)=0x0) ptrace$poke(0x4, r6, &(0x7f00000008c0), 0xd30) r7 = msgget$private(0x0, 0x412) msgctl$MSG_INFO(r7, 0xc, &(0x7f0000000900)=""/141) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000009c0)=r5, 0x4) openat$vfio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/vfio/vfio\x00', 0x4a100, 0x0) getresuid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000b00)) r8 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, r8) [ 318.149853] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure 18:05:39 executing program 0: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev}, 0x6) [ 318.249552] binder: 12266:12269 transaction failed 29189/-22, size 0-0 line 2896 18:05:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 18:05:39 executing program 4: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) [ 318.412475] binder: undelivered TRANSACTION_ERROR: 29189 [ 318.488651] input: syz1 as /devices/virtual/input/input5 [ 318.547615] input: syz1 as /devices/virtual/input/input6 [ 319.145162] IPVS: ftp: loaded support on port[0] = 21 [ 319.270457] chnl_net:caif_netlink_parms(): no params data found [ 319.328302] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.334975] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.343093] device bridge_slave_0 entered promiscuous mode [ 319.350900] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.357454] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.365110] device bridge_slave_1 entered promiscuous mode [ 319.401959] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 319.413395] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 319.445310] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 319.454203] team0: Port device team_slave_0 added [ 319.469834] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 319.478506] team0: Port device team_slave_1 added [ 319.487772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 319.496799] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 319.555953] device hsr_slave_0 entered promiscuous mode [ 319.602237] device hsr_slave_1 entered promiscuous mode [ 319.653622] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 319.662293] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 319.685932] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.692472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.699360] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.705942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.765864] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 319.771980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.782126] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 319.798254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.807744] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.815746] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.825347] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 319.841471] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 319.848309] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.860021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.869576] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.876123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.889530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.897544] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.904159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.933021] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.944873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.958262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.973690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.988718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.999777] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 320.006560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.015083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.036944] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 320.053317] 8021q: adding VLAN 0 to HW filter on device batadv0 18:05:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0xffffffffffffffff, @thr={0x0, 0x0}}, &(0x7f0000000240)) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r2, 0x0, 0x3d1) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x80089203, 0x20000000) read$eventfd(r2, 0x0, 0x0) membarrier(0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x2000000000000014) 18:05:41 executing program 1: r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0xffffffff80000001, 0x4) 18:05:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 18:05:41 executing program 4: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x80000000000002) mount(0x0, &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x0, 0x0) 18:05:41 executing program 0: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev}, 0x6) 18:05:41 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 320.790553] binder: 12305:12311 transaction failed 29189/-22, size 0-0 line 2896 18:05:41 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000050000000000000003"]) 18:05:41 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev}, 0x6) 18:05:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000001, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)) 18:05:42 executing program 4: creat(&(0x7f0000000280)='./bus\x00', 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000007, 0x15011, r0, 0x0) [ 320.936682] binder: undelivered TRANSACTION_ERROR: 29189 18:05:42 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev}, 0x6) 18:05:42 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0x1) flock(r0, 0x2) flock(r1, 0x8) 18:05:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0xffffffffffffffff, @thr={0x0, 0x0}}, &(0x7f0000000240)) gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r1, 0x0, 0x3d1) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80089203, 0x20000000) read$eventfd(r1, 0x0, 0x0) membarrier(0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 18:05:44 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000800)=0x3001) 18:05:44 executing program 2: mkdirat(0xffffffffffffffff, &(0x7f0000000ac0)='./bus\x00', 0x0) r0 = open$dir(&(0x7f0000000980)='./file1\x00', 0xfffffffffffffffe, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setfsuid(0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000100)=0x1, 0x4) tgkill(0x0, 0x0, 0x0) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) mmap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) fdatasync(r3) setxattr$security_evm(&(0x7f0000000340)='./file1\x00', &(0x7f0000000540)='security.evm\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000be00"], 0x1, 0x0) ftruncate(r4, 0x7fff) sendfile(r2, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 18:05:44 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@empty, @dev}, 0x6) 18:05:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000080)) 18:05:44 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl(r0, 0x800000000008982, &(0x7f00000000c0)='\"') 18:05:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000240)={@empty, @dev}, 0x6) 18:05:45 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r1 = memfd_create(&(0x7f0000000580)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000000000de) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync_file_range(r0, 0x0, 0x0, 0x3) 18:05:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000180), 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000080)=';', 0x1, 0x4000000, 0x0, 0x0) r1 = dup(r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14}, 0x14}}, 0x4000800) 18:05:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)) 18:05:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\x00\x05\x00\x00\x10\x00', 0x802}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1000030a) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 18:05:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000240)={@empty, @dev}, 0x6) [ 324.467582] print_req_error: I/O error, dev loop3, sector 304 flags 801 [ 324.474559] Buffer I/O error on dev loop3, logical block 38, lost async page write [ 324.482556] print_req_error: I/O error, dev loop3, sector 312 flags 801 [ 324.489359] Buffer I/O error on dev loop3, logical block 39, lost async page write [ 324.497259] print_req_error: I/O error, dev loop3, sector 320 flags 801 [ 324.504247] Buffer I/O error on dev loop3, logical block 40, lost async page write [ 324.512236] print_req_error: I/O error, dev loop3, sector 328 flags 801 [ 324.519193] Buffer I/O error on dev loop3, logical block 41, lost async page write [ 324.527124] print_req_error: I/O error, dev loop3, sector 336 flags 801 [ 324.534019] Buffer I/O error on dev loop3, logical block 42, lost async page write [ 324.542036] print_req_error: I/O error, dev loop3, sector 344 flags 801 [ 324.548854] Buffer I/O error on dev loop3, logical block 43, lost async page write [ 324.556791] print_req_error: I/O error, dev loop3, sector 352 flags 801 [ 324.563695] Buffer I/O error on dev loop3, logical block 44, lost async page write [ 324.571521] print_req_error: I/O error, dev loop3, sector 360 flags 801 [ 324.578619] Buffer I/O error on dev loop3, logical block 45, lost async page write [ 324.587843] print_req_error: I/O error, dev loop3, sector 368 flags 801 [ 324.594773] Buffer I/O error on dev loop3, logical block 46, lost async page write [ 324.602696] print_req_error: I/O error, dev loop3, sector 376 flags 801 [ 324.609521] Buffer I/O error on dev loop3, logical block 47, lost async page write [ 324.622370] ================================================================== [ 324.629768] BUG: KMSAN: uninit-value in memcmp+0x117/0x180 [ 324.635423] CPU: 0 PID: 12397 Comm: syz-executor.4 Not tainted 5.0.0-rc1+ #9 [ 324.642610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.651967] Call Trace: [ 324.654592] dump_stack+0x173/0x1d0 [ 324.658261] kmsan_report+0x12e/0x2a0 [ 324.662109] __msan_warning+0x82/0xf0 [ 324.665937] memcmp+0x117/0x180 [ 324.669254] __dev_mc_del+0x16c/0x690 [ 324.673120] dev_mc_del+0x6d/0x80 [ 324.676608] igmp_group_dropped+0x220/0x1220 [ 324.681068] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 324.686287] ip_mc_down+0x1d9/0x390 [ 324.689981] inetdev_event+0x242/0x1d80 [ 324.694174] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 324.700056] ? ipv4_doint_and_flush+0x280/0x280 [ 324.704746] ? ipv4_doint_and_flush+0x280/0x280 [ 324.709442] raw_notifier_call_chain+0x13d/0x240 [ 324.714237] dev_close_many+0x621/0xa10 [ 324.718266] rollback_registered_many+0x9a4/0x21f0 [ 324.723254] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 324.728487] unregister_netdevice_queue+0x55d/0xa70 [ 324.733550] __tun_detach+0x21be/0x2b00 [ 324.737610] tun_chr_close+0xda/0x1c0 [ 324.741435] ? tun_chr_open+0x790/0x790 [ 324.745427] __fput+0x4d1/0xbb0 [ 324.748751] ____fput+0x37/0x40 [ 324.752084] ? fput+0x300/0x300 [ 324.755374] task_work_run+0x22e/0x2a0 [ 324.759305] prepare_exit_to_usermode+0x321/0x420 [ 324.764190] syscall_return_slowpath+0xb2/0x650 [ 324.768893] do_syscall_64+0xe2/0xf0 [ 324.772660] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 324.777851] RIP: 0033:0x411d31 [ 324.781077] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 324.800017] RSP: 002b:0000000000a4fd90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 324.807736] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000411d31 [ 324.815016] RDX: 0000000000000000 RSI: 0000000000740438 RDI: 0000000000000006 [ 324.822297] RBP: 0000000000000000 R08: 000000000004f3f1 R09: 000000000004f3f1 [ 324.829574] R10: 0000000000a4fcc0 R11: 0000000000000293 R12: 0000000000000000 [ 324.836844] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000004 [ 324.844143] [ 324.845791] Local variable description: ----buf.i@igmp_group_dropped [ 324.852275] Variable was created at: [ 324.856009] igmp_group_dropped+0x59/0x1220 [ 324.860359] ip_mc_down+0x1d9/0x390 [ 324.863980] ================================================================== [ 324.871342] Disabling lock debugging due to kernel taint [ 324.876816] Kernel panic - not syncing: panic_on_warn set ... [ 324.882707] CPU: 0 PID: 12397 Comm: syz-executor.4 Tainted: G B 5.0.0-rc1+ #9 [ 324.891289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.900653] Call Trace: [ 324.903259] dump_stack+0x173/0x1d0 [ 324.906934] panic+0x3d1/0xb01 [ 324.910241] kmsan_report+0x293/0x2a0 [ 324.914100] __msan_warning+0x82/0xf0 [ 324.917957] memcmp+0x117/0x180 18:05:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc00, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0xffffffffffffffff, @thr={0x0, 0x0}}, &(0x7f0000000240)) gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r1, 0x0, 0x3d1) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x80089203, 0x20000000) read$eventfd(r1, 0x0, 0x0) membarrier(0x2, 0x0) 18:05:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r1 = memfd_create(&(0x7f0000000580)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000000000de) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync_file_range(r0, 0x0, 0x0, 0x3) 18:05:46 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x800000000a) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x1000003c5) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = inotify_init1(0x800) sendfile(r0, r1, 0x0, 0x8000fffffffe) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000040)) 18:05:46 executing program 1: r0 = socket(0x10, 0x100000003, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001a000102000000001b0000f24b604eaf39165b00001081ffbd09d5021f7d11d9147823fca064f4cedbc0e59c5130052626fe74ab21e451c874593eea43598d84d451a103afa2d3924f73ccef51391ac66dbe440f922ca5c3c2c6229b2a"], 0x1}}, 0x0) 18:05:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000240)={@empty, @dev}, 0x6) [ 324.921261] __dev_mc_del+0x16c/0x690 [ 324.925111] dev_mc_del+0x6d/0x80 [ 324.928607] igmp_group_dropped+0x220/0x1220 [ 324.933049] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 324.938260] ip_mc_down+0x1d9/0x390 [ 324.941937] inetdev_event+0x242/0x1d80 [ 324.945943] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 324.951144] ? ipv4_doint_and_flush+0x280/0x280 [ 324.955823] ? ipv4_doint_and_flush+0x280/0x280 [ 324.960515] raw_notifier_call_chain+0x13d/0x240 [ 324.965303] dev_close_many+0x621/0xa10 [ 324.969297] rollback_registered_many+0x9a4/0x21f0 [ 324.974259] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 324.979485] unregister_netdevice_queue+0x55d/0xa70 [ 324.984498] __tun_detach+0x21be/0x2b00 [ 324.988503] tun_chr_close+0xda/0x1c0 [ 324.992329] ? tun_chr_open+0x790/0x790 [ 324.996325] __fput+0x4d1/0xbb0 [ 324.999609] ____fput+0x37/0x40 [ 325.002875] ? fput+0x300/0x300 [ 325.006154] task_work_run+0x22e/0x2a0 [ 325.010064] prepare_exit_to_usermode+0x321/0x420 [ 325.014904] syscall_return_slowpath+0xb2/0x650 [ 325.019579] do_syscall_64+0xe2/0xf0 [ 325.023294] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 325.028471] RIP: 0033:0x411d31 [ 325.031776] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 325.050684] RSP: 002b:0000000000a4fd90 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 325.058381] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000411d31 [ 325.065637] RDX: 0000000000000000 RSI: 0000000000740438 RDI: 0000000000000006 [ 325.072897] RBP: 0000000000000000 R08: 000000000004f3f1 R09: 000000000004f3f1 [ 325.080168] R10: 0000000000a4fcc0 R11: 0000000000000293 R12: 0000000000000000 [ 325.087456] R13: 0000000000000001 R14: 0000000000000006 R15: 0000000000000004 [ 325.095665] Kernel Offset: disabled [ 325.099297] Rebooting in 86400 seconds..