[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 83.578578] audit: type=1800 audit(1555561104.625:25): pid=10386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 83.601722] audit: type=1800 audit(1555561104.645:26): pid=10386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 83.655116] audit: type=1800 audit(1555561104.675:27): pid=10386 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.86' (ECDSA) to the list of known hosts. 2019/04/18 04:18:40 fuzzer started 2019/04/18 04:18:45 dialing manager at 10.128.0.26:40523 syzkaller login: [ 104.776959] ld (10546) used greatest stack depth: 53568 bytes left 2019/04/18 04:18:45 syscalls: 2284 2019/04/18 04:18:45 code coverage: enabled 2019/04/18 04:18:45 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/04/18 04:18:45 extra coverage: extra coverage is not supported by the kernel 2019/04/18 04:18:45 setuid sandbox: enabled 2019/04/18 04:18:45 namespace sandbox: enabled 2019/04/18 04:18:45 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/18 04:18:45 fault injection: enabled 2019/04/18 04:18:45 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/18 04:18:45 net packet injection: enabled 2019/04/18 04:18:45 net device setup: enabled 04:21:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000002d008151e00f80ecdb4cb904024865160b00010005000000000009000e0015001500cd5edc2976d153b4", 0x2e}], 0x1}, 0x0) [ 274.984012] IPVS: ftp: loaded support on port[0] = 21 [ 275.120019] chnl_net:caif_netlink_parms(): no params data found [ 275.187262] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.194022] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.202440] device bridge_slave_0 entered promiscuous mode [ 275.211384] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.218047] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.226502] device bridge_slave_1 entered promiscuous mode [ 275.257197] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 275.268235] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 275.301572] team0: Port device team_slave_0 added [ 275.309820] team0: Port device team_slave_1 added [ 275.497281] device hsr_slave_0 entered promiscuous mode [ 275.662637] device hsr_slave_1 entered promiscuous mode [ 275.940179] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.946841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.954085] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.960624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.030839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.049207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.060291] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.071504] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.082920] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 276.101758] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.118998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.128141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.136523] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.143142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.188813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.198683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.213311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.221789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.230181] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.236724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.245487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.254472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.263471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 276.272226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 276.280756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 276.289651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 276.297951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 276.306276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 276.314855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 276.323358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.336844] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 276.344653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 276.374936] 8021q: adding VLAN 0 to HW filter on device batadv0 04:21:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 04:21:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030020000000000000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000020a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) 04:21:38 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000001240)='nfsd\x00', 0x0, 0x0) 04:21:38 executing program 0: 04:21:38 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0xffffffffffffff28) 04:21:38 executing program 0: unshare(0x20400) syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x208a00, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e21, 0xeaa2, @mcast2, 0x40}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}], 0x5c) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) 04:21:38 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40, 0x118) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/68, 0x44}, {&(0x7f00000001c0)=""/117, 0x75}, {&(0x7f0000000040)=""/46, 0x2e}], 0x3}, 0x40002100) connect$can_bcm(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) unshare(0x600) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, 0x0) 04:21:38 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x54, 0x50083) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/softnet_stat\x00') r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = mq_open(&(0x7f00000001c0)='\x00', 0x0, 0x24, &(0x7f00000002c0)={0x80000001, 0x7ff, 0x3, 0x100000000, 0x9, 0x5, 0x8}) r6 = socket(0x9, 0x0, 0x8) poll(&(0x7f0000000300)=[{r0, 0x6240}, {r1, 0x8}, {r2, 0x400}, {r3, 0x471e}, {r4, 0x8000}, {r5, 0x4000}, {r6, 0x82}], 0x7, 0x401) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x3, 0x4) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000340)=0x1ff) ioctl(r9, 0x101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 04:21:38 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{0x10}], 0x10}}], 0x1, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000380)}}, {{&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000480), 0x1400}}], 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x10002, 0x0) 04:21:38 executing program 0: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f00000001c0)={0x9, 0x2, 0x4, 0x0, 0x40}) write$binfmt_elf64(r0, &(0x7f0000001380)=ANY=[], 0xffffffe0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file2\x00') rename(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000040)='./file2\x00') lsetxattr$security_evm(&(0x7f0000000080)='./file3\x00', 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file1/file0\x00', 0x0) [ 277.722214] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 04:21:39 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000140)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e24, @multicast1}, 0x210, 0x0, 0x0, 0x0, 0x28, &(0x7f00000001c0)='vcan0\x00', 0x5, 0x6, 0x7}) sync_file_range(r0, 0x4, 0x9, 0x4) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x9) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000300)=""/62) mq_timedreceive(r2, &(0x7f0000000340)=""/228, 0xe4, 0x2d9, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000440)={0x10001, 0x1, 'client0\x00', 0x4, "8f8814f2fdebc1ab", "62e3ac5cc266d4ba942058910875249eefb239db05930356a70c1383c6c2c0fb", 0x1}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400340}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r3, 0x0, 0x70bd29, 0x65e, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x45) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000640)="8f2e5e9de21e5453b0e22c3e4f4246a547b4518e4bb2651ab965f754cbcd5724aa9bf00c1069cec90cdd97358a134d60409433dd6e383a6e5af2475a6334680d2adf5f21953e2cc01f211524eba2d5d31ea923a1a37b44439a8623486fbc0946a316f7ad3230772b1ac8ab6323f832084be1302ee9e53c0306e1916b786774d454c482cc7a6854f71469d11be2945b066e368e8c4a5da9a803115538fe7e806ea3560222fd08d8208ed27b7d124895befabc5cf5138a0370473ebc517064decf94d6cc9f6aa117fd27bb93d6634360001d7ebede8fc2776cebd6e232ff69") socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000740)) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r3, 0x410, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz0\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x804) lseek(r0, 0x0, 0x2) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000008c0)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, r4, 0x810, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r2}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000b00)={0x0, 0xd8, &(0x7f0000000a00)=[@in6={0xa, 0x4e22, 0x2, @empty, 0x10001}, @in6={0xa, 0x4e24, 0x1ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fff}, @in6={0xa, 0x4e20, 0x20, @mcast1}, @in6={0xa, 0x4e22, 0x20, @remote, 0x10b64201}, @in6={0xa, 0x4e22, 0x0, @empty, 0x84d}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e20, 0x401, @loopback, 0x5}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}]}, &(0x7f0000000b40)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000b80)={r5, 0x3}, &(0x7f0000000bc0)=0x8) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000c00)=0x8) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000c80)={0x0, {0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @remote}, 0x200, 0x0, 0x0, 0x0, 0x90, &(0x7f0000000c40)='irlan0\x00', 0x2, 0x6, 0x3}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000d00)={0x0, 0x20, 0x1c}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xc8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000d40)={0x5, 0x0, 0x10001, 0x8, r5}, &(0x7f0000000d80)=0x10) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000dc0)=0x2) signalfd4(r1, &(0x7f0000000e00)={0x3ecd}, 0x8, 0x80000) 04:21:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") recvmmsg(r0, &(0x7f0000000640)=[{{&(0x7f0000000180)=@nl, 0x7a, 0x0, 0x100000071}}], 0x1, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0xffff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r3, 0x9}, &(0x7f0000000140)=0x8) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, [], 0x1c}}, 0xbf6f3783a7fd3a41) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r1, &(0x7f00000003c0), 0x3a301e0909ff38c, 0x0) 04:21:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070d73dc31a9a2bfc8db2c672f4e59755e0eaad3cb1e339249976471fc6c3a40ef6c52ffd630133483dd7fc739acd4a8cbfd8bf646554cf314d3a0b6a619f9a41a0") sendfile(r0, r0, &(0x7f0000000180), 0xe98a) r1 = socket$inet6(0xa, 0x2, 0x0) sigaltstack(&(0x7f0000235000/0x1000)=nil, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') sendfile(r1, r2, &(0x7f0000000040)=0x100000, 0x8001) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) 04:21:39 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000000100)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='\f', 0x1}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r2 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r3, 0x107, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000380)={0xfffffff, 0x200, 0x0, [], &(0x7f0000000340)={0x980922, 0x6, [], @string=&(0x7f0000000300)=0x5}}) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @broadcast}, 0x30, 0x0, 0x0, 0x0, 0x7fffffff, &(0x7f0000000200)='caif0\x00', 0x800, 0x8, 0x5}) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="d3", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000003c0), 0x4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r5, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x20}}, 0x0) 04:21:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x400) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000100)={{0x3, 0x1ff, 0x7, 0x7, 0x3, 0xe}, 0x6}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x7, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x10000000008, 0x200001010, r0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000001380)={0x3, 0x0, 0x2080, {0x10000, 0x2000, 0x2}, [], "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", "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"}) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000001340)=0x2) 04:21:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200, 0xce) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x2103, 0x6, 0x1, 0x3, 0x4, 0x80, 0x6, 0x24d, 0x7ff, 0x89, 0x5, 0x8001, 0x40, 0xf95, 0x4, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x19f, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x10}, 0x70) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000002c0)) [ 279.207731] IPVS: ftp: loaded support on port[0] = 21 04:21:40 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101c02, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8, 0x0, 0x0, @tick, {}, {}, @queue}], 0x30) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000140)) readv(r0, &(0x7f0000000880), 0x0) finit_module(r0, &(0x7f0000000000)='\x00', 0x0) [ 279.392791] chnl_net:caif_netlink_parms(): no params data found [ 279.513584] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.520126] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.528507] device bridge_slave_0 entered promiscuous mode [ 279.562753] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.569317] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.577598] device bridge_slave_1 entered promiscuous mode 04:21:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0xfffd, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x5, 0x20000) unlinkat(r2, &(0x7f0000000580)='./file0\x00', 0x200) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000100)={'ip6_vti0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}}) unshare(0x10800) ioctl$EVIOCGKEYCODE(r0, 0x80084503, &(0x7f0000000000)=""/202) r3 = getuid() getgroups(0x4, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0xee00, 0xee01]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f00000003c0)={[], 0xffffffffffff0000, 0x80, 0x1f, 0x0, 0x8, 0xf004, 0x10f000}) fsetxattr$system_posix_acl(r0, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010002000000000002000100", @ANYRES32=r3, @ANYBLOB="02000700", @ANYRES32, @ANYBLOB="040004000000000008000400", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="10000000"], 0x44, 0x1) [ 279.646848] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 279.675505] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 279.728821] team0: Port device team_slave_0 added [ 279.737330] team0: Port device team_slave_1 added 04:21:40 executing program 0: syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000200)=""/244, 0xf4, 0x8, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x101000, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000080)={0x1, 0x100}, 0x2) [ 279.816755] device hsr_slave_0 entered promiscuous mode [ 279.852913] device hsr_slave_1 entered promiscuous mode [ 279.908768] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.915428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.922649] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.929314] bridge0: port 1(bridge_slave_0) entered forwarding state 04:21:41 executing program 0: r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000cc0)=ANY=[@ANYBLOB="9cb6484954c601944c5767b4bb04adb2c76f4e4d87894f42c60a44b0e6f089289a8c5eda21bc6c5fe38b37619f77aaccfe160cb3e4e11eb1d1e96e705eedd6668c58ec8c1251b337978a6a8401678fbe57815dd83047243f763ddd470e02dc20d8e5d6de070be44b76557df507071c9621945cbe66ec05b12f643f381f239f3653a0f4b7f02cd9976f7d0faa705750b26b9501750619a6950ca395a10968c6d2c46e31ca40b9b29af5aa9666106af05fc1277cd436a0b1f9749dc4284d4fbd2495545c42e68243b1054125cef75432d8b1b402a6647fa0c310326ab0799451e498a17d7d1877", @ANYBLOB="6db641fa1fef90e39d4b7deb6a9346a8f1583175212fae1ddfc9253f8c5e9191378cf813a48f2d4d8de94fef2d0358f9d3b903ae47724fb6132d16e82ce21a143a51a53169455f9e30322ffe885a2560ba09eb2e956cb0888a5c907cd4ccd15e365386b2d92d4591cba1b83e96d856ee649dafde491349e323efb3081862ea01b5ef8c9a949c93db4a00a8da7833d7b3673e3e2feb47a5892330", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYRES16=r0, @ANYBLOB="41b9edace774eaf8813133f05e33d6d5e20000000000000000", @ANYRES32=r0, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYPTR, @ANYBLOB="243c92aa58cd7ac7748f3a266f2a8afff50b54423c16b03b679780e9d4e7cbc239842d1ab647cae7f43ff5652ee2c8b4d4e10ae1385988c141b2f46ab53f6b7a723b55ee1ae15b78b1408dc8d7a8523473efe1e04c2ae2e21e8eb77c0b6b9e5a4e88263eae5aea96409e98e40199f236dbcdcbfe0597df173d245327dad5dd44d0f28c635a5c73d41fc44813d8a78944b2010dec9772e31a2a80c863d9f7d496df877e77cb36a90b36ccc0cafbda15f67f3f2b25ae561958b38bfbdbb93171763d"], @ANYRES64=r0, @ANYRES16=r0, @ANYRESHEX=r0]], 0x3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x810, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x10) recvmmsg(r0, &(0x7f0000000180), 0x400000000000370, 0x6, &(0x7f0000000100)={0x77359400}) [ 280.025965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.045743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.084826] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.105236] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.126118] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 280.153902] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.177866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.186284] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.192912] bridge0: port 1(bridge_slave_0) entered forwarding state 04:21:41 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x80) write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2}, 0x90) [ 280.235623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.243996] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.250513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.260237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.270080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.322244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.330161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.349231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.362243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.397873] 8021q: adding VLAN 0 to HW filter on device batadv0 04:21:41 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4568, 0x200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x4, 0x9, 0x1, 0x5}, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x88) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000300)="4c26d1119d6ef30f552cb0232474af4547b5ddf0a4593b5a2fe643a21d13233d180fae572fbdb0c6f90e58e4290424839725f96759c79f26db4859a31f726e6246ec973fc1835b66516923aabe6b38d16bd5f774228a40cf182652e985f2fe913236d2becc401199b493778f9ef41f7c594d05bb2317fe6115ecd1a7dde5160e4b05678c1a35a7723f3254c500e03b6f3e14f26c1636af7feca5eade75f0fe322d2c73eaa0c1bb80713d8ab470444f40086e309725e9cc5159632ea4b099129c6d49c03d796038531ea82fe9c6ce2f181277bdfc1cc80f797a5373952867256c2f4cbbc7b2c587349b2ae6080aadf0734abc", &(0x7f0000000100)=""/144}, 0xffffffffffffff51) 04:21:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r0, r1) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f00000000c0)={0x4a, &(0x7f0000000040)="b1430ce9feeee60f6a35233c514514fbf21e4f7fbc7f7c4777a116d7755b625fc68af1c0fbfd25724498c0772c482588d814821e74a8c6a7c0a502eda4134d12f8e99c46af27126fb773"}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@nat={'nat\x00', 0x19, 0x2, 0x210, [0x200004c0, 0x0, 0x0, 0x200005c8, 0x200005f8], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0064402ebeb219d2f2d8e1dafbd5c2fdbd000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b0000000000000000006272696467655f736c6176655f300000736974300000000000000000000000006970366772657461703000000000000069706464703000000000000000000000ffffffffffff000000000000aaaaaaaaaa00000000000000000070000000a8000000d80000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000005000000000000000000726f73653000000000000000000000006970366772653000000000000000000076657468305f746f5f62726964676500766c616e300000000000000000000000aaaaaaaaaabb0000000000000180c200000000000000000000007000000070000000a80000006172707265706c790000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000004b3086112e8134fe4e64d55e7a8fe0aa373fe39e05109bb1c3026e7e3b20fa32941eb73ad6ddd73d57dc483aa0c1f3de68d62714098c4db17cea9d39951cd68472b8c148c26343513deb9e606e342bcba7a98274180624d326a79e7a55bc8bdca6f922e238f080c686c72a238793bd5b7f951552a2f9487b2f6ca8a5b1fcd4a218a25a5375244543a8c2fe7efc03a4b7c68380969fd554aed053ca3df5c010355c72fadb678a59cb33291e49da81ad70e76945cab697fd4a427d6b3be7f3"]}, 0x356) 04:21:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x11, 0x0, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xd8, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x17d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20004841}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000079c0)=@ipv4_getnetconf={0x14, 0x52, 0x1}, 0x14}}, 0x0) 04:21:41 executing program 0: socket$bt_cmtp(0x1f, 0x3, 0x5) move_pages(0x0, 0x2, &(0x7f0000000180)=[&(0x7f0000000000/0x4000)=nil, &(0x7f0000009000/0x3000)=nil], &(0x7f0000000040)=[0x1, 0x8000], 0x0, 0x0) 04:21:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x8001) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="64f5d9f7", 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r1, r2, 0x0, 0x10000000000443) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000600), 0x293b5}], 0x1) read(r1, &(0x7f00000003c0)=""/72, 0x100000104) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x101000) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) sendmsg$xdp(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="9d", 0x1}], 0x1}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) 04:21:42 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000000c0)=0x24fe) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xbc, 0x0, &(0x7f0000000280)=[@dead_binder_done, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, @increfs_done, @enter_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100}}], 0x31, 0x0, &(0x7f00000003c0)="d3f2f5cb7c57f339ffaf76b7d40687b898d01706cad12d962ba4e691ee7eb8fb9d0fdc22107ab8ceec2b595b93ae846a07"}) [ 281.021831] binder: 10670:10672 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 281.029595] binder: 10670:10672 got transaction to context manager from process owning it [ 281.038414] binder: 10670:10672 transaction failed 29201/-22, size 0-0 line 2986 [ 281.049368] binder: undelivered TRANSACTION_ERROR: 29201 04:21:42 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9, 0x406002) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x5, {{0xa, 0x4e23, 0x2, @mcast2, 0x8}}}, 0x88) r1 = timerfd_create(0x0, 0xfffffffffffffffd) r2 = dup(r1) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0x40085400, &(0x7f0000000140)={0x4008000000007, 0x4000000000000000, 0x0, 0x6, 0x0, 0x9}) 04:21:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070") sendmmsg(0xffffffffffffffff, &(0x7f0000007e00), 0x4000067, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f00000000c0)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) poll(&(0x7f0000000000)=[{r2}, {}], 0x2, 0x1) 04:21:42 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02090001020000000000000000220000"], 0x10}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x9, 0x400100) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000040)=0xfffffffffffffff7) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 04:21:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0xfffffffffffffff9, 0x7, [0x1, 0x2, 0x4, 0x1f, 0x4, 0x3, 0x3]}, &(0x7f0000000280)=0x16) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0xffffffffffffff72) r3 = accept4$alg(r0, 0x0, 0x0, 0x800) sendfile(r3, r1, 0x0, 0x734) 04:21:42 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000200)={0x40000000, 0x0, "fbbb3ed69d77bc027bd06a25a0052d81f81886a300bbd29640e49e6765e29165"}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x5, 0x7, 0x4, 0x100000, {0x77359400}, {0x4000000000000, 0x208, 0x0, 0x10000, 0x101, 0x9, "912b39b4"}, 0x10a0, 0x7, @fd=r1, 0x1}) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000140)) 04:21:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0xfffffffffffffd2d) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='nv\x00', 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0xf7) 04:21:42 executing program 0: msgget$private(0x0, 0x0) msgget(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2000000000002900, {0x0, 0x0, 0x5400, 0x0, 0xf4010000}}, 0x80, 0x0, 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0) 04:21:42 executing program 1: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e22, 0x2, @local, 0xffff}, {0xa, 0x4, 0x7fff, @mcast1, 0x101}, 0x4, [0x5, 0xffff, 0x8, 0x1, 0x200000001, 0x23, 0x5, 0x6]}, 0xffffffffffffffb0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x2a, &(0x7f0000000040)="30c0f1ccd94dc5e7b66fa29b2379bdbe51ee0413c2aa4415692df62002ae10b63ecb77253e0298d942d4217038e93d750efbdc88", 0x34) setsockopt(r0, 0x100000000065, 0x1, 0x0, 0x1) [ 281.743484] hrtimer: interrupt took 33661 ns 04:21:42 executing program 1: fanotify_init(0x20, 0x109000) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xffffffff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x9}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) accept$packet(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x14) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x7fffffff) 04:21:42 executing program 0: msgget$private(0x0, 0x0) msgget(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4000000020000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2000000000002900, {0x0, 0x0, 0x5400, 0x0, 0xf4010000}}, 0x80, 0x0, 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0) 04:21:43 executing program 1: unshare(0x400) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f00000000c0)="065b12c963ddb50bc9bed996a798d704169665e655b36c04f7df8f69c4ffec6bcc611a221c3bf5946dfd83fc0db0636b85e475b4036fa67690598c143b74aca2f9c636101de630e672837219bd0cf7828bcb40472e9e4b440357d7a62a5291b118d60d786e7bbf469da76bbaaa3b86397b83d40d533273c9308a3d2ee8edb3dc0e95") close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) shutdown(r0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) 04:21:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x20, 0x0, &(0x7f0000000140)=[@free_buffer, @acquire_done], 0x0, 0x0, 0x0}) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8001, 0x2000) 04:21:43 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x7, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = dup(r0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000140)={0x0, 0x36a9262}) r3 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) recvmsg$kcm(r3, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000140081ae00002c000500018701546fabca1b4e165a307db89c40ebb3f7ffffffffffffffb4e921556b3d5df5000000000000000000", 0x39}], 0x1}, 0x0) r4 = socket(0x3, 0x800, 0x40) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f00000001c0)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'bridge_slave_1\x00'}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$notify(r1, 0x402, 0x1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x7, &(0x7f0000013e95), 0x4) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x2000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000080)) close(r5) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x3, 0x0, 0x400, 0x2, 0x1}}) close(r1) r6 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x401, 0x80001) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x4) [ 282.290685] binder: 10718:10719 BC_FREE_BUFFER u0000000000000000 no match [ 282.298086] binder: 10718:10719 BC_ACQUIRE_DONE u0000000000000000 no match [ 282.327272] binder: 10718:10719 BC_FREE_BUFFER u0000000000000000 no match [ 282.334602] binder: 10718:10719 BC_ACQUIRE_DONE u0000000000000000 no match 04:21:43 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1a1, 0x40000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001480)={0x0, 0x1, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=""/101, &(0x7f0000001440), 0x6000}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000380)=""/45) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x38e2, 0x301000) recvfrom(r0, &(0x7f0000000140)=""/161, 0xa1, 0x40010121, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr=0xfffffffffffffbff}, 0x4, 0x4, 0x4}}, 0x80) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x91) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r4 = dup(r2) fcntl$setpipe(r0, 0x407, 0x5) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000001440)=0x6) ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000100)={0xc110, 0x2000000005}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000280)={0xfffffffffffffffc, 0x200, 0x4, 0x0, 0x0}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000300)={r5, 0xffffffffffff058a}, &(0x7f0000000340)=0x8) 04:21:43 executing program 1: r0 = socket(0x40000000015, 0x805, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000080)={0x4, 0x7, @name="751416f42ee62cb19789fd2ff6de02c2bfa91cf22b5165fee4a552edd71b51e5"}) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt(r0, 0x114, 0x2713, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x1392, 0x80, 0x0, 0xffffffff, 0x6}) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000180)={0xb, "3bcc1a6dd12d1d0fa47947312aa38a9225d93afca168bee7b97555b61ae51264", 0x100, 0xf0, 0x80, 0x0, 0x7}) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f00000000c0)={0xb, {0x8, 0x7ffffffb, 0x40, 0x10000}}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140)=0x7, 0x4) 04:21:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r2, r3, 0x0, 0x1) [ 282.627328] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 04:21:43 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_emit_ethernet(0x13, &(0x7f0000000100)={@remote, @remote, [{}], {@generic={0x0, "a2"}}}, 0x0) 04:21:44 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1000000}, 0x8) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x9) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = dup3(r2, r1, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) close(r4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x4, 0x3, 0x0, 0x3, 0x2, 0x47}, &(0x7f0000000080)=0x20) 04:21:44 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0)=0xffffffffffffffff, 0x1) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) 04:21:44 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000014c0)='net\x00') r1 = accept4$tipc(r0, &(0x7f0000001500)=@name, &(0x7f0000001540)=0x10, 0x80800) r2 = add_key(&(0x7f0000001580)='syzkaller\x00', &(0x7f00000015c0)={'syz', 0x0}, &(0x7f0000001600)="875dd4bcdcfd610f7891bbbfbfd681c7bc75dc8e85d140c5bea5f404cc3bba6aa27aa9a73238801c7118fbfcac7350b607ca14f23c5e561ff8e0026864d584724384efa300289e8db9f27753a85f7cfcfdb021d6dc234d22ddb775d5f2f70432a48e2b45d325821ac35d089bc94f5d19c84342a4255a9b37665c68bd93c91d94125d20ab118bcdb1bb9f3138edfcf6beec3346b3aab57409c4408efa73d1d6a90ca102c61d6b91685b1193d00534", 0xae, 0xfffffffffffffffd) r3 = add_key(&(0x7f00000016c0)='.request_key_auth\x00', &(0x7f0000001700)={'syz', 0x3}, &(0x7f0000001740)="26ea1f494a06d8f2cdd66d3350d8cd605bace5301f01d902df694bd989659bdc6d20a031d9eb95cdfb65a959a5446ef5baedb3647f7544d0254b99a49c2437b68921d0866f44d7e9fed6b3aeea8a4c7670ac0e124a7b80f96a97fdd09160c3690bbe17ccf238e8e2e3f5826d02dd29a30177f8280276866b983ac40fdf54f62164", 0x81, 0xffffffffffffffff) keyctl$link(0x8, r2, r3) sendmsg$nl_route(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)=@ipv4_delrule={0x68, 0x21, 0x400, 0x70bd25, 0x25dfdbfe, {0x2, 0x20, 0x0, 0xeac, 0x4, 0x0, 0x0, 0xc, 0x10000}, [@FRA_FLOW={0x8, 0xb, 0x1}, @FRA_SRC={0x8, 0x2, @local}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_DST={0x8, 0x1, @loopback}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xff}, @FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x68}, 0x1, 0x0, 0x0, 0x44001}, 0x10) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000001940)) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2) keyctl$assume_authority(0x10, r2) keyctl$revoke(0x3, r2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000001980)) set_thread_area(&(0x7f00000019c0)={0x6, 0x0, 0xffffffffffffffff, 0x7, 0xffff, 0x9, 0x5, 0x8, 0x1, 0x6}) getsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) socketpair(0xa, 0x5, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000001ac0)=[@in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0x4, @local, 0xffff}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e20, @empty}], 0x4c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000001b40)={0x2, 'ip_vti0\x00', 0x4}, 0x18) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000001b80)) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/dlm-control\x00', 0x200, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000001c00)={0x0, 0x0}) r7 = socket(0xa, 0x0, 0xfffffffffffff801) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/sequencer\x00', 0x800, 0x0) fchmod(r5, 0x88) perf_event_open(&(0x7f0000001cc0)={0x4, 0x70, 0xd6, 0x6, 0x5, 0x3, 0x0, 0x3, 0x610, 0x4, 0x1c41, 0x20, 0x8, 0x4, 0x19, 0x0, 0x3ff, 0x0, 0x9, 0x0, 0x4, 0x401, 0x1, 0x5, 0x8, 0x8, 0x0, 0x5, 0x5, 0x6, 0x6, 0x6, 0x58c0849b, 0x0, 0x9, 0xffffffff, 0x3, 0xfffffffffffffe00, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000001c80), 0x3}, 0x2000, 0x3, 0x27f1dade, 0x5, 0x8, 0x6, 0xffffffff}, r6, 0x7, 0xffffffffffffffff, 0x8) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000001d40)=[r5, r5, r4], 0x3) accept4$vsock_stream(r8, &(0x7f0000001d80)={0x28, 0x0, 0x2710}, 0x10, 0x800) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000001dc0)) getsockname$inet(r7, &(0x7f0000001e00)={0x2, 0x0, @multicast1}, &(0x7f0000001e40)=0x10) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f0000001e80)={0x52, 0x8, 0x0, {0x0, 0x7fffffff}, {0x2, 0x1}, @ramp={0x80, 0x100000000, {0x6, 0x0, 0x7, 0x7}}}) read$rfkill(r8, &(0x7f0000001ec0), 0x8) fcntl$setownex(r1, 0xf, &(0x7f0000001f00)={0x0, r6}) 04:21:45 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r1, 0x3, "a2645f"}, &(0x7f0000000200)=0xb) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000280)={0x1, 0x0, {0xad21, 0x20, 0xa26, 0x5bcb685d}}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2201, 0x0) ioctl$int_in(r3, 0x800000c0045009, &(0x7f0000000100)=0x4) 04:21:46 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") r1 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x8000000000000015) r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) r4 = shmget(0x1, 0x4000, 0x54000400, &(0x7f0000ffa000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x1000)=nil, 0x5000) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000100)={0x3f, 0xffffffff, 0x4}) tkill(r1, 0x1000000000015) 04:21:46 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x101, 0x4000) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) write$UHID_CREATE2(r0, &(0x7f0000000080)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0xc1, 0x100, 0x0, 0x3, 0x0, 0x7, "60bcf1f7a03cd01cc94a8499d8ba421711de237b95c7d1b0651092ba8e824ea3b9b5cbbf6713de1a7f27d7dc2f403d16bc6af7082686aeb7b1df2a03f93b833d4fea80901f2e287b84457bd80bc4e64a7eed87630261cfc4ff9d50923747235b0a4f687c62d93b02eef598f121063fd6033aa9d77e09d88fc7b2e1c474a737fb7ad227e81cb8f288127f566d17a3c91029e3340720f53cfddf9e596a4cb8ee82ef1fd01e9382d966c956e7bbc1e61d67752f81b50bcc54e52e4225c63efe70d1a1"}, 0x1d9) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) 04:21:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x3, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x218010d0}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xb29b}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ashmem\x00', 0x0, 0x0) r4 = dup2(r0, r0) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f00000000c0)) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x80000000000012, r3, 0x0) read(r3, &(0x7f0000000000)=""/184, 0xb8) 04:21:47 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400000, 0x0) write$P9_RSTAT(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="560000007d010000004f0007000700000001010000000100000000ba0e87760000000000000288000000040000000600000014000000070074696d65727300070074696d65727300070074696d65727300070074696d65727300"], 0x56) syz_open_procfs(r0, &(0x7f0000000080)='timers\x00') 04:21:47 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/62, 0x3e}], 0x1) unshare(0x40000) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) write$P9_RGETATTR(r0, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x40, {0x82, 0x0, 0x7}, 0x80, r1, 0x0, 0x5, 0x7fffffff, 0x4, 0x1, 0x7, 0x4, 0x400, 0xfffffffeffffffff, 0x401, 0x6, 0x9, 0x1, 0x0, 0x4, 0x2}}, 0xa0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f00006d7000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x800000000000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x1, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, 0x0) ioctl(r2, 0x40084149, 0x0) 04:21:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x50) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0)=0x2, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000022009f0800"/20], 0x1}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="00ff0000fbe76ff900"], 0x1}, 0x8}, 0x0) 04:21:47 executing program 1: r0 = socket(0x15, 0x8000b, 0x80) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) 04:21:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") r1 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x8000000000000015) r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) r4 = shmget(0x1, 0x4000, 0x54000400, &(0x7f0000ffa000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x1000)=nil, 0x5000) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000100)={0x3f, 0xffffffff, 0x4}) tkill(r1, 0x1000000000015) 04:21:47 executing program 1: r0 = socket(0xe, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(r0, &(0x7f0000000080)="240000004a005f0014f9f407000904000a020000000000003f00"/36, 0x24) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x418140, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000001c0)={0x1, 0x1, [0xfffffffffffffffe, 0x8, 0x7, 0xcd, 0x7bf, 0x6, 0xffffffff, 0x80000001]}) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x400004) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={r3, @remote, @loopback}, 0xc) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0) epoll_pwait(r2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}], 0x5, 0x6, &(0x7f0000000100)={0x5}, 0x8) 04:21:47 executing program 2: r0 = add_key$keyring(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000740)='keyring\x00', &(0x7f0000000880)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$instantiate(0xc, r0, 0x0, 0x0, r1) r2 = inotify_init() r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r3) r4 = fcntl$getown(r2, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x2c, &(0x7f0000000440)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e22, 0x101, @dev={0xfe, 0x80, [], 0xf}, 0xfffffffffffffff9}]}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000500)={r5, 0x3, 0x10}, 0xc) capset(&(0x7f0000000380)={0x20071026, r4}, &(0x7f00000000c0)={0x2000000000000005, 0x0, 0xffffffffffff0001, 0x800, 0x217, 0x409d54}) r6 = memfd_create(&(0x7f0000000300), 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000240)={{0x100000, 0x1, 0x9, 0x1000, 0x9, 0x800, 0x8000, 0x5, 0x80000000, 0x1, 0x40000, 0x1}, {0x2, 0xf000, 0xc, 0x67, 0x4, 0x7, 0xa5, 0x8, 0x400, 0x2, 0x7fffffff}, {0x4000, 0xf004, 0x9, 0x3, 0xfffffffffffffff7, 0x9, 0xf20, 0x9cd9, 0xd13f, 0x0, 0x7}, {0x2000, 0x5000, 0xb, 0x2, 0x9, 0xffffffffffffffff, 0xffffffff, 0x4, 0x9, 0x4, 0x4, 0x4}, {0x100004, 0x0, 0xb, 0x1, 0x5, 0x3ff, 0x81, 0x8e, 0x2, 0x973, 0x5, 0x4}, {0x4000, 0xf000, 0xd, 0x6, 0x6, 0x6, 0x8, 0x6889, 0x7fff, 0x3, 0x7ff, 0xffffffffffff0000}, {0x1, 0x1, 0x8, 0x7, 0x1, 0x7, 0xf9, 0x9, 0x8, 0x30, 0x9, 0x93}, {0x3000, 0x100000, 0xc, 0x2, 0x8000, 0x10000000000, 0x100000001, 0x0, 0x7ff, 0x2, 0x6, 0x800}, {0x102000, 0x102000}, {0x4000, 0x1000}, 0x10, 0x0, 0x1, 0x8, 0xc, 0x800, 0x4, [0xfffffffffffffffb, 0x36a, 0x2c480000000000, 0x1f]}) write(r6, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x7, 0x5, 0x1}, &(0x7f0000000140)=0x10) r8 = fcntl$dupfd(r2, 0x406, r3) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000580)={{0x9, 0x3, 0x5, 0xf43a, '\x00', 0x400}, 0x4, 0x30, 0x17e, r4, 0x1, 0x3ff, 'syz1\x00', &(0x7f0000000540)=['fd\x00'], 0x3, [], [0x66e9, 0x1, 0x3, 0x401]}) getsockname$inet(r3, &(0x7f00000003c0), &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000180)={r7, 0x80000000}, 0x8) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000001000/0x3000)=nil, 0x3000}) ioctl(r8, 0x5, &(0x7f00000007c0)="e3e790db3ac9f09f5a51f367c333cd93fa8ca5de8d388586b4c4a5df1643581c26250fe8a5cb1a3e7159f30cb6f4cdbdfb4f17a3303a20675c68c7f2e8593577d69f9a54b2f237bd6ffc1c7f628e241699c333a20aa28696a235c5e32c50fcbc0b6262fb98dd2f426bd9400e8304ade653e1b88f89cd04e33d1f2d1bf65fbf12de97483c1eda83b50e4efd91caf8fdd8c4a4a2b315776c4dc518f2a2a537f62fbb6bc81641f42e0b69d4") 04:21:47 executing program 2: futex(0x0, 0x0, 0x3, &(0x7f0000000040)={0xfffffffffffffffc, 0x100000000000000}, 0x0, 0x0) 04:21:47 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8000, 0x400c0) close(r0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="01bff48e3f70d8caaa056da0c0c81034b02745e4e17bfcdfdf9d") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) r2 = memfd_create(&(0x7f0000000380)='#vmnet1nodevem1\x00', 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) write(r2, &(0x7f0000000200)='.', 0xdd) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x4, 0x202, 0x2, 0x100000001, 0x2, 0x0, 0x5, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r4}, &(0x7f00000001c0)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x0) fstatfs(r0, &(0x7f00000004c0)=""/4) ioctl$int_in(r1, 0x800000c0045009, &(0x7f0000000000)) 04:21:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000a, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x803, 0x1) 04:21:48 executing program 1: unshare(0x400) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x800000000000000) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @multicast1}, 0x86, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x8, 0x5, 0xb6c}) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @rand_addr=0x3}, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @broadcast}, 0x6, 0x0, 0x0, 0x0, 0x64ff, &(0x7f0000000080)='hsr0\x00', 0x10000, 0x0, 0xf8ed}) r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x254285) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x111200, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x4}}}, @IFLA_BROADCAST={0xc, 0x4, @local}]}, 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280)=0x7, 0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000340)={0xa30004, 0x0, 0x62, [], &(0x7f0000000300)={0x990a66, 0x20, [], @p_u8=&(0x7f00000002c0)=0x9}}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000380)=""/163) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000240)={0x80000001, 0x1, 0x7ff, 0x7fff, 0x1, 0x7}) 04:21:48 executing program 2: r0 = socket$unix(0x1, 0xfffffffffffffffe, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000006c0)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000002740)={0x2, 0x0, @local}, &(0x7f0000002780)=0x10, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000027c0)=ANY=[@ANYBLOB="04ff7f000000020000f89e0f"], 0xc) dup3(r0, r1, 0x0) [ 287.009333] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:21:48 executing program 1: r0 = socket$inet(0x2, 0x3, 0x1c) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0ad401003c123f319bd070") r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000000)="120000001a00e5ff007b00000000008000a1", 0x12, 0x0, 0x0, 0x0) 04:21:48 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) tkill(r0, 0x1000000000014) 04:21:48 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0xb0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r1, &(0x7f0000000040)=[{0xffffff92, 0x0, 0xffffffc0, 0x0, @tick, {}, {}, @quote}], 0xff33) 04:21:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070") r1 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) tkill(r2, 0x8000000000000015) r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) r4 = shmget(0x1, 0x4000, 0x54000400, &(0x7f0000ffa000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x1000)=nil, 0x5000) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000100)={0x3f, 0xffffffff, 0x4}) tkill(r1, 0x1000000000015) 04:21:48 executing program 1: perf_event_open$cgroup(&(0x7f0000000200)={0x7, 0x70, 0x0, 0x1ff, 0x20, 0x3, 0x0, 0x7, 0x22000, 0x4, 0x0, 0x1000, 0x6, 0x5, 0x2, 0x3, 0x3ff, 0x3, 0x2, 0x7, 0x5, 0x7, 0x1ff, 0x7, 0xe0, 0x1, 0x4, 0x7f, 0x9, 0x6, 0x7, 0xfc7, 0x7, 0x2, 0x3ff, 0x6824, 0x1, 0x5, 0x0, 0x370, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x1, 0x0, 0x4ac, 0x0, 0x7fff, 0x4, 0x2}, 0xffffffffffffff9c, 0x8, 0xffffffffffffffff, 0xc) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8, 0x501000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x0, 0x400) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xd, 0x0, 0x3, 0xfffffffffffffffd, 0x8, 0xffffffffffffffff, 0x6}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000002c0)="b1a479c17491fcf07ff4ee95bf8a96bdd5c2a2e38e5ae8985cb808d261ab91c4210fbdecdf169135b53b9ce9aa5c85f188d18b0732c331de9999e604c536cd77518998aeffb1a2985b1334df2708bb1f18d24eaabc157e66025f9ee6711a0944e85d2d46ebdf664b5fce3507fe111a3b7e2fae357f0a054e199884d36a82fd31304302c39b82a2ce5f86930395d15f62d02b16471a7e729e02c0badaa6e26ad2e826e0e62c0cb57287848ca740e1a23c19281707", 0x0}, 0x20) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000007c0)=0x2c0, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000ffeffffe) socketpair$unix(0x1, 0x805, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 04:21:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) 04:21:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0fb0"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:21:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x2) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000040)={0x7, 0x0, 0x7e}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) rename(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000}) bind$rds(r0, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:21:49 executing program 0: msgrcv(0x0, 0x0, 0x10345, 0x0, 0xa423ad41a879dde0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x2000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000001c0)={0xffffffffffffde26, 0x100000000, r1, 0x0, r2, 0x0, 0x9, 0x20}) msgget$private(0x0, 0x282) 04:21:49 executing program 0: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x26, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) 04:21:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x10000, @dev={0xfe, 0x80, [], 0x1a}, 0x6}}, 0xfff, 0x0, 0x66ec, 0x5, 0x8d}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0x3f, 0xb3c}, &(0x7f0000000180)=0xc) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x3, 0xfffffffffffffffe, 0x2bf) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x1000}, 0x8) 04:21:49 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x200000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {r1, r2+30000000}}, &(0x7f00000000c0)) 04:21:49 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0xffffffff, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, {0x3012}}) 04:21:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3000005, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r0, 0x29, 0x10, 0x0, &(0x7f0000000040)) r1 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000200)=0x8001, 0x4) 04:21:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0xa7, 0xc0a3a817a4900eb7) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffff9c, &(0x7f00000005c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000580)={0xffffffffffffffff}, 0x3, 0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, [], 0x21}, 0x8000}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000680)={0x11, 0x10, 0xfa00, {&(0x7f0000000340), r2}}, 0x18) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@loopback, 0x0}, &(0x7f0000000040)=0x14) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000006c0)) r4 = open(&(0x7f0000000380)='.\x00', 0x0, 0x92) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x21001012}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x8c, r5, 0x102, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6b7c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000080)={@rand_addr="ee924c5048e19f29cc71b540835c557d", 0x66, r3}) r6 = socket$netlink(0x10, 0x3, 0x200014) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c00000020000d0806000000000000000a3014000000000000000000000000660014000100ff01000000000000000000000000000114000200fe80000080000000000000000000000000000000000065ad36c0ff00"], 0x5c}}, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$EVIOCGABS0(r7, 0x80184540, &(0x7f0000000200)=""/152) setsockopt$inet_tcp_TLS_TX(r7, 0x6, 0x1, &(0x7f0000000140), 0x4) 04:21:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x8, @mcast2, 0xff}}, 0xfffffffffffffbff, 0x9, 0x100, 0x5, 0x9}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000200)={r1, 0xe5c}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x6d, &(0x7f0000000040)={0x0}, &(0x7f000095c000)=0x20000048) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x492, r2}, &(0x7f0000000080)=0x10) 04:21:49 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000380)='/dev/capi20\x00', 0x0, 0x0) unshare(0x2000400) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffff80}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20800, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001540)={r0, &(0x7f0000000440)="87c5d09c385c452633c3c9e0dc35462e5ccd532921ec837e865c49b0d28616ffea84e497ec0a5755394e901e47059637be764606ded597792860b23cbbe81474e8960fb8c00d564bf69304ebbacfda329f3bcfc2d488ae9eff72aa3c37dff9ff504e853b51f4076ad3dbbc8bd671a47a4f4a49c1a58b1dea3ff6c8ddb1cb807252883ea5cd73b2b9ad2c91ae8810183d2a75797ea596cb79aeb69e65122ab1f96738ebf8581546bc43c8ddd2ce0832be03fa191d55d6f2a9500a1df708232a7f9206c017f0a78cfb67f936705b16f60d61af6ba75b125eb8a8e576a0be9b32198b", &(0x7f0000000540)=""/4096}, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) setreuid(r3, r4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x4, 0x20, 0x5, 0x20}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={r5, @in6={{0xa, 0x4e20, 0x2, @empty, 0x1}}, 0x400, 0x506, 0x7, 0x7ff}, &(0x7f00000001c0)=0x98) ioctl$CAPI_REGISTER(r1, 0x400c4301, 0x0) 04:21:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)='/', 0x1}], 0x1}], 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x90100, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x400000000000099, 0x0, 0x0) 04:21:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x2000, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000280)={0x5fd, &(0x7f0000000180)="90a97c1437334abfa2bb6425989e1d5b26d6184b5f408301bab3e6d2f95aad4f1c5e739bc7e166ce00288538da86eff0f5bd2d05059cf67e26d1115cc72015b4392ca4eb3567e4d8ecd44d1f7ad70af2a9c8eb3be7d816e6c51141b72401de6f897494afe573e0ea1f3e5e243e7ad14be4ce3ffef98b81c926c85ea8eeb33078e906d11db2a257013c94c2e8949d7d5cd28a5f81c80b843cf85c1236176cd77428fb66d3bcafdba1fa9b10c3b1e64f89ea27791bf7aebe290380ec350dd5d609f804724d7d2da6ec17fbb0c65ccf5fca5ed56e0090a649a2"}) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x2000) write$smack_current(r2, &(0x7f0000000100)='\x00', 0x1) mlockall(0x6) syz_execute_func(&(0x7f0000000000)="f3e100def9575cc3b7d991d6734e4e73224a460f30096ccc2e67660e50e94d00c9c973294ad0d26cc4a1f9da2fc422f18cf0bf420fae9972b571b99f01467785fb") preadv(r0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f00000003c0)=""/190, 0xbe}, {&(0x7f0000000480)=""/56, 0x38}], 0x3, 0x0) 04:21:50 executing program 0: timerfd_create(0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000002c0)={0x0, 0x4, 0x0, [{0x7, 0x7258, 0x1, 0x6, 0xb39a9ad, 0x1, 0xffffffff00000001}, {0x1000, 0x1, 0xfffffffffffffffa, 0x37, 0x101, 0x4, 0x9eb}, {0x800, 0x9, 0x0, 0x3, 0x1, 0xc897, 0x2}, {0xffff, 0x101, 0x8, 0x40, 0x1, 0x158, 0xfffffffffffffff7}]}) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000400)=""/69, &(0x7f0000000080)=0x45) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x1d, "222b07b4f705fd22625dda8552d3d70630a5717d68f0a518b18cb7b0a6"}, &(0x7f00000004c0)=0x25) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000500)={r3, 0x2}, &(0x7f0000000540)=0x8) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @rand_addr=0x6}, {0x306, @dev={[], 0xf}}, 0x40, {0x2, 0x4e21, @remote}, 'team_slave_0\x00'}) 04:21:50 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f00000001c0)=""/246) ioctl$PPPIOCSMAXCID(r2, 0x4008744b, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs(r3, &(0x7f00000000c0)='fd\x00') [ 289.260550] IPVS: length: 69 != 8 04:21:50 executing program 1: lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-'}, 0x28, 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100880, 0x0) 04:21:50 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000400)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x0, 0x8001, 0x80}) 04:21:50 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000100)={0x14, 0x49, 0x2, {0xa, 0x2, 0x8}}, 0x14) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="00fb1b050088c159a683293e2907d2656066f4a3fb2edc8e3b2b1302e975a09a7440a0fb0945b5933e7c6d49c52c2a5fcc21dc93140cc79b44e3c921912036f6608ec17612723f48f3f09655cfa7ac79a37e23165ff045b137ff5ec7e984d5b76a2ebb67052ad9cccbb1099194a76db1fd3ce4d38352f29109d05b555fd9"], 0x1b, 0x3) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000001c0)={0x0, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e22, @remote}}}, 0x108) close(r0) 04:21:50 executing program 0: pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) accept4(r3, &(0x7f0000000000)=@ethernet={0x0, @broadcast}, 0x0, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x444000) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}}], 0x1, 0x0, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000140)=[0x8000, 0x401]) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_cache\x00') preadv(r5, &(0x7f00000017c0), 0x1d0, 0xf4) [ 289.496523] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.515852] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 04:21:50 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0xfffffffffffffffd, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000080)) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000000c0)) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000100)=0xbf, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x0, &(0x7f0000f07000)}, 0xfffffffffffffe87) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000280)={@multicast2, @multicast1}, &(0x7f00000002c0)=0xc) listen(r0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000140)={0x3, {{0xa, 0x4e21, 0xfffffffffffff801, @loopback, 0x100}}, {{0xa, 0x4e21, 0x200, @loopback, 0x6}}}, 0x108) 04:21:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002a13e0cc2462d6c669bc57671be36c68a4cce2b819614cbf8d2d1a732b3960c05e0206578b23ed69de5a19276abcc42e88be5b641e645bee", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000c4100030014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) 04:21:50 executing program 2: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000009c0)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0x15}], 0x1}, 0xc100) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101080, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000080)={0x1, 0x3f, 0x4, 0x2}) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002e00)="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", 0x2b7}], 0x1}, 0x8000) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)="d09a0e633a476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd3238d03dbb686df460963245dedf2013ee555af99499e44ad420dbf65fd46fbc99a1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb264eddea60b18e16c31aa5e200000491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1515c3e8d4f162fdebf8ebe11ae6fcd9372c8d8f19556ae091fe94215ae9434da412f6fa4cb6561e5f78ff9707844ee5d573fb294437722d9a06dfa61748c32c73d759933a8dd344c947d3efdbe90d0eb049df5fbb0c19f6785264b619c530d97395d44b04f7e2a280d658c7871ad373b792678c49227999651ef3b2ee1bc2b8f3035db376e8e09aa3837233c8713065a8ad131d24f6c42a3220d0e07c3d3e95d59a5dd10c09716b5f874ecf53aadfa5050ff40f2c3c4a629b6445e5836100afff5a8977583653b40ca316f8f11416e5c1bd5499636ddae25fc4970b37209cf5c0bf8e432160c258d14223baa52798e09858645773dd97e68a9531072713cff077b2e73e03ed4f145e9199c126a7f235e5674a3c7f5c7129ac7c1a3319590249b6d34ef6c3d8b94c6fc7cdcbddb053243053f7bc1f230c3bc7dfc4359e33992d0a3946b914a093287a76ac4a249b5b86cc75476466e409553355fefab75e9268a8751ffc9481fcff1f49c475699595b315e2147eebe8b7291600c6b1cf7c8f24d587b9464a67e5ccec17800e711b98f4f7d5053642068a3fff704c3fe35ba862b53e2622d6e8b4a4c815fb2ea90ef63e141209dd29254e5ab5bde9c6857b3cb184586049e7741b2d8b5b1a19e99e1834a25959155720c1c0ef84d9d3c42e1ba282847d476cef0228b1422aba08e5f3c1cd279bbd1c5303c2e9c16a0da4f88f770fca118b09e92b51a33970e32ade0c74eee1b31a420d7914c9d75db25855ae32798edc1b47e0f0f88429b2b60ae635ae2f006fd7806ec", 0x2dd}], 0x1}, 0x0) 04:21:50 executing program 1: unshare(0x20020000) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x103) mount(0x0, &(0x7f0000000700)='./file0/../file0\x00', &(0x7f0000000480)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file1\x00', &(0x7f00000000c0)='ramfs\x00\xd9q\xab\xafP\xe5,h:\xc7\x926\'\xa5tL\xd7\xd1\xb9k\x8dF\x18\xe2N6\x04\x9bXD\xa7_\xe6\xf6\xd4 \v\x96\xb0t\x9f\xdd\x17\xfc\r\x8cQf?i\xb7\x89\x99\xdf\xf0\n\xd5\xd5\xf2\xa5\x94\x05y\xd3\x18\x9b\xfa\x01\xa1\xfe5|\xac\xc0Jw\xd5\xeb\xfe2\xe5\xb2uG\xa1\xe8\xd9\x06\x9fS\x81Ii\xfcE\x1b\x92#\xe7G\xc9\xd9r\xa8\xc2\xfb\x93\xbb#\xf6\xa8\xa42a\xfa3\xfc\xbf\xbePq\xcfH\x00+%\xfa\xbc\x80;\xd3\xe5,\xc1\n\x1b\xce\x00\xc7\xe3\xbfC\x0f\xb3B+\x8a2\x19\xed\xd9\x13\xfc\xe8\x9dV\xb7\xf1\xdf\'\xa4lc\xaa\xcdi\xc9\xa1\x18G1\xca\x15.R\x87\t\xdf\xe5\xf7\xcd\xd5\xf5\xa8xL\x82\x89l\xc9\xa0g\a4\x88\xf4\xfd\x1d>\xc0\xc3\xaf\xf2h_\xcf\xd3\xe2+\xd6#\x11\xfb\'yr{\xf1\x0f\xa2EU', 0x0, 0x0) poll(0x0, 0x0, 0x400007f) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 04:21:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1000000000e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f00000015c0), &(0x7f00000000c0)=0x2) 04:21:51 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x8000, 0x1}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x5}) bind(r0, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @reserved}, 0x80) 04:21:51 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x14000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0xb2, 0x401, 0x7, 0x7fffffff}) unshare(0x400) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000100)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000140)=r3) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) fcntl$getown(r1, 0x9) 04:21:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r0, 0x1000008913, &(0x7f0000000200)="0adc1f123c12a41d88b0706a5e55d7d5d84a5fc981195753cea134df5ae70ddb5c3b319372a8a9d97d73b4cbe4494feb4baa2a4d9938496b1df2953c61b7fb13d2b4327db1c737bd3ec7160cfcbbc4b072473032e291be58dc6aa8dabed43b4529a20311f7bec2eae38fa9a6b2ffceb00eadfc693796c85e41fd510a104b8ffc1fb50a166b63b38b8a2faef13f13839da2089e1ca9762edcd344fa30b748cfac568a9ed4ae000000") r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000080)) 04:21:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000380)=""/87, &(0x7f0000000300)=0x57) r3 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000480)=0x7, 0x4) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000500)=0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0xfffffffffffffffe, 0x200000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[], 0x10000, 0x10004}) utime(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x80000000, 0x80000001}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000580)={0x20001, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x10002) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000080)={0xfffffffffffffffe, 0x100000000, 0xffff}) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100), &(0x7f00000004c0)=0x4) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000200)={[{0x7fff, 0x9, 0x3, 0x80, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x1, 0x2, 0x1235, 0x7, 0x100000001, 0x9}, {0x2, 0xffffffffffffffe0, 0x9, 0x0, 0x6e7, 0x35cb0133, 0x8, 0x9, 0xbecd, 0x6, 0x400, 0x4, 0x5}, {0x3, 0xfffffffffffff615, 0x48c3, 0x100, 0x4, 0x4, 0x8, 0x2, 0x9, 0x28, 0x800, 0xb15c, 0x9}], 0x329}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:21:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KDDISABIO(r1, 0x4b37) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x3, 0x10000, 0x6, 0x6, 0x3, 0x6}) getsockopt$inet6_dccp_int(r2, 0x21, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x5, 0xffff, 0x51, 0x7}}) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000200)) 04:21:51 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0xa, 0x0, 0x0, 0x0, 0xffffffffffffff9c}) 04:21:51 executing program 0: bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x2) pidfd_send_signal(r1, 0x1a, &(0x7f0000000040)={0x1c, 0x4800000, 0x200}, 0x0) 04:21:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1a) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x1, 0x0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000002c0)=0x581, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x100000031, &(0x7f0000000140)=0x8, 0x4) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/227, 0xe3) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/36, 0x24}, 0x2002) sendmmsg(r0, &(0x7f00000000c0), 0x182, 0x0) 04:21:51 executing program 1: r0 = socket(0x1e, 0x5, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0x3, 0x4) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000100)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}]}) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) connect$tipc(r0, &(0x7f0000000000)=@name, 0x10) [ 290.747403] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:21:51 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xd900) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0xffffffffffffffff, 0x20150, r0, 0x0) unshare(0x20400) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x1ff, 0x2, 0x6, 0x100000001, 0x81, 0x2fd1, 0xff}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x7, 0x80}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000002c0)={r2, 0x400000000006}, &(0x7f0000000300)=0x8) recvmsg(r1, &(0x7f0000000840)={&(0x7f0000000680)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000700)=""/5, 0x5}], 0x1, &(0x7f0000000780)=""/189, 0xbd}, 0x40000163) sendmsg$can_bcm(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x1d, r4}, 0x10, &(0x7f0000000940)={&(0x7f00000008c0)={0x6, 0x81, 0x4, {0x0, 0x7530}, {0x0, 0x7530}, {0x1, 0x7ca7eaeb, 0x9, 0x5}, 0x1, @can={{0x3, 0x1ff, 0x0, 0x4}, 0x7, 0x2, 0x0, 0x0, "d9df995aadea4271"}}, 0x48}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000000) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080)={0x2, 0x46}, 0x2) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r3, 0x10001, 0x5, 0x1ff}, 0x10) ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f00000011c0)='\x00') r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x28804}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r5, 0x802, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) 04:21:51 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0xfffffffffffffffd, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x6, 0x2, 0x78, 0x2, 0x100000001}) 04:21:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) r1 = dup(r0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000080)=""/126, &(0x7f0000000100)=0x7e) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000003c0)=0x1, 0x529abc8c1c404f7c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x6f, "8e2fb89a2bd4a4db50d78c910572374b50889e9a3ec62be344512a2661c0c3084ac2b7eab5bcd36e26751a0961e161e1ff8940dd9e18cbcf13ba45e273bfca92c63ef84306968cb3f39fd5a7fadeb74eb5756d0d54a9073e0d5f32b32e558c707271355805a9d392967e36fa584300"}, &(0x7f0000000140)=0x77) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r2, 0x4) sendmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x4000094) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="a0", 0x1}], 0x1}, 0x24040000) close(r0) 04:21:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x24, &(0x7f0000013e95), 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000080)=0xfff) close(r2) close(r1) 04:21:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x201000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") clone(0x2103001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x20000) getsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE(r2, 0x40096101, 0x0) 04:21:52 executing program 1: r0 = socket(0x100000010, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000000)={'batadv0\x00', @ifru_settings={0x1, 0x0, @fr_pvc=0x0}}) [ 291.309462] QAT: failed to copy from user cfg_data. 04:21:52 executing program 0: msgrcv(0x0, 0x0, 0x0, 0x0, 0x3000) msgget$private(0x0, 0x1000000000001010) msgget(0x3, 0x100) r0 = msgget$private(0x0, 0x2a1) msgsnd(r0, &(0x7f0000000000)={0x3}, 0xfffffffffffffe99, 0xfffffffffffffffc) 04:21:52 executing program 2: unshare(0x20040600) mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000100)) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x2000055, 0x7d) open(&(0x7f0000000140)='./file0\x00', 0x80000, 0x8) fcntl$setpipe(r0, 0x407, 0x0) [ 291.344991] QAT: failed to copy from user cfg_data. 04:21:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd0703049acd8091b1def77fc7e125a6f505bb47c67eaede4f3023bc082c5a2e133831322e15aebdf10339c329482e803120d8fdcd5bbad1301f98817069e31aae133416e4457c63e5e59f143282cdfd795ca835e653f0282ac520a87f2b78fd63f95ca7d6cf79ee6c5e1dcd0a40b074f545c6e613789430b823db0347fb8a3af35575abb4ce01e2d1fd91412bbff3d20dad42238b3c041106782877021cdb9d609faef14994ef46cc9afca09935a") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) write$P9_RREAD(r2, &(0x7f0000000100)={0x62, 0x75, 0x2, {0x57, "3ad8f415f27e84ea0f4d64a80319439ff90aced84b4650c138928ae3efbdc5d4451cd51e4adbe7b76482153992b2afe571a1dcae4f75274a1c94f9d40d4cf53bb8047309639c50da501ff579f880a29d652c634647a533"}}, 0x62) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 04:21:52 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40002, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x5190, 0xfffffffffffffff7, 0x8, 0x4}, 0x10) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@generic={0x3, 0x359, 0x3}) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f00000000c0)=0xa00000000) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100)='/dev/capi20\x00', 0xd0002, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=0x0, &(0x7f0000000180)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0xba, 0x3}, 0x90) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000280)={0xd8, 0x0, 0x9, 0x1, 0x2}) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000002c0)="1655b3a08ee9814b8a3e0519b13d692f87e6704390b173") fcntl$getownex(r1, 0x10, &(0x7f0000000300)={0x0, 0x0}) write$cgroup_pid(r0, &(0x7f0000000340)=r3, 0x12) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000380)=@int=0x56eb, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0)={r2, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000500)={0x54, &(0x7f0000000480)=""/84}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000540)={r4, 0xfffffffffffffff9}, 0x8) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0xf, @sliced={0xfffffffffffffffb, [0x3, 0x0, 0x3ff, 0x7fffffff, 0x0, 0x7, 0x4, 0x1, 0x4, 0x7fffffff, 0x2, 0x0, 0x6, 0x6, 0xc9f, 0x80, 0x1, 0x10000, 0xffffffffffffff2f, 0x6114, 0xffffffffffffff81, 0x9, 0x0, 0x9331, 0xfffffffffffffffe, 0xb28, 0xd3, 0x401, 0x7, 0x7, 0x9, 0x40, 0x4c, 0x702, 0x1c8, 0x6, 0x1, 0x1, 0x9, 0x7, 0x8, 0x6fb5, 0x4, 0xff, 0x0, 0x1, 0x0, 0x100], 0x80000001}}) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r5) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) setsockopt$inet6_dccp_buf(r0, 0x21, 0x2, &(0x7f0000000740)="7fc5bb3ac915dde04f45479fca67e475993d3ce6781ee46195562e0b19a78492feed5fe37795acc693c1c583aab6dc38a461f745e56bab9324ea9b01b75de8e10d2a363922579d2d5b1115daee815683593e94f3d0e985093e42ec2a51adda34ce155cc0f26e41478dd1db855e85170af9bbb0d59fd14179f1565d18b4fd7f24ab40c1caa9d0a796b00e88196797ddd27adc6d5258fb3513719168484a169190a1ac631fc90227bf5bd0f18d0a125cc56984b09c0a958387e65928131faae1e48c", 0xc1) r6 = openat$cgroup_ro(r0, &(0x7f0000000840)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000880), &(0x7f00000008c0)=0x4) r7 = syz_open_dev$usbmon(&(0x7f0000000900)='/dev/usbmon#\x00', 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r0, 0x0, 0x60, 0xaf, &(0x7f0000000940)="95a7df08491a4b0a263aecf9bef2aa2ba19b80a3f2cecb094a367262ee32c4a8a853734888f3c717b1146db68b9d852aa7af5181609502ba2296b116f0ccc1e365c710297eacf5cdef6da1ff952acc3d94d828c51d820c0398bb2217b5b981bd", &(0x7f00000009c0)=""/175, 0x7fff}, 0x28) syz_open_pts(r7, 0x2) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000ac0)={r2}, 0x8) pipe2$9p(&(0x7f0000000b00), 0x800) socket$inet_udp(0x2, 0x2, 0x0) 04:21:52 executing program 1: pselect6(0x40, &(0x7f0000000040)={0x9, 0x89, 0x298, 0xffffffff00000000, 0x7, 0x8, 0x2, 0x8}, &(0x7f0000000080)={0x2, 0x808, 0xfc, 0x6, 0x1, 0x300000, 0x400, 0x9}, &(0x7f00000000c0)={0x5e72, 0x81, 0x0, 0x4, 0xfffffffffffffff7, 0x0, 0x0, 0x6}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={0xfffffffffffffff8}, 0x8}) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2, 0x20011, r0, 0x0) mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) 04:21:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x8) ioctl$KDADDIO(r0, 0x400455c8, 0x6) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) 04:21:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x400000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000001c0)={0x0, @aes256, 0x2, "0ec80151cfd0ca9e"}) r1 = eventfd2(0x0, 0x0) read(r1, 0x0, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x430180, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000140)) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000080)="f078039ba84690bc1140bd0e56a8cf10e9aa3eb4a273df9bb8381e71841b6e1c4795a3c8cfeaf2d31178843bf3952b93aa56cdf3a9989b12ec67eaf2076540dad6627b0e417ec56d7cf19662c9fd", 0x4e) 04:21:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2a, 0x26}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) socket$inet_udplite(0x2, 0x2, 0x88) 04:21:53 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1, 0xfffffffffffffffe}}}, 0x108) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200000, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0xb9e) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 04:21:53 executing program 2: mmap(&(0x7f00009a9000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x400000000007) mbind(&(0x7f0000024000/0xc00000)=nil, 0xc00000, 0x3, &(0x7f0000c28000)=0x800003f, 0xf0, 0x0) 04:21:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8) unshare(0x20400) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000003c0)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, 0x0) 04:21:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c000000ab005ab17eb834493ddf1703ed03e0477ebf71dc3d64bccfb0992f751692563bf49a7716d1e4dc7b4a86031d24d1924e8a6a9dd50bad63b3f2dd951785e101c6e3945c140a0ce9be45184a1badeddb9f5750b4d59c46d59b7aef179acf85330b077ac5e64c9487bd4e0d9a525388b9dc4305fba382978b4ec40a5cb226"], 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, 0x0, 0xffffffffffffff63, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000500)=0x3001) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:21:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000200000a1f000002002808000800040004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x7, 0x4) [ 292.557027] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 292.558304] IPVS: ftp: loaded support on port[0] = 21 04:21:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000080)=0x8, 0x4) write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0x7530}, 0x1, 0x40000000000004d, 0x2}], 0xfe72) 04:21:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x1a) r1 = socket(0x10, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0xd, &(0x7f0000000000), 0x20a154cc) [ 293.118533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.147478] chnl_net:caif_netlink_parms(): no params data found [ 293.252664] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.259385] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.267869] device bridge_slave_0 entered promiscuous mode [ 293.314507] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.321157] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.329572] device bridge_slave_1 entered promiscuous mode [ 293.367235] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 293.380599] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 293.413873] team0: Port device team_slave_0 added [ 293.422169] team0: Port device team_slave_1 added [ 293.566834] device hsr_slave_0 entered promiscuous mode [ 293.682621] device hsr_slave_1 entered promiscuous mode [ 293.822983] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.829559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.836797] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.843435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.924809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.948622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.960264] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.969943] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.986394] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 294.007434] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.026408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.035174] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.041689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.100217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.109175] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.115839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.125622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.134776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.143402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.151499] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.163929] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.175436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.213512] 8021q: adding VLAN 0 to HW filter on device batadv0 04:21:55 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'lo\x00\x00\x00Bx\xabC\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="0a0000004e4f163cf90812410d1d96339f437a46ab3aa306b03401cb52e05c8a7e9c76cb781a6ced958574f941243cb70ba309886c0c37a9ff2f07696106c264b7fca1543e9b09dc9607ebce5a6b3bb1660dbcadc0e36a3a5060e0792aca984b7f1f3220878aa55d0779efc14377619b2d34354ba6a4e7151790d7a13ed4f48626af68e97da4ae01e03390a16ea20bb69db3370802f6d14310e6526fd55b3d904e5569d03aacb708b36c53b8e28ea5c800"/196]}) 04:21:55 executing program 1: munmap(&(0x7f0000c94000/0x3000)=nil, 0x3000) r0 = shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r1 = request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='proc+\x7fwlan0\xe1vboxnet1\x00', 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000000c0)={r1, 0x1, 0x8}, &(0x7f0000000380)=ANY=[@ANYBLOB="656e633d72617721686173683d7368613232342d61726d3634e4ffffffffffffff0000000000000000000000000000000000000000000000000000000000000500000000000000000000000000977cfb8ae4bf9451e2ee412f25f4b74a3cf9907a03de41e83bdf8d0908528a887830a7dca7233e725791c31cbf94d074f0e0fa354e0ca06b276d"], &(0x7f0000000180)="a4131085cae77d2fd8448a20e16d903b89563f297b35cc45bf609209eb900f5c735116d1b22d6fe799b629e9d69053ced9aca9034b3f2ecf5a0d3ec535172545a96a4fcdfc6837a28a5b8217b187822f3a1831f7efa06f1c72756d338893f0c48644437e179efdc05116bc2b8d8b5c36acde26c5e336", &(0x7f0000000200)="b9edb14b495fce9c02a458aa43da57aca92594ee66eea6793a51cd74e336a01d1214c0788c8491cc479acfef9ffbc7d6a129cfa15c074f199b0a3239e6821cb67e07cc7ebd9e0504b72d2a3618211ca520013f7c111fb9f3e03faec79e027f9a9e59cc7b22b959b59149e907953fc645137eb2b62896bd496bece1f0ca546c6b996edd25e77581d942d10f9125e68c2d3ed2e1f36dd81149b68b95c0be7ca9c2829a58148b") r2 = shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x0) shmctl$IPC_RMID(r0, 0x0) getrlimit(0xf, &(0x7f00000002c0)) shmdt(r2) r3 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x9, 0x208000) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000340)={0xb, 0x4, 0x3}) 04:21:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x22042, 0x100) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x305100) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000100)=r1) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) r3 = add_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="bfb8456ac414e6534f691fff255c500b856b5509af7d1dc912dd4a244bf5a901339047ae94312f3c9a82d071bfd3ca190237546d71ef8cf1fbbf47a183f28c9ec5e360f2c4e780293d552c7e71cf06f1a162287ea94b47860bf48f4a279c6b214e68accfe7a24c70877dce528ce72334da376a474ae36984aadde1c660336bf75a4b2e28c47b556ef008d99c6d657d635d3d2f96b9b90e6aa7c5e0042f382b36a603f3fd9048995315e743d966559b548a317bc1bc368a957d02bae8b3cbcf24fae34ae6e7290a1e79691539a2de60dbbf741b7b0e9259d6", 0xd8, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000002540)='keyring\x00', &(0x7f0000002580)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r3, &(0x7f00000024c0)=[{&(0x7f00000002c0)="55723ec74cd9ed3da2b35adb71a82fddd6a1ab20d8b19953a2bb79750fd3d5e524f6258e1189f2e19f4cf23f29c9a0dfa9e76d92e87a8df2d5f806aca1bb3855ae8c6dd49d72cd59477670c1d06346a01a541b063cc92f1460e8915c7c780428a96909efb8751e14f4512deb30060daf7be8450f69572e4ec5c75ed6a88ce565e682", 0x82}, {&(0x7f0000000380)="f3add2ef45826a786f72d55527484529958d8ee1d89dfbd17b811e1125ef16bda80069406ce2514521f88eb30a477b987fc4efc527fe0271d58ce7a8d2f99e13476b267cb584e336f248571e573259a4128a51593e08014687a29600e4cea4b842909b1cd50b7d38ff56e577ca149bbdb087930f1c84090e6d1010c8a1be9e779b8e45c8746e4e1f2126e7fa7a720de4d26419a3fbbae628fd866a10cfde008b67dd9fbbbf4ab84407af27a377fc7964521493a5a6f431abbeb86b2d3cb5c8492d270b733f6ec4adf1a8d4bcabd72a569320720f8ecadecadd7550", 0xdb}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="909bd04f39ce54dccb1845b837ae63657dd8f297f0ea87", 0x17}], 0x5, r4) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2080, 0x9}) 04:21:55 executing program 2: r0 = memfd_create(0x0, 0x10000) poll(&(0x7f0000000000)=[{r0, 0x8}], 0x1, 0x80b) 04:21:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x1, 0x7ff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x0, 0x0, 0x40000073], [0xc2]}) 04:21:55 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) close(r2) r3 = syz_open_dev$dmmidi(&(0x7f0000001b40)='/dev/dmmidi#\x00', 0xfffffffffffffffc, 0x200) sendmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000080)="724ec928e98fdc0ff5da552bddcfcf6385072383dd6c4355c32ed18eca99f93507a51c9f5eff32813a255fc1a3fc07b40727ab95e6b2164af296dad329dc715b02f66a996cac94c74e5d6153a2c04079d130418807d7517ea4b52c17f526faf4e080e317229bb89ff179bd12ceb1425d44ba6880eed1b859d1d7db483f09a0517d012e5e66fe58446b5fe0b210f844a6fabfc4fc8b63e0274e62991d1966f1f9f1dff4fbf6e83880fc", 0xa9}, {&(0x7f0000000140)="e366820c0ae65811aa22951bb117bfabe1331389e348dd8aeaeb871fbcd9625fc94dae47cd21518d8d3f53fafbbe49f0528ca1687d658924d262160dd7d1a53ecc14132dfa5eaf1931effed9d550d596f35dc19f9dcefcc74a1a3d26862359bea6da12120841ebcbcc423a20e94c87fe5172bd36522b815dd4aae1278b634be4a38a1185ba9972633a2eefd17c02fb00eb739d63bc5740469f19ebfccd0e4d59dbf65a2ffa07fa22c696e3ace96a028254e13d51998b2422c8b69ff0812450ca71c1a11cad393575610ca34edfb8bed09181686af30103d36dcfc182ad3d4274b71d2e87c7ffda702f76", 0xea}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="780aa2dcad5adaab1220bd093dbfcc93f01a", 0x12}, {&(0x7f0000001280)="848e95ed0dc08e4b60bc8e6263a5142e5774b3bd997bdbfe70a14455c753ecd1340b5d0b8d836d3f24aeee0858be8bb26883c1994d4c53f27f315bc0b1d435a4badc197451e4a24a9c6b77ba47071aa90988081d22e557197df1c66e87f6acb83ecaf0556ed98b13a2fe2e7bb434510355a71d002377384d097263c35245b113667904cb28e4cb4735065b3ca628ac7cac8dca337d24db8f5291d9864276213a68cf26dbcf50d4e114bae1869319c9509307fe38159d314dfb52ca0961337dc5bcac031c3c9ac13294446a240df13adb1231f8c02b883a387617ce49314a", 0xde}, {&(0x7f0000001380)="c4dc9154a464d2746791eb0061d1b9fbfcc2d0c63dfc089d8407b506a46a63a69ffa68e733599ca6bb53744cf86ee8ee9c278635d08f912f339f1aaa2a8c23cc191ab51550004f378c5791b974445fd1adb5bf05d703e20dd2c02754a1b6e41b1cfc83b63606ffdcde44eb41d1755e11343886eda9e89e9b02b0ae5298fdb4a0f74376ba193e44ade9f153ff666f89bfb40d74525091fee168", 0x99}], 0x6, &(0x7f00000014c0)=[{0x18, 0x104, 0x10001, "c8ed"}, {0x18, 0x29, 0x3ff, "2c199b7c98c180"}, {0x108, 0xff, 0x9, "7fde66a4d80ec8d5b97469e6d77313c2753ae9659818c9180b13764c4dc6dcf2e06b81b051af6714f0968f3909612eeca09c21b47342618491252c5ecd3c4c49900ea14be9e029faf669846928ad5d8d8d170edcafd6104104f937a44e5c32ec70118f8863ea22097e661e744b33d487859252fc9aedcb1fc9cfcc8f26dde76a3d72550fae3f7eb920f1df4433af2b2cbb489af08f48e51919d855d5fb2ee8580cd7204acac9304e11bfc62f1d41bf74c6cc70ce5f902caffaeca72246467bf4495a2964135467c6552854b5ddf19517afe6f23fb9a7ec38a3941cc09bf8c090b5add0710033d368944cc584a123b8a7213324aebf"}, {0x70, 0x11f, 0x1, "ce3439cf0ebf7ad07370a4d42bcebb80138364be55b0fe26657369641acd6acc6db3307770c4fe29fc53ce440297617a7a6a9a5a62ee2c7522a7f85d5a9beede301ff05fdcf218db9c22e7278e60026463c6905f3879823ea148"}, {0xd0, 0x11f, 0x6, "ec8e7fe7c3dc99e99668e8c52b6a3ab1e5f4061bcafc76098c28a632fac88dbbae1720e154409f41f897e753e5ce7198d714fea122da86f1f01a9f14159b269c392bf1f690ded6516f3393f4b0b92e17519b5c1a811fe41b57fe149e96142d5716d60d247cfa440f3ee08b936f430aca2df1e44f3c3d83f92eec4b09514adcc573fba29d886df7c5a2eab883b049493bd729b784ff7810ef900ac8173c1caa5a64a64812b8b6a1a6a2857dfac677af8927febe7e5c62f8d3923d"}, {0x110, 0x102, 0x4, "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"}, {0xf8, 0x11d, 0x6, "d95c882dd1d135f8aad83f1d1280378c7e96dda82a93cd893416982024e369ec4ca7df8e300b05bdcee50e7200d5652fce47b21989fc635a095fd6f28ef2d749403d8b0218d273a16be2efc85e17064f5fa4c3c80a35c0dcc2b9ad75c5a9cb25c318afc761c854f43c9b9ad90ba84941d9bcbe3588e2e495ca16aa2f8982cf5654e1378770a13506ea0f456f53fc62072a92bc74d6124f0d5fdf1f02d8285c3fdd644ed6ea56f1f3ebece38746fa8daac2acf8e1e9225e6268bf19cda21a754be64be54c4dcef4fccf07701ebde67f5c1abe85c47f359fc299589424a8f48ae5ac"}, {0x40, 0x11f, 0xfffffffffffffffb, "df9bc9ebb579c7e37d6c9d7f2c08d599fc4ae959468292048eeae2f4954a8b0bd43224384ea0cd74d38017d004bffc39"}, {0x40, 0x10f, 0x30, "ac802869523af2d75318768587b414865360f546f73b4187bbe2b76b57aa84cb371711d1169da75acf7b6f87c19c97"}, {0x88, 0x1, 0x1, "36b3c6234827d8aa124f97968c1156699046afa514a6e46c425823e48740c86f7a9e9790d6e186bf3fa82301480ad3ac99ae9198a1f2a834a8d65482d7f30bb6813a76d20d68538281da9342d7eab5bcec952f695c9cf256b45a091b43c2e9e2ca8de509e99a3995a7c62234420442b2700a"}], 0x588}, 0x20000004) 04:21:55 executing program 3: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000640), 0x2e2, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000008400000006000000af646c3f860b833208f8af3bb1"], 0x20}, 0x0) 04:21:55 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000000)={0x0, 0x4d}, 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/51) 04:21:55 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/57) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ad2000/0x2000)=nil, 0x2000, 0x0, r0) 04:21:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070") socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) fgetxattr(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="6f73322e68180bc90048296e6f6480000000000000008530766d6e6574312500"], &(0x7f0000000100)=""/251, 0xfb) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000ae4000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000600000/0x600000)=nil, 0x600000}, 0x1}) write$rfkill(r1, &(0x7f0000000040)={0x9, 0x3, 0x3, 0x1}, 0x8) 04:21:56 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x4, &(0x7f0000000300)="0adc1f2b3c123f31a2d070545090fbaff8b0041d2e6914cc44cf465784c7a4f134613e87cc43104bc6f653934f7dc27d62f9af719b975b81355f535387f76a50ad11749affe76fdd537954aea4d31ccfe4c96d860ed532bcfb6bc95f436d0a42975ff77724bd1c5c275e2bbd17147b4a9b11a0d6fd103c2cca84fd6e8264d45e097fe5af0360") clock_adjtime(0x44, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) write$P9_RLOPEN(r0, &(0x7f0000000180)={0x18, 0xd, 0x1, {{0x80, 0x1}, 0x300000000}}, 0x18) r2 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r2, 0xffffffffffffffaa, &(0x7f0000000080)) 04:21:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'team0\x00', 0x892}) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r0, 0x1}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x4041, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x5e0, 0x2d8, 0x168, 0x0, 0x0, 0x2d8, 0x510, 0x510, 0x510, 0x510, 0x510, 0x5, &(0x7f00000000c0), {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, [], 0x28}, [0xff, 0xff000000, 0xff, 0xff], [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], 'bond_slave_0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x11, 0x9, 0x5, 0x52}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x2f, 0x69, 0x81, 0x1ff, 0x7}}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x8, 0xffffffffffffffff, 0x12cb}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4=@broadcast, @icmp_id=0x66, @gre_key=0x4}}}, {{@uncond, 0x0, 0x128, 0x170, 0x0, {}, [@common=@unspec=@cluster={0x30, 'cluster\x00', 0x0, {0x2d, 0x10000, 0x9b36, 0x1}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x3, 0x81, 0x7, 0x1, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x12, @ipv4=@multicast2, @ipv6=@local, @gre_key=0x100000000, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@empty, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x65, @gre_key=0x7d}}}, {{@ipv6={@empty, @empty, [0xffffffff, 0xffffffff, 0xff000000], [0xff, 0x0, 0xff], 'veth1_to_bridge\x00', 'bcsh0\x00', {0xff}, {0xff}, 0xbf, 0xdf4b00000, 0x4, 0x10}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x6, 0x3, 0x2, 0x10, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x7fffffff, 0xc0b}, {0x5, 0x2, 0x101}, 0x1, 0x20}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 \x00\x00L\x00', 0xb7}) 04:21:56 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0xffffffff, 0x2, 0x3, 0x1, 0x5, 0x1000000}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x2]}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 04:21:56 executing program 3: write$evdev(0xffffffffffffffff, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) execveat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64IPIN\x00', &(0x7f00000000c0)='\x00', 0x1, 0x3) 04:21:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000080)={0x2, 0xbd9}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00ad1cc1e5df595a0b0dc153df2c0000000000006b0200000000001f0087e2467f60"]) 04:21:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") waitid(0xffffffffffffffff, 0x0, &(0x7f0000001440), 0x2, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="26d7acee451986cc4cb7e6433cbc1ae9323a2961b2216e05022c05a0b90615c8e4e063810f941461e1d307653c0ff0533f3d1162476afafa97f918113db9fe7d958c2b14a0d714df57917c3a75e0ae3fd2bc096de11c990cf67906bf0bee2c991d719756b46bd398d55c95321a841a3e962b1f6652039ae7d83f613afc5411d0b922a891675c844dd0a36affe160014667083c622c18dfb7d0b0e89b7b", 0x9d, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)="81df2ce7c8adb3e0b0c49fb834c8dfb7dadc8112c0e83591f0e7bcd0461f5c3a3f38896ebe73fc5ce65cfab20386f24aab37afe7b837ec832bc1a8450d58de38b01ce530975e73b6e7ef4724c31e402aa6ebd864f1f97f0115231b34ebe6bcfa456bf1e0f625b77b74fe11608e97af05a2ddf9", 0x73, 0xffffffffffffffff) r3 = request_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='mime_type}\x00', 0xfffffffffffffff9) r4 = dup(r0) ioctl$KVM_SMI(r4, 0xaeb7) setxattr$security_smack_transmute(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='security.SMACK64TRANSMUTE\x00', &(0x7f00000005c0)='TRUE', 0x4, 0x2) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r2, r3}, &(0x7f0000000380)=""/111, 0x6f, &(0x7f0000000500)={&(0x7f0000000400)={'digest_null\x00'}, &(0x7f0000000440)="256437adea667e1bffa290c4cfc2eeca99d94e73992449d48b521fe49446555e2d2199ce98ed5aed173dead53b0a33ff1ba89ab7c38a4cc3a332dfc89bcaf0dd23b1d8b940340432503a9d940a45fbb7e1290a2177e71066b2a78f47e65e20d7670b62983320721d40bd432e547b5e3f4d4b4e6e2aac9e315ffef119860f2d9afbf4a35295c3fa0841f3f718e71d51", 0x8f}) 04:21:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x104000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000040)=@sr0='/dev/sr0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='affs\x00', 0x1029, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000100)='mountinfo\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 04:21:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'team0\x00', 0x892}) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r0, 0x1}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x4041, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x5e0, 0x2d8, 0x168, 0x0, 0x0, 0x2d8, 0x510, 0x510, 0x510, 0x510, 0x510, 0x5, &(0x7f00000000c0), {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, [], 0x28}, [0xff, 0xff000000, 0xff, 0xff], [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], 'bond_slave_0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x11, 0x9, 0x5, 0x52}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x2f, 0x69, 0x81, 0x1ff, 0x7}}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x8, 0xffffffffffffffff, 0x12cb}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4=@broadcast, @icmp_id=0x66, @gre_key=0x4}}}, {{@uncond, 0x0, 0x128, 0x170, 0x0, {}, [@common=@unspec=@cluster={0x30, 'cluster\x00', 0x0, {0x2d, 0x10000, 0x9b36, 0x1}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x3, 0x81, 0x7, 0x1, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x12, @ipv4=@multicast2, @ipv6=@local, @gre_key=0x100000000, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@empty, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x65, @gre_key=0x7d}}}, {{@ipv6={@empty, @empty, [0xffffffff, 0xffffffff, 0xff000000], [0xff, 0x0, 0xff], 'veth1_to_bridge\x00', 'bcsh0\x00', {0xff}, {0xff}, 0xbf, 0xdf4b00000, 0x4, 0x10}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x6, 0x3, 0x2, 0x10, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x7fffffff, 0xc0b}, {0x5, 0x2, 0x101}, 0x1, 0x20}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 \x00\x00L\x00', 0xb7}) 04:21:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'team0\x00', 0x892}) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r0, 0x1}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x4041, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x5e0, 0x2d8, 0x168, 0x0, 0x0, 0x2d8, 0x510, 0x510, 0x510, 0x510, 0x510, 0x5, &(0x7f00000000c0), {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, [], 0x28}, [0xff, 0xff000000, 0xff, 0xff], [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], 'bond_slave_0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x11, 0x9, 0x5, 0x52}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x2f, 0x69, 0x81, 0x1ff, 0x7}}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x8, 0xffffffffffffffff, 0x12cb}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4=@broadcast, @icmp_id=0x66, @gre_key=0x4}}}, {{@uncond, 0x0, 0x128, 0x170, 0x0, {}, [@common=@unspec=@cluster={0x30, 'cluster\x00', 0x0, {0x2d, 0x10000, 0x9b36, 0x1}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x3, 0x81, 0x7, 0x1, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x12, @ipv4=@multicast2, @ipv6=@local, @gre_key=0x100000000, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@empty, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x65, @gre_key=0x7d}}}, {{@ipv6={@empty, @empty, [0xffffffff, 0xffffffff, 0xff000000], [0xff, 0x0, 0xff], 'veth1_to_bridge\x00', 'bcsh0\x00', {0xff}, {0xff}, 0xbf, 0xdf4b00000, 0x4, 0x10}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x6, 0x3, 0x2, 0x10, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x7fffffff, 0xc0b}, {0x5, 0x2, 0x101}, 0x1, 0x20}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 \x00\x00L\x00', 0xb7}) 04:21:57 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10000, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockname(0xffffffffffffffff, &(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x80) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000001}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xe0, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r3}, {0x80, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) syz_emit_ethernet(0x300600, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60b4090000023c0000000000000000000000ffffe000000203020000000000000000000000000001840090780009040060b680fa000000000000000000000000000000007f00000000000000000000000000ffffac14ffbb72bf325cb00ffdf0658f5e3f264af3bbe5e61972594cb2825854369b20df7b121b2c0b8e761756f876d5b21d29028fd008f5ffcff4c8c1315ddd1c6ab29b8e5469fa59b95a4404068dcfe3e0434d0bac007fc5f66ef1a55a8d60523c86decbb6"], 0x0) 04:21:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'team0\x00', 0x892}) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r0, 0x1}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x4041, 0x0) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x5e0, 0x2d8, 0x168, 0x0, 0x0, 0x2d8, 0x510, 0x510, 0x510, 0x510, 0x510, 0x5, &(0x7f00000000c0), {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, [], 0x28}, [0xff, 0xff000000, 0xff, 0xff], [0xffffffff, 0xffffff00, 0xff000000, 0xffffffff], 'bond_slave_0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x11, 0x9, 0x5, 0x52}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x2f, 0x69, 0x81, 0x1ff, 0x7}}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x8, 0xffffffffffffffff, 0x12cb}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xb, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4=@broadcast, @icmp_id=0x66, @gre_key=0x4}}}, {{@uncond, 0x0, 0x128, 0x170, 0x0, {}, [@common=@unspec=@cluster={0x30, 'cluster\x00', 0x0, {0x2d, 0x10000, 0x9b36, 0x1}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x3, 0x81, 0x7, 0x1, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x12, @ipv4=@multicast2, @ipv6=@local, @gre_key=0x100000000, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x4, @ipv4=@empty, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x65, @gre_key=0x7d}}}, {{@ipv6={@empty, @empty, [0xffffffff, 0xffffffff, 0xff000000], [0xff, 0x0, 0xff], 'veth1_to_bridge\x00', 'bcsh0\x00', {0xff}, {0xff}, 0xbf, 0xdf4b00000, 0x4, 0x10}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x6, 0x3, 0x2, 0x10, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x7fffffff, 0xc0b}, {0x5, 0x2, 0x101}, 0x1, 0x20}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'team0\x00`\xff\xff\xfd\x00 \x00\x00L\x00', 0xb7}) 04:21:57 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000001edaaea25b8ab833e52adfe344022e1ede4bc4040000002b2f00000000000010"]}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'caif0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000fcffff00800000e3000000"]}) fcntl$dupfd(r1, 0x406, r1) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 04:21:57 executing program 0: r0 = socket(0xa, 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83420004}) clone(0x200, &(0x7f0000000000)="6e90ae7f2864bf907de9874e63d87b", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="da1f5c39ac4780e1a1e80c7047e91b8433e385fd88df9c34d3864358684a2659d5f1012710ee173a515f64f17a57d20fe96e1251f42c4c13707c0ce56ddb4eaba59c4c5d0d4b80e44e6dec677b1b8282b70bfc127b4a1fe86db3559c619530087818ac41ceff0369ef127897eda15e7242096a26e53cf1ac8efd341e1ded5fbe327cd465c70b4639c6c30a6e161b4b9c8033bc392fc023299d10d64ce6f2932b9c83c04de4204d") ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 04:21:57 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") seccomp(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x64}, {0x6, 0x0, 0x0, 0x7ffffffd}]}) 04:21:57 executing program 1: write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x4, 0x4}], 0x18) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f00000000c0)={{0x1, 0xa9c5, 0x7f11, 0x6, 0x1, 0xfffffffffffffbff}, 0x9, 0x1f1, 0x329f}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000180)) write$evdev(r1, &(0x7f0000000040)=[{}, {}], 0x52a) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0x1, 0x946c2ca, 0x8, 0x0, 0x6}) 04:21:57 executing program 3: r0 = socket(0x22, 0x2, 0x4) sendto(r0, 0x0, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={r1, 0xd2, "06024c578a33c152d5aeb53ecd7bbff96a4f6c15d2230dd7c6b4de8c00b494273295c588d73cc315723fb299bf7c4e3e6b1f2552485d6480012626e323bc1470647f6b17516dcb6e875fb98f8ed713f89a2813349ce27e69f245eb355c7e64441d21f706da5d2ea0a6a794b42be9855f746b6b21da46c2d35188e1817a10663090f5c93526dac07621c2937be981fe56096f153d739a09658c913bd48e57ece5c76731f1e3fb936e5f8237ed9748e4c376ebc82ed1d3ccce916e622991af2bc70e821818aafa66d758d122b7d30c0701a4fa"}, &(0x7f0000000180)=0xda) 04:21:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635000100000f300f01cf670fba660000d29cbe7d66b87beb00000f23c00f21f8663502000c000f23f80f013d66b80500000066b986d6c55e0f01c1c89d000566b9830900000f32ba2100b050ee", 0x56}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000200]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = getegid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r3, r4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:21:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000900)=ANY=[@ANYBLOB="380000001000010500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800100008000100736974000c00020008000f0003000000"], 0x38}}, 0x0) 04:21:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xffffffffffffffc0, 0x101001) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000040)={0x3, 0x2, 0x7, 0xf9b, 0x4, 0x8}) ioctl(r0, 0x801000008912, &(0x7f0000000180)="0adc1f023c123f3188a070") ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r0}) perf_event_open(&(0x7f0000001000)={0xb, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc4c85512, &(0x7f0000001000)) [ 297.266236] netlink: 'syz-executor.2': attribute type 16 has an invalid length. 04:21:58 executing program 1: r0 = socket(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000240)=""/187, &(0x7f0000000040)=0xbb) 04:21:58 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r1, 0x3, 0x1, 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x2}, 0x20) getpeername(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) dup2(r0, r2) r3 = fcntl$dupfd(r2, 0x406, r2) fsetxattr(r2, &(0x7f0000000100)=@known='system.advise\x00', &(0x7f00000000c0)='ppp\x10\x1eppp1n\xa1\x18\xe3\\\x9eo*cgrotp', 0xfffffffffffffe7b, 0x1) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0xd) ioctl$RTC_WKALM_SET(r2, 0x4028700f, 0x0) 04:21:58 executing program 0: r0 = socket$packet(0x11, 0x8000000000002, 0x300) poll(&(0x7f0000000080)=[{r0}], 0x1, 0xb7) close(r0) socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 04:21:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/113, &(0x7f00000000c0)=0x71) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x6, &(0x7f0000000000)="a55d8fb1", 0x4) 04:21:58 executing program 2: r0 = shmget$private(0x0, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffc) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x1}, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)={@local, @local, 0x0, 0x3, [@multicast2, @rand_addr=0x8, @local]}, 0x1c) [ 297.716109] IPVS: length: 113 != 8 [ 297.752926] IPVS: length: 113 != 8 04:21:58 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0xb) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x1000004, 0x10000032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)) 04:21:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7fff, &(0x7f00000000c0)="7ca7de461d3cdb95bf005142d6ac44b8cb54bcf0959e7ad463fd658020c9df114d4a63e2279d44c237d2fbe4678e449b7cdef699a593e7d02295d0ac5b467784d4867ec9086bc19ec9ad58010519ad57791cb080da55dcb8fcca15db94417bc0ded552f9077cb1f4d51e") ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x638, 0x8083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x0, 0x10000001002, 0x0, [0xfffffffe]}) close(r1) 04:21:59 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f000000e000/0x4000)=nil, 0x4000}, 0x2}) r1 = geteuid() setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x1, 0x1}, {0xfd9, 0xf963}], r1}, 0x18, 0x2) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000180)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x1}) 04:21:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x9, 0x800}, {0x3, 0xfffffffffffffba2, 0x800}, {0x6, 0x8ce1, 0x802}], 0x3, &(0x7f0000000080)) 04:21:59 executing program 3: msgrcv(0x0, 0x0, 0x0, 0x3, 0x4ffd) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10002, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000080)={0xb009b9ea14f1ea, 0xd000, 0x8, 0x9, 0xffff}) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) 04:21:59 executing program 0: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000100)='oom_adj\x00') lseek(r1, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000300)={r2, 0x7, &(0x7f0000000200)=[0x9, 0x20, 0x3f, 0x3, 0x3, 0x2, 0x100000001], &(0x7f0000000240)=[0x7, 0xfffffffffffffffb, 0x10001, 0x8000, 0x10000, 0x20, 0x9], 0x14, 0xa, 0x1, &(0x7f0000000280)=[0xffff, 0x1, 0x5, 0x3, 0x2, 0x6, 0x0, 0x5, 0x8, 0x3], &(0x7f00000002c0)=[0x20, 0x0, 0xce, 0x100000001]}) r3 = accept4(r1, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f0000000140)={@dev}, &(0x7f0000000180)=0x14) 04:21:59 executing program 1: unshare(0x400) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f000000efcc)) 04:21:59 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x7ffffffffffe, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa801, 0x0, 0x8, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffed2, 0xfa00, {0x2, &(0x7f0000000100), 0x0, 0x8}}, 0xfffffffffffffefa) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r2, 0x800040c004500a, &(0x7f0000000140)=0x80000002) pread64(r1, &(0x7f0000000240)=""/179, 0xb3, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000200)=0x4) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000000}}, 0xfffffefd) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 04:21:59 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000040)) write$P9_ROPEN(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0x71, 0x2, {{0xc2, 0x0, 0x3}, 0x1000}}, 0x18) r1 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, &(0x7f0000000600)=0x2e3) 04:21:59 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x2) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x2) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="d0020000ac8907cc1c1f8d24c0751e501c61b8a1432b84db97b72c8efb9bf08b830000000000000000ccd0ee99a8be4a"], 0x2) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 04:21:59 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='cgroup\x00') pread64(r0, &(0x7f0000000080)=""/111, 0x6f, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000000)) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x7, @raw_data="42a1a8b7b9de9938ea3c635be14dd1cc79ad4e03cd282fdc379a42f43f088e673c46ff0e0efe1bb7b2166fd5aad9e4eec97e90a46f234c4be5673aba62ef93290a584c8fb1cc30418873f49793e0d3382db053d168ae6389c10934122bc39bd3807173f5f5012ce5864e2831598b78e18f61cce1c822a4f0c3c45268ace0362d962840d973f80b3da6f6933b62ed9e481d3ce783946a18b5548b1440f82297227ec0c2da5e2c40d59e6beb946ace662c796e17c664203fc3a4038eb92107c3dbe9e6c8e9490911f1"}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'bridge0\x00'}, 0x18) ioctl(r1, 0x800000000008982, &(0x7f0000000080)) 04:22:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x4}, 0x2c) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x7, 0x800, 0x5, 0x6}) 04:22:00 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x7, "13451bcbe7fa1a38bbe09f22474f996ae10696dc1f428c339e27b8f012e0ec07", 0x2, 0x1320, 0xfffffffffffffa33, 0x3800, 0x4, 0x1, 0x1, 0xfffffffffffffff7}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000100)={0x0, 0x1, 0x0, "fb6c6a8b09935aa36e21144ef45cf6730d29a249784d55733523eb8fbe2331cb"}) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x10000, 0x40000) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = dup2(r0, r0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) tee(r2, r0, 0x4, 0x2) 04:22:00 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) readv(r0, &(0x7f0000000080), 0x1000000000000273) 04:22:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl(r0, 0x8, &(0x7f0000000040)="a8bf8a2b75be599b82edea7e954d5dcd251f738f946b3f482100b2b3c60a67e914a7aa031169ccfa3d1112111f1a4d8b72179d6fe3fa52e90e60f6d2cb0842fb637895d396d6577ac789ae874499613c07eaafcac26ba9af656960e145124f3d7abccbfbc91e9e0cf6fa5451236fab4b264a7ce59c4b46072bfc79fd601f1938c48e94ecfbdc891427f4cfc50db66267eed5374de9fdeab39616db492e5b4793c7b935a3a91ee5fe1d1755ceded61f4774465698d1ddb2") r2 = dup2(r0, r1) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000140)={0x0, 0x1, [{r2, 0x0, 0x2000, 0x1000100000000}]}) 04:22:00 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000380)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newlink={0x2c, 0x10, 0xd07, 0x0, 0x0, {}, [@IFLA_BROADCAST={0xc, 0x3, @local}]}, 0x2c}}, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x40002, 0x0) fallocate(r2, 0x1, 0x3, 0x200000000006) r3 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x1, 0x2) write$P9_RCREATE(r3, &(0x7f0000000300)={0x18, 0x73, 0x2, {{0x11, 0x3, 0x3}, 0x81}}, 0x18) 04:22:00 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x800, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, r2, 0x10, 0x0, @in6={0xa, 0x4e24, 0x100000001, @empty, 0x4}}}, 0xa0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)={0x0, @speck128}) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x4b) bind$tipc(r0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) [ 299.319865] input: syz1 as /devices/virtual/input/input5 04:22:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x28) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x11, &(0x7f0000000300)="000200008070") setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x8, 0x5, 0x1}, 0xc) r2 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x9, 0x2) ioctl$NBD_DO_IT(r2, 0xab03) r3 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f00000002c0)=0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x20, @mcast2, 0x8}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f00000001c0)=0x10) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000), 0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r4, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) close(r3) 04:22:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x6, 0x402000) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000200)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1a, &(0x7f0000000040)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2], [], @multicast2}}, 0x20) fcntl$getflags(r3, 0x40b) [ 299.484403] Failed to remove local publication {0,2,2}/1507600265 04:22:02 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xfff, 0x4000000002) write$binfmt_elf64(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="7fe74c4ee290000000007da2c88c1612786908655d4e1d310e524467c8a1648dd3868400080033000000"], 0x2a) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/3, 0x200001d8}], 0x1) 04:22:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000140), 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000040)={0x3, 0x6, 0x1}) 04:22:02 executing program 0: unshare(0x400) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x45010, r0, 0x0) close(r0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 04:22:02 executing program 1: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x78, r2, 0x204, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @rand_addr="3c9929ba0e3905c1ac56a2b799306832", 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140), 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000180)={0xc3, 0x8, 0x480, "ae9d66158793db4f4be07cd4e23927cb93ea5f7103a52ee5517eef06351e86e4ac762c044f2a7eeef1143a27f2b876d1cfcf0d903eba6751a2bcd3e4a6bb45958945e357df9d2fd9baf453de3f042e5d1b56dc1081aac313ab6c0e666cfecdecf69426b368ac124dd26e1c6b35e18d217f9241fbf2ced7acfe3650df22d15065a0092f939638a93b867767ab499806f167f2ebdef6452ee0466aec5eadce56ef1842e394b433550320c55cb5de379e13523295979cc15cdb348050149b94fab2158834"}) 04:22:02 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x600) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x7, 0x4) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x6) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x2, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xffffffff}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x804) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000001c0)=0x6, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x404004}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, r2, 0x206, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xa, @remote, 0x7fffffff}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x100000000}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x44000}, 0x24000080) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000400)={0x101, 0x5, 0x4, 0xfffffffffffffffc, 0x4, [{0x7, 0x1, 0x6, 0x0, 0x0, 0x2400}, {0x800, 0x3f, 0x0, 0x0, 0x0, 0x808}, {0xfffffffffffffffb, 0x7, 0x6, 0x0, 0x0, 0x82}, {0x8, 0x6, 0x1, 0x0, 0x0, 0x3000}]}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000540)=r0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000580)={0x2b, 0x6, 0x0, {0x0, 0x4, 0x2, 0x0, '&$'}}, 0x2b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, r0, 0x0, 0x2, &(0x7f00000005c0)='&$', 0xffffffffffffffff}, 0x30) sched_rr_get_interval(r4, &(0x7f0000000640)) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000006c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x9000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r6, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040804}, 0x4884) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000007c0), &(0x7f0000000800)=0x4) setsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000840)=0x1f, 0x1) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0)='IPVS\x00') socket$inet6(0xa, 0x80001, 0x2) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000a00)='trusted.overlay.redirect\x00', &(0x7f0000000a40)='./file0\x00', 0x8, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000ac0)={{0x3, 0x0, 0x33b, 0x8, '\x00', 0xfffffffffffffff7}, 0x2, 0x3, 0x3, r4, 0x2, 0xfff, 'syz0\x00', &(0x7f0000000a80)=['*!em0em0procproc-&posix_acl_accessposix_acl_access)lo]\x00', '#eth0\x00'], 0x3d, [], [0x7, 0x1, 0xe20c, 0x2]}) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000c00)) r7 = add_key(&(0x7f0000000d00)='encrypted\x00', &(0x7f0000000d40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000c40)='user\x00', &(0x7f0000000c80)={'syz', 0x2}, &(0x7f0000000cc0)="ac54ffc8147aace42c48813ad97dc486", 0x10, r7) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/video35\x00', 0x2, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0xffffffffffffffff, 0x0) 04:22:02 executing program 1: prctl$PR_SET_DUMPABLE(0x4, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100, 0x0) close(r0) unshare(0x8000400) syncfs(r0) 04:22:02 executing program 2: set_mempolicy(0x3, &(0x7f0000000100)=0x3f, 0x7) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb859) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x9, 0x0, "81f91597cbeceae5b73838d00601d7f1443b9ef92259e02df68888989b889bbdef97b0f65f8d925ec3dd05827721834b7a4f9c864e3d047164f511e73281fd6993aeb13f5870e6c2e5ad2aa0d43edc33"}, 0xd8) ioctl$LOOP_CLR_FD(r2, 0x4c01) socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 04:22:02 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x6, 0x14001) accept4$packet(r1, 0x0, &(0x7f0000000100), 0x80000) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5500000018007f5300fe01b2a4a280930a602c0fffa843029100000b390009002b000c000b0000001900050000000000000008dc135afb83de448daa7227c43ab8220000060cec4fab91cfdc080000000100000000", 0x55}], 0x1}, 0x0) 04:22:03 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x163000, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000040)=""/68, &(0x7f00000000c0)=0x44) r1 = socket(0x0, 0x1, 0x4) mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x2000004, 0x8031, r1, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40000, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0x9a}, 0x28, 0x1) syz_execute_func(&(0x7f0000000800)="46ded6f30fc24a08c466f3440f2db7000800000ffe08c462fd340500100002c442599cdbf0084607c401b15f8f01000000c421fee67011f3420f9bfa") [ 302.063755] Unknown ioctl 19457 [ 302.167043] Unknown ioctl 19457 04:22:03 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x48, 0x20000000000014, 0x101, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f423682a9447015739d53d5"]}, 0x48}}, 0x0) 04:22:03 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, &(0x7f0000000040)=0x9, 0x4) 04:22:03 executing program 2: r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ea1000}, 0x200000}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x101400, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) pkey_free(0xffffffffffffffff) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x1, 0x3}) 04:22:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x200002, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@acquire, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 04:22:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x20000000004e20, 0x0, @ipv4}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000000)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x4000004004002, 0x0) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f00000001c0)) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000001500)=ANY=[], 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') write$P9_RFLUSH(r3, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7) getsockopt$inet_mreqsrc(r3, 0x0, 0x0, 0x0, &(0x7f0000000480)) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000002c0)=0x8, 0x4) r4 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x3, 0x282041) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x41e6602}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x200, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xfffffffffffffff7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x804) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff5d}, 0x2000) 04:22:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0adc1f123c1207849bd070") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="9f080001676813d7769a8997fcc60000000091a642f0"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec7) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 302.650015] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 302.702201] binder: 11346:11348 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 302.710385] binder_alloc: 11346: binder_alloc_buf, no vma [ 302.716197] binder: 11346:11348 transaction failed 29189/-3, size 0-0 line 3148 [ 302.775743] binder: undelivered TRANSACTION_ERROR: 29189 [ 302.843416] IPVS: ftp: loaded support on port[0] = 21 [ 302.864386] kvm: emulating exchange as write 04:22:04 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/120) r1 = socket(0x10, 0x802, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42c00, 0x2) write(r1, &(0x7f0000000580)="240000001a0025f0006bb4f7fdff141c020b5aff6e10b500000780cc08001b0006000000", 0x24) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x97a5, 0x400) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000000c0)={0x5, 0x10001}) [ 303.358499] chnl_net:caif_netlink_parms(): no params data found [ 303.534926] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.541542] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.550188] device bridge_slave_0 entered promiscuous mode [ 303.587406] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.594121] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.602679] device bridge_slave_1 entered promiscuous mode [ 303.654831] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 303.683234] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 303.724432] team0: Port device team_slave_0 added [ 303.740921] team0: Port device team_slave_1 added [ 303.869972] device hsr_slave_0 entered promiscuous mode [ 304.032651] device hsr_slave_1 entered promiscuous mode [ 304.199798] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.206558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.214339] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.220976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.264206] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.273167] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.328885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.347974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.355888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.369963] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.383938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.392691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.400887] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.407467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.434177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.442842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.450960] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.457554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.466669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.475959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.494356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.503514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.529382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 304.539327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.554747] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.563093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.571701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.580451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.588978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.597731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.606079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.640976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.666992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 04:22:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000680)={r0}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) write$eventfd(r0, &(0x7f0000000040)=0x1, 0x8) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)=0x80000001) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000100)=""/164) eventfd2(0x6, 0x80801) 04:22:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x26281, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000000080)="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", 0xff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @pic={0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9d7}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:22:05 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) read(r0, &(0x7f0000e6d000)=""/384, 0x180) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x3fff) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101000, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000068000300010001000900000000000100fbffffff2e12c20f55954e0ec1cd97d804c836237c60be7a65fb656a979036861460fc47ec8262fbbc707c5a713899fb9f6861904041f3078acfc3bfd9cda633695f2d56293283e4420b3886cba75e08c643e449bb4e33bedd2d95e05bab52342172f79d544606cea54d622a62cbb86ccaa48931d8f6ef17467907c14abd7f600431afa7a3e4e6146c97231d364ceebd256f399a0bf6557c2e1261f39d7819407de02a0c01bd0d805c244bc4d6824b8951cffc346ee895"], 0x180) r3 = gettid() fcntl$setown(r1, 0x8, r3) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x6) rt_sigprocmask(0x0, &(0x7f000003b000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r1, 0xa, 0x21) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) getpid() 04:22:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) fcntl$addseals(r0, 0x409, 0x9) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="31000000130009006900000000000010ab008048130000004600010700000014080003c025640000000003f50000000000", 0x31}], 0x1) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0xa000) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000040)=0x5, 0x4) 04:22:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0xffffffff}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 304.925850] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 304.934926] 0: renamed from caif0 [ 305.008842] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.017927] 1: renamed from 0 04:22:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000100)={0x2, 0x0, 0x4, 0x1, {0x0, 0x2710}, {0x7, 0xc, 0x4, 0x4, 0xfffffffffffffbff, 0x2, "0f7709db"}, 0xbc, 0x4, @offset=0xffffffffffff4b9a, 0x4}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000380)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 04:22:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101) 04:22:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) flock(r0, 0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200, 0x80) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @sack_perm, @timestamp, @window={0x3, 0x9, 0x5}, @window={0x3, 0xc9f8, 0xc65}, @timestamp], 0x6) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f00000001c0)) syz_open_procfs(r1, &(0x7f0000000040)='fdilfo/3\x00') preadv(r0, &(0x7f0000000140), 0x33, 0x0) 04:22:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) write$P9_RFSYNC(r1, &(0x7f00000000c0)={0x7, 0x33, 0x1}, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = open(&(0x7f0000000080)='./file0\x00', 0x141042, 0x0) fstat(r2, &(0x7f0000000fbc)) sigaltstack(&(0x7f0000001000/0x2000)=nil, &(0x7f0000000000)) sigaltstack(&(0x7f0000000000/0x1000)=nil, &(0x7f00005d6000)) socket$inet_udplite(0x2, 0x2, 0x88) 04:22:06 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x2000040000000002, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)='team_slave_1:\x03\x00'}) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x2, 0x80000) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000000000000300d6bf76fdbf16d24e0000000000004080000000000000a409000000000000ca07000000000000050c00000200000001ffffff01000000000000000000000000000000f8ffffff00"/104]) 04:22:06 executing program 1: r0 = getpgrp(0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x4, 0x1) bind$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x0, @local}}, 0x1e) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, 0x0, 0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000200)={'HL\x00'}, &(0x7f0000000240)=0x1e) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x842, 0xf709, 0xda6, 0x3, 0x0, 0x7, 0x40000, 0x8, 0x7, 0x400, 0x9, 0xffffffffffffffe1, 0x40, 0x3, 0xa2a0, 0x19e7, 0xffff, 0x2d89, 0x8, 0x3ff, 0x8000, 0xc9, 0xfffffffffffff277, 0x80, 0x4, 0x1, 0x6, 0x1, 0x3ff, 0x8, 0x20, 0x5, 0x2, 0xbad, 0x7f, 0x80, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x100, 0x6, 0x9d87, 0x7, 0x9, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000140)=0x2000) ioctl$RTC_VL_CLR(r3, 0x7014) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x1) 04:22:06 executing program 3: r0 = socket(0x10, 0x803, 0x20) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000040)=0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000003280)=""/4096, 0x1000}], 0x2}, 0x0) recvmmsg(r0, &(0x7f0000006740)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) socket$inet(0x2, 0xf, 0x8) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x541000) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 04:22:06 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)={{0x1cf, 0x80000001, 0x401, 0xd0, 0x1aa, 0x6, 0x151, 0x9}, "706bbb0198a1b81a218cda426e766b2b3cca69399014012f8edfc9b3c4a4496f1e8a523ebe3de448d41379844b227536fe92652c2c4d7f327e2f61179f71d95b36472fb2504f768228850309cb7435da0bd7fc2d2a57e567c0fc235e7cc6ca5246be5bb74df684595ec85605bdaae279c2a9f258eee44ffb3712bfbaa26eae0a72463c5f620b2c26f6c8da4671e4056ebc2545f1f790f18c0932ff46bdbaf2853a000efc02", [[]]}, 0x1c5) fsetxattr$security_evm(r0, &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@sha1={0x1, "12a2f0db4d2dfcc2ded4a1116aa4fcda5b32e7ff"}, 0x15, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200, 0x18) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000002c0)=0xfc5f) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)=0x0) fcntl$setown(r1, 0x8, r2) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x1f, 0x8, '9P2000.u'}, 0x15) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000380)=0xbb) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000003c0)={0x3, 0x100000000}) openat$capi20(0xffffffffffffff9c, &(0x7f0000000400)='/dev/capi20\x00', 0x400, 0x0) accept4$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14, 0x80800) write$P9_RMKDIR(r1, &(0x7f00000004c0)={0x14, 0x49, 0x1, {0x81, 0x1}}, 0x14) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000500)='/dev/udmabuf\x00', 0x2) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000540)) syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x9) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f00000005c0)={0x3, 0x959a}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000600)='/dev/fuse\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x7b, "a23b9b80d8c70003d04fc24a4d2fd9b908129d2ec8b5f53413488362c310c281cb8f9d4b7bc1e0501da444146aacdcc143bff53345337991eda096bc3246bec16e64bcce981e70c7654bd2a75f85f1f6b500abd11200669c17a88cda689e2c970edad3c1e0ecaacf11f6221dd7a7d16aedbbd2f7247daefea3dfb5"}, &(0x7f0000000700)=0x9f) syz_open_dev$vcsa(&(0x7f0000000740)='/dev/vcsa#\x00', 0x5, 0x80200) getpeername(r0, &(0x7f0000000780)=@in={0x2, 0x0, @broadcast}, &(0x7f0000000800)=0x80) syz_open_dev$sndseq(&(0x7f0000000840)='/dev/snd/seq\x00', 0x0, 0x101000) accept4$inet(r1, &(0x7f0000000880)={0x2, 0x0, @dev}, &(0x7f00000008c0)=0x10, 0x80000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000900)=0x2) openat$vfio(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vfio/vfio\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000980)=0x6, 0x4) prctl$PR_SET_ENDIAN(0x14, 0x0) 04:22:06 executing program 0: 04:22:06 executing program 4: 04:22:06 executing program 2: 04:22:07 executing program 3: 04:22:07 executing program 0: 04:22:07 executing program 4: 04:22:07 executing program 2: 04:22:07 executing program 3: 04:22:07 executing program 0: [ 306.615106] IPVS: ftp: loaded support on port[0] = 21 04:22:07 executing program 1: 04:22:07 executing program 4: [ 306.770903] chnl_net:caif_netlink_parms(): no params data found [ 306.862395] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.869579] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.878098] device bridge_slave_0 entered promiscuous mode [ 306.886259] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.892873] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.900350] device bridge_slave_1 entered promiscuous mode [ 306.923652] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 306.934843] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 306.955668] team0: Port device team_slave_0 added [ 306.962917] team0: Port device team_slave_1 added [ 307.026117] device hsr_slave_0 entered promiscuous mode [ 307.062797] device hsr_slave_1 entered promiscuous mode [ 307.123739] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.132677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.139501] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.146083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.194481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.209191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.218569] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.226845] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.235325] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 307.250762] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.264904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.273361] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.279781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.292519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.300458] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.307041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.336623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.345995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.354379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.364532] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.378604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.389832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.416164] 8021q: adding VLAN 0 to HW filter on device batadv0 04:22:08 executing program 3: 04:22:08 executing program 2: 04:22:08 executing program 5: 04:22:08 executing program 0: 04:22:08 executing program 4: 04:22:08 executing program 1: 04:22:08 executing program 4: 04:22:08 executing program 2: 04:22:08 executing program 1: 04:22:08 executing program 0: 04:22:08 executing program 3: 04:22:08 executing program 5: 04:22:09 executing program 2: 04:22:09 executing program 4: 04:22:09 executing program 0: 04:22:09 executing program 5: 04:22:09 executing program 1: 04:22:09 executing program 3: 04:22:09 executing program 2: 04:22:09 executing program 5: 04:22:09 executing program 0: 04:22:09 executing program 1: 04:22:09 executing program 4: 04:22:09 executing program 3: 04:22:09 executing program 0: 04:22:09 executing program 1: 04:22:09 executing program 2: 04:22:09 executing program 4: 04:22:09 executing program 5: 04:22:09 executing program 3: 04:22:09 executing program 1: 04:22:10 executing program 0: 04:22:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0xa832, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xfe000}], 0x2, 0x0) 04:22:10 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='bdev\x00', 0x0, 0x0) 04:22:10 executing program 1: 04:22:10 executing program 5: 04:22:10 executing program 3: 04:22:10 executing program 1: 04:22:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = memfd_create(&(0x7f0000000140)='/dev/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r1, 0x0) fstat(r1, 0x0) 04:22:10 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001000)={"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"}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x7) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:22:10 executing program 2: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x0) 04:22:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r2 = accept(r0, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1}}, 0x48000) close(r1) 04:22:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:22:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x4b564d03, 0x0, 0x40000100]}) [ 309.559608] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:22:10 executing program 4: mknod(&(0x7f0000000040)='./bus\x00', 0x8000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) fcntl$getown(r0, 0x5) [ 309.619980] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 309.639668] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:22:10 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x12102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) readv(r0, &(0x7f0000001200)=[{&(0x7f0000001100)=""/92, 0x5c}, {0x0}], 0x2) 04:22:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socketpair$unix(0xa, 0x0, 0x0, 0x0) 04:22:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffd, 0x0, 0x0, 0x100a0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:22:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1b, &(0x7f0000000580)=ANY=[@ANYBLOB="8500000001000000550800000000000095000000000040003dc152639a6b3dd49262bef00102e361f1219ed83c4dbf204563696d796f5a87c17985f7593d865189f89d96e247dd2d53fd9c887a09e3fd235651a6477ca07643bff980fdc94dc8dbb829c97ff05af23cbeefc19ce2ebb5b25411b7f18a075fc9cc9862fb5689723c960aeba84c8966c9c30f7bf0f507f034c59c233fac3bbcca7aa485b9def999d242b2f9462e1e4d85ebcd9be1957d94663ef54d5924b2ef9a1371cdc5b4caabf36b106fb7bc02ccb113e5533aa69fbb9e2406cc8abebca35f1d68efa4d5d0"], 0x0, 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 04:22:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000a52b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0300000000000000000000000000000000000000000000000000000000000000000000040000cd1158368277ae3ab422249b82159dd2545d8c4b4b73bdcaed87beb713470edc3146e2360eb6bfeb46660909b7b12ec9e1123fe9782d9af4d928cd0666ab7e95a98ab3a74f7ec99d01eead9a9a1ebb7a75ff284440c9d85f68c0662c6bbd1efef0bfd115d3edf280d0998115d157e4377a839ae4d314496a3a3ca09eaa9bc6298eb5e2f762"], 0x1}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x4}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) [ 310.059521] *** Guest State *** [ 310.063188] CR0: actual=0xffffffff9ffffffd, shadow=0xfffffffffffffffd, gh_mask=fffffffffffffff7 [ 310.072239] CR4: actual=0x00000000000120e0, shadow=0x00000000000100a0, gh_mask=ffffffffffffe871 [ 310.081129] CR3 = 0x0000000000000000 [ 310.085042] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 310.091624] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 310.098357] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 310.104497] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 310.110629] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 310.117518] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.125700] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.133887] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.142149] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.150297] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.158537] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.166704] GDTR: limit=0x00000000, base=0x0000000000000000 [ 310.174868] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.183045] IDTR: limit=0x00000000, base=0x0000000000000000 [ 310.191188] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.199348] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 310.206037] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 310.213635] Interruptibility = 00000000 ActivityState = 00000000 [ 310.219959] *** Host State *** [ 310.223298] RIP = 0xffffffff81313e40 RSP = 0xffff8880280df398 [ 310.229434] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 310.236029] FSBase=00007f70f2a72700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000 [ 310.243975] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000 [ 310.249928] CR0=0000000080050033 CR3=000000002d927000 CR4=00000000001426e0 04:22:11 executing program 5: [ 310.257144] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8b0015f0 [ 310.263937] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 310.270091] *** Control State *** [ 310.273684] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 310.280439] EntryControls=0000d1ff ExitControls=002fefff [ 310.286080] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 310.293158] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 310.302001] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 310.308651] reason=80000021 qualification=0000000000000000 [ 310.315190] IDTVectoring: info=00000000 errcode=00000000 [ 310.320729] TSC Offset = 0xffffff55c8eecee0 [ 310.325199] EPT pointer = 0x00000000280b701e 04:22:11 executing program 0: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) unlink(&(0x7f0000000240)='./bus\x00') sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 04:22:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x4b564d03, 0x0, 0x40000106]}) 04:22:11 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x800000000000012, 0x400000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) get_mempolicy(0x0, &(0x7f0000000280), 0x80000000, &(0x7f00005ad000/0x1000)=nil, 0x3) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) madvise(&(0x7f00003f1000/0x2000)=nil, 0x2000, 0x12) madvise(&(0x7f00003ec000/0x400000)=nil, 0x400000, 0x1000000000008) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 04:22:11 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = accept$inet6(0xffffffffffffff9c, 0x0, 0x0) getsockname$unix(r0, 0x0, 0x0) [ 310.648919] *** Guest State *** [ 310.652490] CR0: actual=0xffffffff9ffffffd, shadow=0xfffffffffffffffd, gh_mask=fffffffffffffff7 [ 310.661445] CR4: actual=0x00000000000120e0, shadow=0x00000000000100a0, gh_mask=ffffffffffffe871 [ 310.670468] CR3 = 0x0000000000000000 [ 310.674501] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 310.681061] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 310.687771] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 310.693884] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 310.699911] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 310.706777] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.714903] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.723075] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.731146] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.739420] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.748550] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.756801] GDTR: limit=0x00000000, base=0x0000000000000000 [ 310.764923] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.773071] IDTR: limit=0x00000000, base=0x0000000000000000 [ 310.781115] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 310.789356] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 310.795981] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 310.803590] Interruptibility = 00000000 ActivityState = 00000000 [ 310.809867] *** Host State *** [ 310.813214] RIP = 0xffffffff81313e40 RSP = 0xffff8880280df398 [ 310.819263] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 310.825857] FSBase=00007f70f2a72700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000 [ 310.833913] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 310.839911] CR0=0000000080050033 CR3=000000002d927000 CR4=00000000001426f0 [ 310.847186] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8b0015f0 [ 310.854063] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 310.860152] *** Control State *** [ 310.863775] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 310.870486] EntryControls=0000d1ff ExitControls=002fefff [ 310.876101] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 310.883154] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 310.889874] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 04:22:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bcsf0\x00'}) [ 310.896614] reason=80000021 qualification=0000000000000000 [ 310.903061] IDTVectoring: info=00000000 errcode=00000000 [ 310.908607] TSC Offset = 0xffffff5578afec85 [ 310.913040] EPT pointer = 0x0000000031f0601e 04:22:12 executing program 1: r0 = socket(0x2, 0x4003, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40000200, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) pwritev(r2, &(0x7f00000003c0), 0x273, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x10, r1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 04:22:12 executing program 2: r0 = socket$kcm(0x2, 0xa, 0x300) perf_event_open(&(0x7f00000014c0)={0x0, 0x70, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x4000, 0x2, 0x100000001, 0x101, 0xca, 0x8, 0x80000001, 0x8, 0x8000, 0x4, 0x9, 0x0, 0x2, 0x0, 0x80000000, 0x9, 0x8001, 0x8, 0x7fff, 0x3f, 0x2, 0x2bdf, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x9, 0x5, 0x636, 0xc4f, 0x0, 0x80000001, 0x4, @perf_bp={0x0, 0x8}, 0x86, 0x8, 0x8000, 0x5, 0x1, 0x0, 0x10000}, 0x0, 0xe, 0xffffffffffffff9c, 0x1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0) socket$kcm(0xa, 0x2, 0x11) recvmsg(r0, &(0x7f0000008180)={&(0x7f0000008000)=@can, 0x80, &(0x7f00000080c0)=[{0x0}], 0x1, &(0x7f0000008100)=""/126, 0x7e}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) 04:22:12 executing program 3: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0x100000000}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180)) ptrace(0x10, r0) ptrace$poke(0x4209, r0, &(0x7f00000000c0), 0xfffffffffffffefc) 04:22:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) 04:22:12 executing program 5: mknod(&(0x7f0000000100)='./bus\x00', 0x8000, 0x86128) accept$unix(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000200ffffffff00040075001a00f1ff040000000000000055"], 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="220e228901001c067ebc74a7ea11cf801bf1fa48f4445ed5", 0x18) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180), 0xff20}], 0x100000000000005e, 0x0) [ 311.313459] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 04:22:12 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x800000000000012, 0x400000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) get_mempolicy(0x0, &(0x7f0000000280), 0x80000000, &(0x7f00005ad000/0x1000)=nil, 0x3) madvise(&(0x7f00003f1000/0x2000)=nil, 0x2000, 0x12) madvise(&(0x7f00003ec000/0x400000)=nil, 0x400000, 0x1000000000008) 04:22:12 executing program 3: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0x100000000}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180)) ptrace(0x10, r0) ptrace$poke(0x4209, r0, &(0x7f00000000c0), 0xfffffffffffffefc) 04:22:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo:\x05\xe6\xff\x01\xff\xff\xfd\xfd\x01\x80\x00\x00\x01', {0x2, 0x0, @remote}}) 04:22:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$packet(0x11, 0x0, 0x300) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r3, 0xfffffffffffffffc}) 04:22:12 executing program 5: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0x100000000}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace(0x10, r0) ptrace$poke(0x4209, r0, &(0x7f00000000c0), 0x716000) 04:22:12 executing program 3: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0x100000000}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180)) ptrace(0x10, r0) ptrace$poke(0x4209, r0, &(0x7f00000000c0), 0xfffffffffffffefc) 04:22:12 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000002d008151e00f80ecdb4cb904044865160b00010005000000000009000e0015001500cd5edc2976d153b4", 0x2e}], 0x1}, 0x0) 04:22:13 executing program 3: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0x100000000}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180)) ptrace(0x10, r0) ptrace$poke(0x4209, r0, &(0x7f00000000c0), 0xfffffffffffffefc) [ 311.942468] protocol 88fb is buggy, dev hsr_slave_0 [ 311.947957] protocol 88fb is buggy, dev hsr_slave_1 [ 312.016350] ================================================================== [ 312.023801] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x16b/0x1f0 [ 312.030315] CPU: 0 PID: 11671 Comm: syz-executor.5 Not tainted 5.1.0-rc4+ #1 [ 312.037508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.046943] Call Trace: [ 312.049690] dump_stack+0x173/0x1d0 [ 312.053364] kmsan_report+0x131/0x2a0 [ 312.057199] kmsan_internal_check_memory+0x8b3/0xaa0 [ 312.062391] ? page_fault+0x3d/0x50 [ 312.066058] kmsan_copy_to_user+0xab/0xc0 [ 312.070224] _copy_to_user+0x16b/0x1f0 [ 312.074139] copy_siginfo_to_user+0x80/0x160 [ 312.078563] ptrace_request+0x24b7/0x2930 [ 312.082726] ? __msan_poison_alloca+0x1e0/0x290 [ 312.087397] ? arch_ptrace+0x89/0xfa0 [ 312.091189] ? __se_sys_ptrace+0x2b9/0x7b0 [ 312.095430] arch_ptrace+0xa06/0xfa0 [ 312.099151] __se_sys_ptrace+0x2b9/0x7b0 [ 312.103227] __x64_sys_ptrace+0x56/0x70 [ 312.107382] do_syscall_64+0xbc/0xf0 [ 312.111104] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 312.116292] RIP: 0033:0x458c29 [ 312.119480] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.138969] RSP: 002b:00007fe04437ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 312.146670] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458c29 [ 312.153942] RDX: 00000000200000c0 RSI: 000000000000001b RDI: 0000000000004209 [ 312.161201] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 312.168462] R10: 0000000000716000 R11: 0000000000000246 R12: 00007fe04437b6d4 [ 312.175732] R13: 00000000004c5a11 R14: 00000000004d9e30 R15: 00000000ffffffff [ 312.183001] [ 312.184618] Local variable description: ----kiov@ptrace_request [ 312.190658] Variable was created at: [ 312.194371] ptrace_request+0x194/0x2930 [ 312.198431] arch_ptrace+0xa06/0xfa0 [ 312.202125] [ 312.203742] Bytes 0-15 of 48 are uninitialized [ 312.208311] Memory access of size 48 starts at ffff888027fafd78 [ 312.214354] Data copied to user address 0000000000716000 [ 312.219876] ================================================================== [ 312.227223] Disabling lock debugging due to kernel taint [ 312.232665] Kernel panic - not syncing: panic_on_warn set ... [ 312.238561] CPU: 0 PID: 11671 Comm: syz-executor.5 Tainted: G B 5.1.0-rc4+ #1 [ 312.247214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.256561] Call Trace: [ 312.259160] dump_stack+0x173/0x1d0 [ 312.262804] panic+0x3d1/0xb01 [ 312.266013] kmsan_report+0x29a/0x2a0 [ 312.269811] kmsan_internal_check_memory+0x8b3/0xaa0 [ 312.274915] ? page_fault+0x3d/0x50 [ 312.278546] kmsan_copy_to_user+0xab/0xc0 [ 312.282688] _copy_to_user+0x16b/0x1f0 [ 312.286582] copy_siginfo_to_user+0x80/0x160 [ 312.290992] ptrace_request+0x24b7/0x2930 [ 312.295683] ? __msan_poison_alloca+0x1e0/0x290 [ 312.301854] ? arch_ptrace+0x89/0xfa0 [ 312.305662] ? __se_sys_ptrace+0x2b9/0x7b0 [ 312.309892] arch_ptrace+0xa06/0xfa0 [ 312.313610] __se_sys_ptrace+0x2b9/0x7b0 [ 312.317684] __x64_sys_ptrace+0x56/0x70 [ 312.321682] do_syscall_64+0xbc/0xf0 [ 312.325405] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 312.330587] RIP: 0033:0x458c29 [ 312.333778] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.352672] RSP: 002b:00007fe04437ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 312.360383] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000458c29 [ 312.367646] RDX: 00000000200000c0 RSI: 000000000000001b RDI: 0000000000004209 [ 312.374909] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 312.382170] R10: 0000000000716000 R11: 0000000000000246 R12: 00007fe04437b6d4 [ 312.389432] R13: 00000000004c5a11 R14: 00000000004d9e30 R15: 00000000ffffffff [ 312.397693] Kernel Offset: disabled [ 312.401333] Rebooting in 86400 seconds..