[ 61.178546] audit: type=1800 audit(1547163813.237:30): pid=9092 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 64.403078] sshd (9229) used greatest stack depth: 53728 bytes left Warning: Permanently added '10.128.0.142' (ECDSA) to the list of known hosts. 2019/01/10 23:43:46 fuzzer started 2019/01/10 23:43:51 dialing manager at 10.128.0.26:46261 2019/01/10 23:43:51 syscalls: 1 2019/01/10 23:43:51 code coverage: enabled 2019/01/10 23:43:51 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/01/10 23:43:51 setuid sandbox: enabled 2019/01/10 23:43:51 namespace sandbox: enabled 2019/01/10 23:43:51 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/10 23:43:51 fault injection: enabled 2019/01/10 23:43:51 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/10 23:43:51 net packet injection: enabled 2019/01/10 23:43:51 net device setup: enabled 23:45:55 executing program 0: socketpair$unix(0x1, 0x1000000000000002, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000340)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="b5", 0x1, 0x0, 0x0, 0x0) [ 203.530380] IPVS: ftp: loaded support on port[0] = 21 [ 203.659160] chnl_net:caif_netlink_parms(): no params data found [ 203.715787] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.722329] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.730306] device bridge_slave_0 entered promiscuous mode [ 203.738944] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.745452] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.753348] device bridge_slave_1 entered promiscuous mode [ 203.781021] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 203.791674] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 203.817538] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 203.825663] team0: Port device team_slave_0 added [ 203.831716] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 203.839728] team0: Port device team_slave_1 added [ 203.846170] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 203.854551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 204.025743] device hsr_slave_0 entered promiscuous mode [ 204.282129] device hsr_slave_1 entered promiscuous mode [ 204.472941] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 204.480324] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 204.503962] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.510445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.517514] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.523988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.591318] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 204.597501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.609540] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 204.622190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.633436] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.642675] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.652726] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 204.668237] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 204.674446] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.687270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 204.694952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.703342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.711339] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.717802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.732008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 204.743646] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 204.755327] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 204.765664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.774112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.782420] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.788831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.796246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.804829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.817793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 204.828256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 204.839804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 204.851367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 204.861173] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.871011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.882012] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 204.889941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.898496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.906768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.915062] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.923584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.932045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.940570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.948749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.962022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.969829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.981701] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 205.000624] 8021q: adding VLAN 0 to HW filter on device batadv0 23:45:57 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001cf, 0x0) 23:45:57 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4f, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80400, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) 23:45:57 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000600)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x36e, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 23:45:57 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000600)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x36e, &(0x7f0000000380)={&(0x7f0000000300)={0x6, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "75abc64b7a58a964"}}, 0x48}}, 0x0) 23:45:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_pts(r0, 0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000140)=""/162, 0xa2}, {0x0}], 0x2) 23:45:58 executing program 0: getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) dup3(r2, r1, 0x0) [ 206.074323] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 23:45:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x10001, 0x28) setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f00000000c0), 0x4) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x200000000]}) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0xf) 23:45:58 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffd1b, 0x151402) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x500, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x5c}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xff}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000044}, 0x20004001) modify_ldt$read_default(0x2, &(0x7f00000001c0)=""/227, 0xe3) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000380)={@l2={0x1f, 0x1000, {0x8, 0x8, 0x1d, 0x161, 0x0, 0x101}, 0x5, 0x397}, {&(0x7f00000002c0)=""/78, 0x4e}, &(0x7f0000000340)}, 0xa0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000440)={'icmp6\x00'}, &(0x7f0000000480)=0x1e) openat$vhci(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhci\x00', 0x400) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000500)=""/249) mknod$loop(&(0x7f0000000600)='./file0\x00', 0x80, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}]}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000006c0)={0x4, 0x0, 0x10001, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000700)={r2, 0x3}) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000740)=0x61) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000780)={0x100, 0x5, 0x5, "d7825336aec6148b3f9907a0e578d3fd5497f24d2bf211dec643cba0a1fd6cc623180ede3aacc4b571d86a0febeacd3db36c1db7983ba6ffeca8cf95", 0xc, "2df0b7662757b5b1aeb7fccbaf8ebd924f2c35cf3fe8692e9164b14db8dfb6b285daeecd7ae44795cf15ab4abf593d41b3c3705daf57edb135b24667", 0x40}) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000840)={0x4, 0x0, [{0xc0000001, 0x9, 0x1, 0x3f, 0x9, 0x1, 0xe8fd}, {0x80000000, 0x5, 0x4, 0x8000, 0x100, 0x8, 0x8}, {0x0, 0x2, 0x4, 0x7, 0x8, 0x1}, {0xd, 0x5, 0x6, 0x0, 0x100000000, 0xff, 0xcc97}]}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000900)={0x62, @multicast2, 0x4e24, 0x3, 'wlc\x00', 0x1, 0x8, 0x69}, 0x2c) r3 = accept4$inet6(r0, 0x0, &(0x7f0000000940), 0x80800) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000980), &(0x7f00000009c0)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000a00)={@ipv4={[], [], @local}, 0xfff, 0x0, 0x3, 0xa, 0xbb2, 0x2}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000a40)={0x0, 0xb71c, 0x20}, &(0x7f0000000a80)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)={r4, 0x0, 0x7e, "d0e473885ff4732eb3b4b03c403224e034ab4e121fd9ca89d2315d5d55848aecf9a06dd826c212c7c9676ac51757a3097fe8109db7e449ea4eb1a53bcf66fae43c4d2c4f52ec18b5b9dcd6f0653e660bf88302d1008f82f2f97b359ef536d5066716a63605e03e163dd4abb882c01f851922094c044c990923511a1464e7"}, 0x86) faccessat(r0, &(0x7f0000000b80)='./file0\x00', 0x40, 0x100) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000bc0)={0x30, 0x3, 0x0, {0x3, 0xf, 0x0, 'ppp1cpuset\xc0bdev'}}, 0x30) bind(r3, &(0x7f0000000c00)=@isdn={0x22, 0x0, 0xfffffffffffffff7, 0x7, 0x5}, 0x80) connect$bt_rfcomm(r0, &(0x7f0000000c80)={0x1f, {0x4, 0x911f, 0xe5, 0x1, 0x8, 0x1}, 0x6}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d00)={r0, 0x7, 0x1, 0x1, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000d40)='fou\x00') setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000d80)={r4, 0x7fff}, 0x8) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000000dc0)=""/211, &(0x7f0000000ec0)=0xd3) 23:45:58 executing program 0: unshare(0x400) r0 = socket(0x848000000015, 0xe, 0x8) getsockopt(r0, 0x114, 0x0, 0x0, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) 23:45:58 executing program 0: r0 = semget$private(0x0, 0x1, 0x0) semop(r0, &(0x7f0000000100)=[{0x0, 0xfffffffffffefffc}], 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x14500, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) semtimedop(r0, &(0x7f00000001c0)=[{0x0, 0x9}], 0x1, &(0x7f0000000140)) [ 206.626885] IPVS: ftp: loaded support on port[0] = 21 23:45:58 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0xff) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000040)={0x7, 0x2, 0xff, 0x24, 0x7, 0x1f, 0x7ff}) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f00000000c0)) [ 206.794305] chnl_net:caif_netlink_parms(): no params data found [ 206.859761] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.866361] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.874315] device bridge_slave_0 entered promiscuous mode [ 206.886933] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.893541] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.901394] device bridge_slave_1 entered promiscuous mode [ 206.931295] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 206.942763] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 206.972579] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 206.980660] team0: Port device team_slave_0 added [ 207.003208] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 207.011353] team0: Port device team_slave_1 added 23:45:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0xa449, 0x900c2) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) gettid() syz_open_pts(r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1, @tick, 0xba, {0x80, 0x2}, 0xad3a, 0x1, 0x7}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) [ 207.030215] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 207.040812] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 207.116081] device hsr_slave_0 entered promiscuous mode [ 207.152875] device hsr_slave_1 entered promiscuous mode [ 207.263105] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 207.270514] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 207.313686] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.320199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.327301] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.333850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.443681] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 207.449827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.462571] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 207.475223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.489251] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.508621] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.525773] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 207.548005] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 207.554326] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.578564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.586768] bridge0: port 1(bridge_slave_0) entered blocking state 23:45:59 executing program 0: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0x9, "044c9ff5585adeab5c"}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000004c0)={0x0, 0x9, "eb5533d5784e167a26"}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000580)=0x2fff) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) [ 207.593289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.624401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.632513] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.638962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.647732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.703473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.713355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.724620] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 207.747682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.756515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.764996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.773410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.800403] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 23:45:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl(r0, 0x2, &(0x7f0000000080)="e163b5473004b6e1a3ffbdeadd089abf2a76554457ee6913f0400f5d63dbd46eb6bb503fa76096ac9ba48f928abb7d1063bc3e3e7860eef65e918077d44e11fb3964a2965e9f25cf28ee50275b2f3339ee070d56de658de3978dac9b10") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x400, 0x1) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x4, @loopback}}, 0x1e) [ 207.828894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.835653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:46:00 executing program 0: r0 = getpid() openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getsig(0x2, r0, 0x6, &(0x7f0000000140)) ptrace$getsig(0x4202, r0, 0x1000, &(0x7f00000001c0)) timer_create(0x7, &(0x7f0000000000)={0x0, 0x2e, 0x2, @tid=r0}, &(0x7f0000000040)) 23:46:00 executing program 1: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) clock_gettime(0x0, 0x0) 23:46:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000000c0)={0x0, [], 0x7}) 23:46:00 executing program 0: unshare(0x48000900) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/104, &(0x7f00000000c0)=0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) setns(r0, 0x44000000) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:init_exec_t:s0\x00', 0x21, 0x3) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000180)) 23:46:00 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000002c0)) r1 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000580)=ANY=[@ANYBLOB="ac14040c000000820000000002000000ffff0800000014bb"], 0x18) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000500)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[0x7f, 0x8]}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000680)={0x3, &(0x7f0000000640)=[{0x7fffffff, 0x53b4, 0x10001, 0xbc}, {0x0, 0x81, 0x9, 0x4}, {0x5, 0x3000000000000000, 0xaa9, 0x3ff}]}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)) 23:46:00 executing program 0: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x80000000, 0x1}, 0x159) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2, 0x3ff}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000080)={0xc0fd, 0x3}) 23:46:01 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x301001, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x68}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe1d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8011) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='\xf4\x067R\x1c\xd5') r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xa002, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000140)=""/27) fcntl$setflags(r3, 0x2, 0x1) lseek(r2, 0xfffffffffffffffd, 0x1) 23:46:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x7ff}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @multicast1}}, 0x93, 0x401, 0x3, 0x8, 0x1}, 0x98) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:01 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x400006, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x1f) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x9, @sliced}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0xce, 0x1, 0x80, "e4238bcc24300f5b36e8618bf67e7c5a", "a3eecf3ae39f625bff14aab56bbf415645fa14859ff9431a3d2e8cff22730f1bf2cf511aaecc53bc3dcaa18ff1b902cea920fcde8065e7e12f6e557ee434a5536fe7e55bce8ad44d0a00816a8919891f5eb100805150cdcd18a083be77f2fd8873d9b282b34d46e542a8160aa3cc3daee69080884ec1b8de4982cf8a93eca659638128d6952e244ee2d2c077c91afaee64681a2c4930d67edac45b78a68f4b0bb9ff00b617dc9bca436b8cb1decbbb765d3f24182ce3d0dd0b"}, 0xce, 0x2) 23:46:01 executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) clock_getres(0x5, &(0x7f0000000000)) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 23:46:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x8c02) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xa, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x10001}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x8f, 0x100000000, 0xa3f, 0x3, 0x9}, &(0x7f0000000200)=0x98) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000240)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a03d2242575bbbaa2eedb22a4fa71c6ce", 0x28) 23:46:01 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000680)='/dev/rtc0\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r3, 0x130, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x8, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000300)=[{&(0x7f00000000c0)="e7da6055dd2195f20cecb54c05a8f39909a7a1", 0x13}, {&(0x7f0000000100)="794fa0414dc02ffc66b0af92b776d52752fc80e436", 0x15}, {&(0x7f0000000140)="7bf525343156a2d609565023b92904b894cbd6e03a5b4d1ab7681b905cb10cbfba9a4723e08cdecc777a4e42adc82e72d5e607ba4e2642b61a0ea8a88682afab9b61447063343e4ef198521a54a7fed9dee79d8de4263cd932ce6097ae6c83baccc7285345103bc82cc4b339d82c7c4056aa8bde48a5244a41765f4bd55ae2893bae2dbcca046aad0bd27477aa4de1db306598c5672c407a0241fa03b77cdefca60c3d3e729d378b3d5f76e8637dcd2e20d30f80220294678275fd23c16c827fb8bc5d901582c6825eb85917850f4794e8a708fbe687fd175b0d0c8fe0225dd6cdaa2e95a6b412", 0xe7}, {&(0x7f0000000240)="82fda6b81aafc9f078890d89b46684cecd8575f3149fe44b0c7e1c8bc3df27d3660afdbf9a53997b767784ff24ba778d14c815b7b278", 0x36}, {&(0x7f0000000280)="892d814090c3ce73bf5d9a5ff2503a2296e4996a274e4605e12e532191f3febd9de972742489db8571c381711313b58e8ea139b218124c10f8aaa0b3b8d9df9db5697ff08045bf803f636ae2e1f9", 0x4e}], 0x5, r1) r4 = userfaultfd(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0xfffffffffffffffe}) llistxattr(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=""/115, 0x73) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000007000)) 23:46:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2270, &(0x7f0000000080)) 23:46:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000100)) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x6}, &(0x7f00000001c0)=0x8) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, 0xffffffffffffff9c}) 23:46:02 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x7ff}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @multicast1}}, 0x93, 0x401, 0x3, 0x8, 0x1}, 0x98) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:02 executing program 1: socket$unix(0x1, 0x801, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = getuid() fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000000c0)={0x90, 0x0, 0x4, {0x1, 0x3, 0x1, 0x1, 0x1, 0x9, {0x6, 0x2, 0x3f, 0x232b, 0x2, 0x5, 0x2, 0x7fff, 0x1910, 0x8, 0x0, r1, r2, 0x7c23, 0x2}}}, 0x90) r3 = accept4(r0, &(0x7f0000b17000)=@generic, &(0x7f0000dbd000)=0x80, 0x0) mmap(&(0x7f0000ef1000/0x4000)=nil, 0x4000, 0x2000002, 0xc0010, r3, 0x0) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) connect(r3, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x80) r4 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000180)={0x5, 0x6}) 23:46:02 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0x400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000e00000/0x200000)=nil, &(0x7f0000e76000/0x4000)=nil, &(0x7f0000e4a000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fc4000/0x3000)=nil, &(0x7f0000000000)="f0f511292a974ea282b33bab2573fe38fb2be21b97c0ea3dfff8e0b731f546974dc16061f935f694b8c3b0acb3ad099172e1fabd37172d5084f82c2185c49aac6595d91e44f6229f4714cf93aeedb946fbff7e14cc01dd40aca8d5c16a75e3e790c7385fae", 0x65, r0}, 0x68) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x101000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)={0x83, 0xf2, 0x3, "0bcd4180325a68d0ca79ab91381d958993a30ddb3c5934a18aca6bf7a252feac42780d018689917ed59deaf020adaa8540d2f0ec8ec51391b357aaedd6bccd034acf9a0f481a1a053075ab3b1dd2a38978e3c731f449934ea54851198ac75018e5091a914b17c53fc275cee102abeb4aa533d01a5adc72c0e92822a00bf75a7906f930"}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4000, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f00000002c0)) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000300)={0x4, 0xb, 0x1, "87996a61985b5ea83e6b473a1d84886a2238ada517890e00c49e3456dcf16d4e", 0xf7377f5f}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000340)={0x10000, 0x3, 0x4, 0x80000000, {}, {0x3, 0x8, 0x55, 0x10001, 0x0, 0xde53, "54b9e8df"}, 0xff3, 0x6, @userptr=0x100000001, 0x4}) shutdown(r3, 0x1) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000003c0)={0xffff, 0x101, 0x1}) getcwd(&(0x7f0000000400)=""/247, 0xf7) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000500)={0x9, 0xffffffff80000000}) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000540)=""/50) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000580)={0xffffffffffffffff, 0x1, 0x3, 0x0, 0x32}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000005c0)={{0x10000, 0x705}, 'port1\x00', 0xf0, 0x80401, 0x5, 0xba, 0xcc, 0xfffffffffffffffb, 0x8, 0x0, 0x4, 0x5}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dlm-monitor\x00', 0x800, 0x0) r5 = syz_open_dev$audion(&(0x7f00000006c0)='/dev/audio#\x00', 0x2, 0x500) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000700)) chmod(&(0x7f0000000740)='./file0\x00', 0x1) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000001780)={0x2, 0x2, &(0x7f0000000780)="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", {0x5, 0x1, 0x4c47504a, 0x5, 0x8000, 0x101, 0x0, 0xc7c0000}}) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f00000017c0)) fallocate(r4, 0x4, 0x6, 0x9) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000001800)={0x1f000, 0x4000, 0x400, 0x3, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r5, 0x40bc5311, &(0x7f0000001840)={0xffff, 0x3, 'client1\x00', 0x4, "0950c148398c44c0", "661f34a4425d708de4d98c4864eb7191ca674ebfc3f65c542e62daabb2641209", 0xadd3, 0x3}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000001900)={0x0, 0x82, "b07da70c41e64b5bcd44803c00feb9e8638a18f921a5b3b9ec2c1e2d59d50374c8ce18917e1affe1e6a46f7077402c959ffd382e9cd5cd2e3ca6a6c026e10b0c11b6f3bfc99660dafc588faac0ada58741e6265e133354ce07cb3dcc88ef626a114dfc03ccfe0b923394ef604660966f68ccabf1ba264077e008f045c6ffbe7efd02"}, &(0x7f00000019c0)=0x8a) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001a00)={r6, @in6={{0xa, 0x4e20, 0x8, @mcast2, 0x101}}}, 0x84) syz_open_dev$usb(&(0x7f0000001ac0)='/dev/bus/usb/00#/00#\x00', 0xff, 0x40000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001b00)={r6, 0x3}, &(0x7f0000001b40)=0x8) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000001b80)=""/163) 23:46:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x0, [0xc0010058, 0x10000]}) 23:46:03 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x7ff}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @multicast1}}, 0x93, 0x401, 0x3, 0x8, 0x1}, 0x98) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 211.041749] kvm [9403]: vcpu0, guest rIP: 0xfff0 unimplemented MMIO_CONF_BASE wrmsr: 0x10000 23:46:03 executing program 1: mknod(&(0x7f0000000000)='./file1\x00', 0xfffffffffffffffe, 0x0) quotactl(0x20002080000201, &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000)) [ 211.185376] IPVS: ftp: loaded support on port[0] = 21 23:46:03 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @sliced={0x8, [0x2, 0xfe3, 0x8000, 0x9, 0x8, 0x8, 0x1ff, 0x101, 0x5ba, 0x8000, 0x4, 0x100000001, 0x7, 0x10001, 0x3f, 0x100, 0x6, 0x3f42, 0xdb0, 0x7, 0x5, 0x0, 0x5, 0x2, 0x401, 0x7, 0xfffffffffffffffa, 0x0, 0x7, 0x9, 0x9, 0x9, 0x2, 0x80, 0x8, 0x6, 0x3, 0x1, 0x1, 0xf6, 0x1, 0x10001, 0xf1be, 0x80, 0x8, 0x101, 0x0, 0xe08c], 0x3ff}}) 23:46:03 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1, 0x20000002012, r0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'ipddp0\x00', {0x2, 0x4e23, @rand_addr=0x40}}) [ 211.431188] chnl_net:caif_netlink_parms(): no params data found [ 211.538656] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.545479] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.553096] device bridge_slave_0 entered promiscuous mode [ 211.562171] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.568674] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.576657] device bridge_slave_1 entered promiscuous mode 23:46:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RSTATFS(r0, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0x6, 0x40, 0x0, 0x6, 0x80000000, 0xfffffffffffffffb, 0x2, 0x80000001, 0x6}}, 0x43) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x0, 0x1}) [ 211.645640] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 211.669250] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 211.718706] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 211.726886] team0: Port device team_slave_0 added [ 211.768236] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 211.776586] team0: Port device team_slave_1 added 23:46:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='statm\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) fallocate(r0, 0x22, 0x5, 0xffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000040)=0x5) ioctl$TCXONC(r3, 0x540a, 0x0) [ 211.816485] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 211.832884] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 211.925958] device hsr_slave_0 entered promiscuous mode [ 211.962107] device hsr_slave_1 entered promiscuous mode [ 212.002945] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 212.010419] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 23:46:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4000000004}, [@typed={0x4, 0x12}]}, 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000500)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000700)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@ipv4={[], [], @remote}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000940)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000c80)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000d80)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000dc0)={0x0, @multicast1, @broadcast}, &(0x7f0000000e00)=0xc) accept$packet(0xffffffffffffffff, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001040)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000001140)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f00000033c0)={0x11, 0x0, 0x0}, &(0x7f0000003400)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000038c0)={&(0x7f00000000c0), 0xc, &(0x7f0000003880)={&(0x7f0000003440)={0x424, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x80, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x7, 0x4, 0x5, 0x5}, {0x4, 0x7, 0x2, 0x5}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r9}, {0x174, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r14}, {0xc8, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x0, 0xf86, 0xe1, 0x7fffffff}, {0x8, 0x4, 0xffffffff, 0x5}, {0x10000, 0x1ff, 0x1ff, 0x6}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x424}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r16 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x4000) ioctl$UFFDIO_WAKE(r16, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) [ 212.075947] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.082459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.089404] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.095912] bridge0: port 1(bridge_slave_0) entered forwarding state 23:46:04 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x7ff}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @multicast1}}, 0x93, 0x401, 0x3, 0x8, 0x1}, 0x98) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:04 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x78) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) shutdown(r1, 0x0) [ 212.231906] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 212.238121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.289258] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 212.306798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.319698] bridge0: port 1(bridge_slave_0) entered disabled state 23:46:04 executing program 1: r0 = socket(0xa, 0x80005, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'bond0\x00\x00\x00\x00\x00\x00\x00\x81\x00', 0x2}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4051}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xc0, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2400000000}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x29}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000380)={'bond0\x00\x00\x00\x01\x00\x00\x80\x00\xa0\x00', 0xffd}) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) [ 212.344295] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.362540] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 212.388907] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 212.395400] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.410810] bond0: mtu less than device minimum [ 212.425117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 212.432346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 212.440796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.449949] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.456459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.464640] bond0: mtu less than device minimum [ 212.474630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 212.481879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.490289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.499253] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.505746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.527802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 212.539003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 212.549187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 212.558056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.577066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 212.596328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.605032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.618760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 212.636401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.644415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.652960] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.666149] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 212.673344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.681218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.697728] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 212.705799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.714454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.730115] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 212.736301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.758674] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 212.775515] 8021q: adding VLAN 0 to HW filter on device batadv0 23:46:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/kvm\x00', 0xb, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) request_key(0x0, &(0x7f00000004c0)={'syz'}, 0x0, 0xfffffffffffffffe) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x1c}, 0x1c}}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000580)=0x2fff) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@initdev, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8) connect$packet(r2, &(0x7f0000000440)={0x11, 0xff, r5, 0x1, 0x3, 0x6, @local}, 0x14) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f00000000c0)={0x400, 0x101, 0x7f, 0x2}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xfffffffffffffffa) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000080)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4004, 0x0) 23:46:05 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x3f, 0x202000) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x4) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8e2, 0x12000) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x0, @loopback, 0x4e23, 0x2, 'sh\x00', 0x33, 0x10001, 0x3}, 0x2c) keyctl$get_security(0x11, r2, 0xfffffffffffffffe, 0x87) write$apparmor_exec(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="737461636b202f6465762f66b8146b92b6258c25592c4448fb78e7d7dcea4304"], 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67030000001d6945bf2da876f463e3f55c5da8643d63132b6a3f4c0c2c48ba070cc4a3f1450004000000000000bcd4cfc4e4f6f1b00637460fb711f531b95aae38d726af4822aba8d8b5e578f3683af8077152e1499043a76c822161c2663eb2a7f2f2ecf354780b2eea6b6884f37f044c7b52b0a3b9f743edcd40de71d8605d89d263bef58c272d5fce15da1179c3745a0f46de9ec8b2138d8a890ddc7bedcafd5ad49607b88717b7c16e9d32de601f6d73911e3862c9765be8d2d9dc96082879d0eb6eae3360f4035e7a9965d68cf4bd4e4283ab803bb2b8e45738d116e88a98fb7a4f4b02de62a1e98c3c2b", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r3, 0x0, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@known='security.capability\x00', 0x0, 0x0) 23:46:05 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x7ff}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={r3, @in={{0x2, 0x4e21, @multicast1}}, 0x93, 0x401, 0x3, 0x8, 0x1}, 0x98) 23:46:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/174, 0xae}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/132, 0x84}, {&(0x7f0000001240)=""/4096, 0x1000}], 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000140)=0xf2) 23:46:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getrlimit(0x0, &(0x7f0000002ff2)) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x101000) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000040)=[0x4, 0x1, 0x9, 0x9, 0xfffffffffffffff9, 0x0], 0x6, 0x300, 0x3, 0xfffffffffffffff9, 0x1, 0x100, {0x829d, 0x2, 0x7f, 0x1, 0x8000, 0x35f30a77, 0x285, 0xffffffff, 0xfd1, 0x6, 0x7, 0x3, 0xfffffffffffff801, 0x3, "802d9b160ff58ba507257abe00b12b5d2f607a00af4ee62760d0978f75e84ad4"}}) pkey_mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) select(0x40, &(0x7f0000000fc0)={0x20}, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000003000)={0x77359400}) 23:46:05 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x803}) fcntl$setstatus(r0, 0x4, 0x40800) r2 = dup3(r1, r0, 0x80000) write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000100)=""/72, 0x48, 0x0, 0x5, 0xffffffff, 0x0, 0xfffffffffffffffa}, 0x120) poll(&(0x7f00000001c0)=[{r1}], 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 23:46:05 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0), 0x2) ioctl$VIDIOC_STREAMON(r0, 0x40045613, &(0x7f0000000100)=0x7) 23:46:05 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0xdbf, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) unshare(0x10000) linkat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00', 0x400) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000002c0)={0xe0, 0x7e, 0x8000, 0x8}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000280)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_access\x00', &(0x7f00000001c0)=""/129, 0x81) 23:46:05 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x0, 0x1}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 23:46:05 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x8, 0x1) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) r4 = shmget(0x0, 0x8000, 0x54000808, &(0x7f0000013000/0x8000)=nil) r5 = getuid() fstat(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000540)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000002c0)=0x0) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000300)={{0x20000000000000, r5, r6, r7, r8, 0x2, 0x4bcfce06}, 0x9, 0xffffffffffff8919, 0x0, 0x3, r9, r10, 0xc0e}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0), &(0x7f0000000380)=0x4) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000200)={&(0x7f0000011000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3000}) 23:46:05 executing program 2: socket$inet6(0xa, 0x6, 0x7ffe) r0 = socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSBRK(r3, 0x5427) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000040)={'tunl0\x00', {0x2, 0x4e24, @broadcast}}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xba, "9063441f2f5767821120cd4548b54f5454657dee9956606d8408fa72e8ba2440c2591554b1731a9dd6375a27ec9fcbaec7f0d909584cc78aa37293e69b5fc99dd075983070238bb190177ff094e65efea715201119742ef5a686557afc65030e721cc29549e9d5ec1017efcd3b19b5e3092f5e4b70ce803c1af9a846f9d0e9bb8e0d7f2445de442c508dc32852cb93fa30475d5f2fc93e093471f4646fbeaf0b88f73b23dff135b182644e5521802e2cab32e7294c1b8448c17e"}, &(0x7f0000000100)=0xc2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000280)={r4, 0x7f661529}, &(0x7f00000002c0)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000013002901000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000080000000000008001a0004000200"], 0xb}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 23:46:06 executing program 1: unshare(0x20400) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000004580)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) 23:46:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x7ff}, 0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x0, 0x0, 0x0, {0xa, @pix_mp}}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000100)=[0x7f, 0x81]) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000140)=0x80000000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000180)=ANY=[@ANYBLOB="8d47163b4f180000000101009f00a600000001000000200000a819bef41845d46fe7919422e9376a9800fdffffff00000000"]) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000080)=0xf, 0x4) syncfs(r1) 23:46:06 executing program 1: unshare(0x2000400) r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x40) sendfile(r0, r0, &(0x7f0000001000), 0xfec) [ 214.163699] Unknown ioctl 1074283779 [ 214.168245] Unknown ioctl 35147 [ 214.175038] Unknown ioctl 21528 [ 214.178788] Unknown ioctl -1073195750 [ 214.185693] Unknown ioctl 1074283779 [ 214.189764] Unknown ioctl 35147 [ 214.195337] Unknown ioctl 21528 [ 214.198923] Unknown ioctl -1073195750 23:46:06 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x3ff, 0xf5b3, 0x1, 0x6, 0xfff}, &(0x7f0000000040)=0x14) r3 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000001c0)=0x1, 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="09c7b33c7401feff00806e000000a462"], &(0x7f0000000140)=0x14) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 23:46:06 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000280)='ppp0\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)=r0, 0x4) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = dup(r1) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000080)=0x7ff, &(0x7f00000000c0)=0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x5, 0x3, 0x8}) write$P9_RLOCK(r2, &(0x7f0000000240)={0x8, 0x35, 0x1, 0x3}, 0x8) unshare(0x20400) getsockopt$inet_tcp_int(r2, 0x11b, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:46:06 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x3ff, 0xf5b3, 0x1, 0x6, 0xfff}, &(0x7f0000000040)=0x14) r3 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000001c0)=0x1, 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="09c7b33c7401feff00806e000000a462"], &(0x7f0000000140)=0x14) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 23:46:06 executing program 1: personality(0x6a00010) r0 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x2, 0x4) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000002c0), 0x8}) 23:46:06 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) 23:46:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8930, &(0x7f0000000080)={'\xb8\x19\x8987\xb1R\x8e\x97gW\xd0\x16\xea\x00', &(0x7f0000000040)=ANY=[@ANYPTR64, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES32=r0]]}) 23:46:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80201, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x400801, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x8000, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x62, 0x80000) r6 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0xda6, 0x840) r7 = creat(&(0x7f0000000b00)='./file0\x00', 0x44) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r9 = dup(r0) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/dlm-control\x00', 0x220000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006400)=[{{&(0x7f0000000c80)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d00)=""/140, 0x8c}, {&(0x7f0000000dc0)=""/29, 0x1d}, {&(0x7f0000000e00)=""/181, 0xb5}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/4, 0x4}, {&(0x7f0000002040)=""/138, 0x8a}, {&(0x7f0000002100)=""/207, 0xcf}, {&(0x7f0000002200)=""/212, 0xd4}], 0x8, &(0x7f0000002300)=""/4096, 0x1000}}, {{&(0x7f0000003300)=@isdn, 0x80, &(0x7f00000035c0)=[{&(0x7f0000000f00)=""/24, 0x18}, {&(0x7f0000003380)=""/75, 0x4b}, {&(0x7f0000003400)}, {&(0x7f0000003440)=""/48, 0x30}, {&(0x7f0000003480)=""/85, 0x55}, {&(0x7f0000003500)=""/2, 0x2}, {&(0x7f0000003540)=""/28, 0x1c}, {&(0x7f0000003580)=""/59, 0x3b}], 0x8, &(0x7f0000003640)=""/44, 0x2c}, 0x1e5c}, {{&(0x7f0000003680)=@llc, 0x80, &(0x7f0000004980)=[{&(0x7f0000003700)=""/74, 0x4a}, {&(0x7f0000003780)=""/24, 0x18}, {&(0x7f00000037c0)=""/189, 0xbd}, {&(0x7f0000003880)=""/236, 0xec}, {&(0x7f0000003980)=""/4096, 0x1000}], 0x5, &(0x7f0000004a00)=""/242, 0xf2}, 0x7fff}, {{&(0x7f0000004b00)=@hci, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004b80)=""/137, 0x89}, {&(0x7f0000004c40)=""/161, 0xa1}], 0x2}, 0x7}, {{&(0x7f0000004d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000004dc0)=""/8, 0x8}, {&(0x7f0000004e00)=""/4096, 0x1000}, {&(0x7f0000005e00)=""/76, 0x4c}, {&(0x7f0000005e80)=""/48, 0x30}], 0x4, &(0x7f0000005f00)=""/110, 0x6e}, 0x8}, {{&(0x7f0000006000)=@nfc, 0x80, &(0x7f0000006340)=[{&(0x7f0000006080)=""/242, 0xf2}, {&(0x7f0000005f80)=""/60, 0x3c}, {&(0x7f0000006180)=""/141, 0x8d}, {&(0x7f0000006240)=""/203, 0xcb}], 0x4, &(0x7f0000006380)=""/64, 0x40}, 0x7fff}, {{0x0, 0x0, &(0x7f00000063c0)}, 0x3}], 0x7, 0x60, &(0x7f00000065c0)={0x0, 0x989680}) r12 = syz_open_dev$amidi(&(0x7f0000006600)='/dev/amidi#\x00', 0x3, 0x100) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000006740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000006700)={&(0x7f0000006640)={0x98, r2, 0xb00, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffff8001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x1) r13 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) dup(r0) close(r0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0ce3ec44"], 0x0, 0x0, &(0x7f0000000100)}) dup(r13) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_THREAD_EXIT(r13, 0x40046208, 0x0) 23:46:07 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:07 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x7ff}, 0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 215.066365] binder: 9541:9542 unknown command 1156375308 [ 215.072082] binder: 9541:9542 ioctl c0306201 2000dfd0 returned -22 [ 215.092944] binder: 9541:9551 unknown command 536871168 [ 215.098421] binder: 9541:9551 ioctl c0306201 20008fd0 returned -22 [ 215.106969] binder: 9541:9552 unknown command 1156375308 [ 215.112582] binder: 9541:9552 ioctl c0306201 2000dfd0 returned -22 [ 215.124351] binder: undelivered death notification, 0000000000000000 23:46:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f00000000c0)) close(r1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x638, [0x0, 0x20000140, 0x20000480, 0x20000748], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x1, 0x0, 'eql\x00', 'ipddp0\x00', 'bpq0\x00', 'bcsh0\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xd8, 0x208, 0x258, [@state={'state\x00', 0x8, {{0x1}}}, @mac={'mac\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x1}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3ff, 'system_u:object_r:audisp_var_run_t:s0\x00'}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x1}}}}, {{{0x11, 0x4c, 0xfbff, 'vcan0\x00', 'team0\x00', 'team_slave_0\x00', 'vcan0\x00', @random="41f5ac2eea0e", [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0xb8}}, @common=@ERROR={'ERROR\x00', 0x20, {"f27ed024603f84d5a81e8e974d35cd2020c83dda79d838a2870dae48fa85"}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x9, 0x809b, 'ip6erspan0\x00', 'irlan0\x00', 'rose0\x00', 'gre0\x00', @dev={[], 0x25}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @dev={[], 0x16}, [0xff, 0xff, 0x0, 0x0, 0xff], 0xe8, 0x138, 0x170, [@ip6={'ip6\x00', 0x50, {{@empty, @remote, [0xffffffff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0x0, 0xffffffff, 0xffffffff], 0x3, 0x88, 0x50, 0x10, 0x4e20, 0x4e21, 0x4e22, 0x4e23}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00', 0x8}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x10}}}}, {{{0x9, 0x20, 0x6006, 'rose0\x00', 'rose0\x00', 'vcan0\x00', 'hwsim0\x00', @remote, [0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], 0xb0, 0xb0, 0x128, [@quota={'quota\x00', 0x18, {{0x0, 0x0, 0x0, 0x800}}}]}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x401, 0x3, 0x1, 0x0, 0x0, "c3b23b29f8399e586419440f86a297672279fec23ebd4543ba15c9d2587847a8e533202ca2751f4d648a047f3a6ec4257636cfb9cfc8e3d236fab029861b0860"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x6b0) 23:46:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xffff, 0x4400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000000)=[{r0}, {r2}], 0x2, &(0x7f0000000080), &(0x7f0000000140), 0x8) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000001c0)={0x80000000, 0x40, 0x8, 0x6acecc9b, 0x3, 0x2}) syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x2, 0x101000) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000180)={0x0, {0x930c, 0x3}}) 23:46:07 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffc9cd, 0x20000) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000280), &(0x7f00000002c0)=0x4) exit(0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) ftruncate(r1, 0x4) socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000300)={0x0, 0x3, 0x20, 0x100000001, 0x6}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="b100000010d7b0f2cdef5d067676b6baa359b4c40e61d27a84c7a04c13f069a777485636d91dfa13806ab046ad5c6ec78e6180af4465dfa4446298e2fb809b1b8d910407ae047a77737d8d510d635e133cf95cc9a39a3ba80c0e8edef4e25f52f9b08f8e62f58d755064fa269d3b62e27ba19c6d34b2641c76919c31f9fe3bc7886a4a08f353280bd910ab34f392f11eeadb3462171fadc25c50b978f465bb14ff5f94722160970082435c42c77f93f6b36e7938d6"], &(0x7f0000000440)=0xb9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000001c0)) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000180)=0x5) 23:46:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f023c123f3188a070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x200080, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000003c0)={0x0, @output={0x1000, 0x1, {0x9, 0x5e}, 0x1, 0xfffffffffffffffc}}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x3b, &(0x7f0000000000), 0x709000) 23:46:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0xd8, &(0x7f0000c8d000)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000030101000038004086dc00000000000000000000000c00020008000000e0000002"], 0x20}}, 0x0) 23:46:08 executing program 1: setrlimit(0x0, &(0x7f0000000180)) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x6) setrlimit(0x0, &(0x7f0000000080)) [ 216.156534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. 23:46:08 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x4, 0x6, 0x2, 0x3, 0x4, 0x1920, 0x800, 0x4800000, r1}, &(0x7f0000000200)=0x20) r2 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\xca\xa6/\xb9X\xffK\x87\x13Y\xca\x03\"\xb7Z\xa3\xd9p+C\x92\x00\x95\xec\x10\t\x8f\x0e\xb49om`\x88\xbccb\x84Q\xd7', 0x0) write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020000100000000000001000000000300000000000000000000000000000003000000000000000000000000000000"], 0x58) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 23:46:08 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x01\x11\xc0\x00\x00\x00\x00\x00\x1e8}I\xb1\xb1\xfb\xcd', 0x20}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000700)={'eql\x00', @ifru_flags=0x3301}) 23:46:08 executing program 2: ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000580)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\x91Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4G\xfeS\xfb\xf3\xc1\xcd0\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xee\x00\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00\x01\xfe\xf8\fh\xa5\x15\f\xb25\xa0\x94\xbfn\xe2', 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 23:46:08 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x4, 0x2, 0x7fffffff, 0x7fffffff, 'syz1\x00', 0x1}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xcau\xaf0\x02\x00\xf5\xab\xfb\x98E\xf9\xe1\x98Y\xc9i2\x06\xf2\xc6\v\x00\x00\x00\a\x19\xe1\xd6n\x97\x01#\xd8\x93\xd9d\xe5\xb9\xc3(Vw\xb2\x13\x98#\xe5P\f\x92\xab[\x94\xda:}\xe1\x9f\x06;\xb7e\xb0+\xd5\xb6`\xfbC\x16\xcc\xeb[\xae\x13fT\xe5\x84\x99\xda\x7f\xa8\x98\xc6\xf5\xc66\x9c?60h\xd1\n\xf83\xf6G[\xbe\x8byg%[\x17v\a\xba\x10\x0flFTq\x822\xdb\xdad\xaa\x1fi\xcf\x9a\xb5\xb3\xea>\xd64R\xb7\xeb\xd3|\x9d\xaefN2.\b\xad\x8f`)\xfe\x8f\xd0\xb3Lq\x17H\x04q\xae\xca\n?\xc9\xec\xeb(P\x9c\xa8\xa8>O\x8b\x85\x13\x18\b\xbc\\\xfbL\xc2N\x19\x01v\x9c\bL\b\'\x12\xb4p\xa8') ioctl$TIOCSCTTY(r1, 0x540e, 0x5000000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) fcntl$setstatus(r1, 0x4, 0x4000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000200)=0x10) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x0) preadv(r1, &(0x7f00000001c0), 0x1c1, 0x0) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x2, 0x3, 0x80, 0x0, 0x1d, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0x101, @remote, 0x6}, @in6={0xa, 0x4e24, 0x8, @rand_addr="9dece75fb3e5514a3cb3420a69a08baa"}}, @sadb_lifetime={0x4, 0x4, 0xaf, 0x8000, 0x116, 0x4}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @empty}}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr="918463dc8d7c27dfef32006c229b6ccc", @in6=@mcast1, 0x1d, 0x4, 0x10}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}]}, 0xe8}}, 0x1) 23:46:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000400)=""/4096, 0xf7e9}], 0x1, 0x0, 0xff96ce4aaaa47475}, 0x100) write(0xffffffffffffffff, 0x0, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f00000001c0)={0x401, 0x6, 0x9, 0x52, 0x7, 0x101, 0x5}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0xc200) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x102, 0x4, {0x7, 0x1, 0x0, 0x4}}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x220000) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x20, 0x478, 0x1, 0x6, 0x4000000000000, 0x401}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) listen(r0, 0x0) 23:46:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x6, 0x8, 0x3, {0x0, 0x2710}, {0x0, 0x7530}, {0x2, 0x8, 0x5, 0x8}, 0x1, @can={{0x0, 0x3, 0x100, 0x101}, 0x3, 0x2, 0x0, 0x0, "4b439e9130b54bb9"}}, 0x48}, 0x1, 0x0, 0x0, 0x4008840}, 0x40000) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x1, 0x6a72}) 23:46:09 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) r1 = accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x3f, 0x200, 0xb1, 0x57ac8000000000}]}, 0x10) setsockopt$RDS_RECVERR(r0, 0x114, 0xa, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) r2 = socket$inet6(0xa, 0x80003, 0x1000000000000002) sendto$inet6(r2, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}, 0x9}, 0x1c) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x581000, 0x0) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000001c0)={0x4, 0x1, {0x3, 0x2, 0x80, 0x3, 0xffffffff00000000}}) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x21f26919) [ 216.996780] [drm:drm_calc_timestamping_constants] *ERROR* crtc 29: Can't calculate constants, dotclock = 0! [ 217.006953] hrtimer: interrupt took 158140 ns 23:46:09 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) r1 = accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x3f, 0x200, 0xb1, 0x57ac8000000000}]}, 0x10) setsockopt$RDS_RECVERR(r0, 0x114, 0xa, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) r2 = socket$inet6(0xa, 0x80003, 0x1000000000000002) sendto$inet6(r2, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}, 0x9}, 0x1c) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x581000, 0x0) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000001c0)={0x4, 0x1, {0x3, 0x2, 0x80, 0x3, 0xffffffff00000000}}) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x21f26919) 23:46:09 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) dup3(r1, r2, 0x0) 23:46:09 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x5, 0x20040) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000040)={{0x80000001, 0x4, 0x1, 0xffffffff, 0x5, 0x6}, 0x3f, 0xff, 0x2}) setsockopt$inet6_dccp_int(r0, 0x21, 0x17, &(0x7f0000000080)=0xdca5445, 0x4) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x80000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x200, 0x2, [0x0, 0x5]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={r1, 0x44, "ba3c26883aa5dd059662a6c4a00467c1e9bf8796b751e389a895cb3dd1ddae1b45210b5fe8f9924e9bfbae9ac5005a1dda8a1b0d99e31674650d98f51a081d02520b21a0"}, &(0x7f0000000200)=0x4c) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x2710}, {0x77359400}}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) fsync(r0) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000002c0)=0x1, 0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'veth1_to_bond\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}}) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8) getdents64(r0, &(0x7f0000000340)=""/212, 0xd4) r2 = shmget$private(0x0, 0x4000, 0x202, &(0x7f0000ff9000/0x4000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000540)=0xe8) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in=@local, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000700)=0xe8) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000840)={0x0, r0, 0x0, 0x17, &(0x7f0000000800)='./^GPL/\'cpuset{{##eth1\x00', 0xffffffffffffffff}, 0x30) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000880)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f00000008c0)={{0x8b08, r3, r4, r5, r6, 0x5, 0x401}, 0x5, 0xffffffffffffffff, 0x10001, 0x8, r7, r8, 0xffffffffffffff81}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000940)={'TPROXY\x00'}, &(0x7f0000000980)=0x1e) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000009c0)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000a00)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000a80)=&(0x7f0000000a40)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/kvm\x00', 0x20000, 0x0) rmdir(&(0x7f0000000b00)='./file0\x00') bind$isdn(r0, &(0x7f0000000b40)={0x22, 0x9, 0x7, 0x4a, 0x7}, 0x6) setxattr$security_smack_transmute(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000c00)='TRUE', 0x4, 0x1) sendmsg$kcm(r0, &(0x7f0000001100)={&(0x7f0000000c40)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000cc0)="502e34de897bd685d1e1ec68dff6c0f47fdbd1049df22769a9c5109d5a860b8a8a32a0d28e881c88df807218e63be67242e3d2917f5786c7d752b289cd2baf0ce8adeb4beafe2715107ae05f13b99c30c301e3accedddb6367e2c453cd28a36147c9f386bcdc73036afa94793855bd0b2b750128768bdc2760d19b8b42102502bfef76edd20c4a11ee8526f789857676b8123bc46551ab2062efd5df5b80a7", 0x9f}, {&(0x7f0000000d80)="06549839998a2f09fe99f0e8aef427569c150aa9", 0x14}, {&(0x7f0000000dc0)="c2328a6068a23cc87e640aafcc73fa8bc96da13c1520250cd5818f2cca93a0980b12a78a71be45658917b8fd2280a0347885c9767d0222c444f0f6b1325c00f05f34469ffaef977f847604c9a1b30f74210317cb7126721cf011a7effd607875fd075d0870b4e225e5a721cded37b4713656ec3ddfb2ca672a960e9928d10c82a6fed27ce42c1a1bc78cb15dc9dd49d6999a641f2f909556e2f2722d83bc7da02429f96d60cf247baa0ddfb9b91c6baba5a6db846e895b658d240a527fe1f430323a0ee19d85962977bc8343e5b5c4d53fc77d42e198b2bb432089f4eb7c46e91c59441d1a8d0578", 0xe8}, {&(0x7f0000000ec0)="dcbde16f61e573b9c880a1e8029ff3dd3138fdcf7ea4da926c3c8c8d3efdea9e499c3e14a09655276a411d32cabbbf21bac50c5e5b82f8d53d28b324c8ed245ed53f938e5b704990fcc90f32698f4d8a0d0ade564518b7bb0109a0b4748192b069951e0822bc190b0933f565569310bd7b8dc58212000b7731498e0fe3d6a336", 0x80}, {&(0x7f0000000f40)="31d5a7c0f8027549e80fc3d74a18a1dd89c85fd1fb158bb4ac2360463401a42fcce8d47a", 0x24}], 0x5, &(0x7f0000001000)=[{0xd8, 0x13f, 0x1, "8ac17bee04088d5f8c8d09f02e544e004cafaad2e023c631bb4300618ff9148d0560b3936e07c174a24a2049c710c879fb083bdac9ac8d1788c994a8f1ee8160a78f0a871b008cc1ca7b6dfeba4a51075b985a5eb7204952253940e26ce2e8b2f526b0b9a43c67ca131d13e72948b8034025612926c49fe63b2197378f44dc2240a8922e05d6fbe48179815ab49f6b3604b289b0815ff57d314fa411a412cd476fe4e6c3a6940e5f44b1a8a4affec70b10979d5aea6b06ca54467974ac6fbde4ba9dbf89"}], 0xd8}, 0x11) 23:46:09 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:10 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x28bb, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x75cf11ca47121549, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000014c0)={0x1, 0x0, &(0x7f0000000340)=""/40, &(0x7f00000004c0)=""/4096, &(0x7f0000000380)}) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x5, 0x200000004, 0x2, {0x3, @sdr={0x72317d5f, 0x100000000}}}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @random}]}) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, &(0x7f00000000c0)=""/17, &(0x7f00000001c0)=""/37, &(0x7f0000000200)=""/239, 0x103004}) 23:46:10 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000500)='/dev/input/event#\x00', 0x0, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) dup(r1) ioctl$TIOCSBRK(r0, 0x40044591) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) 23:46:10 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0xffd, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000040)=0x4) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @raw_data="4bb6ad47942dd8b759555634f77d33b9babd6e90787ab8be16a56096a2aaa244eb0a9542401547a54c1774940faf9f5c0fa7ebec00ccfacbcaf16066b101bade48102791791b6893cfb75c00fd1e1f7a3df7440add077023df680d10de814a30ede2af3ab647f8c9261feb180e13108d2853c2c6a3261453860b8ffd36c583412d03e339763d9d003308d5f9f17e95b4e92cf55cfadbbe40e9fceb792957300d8b38d2f29b9a232c001ed37a970aecf220e70eb36bd50a7ee9176615c3779fdfd5cc3e757ab3cb87"}) 23:46:10 executing program 1: prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ff9000/0x4000)=nil) r0 = memfd_create(&(0x7f0000000200)='\x00', 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x2000) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f00000000c0)={{0x2c, @rand_addr=0x8000, 0x4e22, 0x4, 'lc\x00', 0x1, 0x2, 0x3e}, {@rand_addr=0x997b, 0x4e22, 0x1, 0x0, 0x8000, 0xfffffffffffffff7}}, 0x44) shmget$private(0x0, 0x3000, 0x54000041, &(0x7f0000ffa000/0x3000)=nil) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='#! '], 0x3) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000240), &(0x7f0000000300), 0x1000) [ 218.767549] IPVS: ftp: loaded support on port[0] = 21 23:46:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:11 executing program 2: r0 = socket$packet(0x11, 0x10000000003, 0x300) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x4003fe, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000880080081136f2d346cb59677c63c6ef10991de09430b089"], 0x10) set_mempolicy(0x3, &(0x7f0000000080)=0x6697, 0x6) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000006a80)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x1c) 23:46:11 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) fdatasync(r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x401}, &(0x7f0000000180)=0x90) sendmsg$inet_sctp(r0, &(0x7f0000000500)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x100000000, @mcast1}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000002c0)="0e6a1e4bd7b539f7cf340600bbc928a2660f0c5a4ff5a376e88e38c9ea17311635b8a9e1fedc9b85f1a8e6243ec0015a92f73b22d4caf60b8fbb948fa4e88799ea90724062c80179f79a1f41b816da92a5f5ba8900b4405da8a5d448fc992f7d6c65daed9978cc3eb52ec7863db0949c381ac50a46e9eddf351b905ec52c87ad76844df4953fafe5b530ebad60f754", 0x8f}, {&(0x7f0000000380)="ef74121b13dcaaf25825b95ec8b6823d2a40ec73672725c474c5a633c31b8fc81cee555ef8abe8b7256fa42b64ca1c62b08818dbdbd67b6f6d3275caa1d5b8d457ef2e2abf291f6e2646fdf8aad410e717d869b8b5108316f77b2e864838e0a1e06a46e543e6d527073be53ead02ca59fc17f1e77c89369bfae8d5d32dbcddc13b519a9403b5871287ba4d2f81a66e5fe1860f3f62a0daee777c96e9abe92e80da29a896d61dc7e14f3453e1ca389daea685461dea7df30ae73a033628ea0c09a41d06b994f47f7fed86267afb25b9aa67a1ffa7d004e4148023524eb6f601", 0xdf}], 0x2, &(0x7f00000004c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x18, 0x800}, 0x8000) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r1, 0x5, 0x74, "8d33a7e59ded099dc496e4d97dc4c8568e98853281925782b3298e5ec30303cbc6033ee6f73a15237bb9c7095d169f5b65beb34e37feebcb58c9019c483df700b8fded626e3234cc4f37f61e031b77ba40be940111236fc55a74d79eaebc7e9eceb8c6e952112eeb8e6a16c2791ebda81f4fea34"}, 0x7c) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0x1a, 0xa, 0x20400000000000, 0x1, r1}, 0x10) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1, 0x20000000}, 0x80, 0x0}, 0x0) [ 219.143035] chnl_net:caif_netlink_parms(): no params data found [ 219.255678] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.262589] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.272507] device bridge_slave_0 entered promiscuous mode [ 219.362144] protocol 88fb is buggy, dev hsr_slave_0 [ 219.367737] protocol 88fb is buggy, dev hsr_slave_1 [ 219.397118] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.403722] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.411846] device bridge_slave_1 entered promiscuous mode 23:46:11 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0x8000, 0x4) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/36, 0x24}, 0x2000) sendmmsg(r0, &(0x7f00000000c0), 0x182, 0x0) [ 219.568603] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 219.616282] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 219.643147] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 219.703587] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.713594] team0: Port device team_slave_0 added [ 219.740177] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 219.749923] team0: Port device team_slave_1 added [ 219.774809] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 219.798765] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 23:46:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, 0x0, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:11 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='gid_map\x00') write$P9_RXATTRCREATE(r0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) [ 219.915563] device hsr_slave_0 entered promiscuous mode [ 219.926537] protocol 88fb is buggy, dev hsr_slave_0 [ 219.932495] protocol 88fb is buggy, dev hsr_slave_1 [ 219.952169] device hsr_slave_1 entered promiscuous mode [ 220.012741] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 220.020185] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 220.113153] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.119617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.126617] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.133114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.162850] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.221947] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.480243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.540043] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 220.588711] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 220.595105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.602723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.649000] protocol 88fb is buggy, dev hsr_slave_0 [ 220.654384] protocol 88fb is buggy, dev hsr_slave_1 [ 220.668817] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 220.674950] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.711734] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 220.719351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.728907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.737847] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.744452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.765497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 220.789958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 220.798649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.808451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.817323] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.823923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.836059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.858309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 220.874069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 220.890300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 220.906531] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 220.923141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 220.933291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.944136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.954316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.965566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.975420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.985435] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.994752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.004026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.013599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.026233] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 221.032444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.077375] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 221.108827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.132120] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.143773] protocol 88fb is buggy, dev hsr_slave_0 [ 221.149287] protocol 88fb is buggy, dev hsr_slave_1 [ 221.262164] protocol 88fb is buggy, dev hsr_slave_0 [ 221.267684] protocol 88fb is buggy, dev hsr_slave_1 23:46:13 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, 0x0, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:13 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x3ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@local, @in6=@local}}, {{@in=@dev}, 0x0, @in6}}, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) 23:46:13 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r1, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:13 executing program 1: unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x6, 0x7, 0x6}, 0x1aa) socket$inet(0x2, 0x2000000000, 0x3ff) bpf$MAP_DELETE_ELEM(0x15, &(0x7f00000002c0)={r0, 0x0}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x1ffffffffffffe56, &(0x7f0000000040)=[{0x0}]}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x8000000) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000100)={r2, 0x1}) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000180)={0x80000000, 0x101, "5354b068afd89867c37f527be0c5d4a309fa081f20d2695b265bbd3ce8f3a0ad", 0x9, 0x6d, 0x5, 0x4, 0x81, 0x0, 0x7, 0x10000, [0xffff, 0x0, 0x2, 0x1]}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='bond_slave_0\x00', 0x10) 23:46:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10040) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000300)={r0, r1, 0xfff, 0xea, &(0x7f0000000200)="1075434f9b05b51833053cc90d02dcfaa7df262af05be4bc856489dbbfff45439c5770b81b11facca1880513d64c18c2b4c36685ce72bb03f6ef8388652864977f8842501dd40269735cf35bec42daaa008a194f9f0c30e54423d8de5a3a1110f935e2f4d28cbcabcd73ef2768f3a2f8907cf00fd5f53876b041ccd7d1f58bc2164c14f7f943f8a70b997354e66d926c89d4c687be880c6e004d487b8dee28f4f8787e8757eed4bbbb09b048c7acb5bf090c42938d965ead5b50ffa7713bdfee9797be91127ee9bd12510805fed9d08c521ed1ecc0c9868851b56435a47afebf597a4dfa4a6f29798a4e", 0x2, 0x0, 0x3, 0x6, 0x5, 0x1, 0xe938, 'syz0\x00'}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000140)={0x3, 0x0, [], {0x0, @reserved}}) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x1f1}], 0x4924924924925a0, 0x0) write$FUSE_LSEEK(r2, &(0x7f0000000000)={0x18}, 0x18) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f00000003c0)={0x18, 0x0, {0x2, @local, 'teql0\x00'}}) write$P9_RLOPEN(r3, &(0x7f0000000400)={0x18, 0xd, 0x2, {{0x13, 0x2}, 0xeb}}, 0x18) recvmmsg(r2, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 23:46:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="f36e0f20e06635002000000f22e00f30f20f1024660fdb03b894008ed00f20d86635200000000f22d80f35650f01c90f30", 0x31}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000000000003002e0a7b21376e917b33f169de19be7b0000ff0f00000101"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) [ 224.802191] net_ratelimit: 16 callbacks suppressed [ 224.802210] protocol 88fb is buggy, dev hsr_slave_0 [ 224.812674] protocol 88fb is buggy, dev hsr_slave_1 [ 225.602102] protocol 88fb is buggy, dev hsr_slave_0 [ 225.607905] protocol 88fb is buggy, dev hsr_slave_1 [ 225.613815] protocol 88fb is buggy, dev hsr_slave_0 [ 225.619213] protocol 88fb is buggy, dev hsr_slave_1 [ 226.162098] protocol 88fb is buggy, dev hsr_slave_0 [ 226.167641] protocol 88fb is buggy, dev hsr_slave_1 23:46:20 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x400, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000000c0)=0x200, 0x4) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000180)=0x60) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x0, [], [{0x7, 0xcee, 0x6, 0x3f, 0x0, 0x7}, {0x4, 0x5, 0x400, 0xad05, 0x7, 0x1}], [[], [], []]}) 23:46:20 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xe0e01, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000040)) r2 = socket$kcm(0x29, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000004e80)={'dummy0\x00', r3}) 23:46:20 executing program 3: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) signalfd(r0, &(0x7f00000000c0)={0x314a}, 0x8) mount(&(0x7f0000000200)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x2201080, &(0x7f00000004c0)='\b\xec\xe8\xc38\x87DcR\x19\xbd\x8eD\x98\xa1\xb1\xeb\xc4\xe9\xcd\xcd\xde\xc5\xfb\x14;Q\x13{#\xcc\xee\xf8\x00\xbd\xafk\xc7Gu\xd6\x00x/\x9b\x98l\x99\x05!\xff\xb0m\xbfq/\xbf\xc3hF\xdf\xea\x99\xdf\xad\xb8cy\xcfB\xff B\xca\x9d}\xaaK\xc0\x17=\xc5\x97\x9b\xe8\xba\x17W\xc2\x84\x8eF\x91\xf0\xc0\xdb\xf1\xeb\x18%\xb2\x8d\x15m;M\x15\x1f\xc0v\x13\xb29\xd6\x1d\xe40==\xc4\xf6\xae\xe0:\x99\xff\v\x9d {\xb1\xbb\x91\xde:y\xa3\xdcX\x85\x95L\xe3\xd4DU\xdfq@v6\x88\t\xc3<\x0f\x95\x1c\xb1-\x85yL\x14z\xf3$>\xbf\xb1\x8a\xe0K\xef\x88)\xb9\t*Q\x19\xcc#\xfb\x84\xc4\xc0') rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file3\x00') ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000300)=""/230) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)={0xfffffffffffffffb, 0x14, [0x7, 0x7, 0x2000000000000007, 0x1002, 0x40]}) 23:46:20 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x3) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)) r1 = getuid() r2 = getegid() getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x2, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@max_read={'max_read', 0x3d, 0xff}}], [{@audit='audit'}, {@euid_lt={'euid<', r3}}]}}) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, r0, 0x180000000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x6f, "7b8a7ea8e569700c86e86d5fa1ba069e2a5c83e8c57a7c7b9c03a743c09f5dea26b98c2f6903940c0c455c465a840a51db7b4831f757ad672f7b2030f444438d54bf5318cb9cbb2a206ded7f513ad51f755f1c26694f348710071f978a88f7519188bb5c7b31ac05204f35e44dff6d"}, &(0x7f00000003c0)=0x77) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={0x0, 0x2b}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000480)={r5, 0x80, 0x3, 0x6, 0x9, 0x8, 0xd024, 0x8, {r6, @in6={{0xa, 0x4e22, 0x1f, @local}}, 0x200, 0x713, 0x5, 0x0, 0xfffffffffffffffc}}, &(0x7f0000000540)=0xb0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000580)={r8, @in6={{0xa, 0x4e21, 0x7, @ipv4={[], [], @broadcast}, 0x6}}}, &(0x7f0000000640)=0x84) mkdirat(r0, &(0x7f0000000680)='./file0\x00', 0x76) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) futimesat(r0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={{}, {0x77359400}}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)={r8, 0x7, 0x1, [0x2]}, 0xa) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) link(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00') mount$fuse(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='fuse\x00', 0x2000000, &(0x7f0000000880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x7000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@max_read={'max_read'}}, {@max_read={'max_read', 0x3d, 0x1ff}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x46}}, {@max_read={'max_read', 0x3d, 0x8000}}], [{@pcr={'pcr', 0x3d, 0x1f}}]}}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000a00)={0x3, 0x1, 0x8}) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000a40)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000a80)={0xffff, 0x101, 0x2, 0x3, 0x8, 0x80000001, 0x6, 0x8, r9}, &(0x7f0000000ac0)=0x20) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/video35\x00', 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000b40)={0x3, 0x0, {0x53, 0x5, 0x5, {0x5, 0x7fffffff}, {0x6, 0x2}, @rumble={0xb6d, 0xfffffffffffffff9}}, {0x57, 0xe9, 0x0, {0x6, 0x1}, {0x1000, 0x7}, @cond=[{0x7, 0x1f, 0xffffffffffff0000, 0x7, 0x4, 0xb46}, {0x1, 0x46, 0x100000000, 0x0, 0x1, 0x5}]}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) socket$caif_stream(0x25, 0x1, 0x1) setsockopt$inet6_dccp_buf(r0, 0x21, 0x0, &(0x7f0000000c40)="689003dd486e67e8e911c24852b2d958c74d6f752eaaed7f5642dcbdfb51d0d73a1c579e02cfe31f790bbeb940bfcb5b26303d8465f2653be547ceb990052598da55bc7baf423ef489fb45b00c3f8d1f6ad97f1c0e9f1672532416bb5ae8505a929e00f2d537", 0x66) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000cc0)={0x5, 0x1ff, 0x8008, 0x7, 0x7f, 0x401, 0x50ab, 0x81, r7}, &(0x7f0000000d00)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000d40)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000d80)=0x2c) openat$dir(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', 0x400, 0x40) 23:46:20 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x1) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x109000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_int(r2, 0x0, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4) futex(0x0, 0x400000085, 0x0, 0x0, &(0x7f00000001c0), 0x0) 23:46:20 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) sync_file_range(r0, 0x5, 0x0, 0x4) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000180)={0x84, 0x20, &(0x7f0000000100)="4da980554dd68993e6375d0c0fe4256bc6c135396d38fa9e32f36c0122a84260556750a2a6af4d51b87d370d8b93aac351e639c273f01ce34667da42e61532cd85079a3f0a93eb07b95b284127d04cbe472ce9417dea57d806fe38e546beb8b241ff", {0x9, 0x3144, 0x56595559, 0x7, 0x2, 0x100000001, 0x0, 0x4}}) creat(&(0x7f00000000c0)='./file0\x00', 0x24) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000080)={0x7, 0x0, 0x2011, 0x80000000, 0x0, 0x8, 0x1ff}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') 23:46:20 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:20 executing program 2: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = fcntl$getown(r0, 0x9) ptrace$getregset(0x4204, r2, 0x7, &(0x7f00000000c0)={&(0x7f0000000040)=""/103, 0x67}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) close(r0) 23:46:20 executing program 1: r0 = open(&(0x7f0000000140)='./file0\x00', 0x14104a, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x10, r0, 0x0) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2) remap_file_pages(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) mremap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000a000/0x3000)=nil) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 23:46:20 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400180, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)=0x2) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4009}, 0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) r2 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x6, 0x6, r1, 0x0, r2, 0x0, 0xe1a, 0x7ff}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10}, 0x2f) 23:46:20 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/net\x00') fchown(r0, 0x0, 0x0) [ 228.591446] mmap: syz-executor1 (9763) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 23:46:20 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) unshare(0x400) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0x0, 0x3}) 23:46:20 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x40000040101) write$sndseq(r0, 0x0, 0x0) r1 = epoll_create(0x100000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) 23:46:20 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x104, 0x109040) ioctl$VT_RELDISP(r0, 0x5605) r1 = socket(0x2, 0x3, 0x4000000008009) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @multicast2}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@remote}, 0xa, @in6=@local, 0x0, 0x5}}, 0xe8) 23:46:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20400) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x2cf, 0xfffffffffffeffff}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r2, 0xe878}, 0x8) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) fchownat(r1, &(0x7f0000000200)='./file0\x00', r3, r4, 0x1000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000001c0)={0x0, 0x40}) [ 228.929067] IPVS: ftp: loaded support on port[0] = 21 [ 229.193032] chnl_net:caif_netlink_parms(): no params data found [ 229.261953] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.268432] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.276354] device bridge_slave_0 entered promiscuous mode [ 229.287098] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.293617] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.301412] device bridge_slave_1 entered promiscuous mode [ 229.329826] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 229.340477] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 229.366262] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.374352] team0: Port device team_slave_0 added [ 229.380247] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 229.388347] team0: Port device team_slave_1 added [ 229.394347] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 229.402811] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 229.545172] device hsr_slave_0 entered promiscuous mode [ 229.592014] device hsr_slave_1 entered promiscuous mode [ 229.862431] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 229.869556] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 229.885226] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.891709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.898540] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.905050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.945503] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 229.951771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.960160] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 229.970098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.978731] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.985826] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.993943] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 230.006787] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 230.012879] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.022377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.030222] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.036698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.053784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.061889] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.068293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.081954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.103282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.111124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.119354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.126977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.136641] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 230.143038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.159668] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 230.171865] 8021q: adding VLAN 0 to HW filter on device batadv0 23:46:22 executing program 4: 23:46:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5000000010000104000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000008001f0006000000"], 0x50}}, 0x0) 23:46:22 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x101800) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000380)="3e103eb2c4d74dfb03ce162d15ba5d716ac8a36ccd47a36bb16a3adbbfbd3d15", 0x20) 23:46:22 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f0000000040)="153f0300488dd25d8e6070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x1e2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000140)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x20000000000001, 0x0, @pic={0x0, 0x0, 0xffffffffffff8576}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:46:22 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2bb4, 0x1) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x6, 0x70727f53, 0x20, 0x101, 0x3, @stepwise={{0x8, 0x6}, {0x1, 0x400}, {0x42, 0x8001}}}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000080)={0x4, 0x0, [{0x6, 0x4, 0x0, 0x0, @msi={0x8a, 0xc7, 0x6c}}, {0x1, 0x3, 0x0, 0x0, @sint={0xffffffffffffffea, 0x2}}, {0x1, 0x0, 0x0, 0x0, @irqchip={0x64, 0xfffffffffffffff9}}, {0x0, 0x3, 0x0, 0x0, @adapter={0x4, 0x808, 0xffffffffffff3f92, 0xffff, 0x84}}]}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$TCXONC(r0, 0x540a, 0xfa) fadvise64(r0, 0x0, 0x5, 0x7) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000001c0)=0x10) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000200)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000240)=r1) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000280)=0x1, 0x4) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000002c0)={0x3, 0x0, [{0x9, 0x7, 0x0, 0x0, @adapter={0x10000, 0x6, 0x8001, 0x7, 0x8000}}, {0x5, 0x0, 0x0, 0x0, @adapter={0x1, 0x80, 0x4, 0xfffffffffffffbff, 0x6}}, {0x8, 0x4, 0x0, 0x0, @msi={0x692dd239, 0x0, 0x1}}]}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000380)={0x1, 0x1}, 0x8) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000003c0)=""/146) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000480)=r1) ioctl$TCSBRKP(r0, 0x5425, 0xc2a3) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f00000004c0)={0x1, 0x0, {0x2, 0x8, 0x5, 0xcf}}) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000500)) write$cgroup_type(r0, &(0x7f0000000540)='threaded\x00', 0x9) ioctl$BLKRRPART(r0, 0x125f, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000580)=0x401, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x7f}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000640)={r2, 0x21, "98b9aba15ec4fb772ce328d8b5fb92dd13c695e8cdd81c0b28210c04404d383a5b"}, &(0x7f0000000680)=0x29) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000700)={0x0, 0x0, 0x4, 0x100, {0x0, 0x7530}, {0x2, 0x1, 0x1000, 0x2, 0x1, 0x2056, "8d3685c6"}, 0x101, 0x7, @planes=&(0x7f00000006c0)={0x5, 0x1, @mem_offset=0x3f, 0xbb4}, 0x4}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000780)=0x0) sched_getparam(r3, &(0x7f00000007c0)) pread64(r0, &(0x7f0000000800)=""/177, 0xb1, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0xf) sendto(r0, &(0x7f00000008c0)="347d4fdf26af9036ab066bfc313235c570fa8c0006015b4baf47db8f7bf6e3f5b9f813bf7044a957c4eea0e18fd24e86cad57c370a069fa1626926a21dd24325231b6f771704f7330316ebe5a4a9bfcece8e33200aed223c49273bf63f2f66279a2a3789b1e305a55c660ad782bd4ca80be10293fb7850f3ae415a39b8e35451b4f6", 0x82, 0x20004880, &(0x7f0000000980)=@in={0x2, 0x4e23, @broadcast}, 0x80) pipe(&(0x7f0000000a00)) [ 230.359102] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 230.367944] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 23:46:22 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000000006) accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) exit(0x0) request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz'}, &(0x7f0000000240)='GPL\x00', 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x1c) preadv(r0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f0000000580)=""/69, 0x45}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000680)=""/237, 0xed}, {&(0x7f0000000780)=""/17, 0x11}], 0x5, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x7, 0x98001) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000380)=0x5) write$tun(0xffffffffffffffff, &(0x7f0000000600)={@val={0x0, 0x60}, @val={0x1, 0x80, 0x14, 0x7, 0x0, 0xa40}, @mpls={[], @llc={@llc={0x87acbe1730a28e0c, 0xfe, 'h', "b0df0b0f22c32fc210aeff4ab85ec18f3ef87994c8e21a409113711fd12ac1f3b4cda04de333ed86d38c24911dc05c9319e78e02bb2f6478908b874bee7fa9482e01ddbced43bc92cc178c6acfc9012d0c3de3a09dc692d450ae47e3bc5eb16ba933724baf"}}}}, 0x76) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)={'syz1'}, 0x4) 23:46:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000000000200bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400600000000006506000001ed00001c14000000000000dd460000000000006b0a00fe00000000850000002e000000b7070000000000009500000000000000"], 0x0}, 0x48) 23:46:22 executing program 3: syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r0 = syz_open_dev$usb(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x1, 0x4, {0x5, @vbi={0x0, 0x0, 0x5, 0x0, [], [0x1]}}}) 23:46:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x202, 0x800000002009) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x201a1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) socket$inet6(0xa, 0x0, 0x0) 23:46:22 executing program 3: [ 230.690794] usb usb4: usbfs: process 9820 (syz-executor2) did not claim interface 0 before use [ 230.719334] usb usb4: usbfs: process 9828 (syz-executor2) did not claim interface 0 before use 23:46:22 executing program 4: 23:46:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x202, 0x800000002009) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x201a1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) socket$inet6(0xa, 0x0, 0x0) 23:46:23 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000002c0)={0x0, r1}) write$binfmt_elf32(r1, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 23:46:23 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getgroups(0x0, 0x0) setresgid(0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1) gettid() [ 230.974086] usb usb4: usbfs: process 9839 (syz-executor2) did not claim interface 0 before use [ 231.055621] IPVS: ftp: loaded support on port[0] = 21 23:46:23 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x202, 0x800000002009) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x201a1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) socket$inet6(0xa, 0x0, 0x0) [ 231.248063] chnl_net:caif_netlink_parms(): no params data found [ 231.357696] usb usb4: usbfs: process 9863 (syz-executor2) did not claim interface 0 before use [ 231.398909] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.405460] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.413434] device bridge_slave_0 entered promiscuous mode [ 231.449587] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.456121] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.463998] device bridge_slave_1 entered promiscuous mode [ 231.494894] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 231.505515] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 231.532500] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 231.540520] team0: Port device team_slave_0 added [ 231.546862] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 231.555129] team0: Port device team_slave_1 added [ 231.561197] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 231.569288] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.624691] device hsr_slave_0 entered promiscuous mode [ 231.682231] device hsr_slave_1 entered promiscuous mode [ 231.726748] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 231.733884] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 231.751415] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.757867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.764872] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.771264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.836980] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 231.843542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.852895] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 231.864100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.872609] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.879720] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.887888] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 231.900312] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 231.906508] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.916128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.924050] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.930414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.952906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.960763] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.967236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.976616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.986349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.998624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.014507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.027891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.039037] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 232.045692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.053780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.103150] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 232.128344] 8021q: adding VLAN 0 to HW filter on device batadv0 23:46:24 executing program 5: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="b156d417452c8f6db1077f2abaa85e348946610dabcc617d9aeb42aa515f23c9150bfdba5ea1be4e0415cb2c2d4a1cdff5aba4a225b20c217a72a0299376a76b283c094f665ef7b0cf1238255ddcd5dd", 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x955, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:46:24 executing program 3: write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000011000/0x2000)=nil, &(0x7f0000011000/0x3000)=nil, 0x2000}) 23:46:24 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000000480), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) 23:46:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x202, 0x800000002009) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x201a1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) socket$inet6(0xa, 0x0, 0x0) 23:46:24 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 23:46:24 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 232.361382] usb usb4: usbfs: process 9887 (syz-executor2) did not claim interface 0 before use 23:46:24 executing program 3: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0xffff) fallocate(r0, 0x3, 0x0, 0x2cbd) lseek(r0, 0x0, 0x3) 23:46:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x8, 0x0, 0x0, 0x1}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23:46:24 executing program 5: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="b156d417452c8f6db1077f2abaa85e348946610dabcc617d9aeb42aa515f23c9150bfdba5ea1be4e0415cb2c2d4a1cdff5aba4a225b20c217a72a0299376a76b283c094f665ef7b0cf1238255ddcd5dd", 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x955, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:46:24 executing program 4: io_setup(0x9, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x0, 0xcf9a104e32b30002, 0x0, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0xffffffffc0000001, 0x0, &(0x7f0000000000), 0x45, 0x2) 23:46:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x202, 0x800000002009) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x201a1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) 23:46:24 executing program 5: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="b156d417452c8f6db1077f2abaa85e348946610dabcc617d9aeb42aa515f23c9150bfdba5ea1be4e0415cb2c2d4a1cdff5aba4a225b20c217a72a0299376a76b283c094f665ef7b0cf1238255ddcd5dd", 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x955, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:46:24 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000005060501ff0080fffdffff2e0a0000000c000100060000007d0a00010c000200000022ff02f10000"], 0x2c}}, 0x0) 23:46:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x202, 0x800000002009) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x201a1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) [ 232.863945] usb usb4: usbfs: process 9921 (syz-executor2) did not claim interface 0 before use [ 232.970411] netlink: 'syz-executor3': attribute type 1 has an invalid length. 23:46:25 executing program 4: fstat(0xffffffffffffffff, &(0x7f0000000680)) r0 = gettid() migrate_pages(r0, 0x6, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x7c3a) clone(0x200085fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2a4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 23:46:25 executing program 5: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="b156d417452c8f6db1077f2abaa85e348946610dabcc617d9aeb42aa515f23c9150bfdba5ea1be4e0415cb2c2d4a1cdff5aba4a225b20c217a72a0299376a76b283c094f665ef7b0cf1238255ddcd5dd", 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x955, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 233.020898] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 233.067742] usb usb4: usbfs: process 9929 (syz-executor2) did not claim interface 0 before use 23:46:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x202, 0x800000002009) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x201a1}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 23:46:25 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x20, 0x29, 0x39, "21020201cb933d15fe800000000000009f"}], 0x20}, 0x0) [ 233.292038] usb usb4: usbfs: process 9945 (syz-executor2) did not claim interface 0 before use 23:46:25 executing program 4: fstat(0xffffffffffffffff, &(0x7f0000000680)) r0 = gettid() migrate_pages(r0, 0x6, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x7c3a) clone(0x200085fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2a4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 23:46:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x1}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 23:46:25 executing program 5: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="b156d417452c8f6db1077f2abaa85e348946610dabcc617d9aeb42aa515f23c9150bfdba5ea1be4e0415cb2c2d4a1cdff5aba4a225b20c217a72a0299376a76b283c094f665ef7b0cf1238255ddcd5dd", 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40, 0x0) 23:46:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x2, 0x9, 0x0, 0x0, 0xa, 0x0, 0x0, 0x200000000000000}, {0x100000000000, 0x0, 0x0, 0x80000}, {0x3ff}, 0x0, 0x0, 0x1}, {{@in, 0x4d6, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x8, 0xfffffffffffffffb, 0x81}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 23:46:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x202, 0x800000002009) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x201a1}) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) 23:46:25 executing program 4: fstat(0xffffffffffffffff, &(0x7f0000000680)) r0 = gettid() migrate_pages(r0, 0x6, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x7c3a) clone(0x200085fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2a4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 23:46:25 executing program 5: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="b156d417452c8f6db1077f2abaa85e348946610dabcc617d9aeb42aa515f23c9150bfdba5ea1be4e0415cb2c2d4a1cdff5aba4a225b20c217a72a0299376a76b283c094f665ef7b0cf1238255ddcd5dd", 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40, 0x0) 23:46:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x202, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x201a1}) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) [ 233.697060] usb usb4: usbfs: process 9966 (syz-executor2) did not claim interface 0 before use 23:46:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x1}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) [ 233.874968] usb usb4: usbfs: process 9982 (syz-executor2) did not claim interface 0 before use 23:46:26 executing program 3: r0 = socket(0x200000000000011, 0x4000000000080002, 0xdd86) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00\x00\xe6\xff\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") write(r0, &(0x7f0000000840)="143460bffcb733a0b98c63305935ad470cc1f2d3497ed6b805d1ca1fdb9d01808e315d92e4000000", 0x28) 23:46:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x20000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x6000400}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x30, r2, 0x710, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0xffffffffffffff3e, 0x6, 0x1, 0x101}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x9400}], 0x1}, 0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, &(0x7f00000000c0)=0x8) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 23:46:26 executing program 4: fstat(0xffffffffffffffff, &(0x7f0000000680)) r0 = gettid() migrate_pages(r0, 0x6, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x7c3a) clone(0x200085fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2a4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 23:46:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x201a1}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) 23:46:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x10001d, 0x20000ffffff1f, 0x0, 0x0, {0x1}, [@nested={0x8, 0x3, [@generic='!']}]}, 0x1c}}, 0x0) 23:46:26 executing program 5: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="b156d417452c8f6db1077f2abaa85e348946610dabcc617d9aeb42aa515f23c9150bfdba5ea1be4e0415cb2c2d4a1cdff5aba4a225b20c217a72a0299376a76b283c094f665ef7b0cf1238255ddcd5dd", 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x955, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:46:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8), 0x71, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 23:46:26 executing program 5: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="b156d417452c8f6db1077f2abaa85e348946610dabcc617d9aeb42aa515f23c9150bfdba5ea1be4e0415cb2c2d4a1cdff5aba4a225b20c217a72a0299376a76b283c094f665ef7b0cf1238255ddcd5dd", 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x955, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 23:46:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x2, 0x4, 0x338d, 0x7}, 0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x18) [ 234.422134] ================================================================== [ 234.429569] BUG: KMSAN: uninit-value in _decode_session4+0x3d0/0x1c90 [ 234.436167] CPU: 0 PID: 10016 Comm: syz-executor3 Not tainted 4.20.0-rc7+ #6 [ 234.443356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.452710] Call Trace: [ 234.455325] dump_stack+0x173/0x1d0 [ 234.458973] kmsan_report+0x12e/0x2a0 [ 234.462791] __msan_warning+0x82/0xf0 [ 234.466613] _decode_session4+0x3d0/0x1c90 23:46:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x201a1}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) [ 234.470886] __xfrm_decode_session+0x152/0x210 [ 234.475480] ? xfrm4_get_saddr+0x3e0/0x3e0 [ 234.479729] vti6_tnl_xmit+0x182/0x2360 [ 234.483726] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 234.488945] ? vti6_dev_uninit+0x660/0x660 [ 234.493197] dev_hard_start_xmit+0x607/0xc40 [ 234.497640] __dev_queue_xmit+0x2e42/0x3bc0 [ 234.502005] dev_queue_xmit+0x4b/0x60 [ 234.505837] ? __netdev_pick_tx+0x1270/0x1270 [ 234.510348] packet_sendmsg+0x8306/0x8f30 [ 234.514537] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 234.520009] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 234.525225] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 234.530647] ___sys_sendmsg+0xdb9/0x11b0 [ 234.534727] ? compat_packet_setsockopt+0x360/0x360 [ 234.539770] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 234.544974] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 234.550350] ? __fget_light+0x6e1/0x750 [ 234.554357] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 234.559566] __sys_sendmmsg+0x570/0xa60 [ 234.563582] ? __msan_metadata_ptr_for_store_4+0x13/0x20 23:46:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x201a1}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) [ 234.569053] ? prepare_exit_to_usermode+0x114/0x420 [ 234.574084] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 234.579302] __se_sys_sendmmsg+0xbd/0xe0 [ 234.583388] __x64_sys_sendmmsg+0x56/0x70 [ 234.587553] do_syscall_64+0xbc/0xf0 [ 234.591295] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 234.596496] RIP: 0033:0x457ec9 [ 234.599703] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.618613] RSP: 002b:00007f6aa097dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 234.626330] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457ec9 [ 234.633606] RDX: 0000000000000071 RSI: 0000000020871fc8 RDI: 0000000000000003 [ 234.640879] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 234.648158] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6aa097e6d4 [ 234.655434] R13: 00000000004c4cfb R14: 00000000004d8608 R15: 00000000ffffffff [ 234.662716] [ 234.664344] Uninit was created at: [ 234.667901] kmsan_internal_poison_shadow+0x92/0x150 [ 234.673014] kmsan_kmalloc+0xa6/0x130 [ 234.676831] kmsan_slab_alloc+0xe/0x10 [ 234.680733] __kmalloc_node_track_caller+0xe18/0x1030 [ 234.685934] __alloc_skb+0x309/0xa20 [ 234.689658] alloc_skb_with_frags+0x1c7/0xac0 [ 234.694165] sock_alloc_send_pskb+0xafd/0x10e0 [ 234.698753] packet_sendmsg+0x661a/0x8f30 [ 234.702909] ___sys_sendmsg+0xdb9/0x11b0 [ 234.706980] __sys_sendmmsg+0x570/0xa60 [ 234.710962] __se_sys_sendmmsg+0xbd/0xe0 [ 234.715045] __x64_sys_sendmmsg+0x56/0x70 [ 234.719203] do_syscall_64+0xbc/0xf0 23:46:26 executing program 5: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000440)="b156d417452c8f6db1077f2abaa85e348946610dabcc617d9aeb42aa515f23c9150bfdba5ea1be4e0415cb2c2d4a1cdff5aba4a225b20c217a72a0299376a76b283c094f665ef7b0cf1238255ddcd5dd", 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000140)=""/8) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='Z\x00') ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x955, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 234.722929] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 234.728115] ================================================================== [ 234.735466] Disabling lock debugging due to kernel taint [ 234.740911] Kernel panic - not syncing: panic_on_warn set ... [ 234.746806] CPU: 0 PID: 10016 Comm: syz-executor3 Tainted: G B 4.20.0-rc7+ #6 [ 234.755380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 234.764962] Call Trace: [ 234.767563] dump_stack+0x173/0x1d0 [ 234.771210] panic+0x3ce/0x961 [ 234.774448] kmsan_report+0x293/0x2a0 [ 234.778269] __msan_warning+0x82/0xf0 [ 234.782100] _decode_session4+0x3d0/0x1c90 [ 234.786365] __xfrm_decode_session+0x152/0x210 [ 234.790964] ? xfrm4_get_saddr+0x3e0/0x3e0 [ 234.795210] vti6_tnl_xmit+0x182/0x2360 [ 234.799208] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 234.804426] ? vti6_dev_uninit+0x660/0x660 [ 234.808679] dev_hard_start_xmit+0x607/0xc40 [ 234.813128] __dev_queue_xmit+0x2e42/0x3bc0 [ 234.817496] dev_queue_xmit+0x4b/0x60 [ 234.821317] ? __netdev_pick_tx+0x1270/0x1270 [ 234.825821] packet_sendmsg+0x8306/0x8f30 [ 234.829988] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 234.835467] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 234.840674] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 234.846104] ___sys_sendmsg+0xdb9/0x11b0 [ 234.850184] ? compat_packet_setsockopt+0x360/0x360 [ 234.855222] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 234.860428] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 234.865799] ? __fget_light+0x6e1/0x750 [ 234.869795] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 234.875003] __sys_sendmmsg+0x570/0xa60 [ 234.879039] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 234.884499] ? prepare_exit_to_usermode+0x114/0x420 [ 234.889526] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 234.894741] __se_sys_sendmmsg+0xbd/0xe0 [ 234.898816] __x64_sys_sendmmsg+0x56/0x70 [ 234.902973] do_syscall_64+0xbc/0xf0 [ 234.906704] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 234.911897] RIP: 0033:0x457ec9 [ 234.915096] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 234.934212] RSP: 002b:00007f6aa097dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 234.941923] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457ec9 [ 234.949197] RDX: 0000000000000071 RSI: 0000000020871fc8 RDI: 0000000000000003 [ 234.956471] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 234.963742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6aa097e6d4 [ 234.971016] R13: 00000000004c4cfb R14: 00000000004d8608 R15: 00000000ffffffff [ 234.979298] Kernel Offset: disabled [ 234.982918] Rebooting in 86400 seconds..