&(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x400000000000000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:07 executing program 1: r0 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f00000003c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6}, 0x14) getsockopt$inet6_dccp_int(r0, 0x21, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto(r0, &(0x7f0000000080)="95275dc41cda0154ddc783bc6cdb4942a1feb7fd3e0a068309f10118121394ebfede", 0x22, 0x0, 0x0, 0x0) 03:31:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x2b, 0x20000102000007) 03:31:07 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x40030000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:07 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000b40)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'syzkaller1\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000b00)={@local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001, r2}, 0xc) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x4001, &(0x7f0000000240)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000004bc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x1}, 0x1}, 0x0) sendmmsg(r1, &(0x7f0000004580)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000840)='F', 0x1}], 0x1, &(0x7f00000009c0)}}], 0x1, 0x80) sendto$inet(r1, &(0x7f0000000100)="89", 0x1, 0x3fffffd, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10) sendmmsg(r0, &(0x7f0000001380)=[{{&(0x7f00000005c0)=@vsock={0x28, 0x0, 0x0, @host=0x2}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000d40)="90", 0x1}], 0x1, &(0x7f0000000e40)}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000280)="d3", 0x1, 0x0, &(0x7f0000000800)={0x2, 0x0, @rand_addr}, 0x10) recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000300)=@sco, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/77, 0x4d}, {&(0x7f0000000400)=""/174, 0xae}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000640)=""/255, 0xff}, {&(0x7f0000000880)=""/150, 0x96}, {&(0x7f0000000940)=""/191, 0xbf}, {&(0x7f0000000180)=""/12, 0xc}], 0x7, &(0x7f0000000a00)=""/231, 0xe7, 0x326e}, 0x40000160) [ 420.609485] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.615982] bridge0: port 2(bridge_slave_1) entered listening state [ 420.622575] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.628979] bridge0: port 1(bridge_slave_0) entered listening state [ 420.635678] device bridge0 entered promiscuous mode 03:31:07 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0xdc}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 420.761795] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:31:07 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x8864000000000000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) [ 420.881183] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.887783] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.952405] device bridge0 left promiscuous mode 03:31:07 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) io_submit(r1, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0, r2}]) socket$can_bcm(0x1d, 0x2, 0x2) 03:31:07 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x400000c912, &(0x7f00000002c0)="29612b311f16f47767107066c70e444f7abe3db204a5f03044256466d984e46287b0e2c39fc94a1a85b7bb9e36610b23f323a7e7a26c914c887632ba3fa14814aa3f767aa23c3c12ec4e5bd5ba1ed0fadd3598d645b93c67ee281089ce124f1887a5f10c8a84c986126712a52a0e9b533f413b03215e848a70b9a4cdb4cd1bd6b779186ea75fd3c74e28") getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r1, 0x7f, 0x4}, 0xc) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x1}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup2(r3, r2) write$evdev(r4, &(0x7f00000014c0)=[{}], 0x18) 03:31:08 executing program 6: syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) r1 = dup3(r0, r0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e23, 0x80000001, @empty, 0x853}, r2}}, 0x38) 03:31:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x2003000000000000, 0x20000102000007) 03:31:08 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x43050000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) [ 421.220553] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.227013] bridge0: port 2(bridge_slave_1) entered listening state [ 421.233633] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.240068] bridge0: port 1(bridge_slave_0) entered listening state [ 421.246701] device bridge0 entered promiscuous mode [ 421.253351] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:31:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=@newpolicy={0xc4, 0x13, 0x201, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14}, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xc, 0x10, {0xffffff9e}}]}, 0xff90}, 0x1}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x20000) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 03:31:08 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000021, 0xc0000083]}) 03:31:08 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0xf0ffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:08 executing program 4: syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) r1 = dup3(r0, r0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e23, 0x80000001, @empty, 0x853}, r2}}, 0x38) 03:31:08 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x1000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 421.358942] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.365467] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.387250] device bridge0 left promiscuous mode 03:31:08 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x11, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:08 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'veth1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000300000000000000450753b92a721ddafb000080da000000015fd813159d6777cf061dffc5da03db2a815807000000000000009516c1b0b93df20fe5933b31166bfb5ba2df7b30884b4e000000"]}) close(r2) close(r1) 03:31:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xffff000000000000, 0x20000102000007) 03:31:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x5800000000000000, 0x20000102000007) 03:31:08 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x5405000000000000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x67, 0x20000102000007) [ 421.789608] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.796293] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.081467] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.087930] bridge0: port 2(bridge_slave_1) entered listening state [ 422.094512] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.100932] bridge0: port 1(bridge_slave_0) entered listening state [ 422.107585] device bridge0 entered promiscuous mode [ 422.116391] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 422.127542] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.133947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.140658] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.147082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.153839] device bridge0 entered promiscuous mode [ 422.162216] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:31:09 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c50400aeb995298992ee5400c2", 0x1e) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000200)=0x9) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f0000000140)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b5a419fb5df128c83ad9430362a22a5abf1e4123efccc641602c2da3630b58d04766c58b254ff2a965ccb226c8c7355c33306c99adaa0aa59006f8dc9b01b737"}, 0xfffffff0}, 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{&(0x7f00000000c0)=@sco, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000440)=""/94, 0x10}}, {{&(0x7f00000003c0)=@pptp={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000003100)=""/226, 0x2a2}], 0x1, &(0x7f00000005c0)=""/239, 0xef}}], 0x2, 0x0, 0x0) 03:31:09 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x8000000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x168, 0x20000102000007) 03:31:09 executing program 6: syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) r1 = dup3(r0, r0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e23, 0x80000001, @empty, 0x853}, r2}}, 0x38) 03:31:09 executing program 4: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r1 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xe6a, 0x0) request_key(&(0x7f0000000340)='.dead\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000500)="7b237573657273656c666d696d655f747970655d5b2ffe736563757269747947504c6f2e2e3a00", r2) keyctl$negate(0xd, r0, 0x4c, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000140)={0xffffffffffffffff, 0x1, {0xffffffffffffffff, 0x3, 0x4, 0x0, 0xbc}}) r5 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) r6 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="7f", 0x1, r5) r7 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x34b, r1) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r6, r6, r7}, &(0x7f0000000400)=""/132, 0xfffffffffffffe73, 0x0) 03:31:09 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x67, 0x20000102000007) 03:31:09 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x400300}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) setresuid(r3, r4, r5) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000600)={@loopback, @rand_addr, 0x0}, &(0x7f0000000640)=0xc) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr=0x1}, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0x32, r6, r7}, {0x2, 0x1, 0x28b9, 0x5, 0x688, 0x1, 0x2, 0x8}, {0x6, 0x4, 0x6, 0x2}, 0xc327, 0x6e6bbd, 0x0, 0x1, 0x1, 0x3}, {{@in6=@loopback={0x0, 0x1}, 0x4d3, 0xff}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x34ff, 0xceead3686a961bd1, 0x1, 0x7, 0x36, 0x2, 0x31}}, 0xe8) [ 422.977279] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.983765] bridge0: port 1(bridge_slave_0) entered disabled state 03:31:09 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x0, 0x2, [0x0, 0x3ff]}, &(0x7f00000000c0)=0xc) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2200, 0x0) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) sendto$inet6(r0, &(0x7f00000001c0)="a229a1e7ec5d04f50beb888927006e31050508966bc7573a9281938bd9148050dd6648c61f0f81ae49f50fc48f744437c67ae0f096dcbf017aed78c14adcd5d357294fff368ba733236ab3032b212fb90330712a93880af007fc79fae4f4d93b23dc93550820cae8b2ed142f47d52b07abc5d6dc12693cef5f9b18", 0x7b, 0x1, &(0x7f0000000240)={0xa, 0x4e24, 0x1, @empty, 0x4}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x30, &(0x7f0000000880)=ANY=[], 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x890c, &(0x7f0000000040)={@mcast1={0xff, 0x1, [], 0x1}}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x3) close(r3) close(r3) 03:31:09 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) clone(0x100000, &(0x7f0000000180)="6fc621992cfbee3944a7ae813c562dbd5241f4611d91bf96c81221f9a9d0586efada3a35e30b2e50c5c25f28ff5c05b99198ba6c2adfe67623117fb78d0e", &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="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") preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/37, 0x25}, {&(0x7f0000000040)=""/132, 0x84}], 0x2, 0x39) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = dup2(r0, r0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000140)=0x26a3) sendmsg$rds(r0, &(0x7f0000006fc8)={&(0x7f000001dff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000003fb8)=ANY=[@ANYBLOB="480000000000000014010000010000000000000000000000", @ANYPTR=&(0x7f0000012f46)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ba00000000000000", @ANYPTR=&(0x7f000001a000)=ANY=[@ANYPTR=&(0x7f0000001f34)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="cc00000000000000", @ANYPTR=&(0x7f000000e000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="8effffff00000000", @ANYPTR=&(0x7f0000013f5d)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="a300000000000000", @ANYPTR=&(0x7f000001fff1)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0f00000000000000", @ANYPTR=&(0x7f0000006fa1)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="5f80000000000000", @ANYPTR=&(0x7f000001a000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f000001bff7)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="a403000000000000", @ANYPTR=&(0x7f0000006000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0010000000000000", @ANYPTR=&(0x7f0000012fe5)=ANY=[@ANYBLOB="0000000000000000000000fffffffc000000000000000000000000"], @ANYBLOB="1b00000000000000"], @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}, 0x0) [ 423.036757] device bridge0 left promiscuous mode 03:31:10 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2640, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f00000000c0)=0x1) ioctl$int_in(r0, 0xaf01, &(0x7f00001e3000)) r2 = socket$inet6(0xa, 0x3, 0x3c) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000040)) 03:31:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x9000, 0x20000102000007) 03:31:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0xeffdffff, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:10 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x103600, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001780)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYPTR=&(0x7f0000001680)=ANY=[@ANYRES16=r2, @ANYPTR64=&(0x7f0000001640)=ANY=[@ANYRES32], @ANYRES16, @ANYRES32=r1, @ANYRES32=r1], @ANYRES64=r0, @ANYPTR64=&(0x7f0000001700)=ANY=[@ANYPTR64=&(0x7f00000016c0)=ANY=[@ANYPTR64, @ANYRES64=r0], @ANYPTR64, @ANYRES16=r0, @ANYRES64=r1]], &(0x7f0000000240)=0x5) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000100)="df28f2af0f94583cbaf80c66b8327f3c8b66efbafc0ced2e0f01c80f6a02ba4000b001ee0f060f01c80f07", 0x2b}], 0x1, 0x0, &(0x7f0000000180), 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)) pipe2(&(0x7f0000000000), 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f00000000c0)=r5) ioctl$KVM_RUN(r6, 0xae80, 0x0) 03:31:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x806000000000000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x100000000000000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x1001, 0x20000102000007) 03:31:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x1100000000000000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) [ 423.551177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 03:31:10 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x1f02}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 423.611964] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.618433] bridge0: port 2(bridge_slave_1) entered listening state [ 423.625058] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.631459] bridge0: port 1(bridge_slave_0) entered listening state [ 423.638134] device bridge0 entered promiscuous mode [ 423.682632] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:31:10 executing program 6: syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) r1 = dup3(r0, r0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e23, 0x80000001, @empty, 0x853}, r2}}, 0x38) 03:31:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) setresuid(r3, r4, r5) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000600)={@loopback, @rand_addr, 0x0}, &(0x7f0000000640)=0xc) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr=0x1}, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0x32, r6, r7}, {0x2, 0x1, 0x28b9, 0x5, 0x688, 0x1, 0x2, 0x8}, {0x6, 0x4, 0x6, 0x2}, 0xc327, 0x6e6bbd, 0x0, 0x1, 0x1, 0x3}, {{@in6=@loopback={0x0, 0x1}, 0x4d3, 0xff}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x34ff, 0xceead3686a961bd1, 0x1, 0x7, 0x36, 0x2, 0x31}}, 0xe8) 03:31:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000140)) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x11, @dev={0xac, 0x14, 0x14}, 0x0, 0x0, 'lblc\x00', 0x2f}, 0x2c) r4 = getpid() ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) readlinkat(r2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000440)=""/146, 0x92) r5 = socket$inet6(0xa, 0x3, 0x200000088) recvfrom$inet6(r5, &(0x7f0000000080)=""/185, 0xb9, 0x0, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000280)=0x20000085a, 0x4) r6 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r6, &(0x7f0000a29000)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000002c0)="b812783c7edbbae7286dc6102073662c8c6246c6fa4cd6eca1edbf139b6156f16723bbcfb7ebba914ff326ffb1be53f3b0d231acfab452abcf21976b826dfede98ec10d16ed4de8fc73f4cc5efefb82e8880da5ffa2239ebfdfdc1eb53e21e3efe62b79f5f19bf75d19589e90d6ea72009abb164eb898ec0da67f569fac08f29839dd8140f035eaecb73da6dc8ff8fef2a903b872443b7a31763ed013b0f5a077d156a796cc1", 0xa6}, {&(0x7f0000000400)="cfc5d1d71f87b7e4886914ce631f223a16523d538c53acc64e62a5dde4c3d5ca4316b9", 0x23}, {&(0x7f0000000540)="f23f8d077b8c2b8c9a4c387843c25c3020d7bb33cdd91d0a3ad7fe6d480100de4daf741ff3440e383de375f2059f40e4ea5db5c84e475e1f4317533edfa65418", 0x40}, {&(0x7f0000000600)="f9e7bceb6549651ecc1a1b40ea60876dc100f227aa74edc3df54f51b971945140dde8f0fb1abc957b9ccadeba5fbd80468c4c70e89c809b5f01fc517a3970160361384975288cdafe9dddc0db65d1fb514c71c5972ede9a919e324dd5704029dc48d8c29afe2b04f27e2aa758b9b02192b674d39ccf1714b72ec3529da6e704ada4509188d79280b864e952690362de4a4ebe80c733c1b5ed4", 0x99}], 0x4}, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000240)={0x38a, 0x0, 0xaa, 0x7fff, 0x2}) sched_setaffinity(r4, 0x100000070, &(0x7f0000000180)=0x4) 03:31:10 executing program 3: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x2, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) r1 = memfd_create(&(0x7f0000000ffe)='$\x00', 0x0) write(r1, &(0x7f0000002000)='/', 0x1) accept4(r0, &(0x7f0000000100)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, &(0x7f0000000000)=0x80, 0x80800) sendfile(r1, r1, &(0x7f0000000040), 0x8000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f00000000c0)=0xfffffffffffffe3e) 03:31:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xe8000000, 0x20000102000007) 03:31:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x1001, 0x20000102000007) 03:31:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x65580000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:10 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0xdc00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 423.773181] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.779691] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.823280] device bridge0 left promiscuous mode 03:31:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x27000000, 0x20000102000007) 03:31:10 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1}, [@RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14}}]}, 0x24}, 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x8) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000280)=ANY=[@ANYBLOB="020000008a000000bdfebd2d4a1092faf748601873842ffadd68c17b33faeec1a1925ab324ba8b4c7c71c1e2a0051b9efd2830e7d53c087c8d745b5a18e534aacf07b2da5de2b29645d3fbf029b2c93f0ee0e734907592c8e829549fe3c4ba994be6f96fe1cc8a4c275f8d7cd409bba91b4456860b9eabb691389a5084471414cb5b4334befdaa9c9f7db3ff550848b19718"]) r2 = socket$pptp(0x18, 0x1, 0x2) fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r4 = msgget$private(0x0, 0x40) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) r6 = getegid() ioctl$TUNSETGROUP(r1, 0x400454ce, r6) r7 = geteuid() getgroups(0x5, &(0x7f0000000340)=[0x0, 0xee01, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000380)={{0x1, r5, r6, r7, r8, 0x8, 0x100000001}, 0x10000, 0x9, 0x200, 0x7, 0x1000, 0x100, r3, r3}) fcntl$lock(r1, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x6b10, 0x1, r3}) 03:31:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x4305, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x45, 0x20000102000007) 03:31:11 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x5865, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:11 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x500000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) setresuid(r3, r4, r5) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000600)={@loopback, @rand_addr, 0x0}, &(0x7f0000000640)=0xc) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr=0x1}, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0x32, r6, r7}, {0x2, 0x1, 0x28b9, 0x5, 0x688, 0x1, 0x2, 0x8}, {0x6, 0x4, 0x6, 0x2}, 0xc327, 0x6e6bbd, 0x0, 0x1, 0x1, 0x3}, {{@in6=@loopback={0x0, 0x1}, 0x4d3, 0xff}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x34ff, 0xceead3686a961bd1, 0x1, 0x7, 0x36, 0x2, 0x31}}, 0xe8) [ 424.189782] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x1b3a/0x1d80 [ 424.224672] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.231098] bridge0: port 2(bridge_slave_1) entered listening state 03:31:11 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0xc0010020, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) [ 424.237695] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.244091] bridge0: port 1(bridge_slave_0) entered listening state [ 424.250958] device bridge0 entered promiscuous mode [ 424.257498] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:31:11 executing program 6: syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r0, r0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111, 0xb}}, 0x20) 03:31:11 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x208, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x4e23, @broadcast=0xffffffff}}) [ 424.371221] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.377745] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.423644] device bridge0 left promiscuous mode [ 424.611450] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x1b3a/0x1d80 03:31:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x45, 0x20000102000007) [ 424.666642] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.673107] bridge0: port 2(bridge_slave_1) entered listening state [ 424.679692] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.686074] bridge0: port 1(bridge_slave_0) entered listening state [ 424.692840] device bridge0 entered promiscuous mode [ 424.704838] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:31:11 executing program 3: syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r0, r0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x111, 0xb}}, 0x20) 03:31:11 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x900000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) setresuid(r3, r4, r5) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000600)={@loopback, @rand_addr, 0x0}, &(0x7f0000000640)=0xc) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@ipv4={[], [0xff, 0xff], @rand_addr=0x1}, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x80, 0x32, r6, r7}, {0x2, 0x1, 0x28b9, 0x5, 0x688, 0x1, 0x2, 0x8}, {0x6, 0x4, 0x6, 0x2}, 0xc327, 0x6e6bbd, 0x0, 0x1, 0x1, 0x3}, {{@in6=@loopback={0x0, 0x1}, 0x4d3, 0xff}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x34ff, 0xceead3686a961bd1, 0x1, 0x7, 0x36, 0x2, 0x31}}, 0xe8) 03:31:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x68000000, 0x20000102000007) 03:31:11 executing program 4: r0 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000040)="153889c71b06312fda273f171563abc83f02a5bd77403c4fef06e72e30a7292381c177fb0358a593866d1c83144829fb0062d25b6422ecb0d3de505564169df8ce48a55562340195f9cce3667595d29f9c8b98cca150797f80a838bcfba08569e474b42d315ffa5883e9587b22020a8bdc74c882277f556ac50021b28a587e792875902cc87590815642cbd490c67011e7be28c69659604f361ad6c8c9193583009abdd2f23a4f697cb036ff099177076732f9") socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x9216, 0x280240) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000000)=r0, 0x36) 03:31:11 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x80350000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:11 executing program 6: syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) dup3(r0, r0, 0x80000) 03:31:11 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x2, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x10000004}) fcntl$setflags(r1, 0x2, 0x1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x101e, 0x1, 0x6013, r4, 0x81000000) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x20100f}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x90080, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) dup2(r2, r3) io_setup(0x0, &(0x7f0000000200)=0x0) io_getevents(r5, 0x4, 0x3, &(0x7f0000000240)=[{}, {}, {}], &(0x7f00000002c0)={0x0, 0x989680}) [ 424.802911] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.809420] bridge0: port 1(bridge_slave_0) entered disabled state 03:31:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000080)='bdev\x00', 0x40, &(0x7f0000000040)) socket$vsock_stream(0x28, 0x1, 0x0) 03:31:11 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x3f000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) setresuid(r3, r4, r5) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000600)={@loopback, @rand_addr}, &(0x7f0000000640)=0xc) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) 03:31:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x6e, 0x20000102000007) [ 424.893628] device bridge0 left promiscuous mode 03:31:11 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x6488, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x400000890f, &(0x7f0000000000)="293db1baf66f0f3aed0070") pwrite64(r0, &(0x7f0000000040)="b07f51f21fbe2f2f35c8475302508a10673301c544ad5b164240abb5b7d130942f47a3b074213efaef6ada9b0ef615e4dd8ecbe247690372c0645014ae8db8da296a5989e327fa5c9314a3949ce081bd89fe33704e6b37cfeb1ab131e9d422f1a6545266e722216744e691e8b927150966ef0e34065e20610756f85504d64aefaf9735e70d5578ad80aee3bc87bd1933a69a5249f88f13215be23b40c3d4e4c9607a4e7d06fdd72255e361ed73d27b550310095ce4a9dda20420c387ff179684f7249b7a52ac835443a9eb6df4d17e291bbb3b458593d42c427ffebdc4bbc56cb1f04584030b4ab3b9c392ac948769286cc25de99cba", 0xf6, 0x0) getsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000180), &(0x7f00000001c0)=0x4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x101080, 0x0) 03:31:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) socket$inet_udp(0x2, 0x2, 0x0) 03:31:12 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0xa00000000000000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) [ 425.256416] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.262913] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.478390] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.484828] bridge0: port 2(bridge_slave_1) entered listening state [ 425.491457] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.497879] bridge0: port 1(bridge_slave_0) entered listening state [ 425.504521] device bridge0 entered promiscuous mode [ 425.514886] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 425.528730] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.535153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.541878] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.548263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.554940] device bridge0 entered promiscuous mode [ 425.560719] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:31:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') pread64(r0, &(0x7f0000000040)=""/12, 0xc, 0x0) socket$packet(0x11, 0x2, 0x300) 03:31:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 03:31:12 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x543, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x4803000000000000, 0x20000102000007) 03:31:12 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) setresuid(r3, r4, r5) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000600)={@loopback, @rand_addr}, &(0x7f0000000640)=0xc) 03:31:12 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0xff000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:12 executing program 6: syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:12 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x208000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000300)={0x1}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x1000, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x3, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x101, 0x28, 0x0, r3}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0xfff, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x2000000}}, 0x1, 0x3, 0x1b62, 0x4, 0x10}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={r5, 0x3}, 0x8) lseek(r4, 0x0, 0x0) [ 425.632177] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.638693] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.663120] device bridge0 left promiscuous mode 03:31:12 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") readahead(r0, 0x100000001, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x100010, r1, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r1, 0x408, 0x0) clone(0x0, &(0x7f0000000280), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000080)={'ip_vti0\x00', 0x9}) dup2(r2, r0) 03:31:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x185, 0x4) sendto$inet(r0, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000000100), 0xfffffffffffffe4a, 0x840, 0x0, 0x0) 03:31:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xd801000000000000, 0x20000102000007) 03:31:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x300000000000000, 0x0, 0x10000000}, 0xb, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000013000903000000000000000000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x2c}, 0x1}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x593700, 0x0) utimensat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {0x77359400}}, 0x0) 03:31:12 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0xffffffc0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x90010000, 0x20000102000007) 03:31:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xe00000000000000, 0x20000102000007) 03:31:12 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x34000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:13 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0xf000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)={0x0, 0x2000000001, 0x1, &(0x7f0000000080)}) 03:31:13 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="06", 0x1, r2) r4 = add_key$user(&(0x7f0000000500)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)="b3", 0x1, r2) keyctl$update(0x2, r4, &(0x7f0000000340)="df02754677212dfc3e2abcb244e22773e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd9", 0xc0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x81) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r4, r3}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000000140)={&(0x7f0000a3dffa)={'md4-generic\x00'}}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000340), &(0x7f0000000300)=0x4) 03:31:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x4600000000000000, 0x20000102000007) 03:31:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) setresuid(r3, r4, r5) 03:31:13 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0xa, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) [ 426.196301] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.202746] bridge0: port 2(bridge_slave_1) entered listening state [ 426.209356] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.215758] bridge0: port 1(bridge_slave_0) entered listening state [ 426.222435] device bridge0 entered promiscuous mode [ 426.349523] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:31:13 executing program 6: syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:13 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0xfec0}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@loopback}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) 03:31:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x4b564d02, 0xa01]}) 03:31:13 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x80000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x7, 0x9, 0x81, 'queue0\x00', 0x3}) accept4$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x0) r1 = socket$inet(0x2, 0x80001, 0xc3a) setsockopt$inet_tcp_int(r1, 0x6, 0x21, &(0x7f0000000140), 0x184) 03:31:13 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x6, 0x1d, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @rand_addr, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) dup3(r0, r1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="069b80914f49761ce3b680747c031009", 0x10) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)) ioctl$KVM_ENABLE_CAP(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xffff8000]}) close(r5) 03:31:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x69, 0x20000102000007) 03:31:13 executing program 6: syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:13 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xb}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 426.528172] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 03:31:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) 03:31:13 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x800000000000000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:13 executing program 4: r0 = socket(0xa, 0x802, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/14, &(0x7f0000000040)=0xe) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000e49000), 0x0) 03:31:13 executing program 6: syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:13 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x10000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000140)="2957e1311ff47767107000") r1 = socket$inet_tcp(0x2, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/10, 0xa) socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x2c) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0x10) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x1b, 0x5}, &(0x7f00000000c0)) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @rand_addr}}) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000940)=""/4096) clock_gettime(0x0, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000900)={'#! ', './file0', [], 0xa}, 0xb) sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) dup3(r0, r1, 0x80000) 03:31:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) 03:31:13 executing program 6: syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:13 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x1c1242, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @broadcast=0xffffffff}, @in6={0xa, 0x4e23, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x7fff}, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e22, 0xc3f, @remote={0xfe, 0x80, [], 0xbb}, 0x7}, @in={0x2, 0x4e23, @multicast1=0xe0000001}, @in={0x2, 0x4e23, @rand_addr=0x81}], 0x78) write$fuse(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="14f2ffffff000000000000000000000000000000"], 0x14) 03:31:13 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x4000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:13 executing program 6: syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:13 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x8035000000000000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:14 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x6, 0x1d, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @rand_addr, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) dup3(r0, r1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="069b80914f49761ce3b680747c031009", 0x10) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)) ioctl$KVM_ENABLE_CAP(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xffff8000]}) close(r5) 03:31:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) 03:31:14 executing program 6: syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0xe1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendto$inet6(r0, &(0x7f0000000040), 0xffffffffffffff3b, 0x4040, &(0x7f0000000200)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 03:31:14 executing program 4: mprotect(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0) syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa8aaaaaaa0086dd6001040000080000fe80000000000000000000000000000000000000aa"], &(0x7f0000000040)) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_team\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff00000000000000000000000000000000000060"]}) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) recvmmsg(r0, &(0x7f0000005f80)=[{{&(0x7f0000000140)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000200)=""/95, 0x5f}, {&(0x7f0000000280)=""/226, 0xe2}, {&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000500)=""/131, 0x83}], 0x7, &(0x7f0000000640)=""/187, 0xbb, 0x100000001}, 0x3ff}, {{&(0x7f0000000700)=@nfc_llcp, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/154, 0x9a}, {&(0x7f0000000840)=""/120, 0x78}, {&(0x7f00000008c0)=""/221, 0xdd}, {&(0x7f00000009c0)=""/5, 0x5}], 0x4, &(0x7f0000000a40)=""/165, 0xa5, 0x5}, 0xa9}, {{&(0x7f0000000b00), 0x80, &(0x7f0000000f40)=[{&(0x7f0000000b80)=""/4, 0x4}, {&(0x7f0000000bc0)=""/95, 0x5f}, {&(0x7f0000000c40)=""/171, 0xab}, {&(0x7f0000000d00)=""/64, 0x40}, {&(0x7f0000000d40)=""/220, 0xdc}, {&(0x7f0000000e40)=""/218, 0xda}], 0x6, &(0x7f0000000fc0)=""/6, 0x6, 0x5}, 0xccb}, {{&(0x7f0000001000)=@alg, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/191, 0xbf}, {&(0x7f0000001140)=""/46, 0x2e}], 0x2, &(0x7f00000011c0)=""/176, 0xb0, 0x4}, 0xfffffffffffffff8}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001280)=""/69, 0x45}, {&(0x7f0000001300)=""/169, 0xa9}, {&(0x7f00000013c0)=""/68, 0x44}], 0x3, 0x0, 0x0, 0x101}, 0x5}, {{&(0x7f0000001480)=@ipx, 0x80, &(0x7f0000002880)=[{&(0x7f0000001500)=""/77, 0x4d}, {&(0x7f0000001580)=""/14, 0xe}, {&(0x7f00000015c0)=""/53, 0x35}, {&(0x7f0000001600)=""/19, 0x13}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/173, 0xad}, {&(0x7f0000002700)=""/105, 0x69}, {&(0x7f0000002780)=""/209, 0xd1}], 0x8, &(0x7f0000002900)=""/4096, 0x1000, 0x83d9}, 0x4}, {{&(0x7f0000003900)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003980)=""/33, 0x21}, {&(0x7f00000039c0)=""/66, 0x42}, {&(0x7f0000003a40)=""/132, 0x84}, {&(0x7f0000003b00)=""/36, 0x24}, {&(0x7f0000003b40)=""/207, 0xcf}, {&(0x7f0000003c40)=""/4096, 0x1000}], 0x6, &(0x7f0000004cc0)=""/58, 0x3a, 0x5}, 0x1ec}, {{&(0x7f0000004d00)=@nl=@proc, 0x80, &(0x7f0000005e80)=[{&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/252, 0xfc}], 0x2, &(0x7f0000005ec0)=""/136, 0x88, 0x8}, 0xe5}], 0x8, 0x40000000, &(0x7f0000006180)={0x0, 0x989680}) 03:31:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x7b00000000000000, 0x20000102000007) 03:31:14 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x500}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:14 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x4305000000000000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:14 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:14 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x5}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:14 executing program 5: r0 = socket$netlink(0xa, 0x6, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = getpid() ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000580)=0x0) kcmp(r2, r3, 0x7, r1, r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in6={0xa, 0x4e23, 0x401, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, @in6={0xa, 0x4e21, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x37}, @in={0x2, 0x4e21}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in6={0xa, 0x4e20, 0x81, @empty, 0x6}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e22}], 0xc4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10d, 0xd, &(0x7f0000001ffc), 0x4) r4 = socket$kcm(0x29, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000340)={{{@in=@broadcast, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000440)=0xe8) ioctl$sock_netdev_private(r4, 0x89f8, &(0x7f00000005c0)="762b928a1e5345fc9bca9e9a26f7d6df0bb7caa4ffaa679cd601b1997c405963ad6b898dcca7a039e35b8ca5ea3e602ff6502419cdf7cc2df44bf5ec47f027afbfeb965f2240762733cbc8e370c890fdb69795481aba2ddab34083aa1c746ec3ced0095d57df77ff1382a1f34c3802678e5f9308e2118668740e4efd58c74a6754c6b3cc19e9ce4b2892af54cbe3332ff93e8dd0de11ef611a34842a3a7dea79573762d744b8b99d08733cf65cce6d8e5e39f533bb1acfd0925cfe48582701b4c78f15ea7d8c6dfdd0aaf29eff529e36ce57bfc38fde99c95f486d05eadb84cc0cf2367c21") socket$inet6(0xa, 0x6, 0x7) setresuid(r5, r5, r6) r7 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0x0, 0x80) getdents64(r7, &(0x7f00000004c0)=""/145, 0x91) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x400, 0x4) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x3, 0x0, 0x1ff, 0x8000, r8}) ioctl(r4, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") listen(r0, 0x0) 03:31:14 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') syz_open_procfs(0x0, &(0x7f00000001c0)) [ 427.560226] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.566753] bridge0: port 1(bridge_slave_0) entered disabled state 03:31:14 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xfc00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x3b000000, 0x20000102000007) [ 427.647635] device bridge0 left promiscuous mode 03:31:14 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9bd, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f00000000c0)={0x4, 0x6b83, 0x5}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x105f}, 0x2c) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x7) [ 427.915806] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.922287] bridge0: port 2(bridge_slave_1) entered listening state [ 427.928890] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.935299] bridge0: port 1(bridge_slave_0) entered listening state [ 427.941949] device bridge0 entered promiscuous mode [ 427.947877] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:31:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xc0000, 0x20000102000007) 03:31:15 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x88640000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:15 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000240)=0x1000890000001) r1 = socket$inet6(0xa, 0x80a, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040), 0x4) dup2(r1, r0) 03:31:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:15 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xfffff000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:15 executing program 6: r0 = socket(0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000540)="295ee1311f16f477671070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={0xffffffff}, 0x111}}, 0x20) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5d, 0x80000) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x368, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, &(0x7f0000000040), &(0x7f0000000d00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000008000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000030000004000000000056272696467655f736c6176655f310000726f7365300000000000000000000000766ce16e3000000000000000000000006c6f0000000000000008000000000000aaaaaaaaaa08ff00ffffff00aaaaaaaaaabbffffffffffff0000a8020000a8020000d8020000627066000000000000000000000000000000000000000000000000000000000010020000000000002a0000000200017fb2000000faff0704ad0400000600fe01ff0700000000060003000000040004084000000008000001050000000400030001000000ff0067010000000004000002010001000800ff0605000000008003ff00800000010004060700000008002531ff03000020000101ffffffff010002ffc2090000020003009388000005000a05ffffff7f0300b60206000000080000e5ff0000000800001a010000000900000001140000060000010b020000000005803f000000000000dcff0300000034c35f6dbbd500360603000000000007802e0000000600ff00b8000000000003200900000000000503ff0f0000fdffe0db0500000081ff988100010000000000ff010100000200fa02030000003b840500040000000900060800000000ff033f03ff030000050000006400000004000700b7f5ffff080009020008000003003f070300000084cd8f030100000002001f5bfbffffffff030102750500000800fff8000000800000030601000000040083a509000000000000011bffffff050003040200000001000908000000000008b6650100000009000106000038000200060401000000000800ffffff00000000ff010000000008000009050000002d00060006000000ec08ff03fcffffff08000108020000002fc508ff010000000200ff047f00000003fffffffffffffffa00ea00f500000000100500fc000000020003000180000000000000f8ffffffffffffff434c4153534907000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff000000007eee79dde30a51d126542eabdfebfbc12ed512c2f246d0a500821bfef26554000a11e48e492b07620e7e34f71960b5dc6f7b69e473331de95c54d478a2e1d13967798fcb1516265edc1220ca4f5d9bb50fbad4a4e1678dd5ddadcd240c31d69d3a111264cd"]}, 0x44b) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000004c0)={0x0, 0x362, 0xfa00, {0x3, &(0x7f0000000480)={0xffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, r4}}, 0x30) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000001c0)=""/69, &(0x7f0000000240)=0x45) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000280)=0x8000, 0x4) r5 = msgget$private(0x0, 0x180) msgctl$MSG_INFO(r5, 0xc, &(0x7f0000000500)=""/29) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000440)={0xb, 0xfffffffffffffe0d, 0xfa00, {&(0x7f0000000300), r2}}, 0xffffffffffffff8d) 03:31:15 executing program 5: rt_sigprocmask(0x0, &(0x7f0000037ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x7f, 0x20001) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="19e596f1ba9b7027a9cc0647334c9f48b6e5aac0f0a24cc1cf0c6431eca818b7343208fb1f0dd679be7ddcd0175b82ce15f11c34eb932237a8b5fa44f71dbc3820bed7460bc98791c4aca384f902897684c0d984a34424d22530f9f57b71f3c9ed38941aec32fcb4627c3d6b2d1cf8a20c2a", 0x72}, {&(0x7f0000000180)="a750380d4dc68e4f87d3d52db36d7daa88044b917576c5841ac4f44955438dbeddcb3fbbe8c24a20c15ffc7c339ea0ff8094673bcccfca9aecbed9ac3d7707b7f751160009d3511dbb2a5e49d3910fa75cc769e51887f335138afa3425a16014006136082c34f751375e745e41901e555983a1efa5cc49e5e18f7ad15e2ffd6f50b8a5fad544627df062dff629625501a336f50739c3832bed935d0ce169cc673b5cb378f0f8b6b47b618f1b676dca21eb832c6b151508fffb8a423eae0b1114b2e9b2d624251ab3d1c8f5ff0f6f54c9a07520eedf49efde9f84c2a77781eecd9630e3558891d997d0eeefd067ab6f9870", 0xf1}], 0x2, &(0x7f00000002c0)=[@assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffffffffffff7f}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @assoc={0x18, 0x117, 0x4, 0x7dc}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x38, 0x117, 0x2, 0x21, "66b5d50b0a1c0c2ea3fcdf399268c14c10a0aae285919759a4b60d72b370b4c75f"}], 0xc8, 0x80}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="464cbc31e4cf71e9132a27f05fee5a295ab9c2705a91f820ba17411f6ee152fb25ffe758859211d3535b275628a3154bb3949a31c7fc2afc74b1e0c6ecad184630cd3f95a92d4e9465ace3fb09618634c6ba8b6a989d447d9ecdea5230d08421b9b405e5bd", 0x65}, {&(0x7f0000000440)="4bd21a410a2161488508dc5ed1aa752bdea9af07513ff487563f358c03dced2c0131b3109b3bf811f2e99d1705a33273c0cda7147f7570f90c50c4", 0x3b}, {&(0x7f0000000480)="501e92f6dc8d0d73a96807578d218ed80de46f36a6b5116c603abcfb735377cc44d5d9fb89969a79545989fc38944a606e4c2e7fdc0632afd9d0e4e85744e709bebf8f61e7e03efbe0d591add1db4681d83c1bdf450ce9254e26a963bd8a9dab88e4a63aa100f481bacc3bc2c7c28a285e00c813f53d991997af276777214712f82d6626d42894eba8722ce3719bc56b7349865a2896e8e634f3e3d03375dfbaf326f8a72f1251df4680145413ff97da81", 0xb1}], 0x3, 0x0, 0x0, 0x4}], 0x2, 0x1) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='comm\x00') ftruncate(r2, 0x100000000) 03:31:15 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x8000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:15 executing program 6: r0 = socket(0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, &(0x7f0000000300)=0x3) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r1, 0xec7}, &(0x7f0000000040)=0x8) 03:31:15 executing program 3: clock_getres(0x2, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x2000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000140)={{0x2, 0x5, 0x3, 0x4, '\x00', 0xfbb2}, 0x2, 0x0, 0x1f, r1, 0x9, 0x2, 'syz0\x00', &(0x7f00000000c0)=['\\[\x00', '\x00', ']md5sum\x00', 'cgroup)]vboxnet1\x00', 'trusted1\x00', 'useruser]GPL\x00', ')ð0systemlo\x00', 'keyringvmnet1\x00', '\x00'], 0x51, [], [0x2393785e, 0x7, 0x40, 0x500000]}) 03:31:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x5d000000, 0x20000102000007) 03:31:15 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x3f000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:15 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0xfffffffffffffff9, &(0x7f0000000140)="295ee1391f16f4774f1070f870ee7ad00fbaf34859b01cd523443308953cdd9440c3e1aa0000000000000000f9dadd15213b51b84f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x800000001}, &(0x7f0000000080)=0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:31:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:15 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x554, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x200001, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1ff, 0x40) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000080)=0x4) 03:31:15 executing program 6: r0 = socket(0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x3700, 0x20000102000007) 03:31:15 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xfe800000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:15 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x200000000003e6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="d7f78b245ca65781b77f4e1d39a665bf27df39a65d9d8c3765f4d148cbba30e3a73e30f5fd38645230a6f70ed5a3ccd16d495b4197fe5284e43b385ec3e6dc777499684608c43ac2c3c0fdd2a1585ddcbc52843d44ee2528a045c8c3a168998a9abc397fe77bb987c6028fa4e45c2005a6c031b5fb3c45a6a774", 0x7a}, {&(0x7f00000004c0)="68cb84de7687725036ceee533b19ba51df54ee8ff1152848c712960b36139e7cc1fb169ab85a17ad1c2bf88f7c72064659be1364c3b0b6fbf387130394a144b7df3a7df8be9fe563fb2f8d0d7653654460b47ffe96dbf002c2c50661c2a4da336f8cdf473a1f181dc6db15238fa62fd3a95ede501559f967fed2fdbf5b2ec8d4e015653124211208615c85f14e5349a0c2346f5afd6f473d602f56618aa1086d5607030f82bd5635b2dd0e71a4cdf132a97c3b1cd7454af823fcce5a594110e13dd2b9ef7dd34aa155df5ff16861da11a41c5b8a7c901ab0cce007", 0xdb}, {&(0x7f0000000180)="374b9be6218bb5c0227a95c69f66edf8b85d72584917c6c8a51c59de9679ecbf08311ef03f5970559793f9552f01eee829aa", 0x32}, {&(0x7f00000005c0)="37d617ee2f6ea8b3ebac4019670400425bd68318bb06a0a1abdd03d96f1e6b9bf63c4ad8ffac480535a6cc9f445030b78594eead21670b37db70f725882ad141ddda73bd", 0x44}], 0x4, &(0x7f0000000680)=[@iv={0x90, 0x117, 0x2, 0x75, "2e8be98125d10da17febc3211864ed451773c59d65e1c94f78fe9c1f79b9edf757be16e0c255cd7672689e992b3a68093838dd3ee56e663060d83316807c2afb8951fc691d14398cd7677accbb2d89cecb02948efe436d56c00ed38c8399705305aea5a59a9c7606361d8e01a9104bbc940095ddf1"}, @iv={0xd8, 0x117, 0x2, 0xc0, "ffa0974bf3feec4ee53dcb97af932bf497328107b476572462bf0d805485414be1b395f9c9d83252d7cbe1c900282d882dbe04f99b1a9242e9a992b61606c1bc10c7bab1d92bf7a7b4e62921876e4220ae4bb15776776ceeae6f00163aa658a03892d69df84a8ec6d37e48a233c0d33581d607117f94c4bfbd6ccf2ee8348cd88a3baeded663477c81186ca864939cc6bc51fa2f8e313bbfc86aa4a4d20525fb317000ec6ae07783514d87641927dde0ea3058b3cd96e5e686d4311c271b13e0"}], 0x168, 0x4}, 0x811) mount(&(0x7f0000000400)='./file0\x00', &(0x7f0000000480)='.', &(0x7f0000000440)='cgroup\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xd8, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x7ff, @dev={0xfe, 0x80, [], 0xa}, 0x9}, @in={0x2, 0x4e23, @rand_addr=0x7}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e21, 0x10001, @mcast1={0xff, 0x1, [], 0x1}, 0xc0af}, @in={0x2, 0x4e20}, @in6={0xa, 0x4e21, 0x7ff, @mcast1={0xff, 0x1, [], 0x1}, 0x66}, @in6={0xa, 0x4e20, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in6={0xa, 0x4e20, 0x8, @loopback={0x0, 0x1}, 0x2}, @in6={0xa, 0x4e21, 0xcd8, @dev={0xfe, 0x80, [], 0x1e}, 0xffffffffffff8000}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x3}, &(0x7f00000001c0)=0x8) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x80000001) 03:31:15 executing program 6: r0 = socket(0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:15 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000a80)=[{&(0x7f0000000980)="94", 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x140) sendfile(r0, r1, &(0x7f00000000c0), 0x6) fadvise64(r0, 0x0, 0x0, 0x4) 03:31:15 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x1f02}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:15 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x200000088) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bond0\x00', {0x2, 0x4e21}}) connect$inet6(r0, &(0x7f0000000280)={0xa}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:31:15 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xf0ffffff00000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:15 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffffe, 0x8031, 0xffffffffffffffff, 0x0) dup(r0) madvise(&(0x7f00004e1000/0x4000)=nil, 0x4000, 0x3) 03:31:15 executing program 6: r0 = socket(0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:15 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x8100000000000000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:16 executing program 3: pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)}], 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000380)="066a", 0x2}], 0x1, 0x6) 03:31:16 executing program 1: socket$inet6(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0xffffffffffffffff, @loopback={0x0, 0x1}, 0x5}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x3, &(0x7f0000000000)="295ee1311f16c26ed04c9dfa2eebf477671070") sendmsg$nl_xfrm(r1, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000040)=@srh={0x0, 0x0, 0x4}, 0x8) 03:31:16 executing program 6: r0 = socket(0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x6c00000000000000, 0x20000102000007) 03:31:16 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x2000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:16 executing program 1: socket$inet6(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:16 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fchmod(r0, 0x44) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x5c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x9880, {{0xa, 0x4e21, 0x788000}}}, 0x3c9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) readahead(r0, 0x6, 0x72) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@loopback={0x0, 0x1}, @empty, @remote={0xfe, 0x80, [], 0xbb}, 0x8d, 0x9, 0x0, 0x100, 0x5, 0x410040, r1}) 03:31:16 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x20000) fchdir(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) syz_fuseblk_mount(&(0x7f00000002c0)='./0ile0\x00', &(0x7f0000000280)='./file0\x00', 0x0, r2, 0x0, 0x6, 0x800, 0x80) 03:31:16 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0xc0ffffff, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:16 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xff00}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:16 executing program 1: socket$inet6(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x80000) fcntl$getflags(r0, 0xb) clone(0x0, &(0x7f0000000040), &(0x7f0000008000), &(0x7f0000000080), &(0x7f0000000000)) prctl$intptr(0x24, 0x9) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x4100, 0x0) ioctl$TIOCSBRK(r1, 0x5427) prctl$intptr(0x24, 0xf90) 03:31:16 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x88480000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x3c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) r1 = dup3(r0, r0, 0x80000) openat(r1, &(0x7f0000000000)='./file0\x00', 0x400, 0x100) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 03:31:16 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x1f000000, 0x20000102000007) 03:31:16 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) dup2(r0, r1) dup2(r0, r2) 03:31:16 executing program 1: ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:16 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:16 executing program 1: ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:16 executing program 3: r0 = dup(0xffffffffffffffff) r1 = gettid() close(0xffffffffffffffff) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4096, 0x6a8}], 0x1) close(r0) setrlimit(0xe, &(0x7f0000001100)={0x6, 0xc27c}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x0, &(0x7f00000010c0)="295ee1311816f47767af10") sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x9) tkill(r1, 0x2d) 03:31:16 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x80fe}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xb0010000, 0x20000102000007) 03:31:16 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x20, 0x27, 0xaff, 0x0, 0x0, {0x4}, [@nested={0xc, 0x1, [@typed={0x8, 0x1, @binary}]}]}, 0x233}, 0x1}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) 03:31:16 executing program 1: ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:16 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000180)="295ee1311f16f477671070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x2d}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f0000000000)=""/195}, 0x16) 03:31:16 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x4000000000000, 0x0) ioctl$KDGKBLED(r0, 0xc004510e, &(0x7f0000000140)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e23, 0x40, @remote={0xfe, 0x80, [], 0xbb}, 0x7}, {0xa, 0x4e20, 0x7ff, @mcast1={0xff, 0x1, [], 0x1}, 0x3f}, 0xd58, [0x6, 0x6, 0xfed7, 0x8, 0xffffffffffff41e2, 0x800, 0x0, 0x10001]}, 0x5c) 03:31:16 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0xa000000, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:16 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xffffff9e}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 430.026659] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.033180] bridge0: port 1(bridge_slave_0) entered disabled state 03:31:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xb801, 0x20000102000007) 03:31:17 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x100000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:17 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:17 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(r1, 0x0, 0x0) [ 430.108166] device bridge0 left promiscuous mode 03:31:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000300)="29d7e1311f160577651070") unshare(0x22020600) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4008700c, &(0x7f0000000040)) ioctl(r0, 0xf67, &(0x7f0000000080)="d98d033e7df09464b4f7975e2023d02c3390415e67ba338961fbd0f46ca997ecf27f2a6511c1c0949637cf421437a9ff43173efda014e73d338b070e9584ad0291ab6dcf") 03:31:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x603, &(0x7f0000000140)=0x4) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x51}}) close(r2) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)=0x7) close(r1) 03:31:17 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:17 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x608, 0x0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:17 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:17 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00'}) 03:31:17 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x86ddffff00000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:17 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x6000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080)=0x3, 0x4) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvmmsg(r0, &(0x7f0000002880)=[{{&(0x7f0000002600)=@in6={0x0, 0x0, 0x0, @mcast1}, 0xfd12, &(0x7f0000002780), 0x2d8, &(0x7f00000000c0)=""/176, 0xb0}}], 0x1, 0x40000002, 0x0) sendto$inet(r0, &(0x7f0000c95ffd), 0x49b8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x5) accept$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@deltclass={0x64, 0x29, 0x0, 0x70bd2b, 0x8, {0x0, r2, {0xfff1}, {0xfff2, 0x7}, {0xfff1, 0xe}}, [@TCA_RATE={0x8, 0x5, {0x4, 0xfffffffffffffffe}}, @TCA_RATE={0x8, 0x5, {0x100000001, 0x3ba}}, @TCA_RATE={0x8, 0x5, {0x7, 0x3}}, @TCA_RATE={0x8, 0x5, {0x8, 0xfffffffffffffffe}}, @TCA_RATE={0x8, 0x5, {0x77, 0xffffffffffffffff}}, @TCA_RATE={0x8, 0x5, {0xc3, 0x3}}, @TCA_RATE={0x8, 0x5, {0x5, 0x3}}, @TCA_RATE={0x8, 0x5, {0x5, 0xf8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) 03:31:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = dup2(r1, r1) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="2be37e662de3a7477b4bdfdab99891fe5fd45215eaa5c10bba44e79654d059b650b8a43bfa3c474014578a5844342e6ba978a3ede73d897cc8a176a99d333d2796a2d54a78c2834cbfe95b7b25db75fd2add6c3eb4bdd2355ae5679f4b2bf12a890e453431dcea5e12ff56893dcd2aa8a0478219993efb26464f453d9a7769c70826fcbb6f564186f59b9092d1ae496806fbdcee2ce25eb0bd242578ec695ff86fb872f678a5e80ceca6939f50a75c3ac70d08d721fbdf", @ANYRES64=r0, @ANYRES16=r2, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES16=r1], @ANYRES64=r2, @ANYRES32=r3, @ANYBLOB="124707e4da78266d647797bef610e473a59a590a3a39b8abacff4cab2d17e20c9145a71ae23a10852b0a75e17b708fe5e96c553f0dc4fd3e066d83a1db2abf000bb6"], @ANYRES32=r0, @ANYBLOB="00fc02f7e1442fcb5700f90c4ffdb6998f0000"], 0x1f, 0x2000000}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x5b}}], 0x1, 0x0, 0x0) 03:31:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x8803, 0x20000102000007) 03:31:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:17 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x9effffff}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:17 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00'}) 03:31:17 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x40000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:17 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00'}) 03:31:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xb801, 0x20000102000007) 03:31:18 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x88480000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:18 executing program 6: socket$inet6(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:18 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xa}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xb001000000000000, 0x20000102000007) 03:31:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:18 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/ashmem\x00', 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x6, 0x0, 0x6, 0x6, r2}, 0x10) pread64(r0, &(0x7f0000000080)=""/117, 0x75, 0x0) 03:31:18 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x8}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:18 executing program 6 (fault-call:2 fault-nth:0): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x7802000000000000, 0x20000102000007) 03:31:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:18 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x4, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:18 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="3e66deea3e0f0136f30f21db670f01cf66baf80cb8fcf4128eef66bafc0ced66ba4100b009ee66b83d010f00d0660f38825f00670f08c4c291ac890b000000", 0x3f}], 0xaaaaaaaaaaaab1a, 0x0, &(0x7f0000000080), 0xffffffffffffe29) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x200c0) 03:31:18 executing program 5: setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180)={{0x0, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'wlc\x00', 0x2d}, {@dev={0xac, 0x14, 0x14}}}, 0x44) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xf9, 0x20000) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000200)=""/126) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000000c0)={{0xbf, @empty, 0x4e24, 0x1, 'lblc\x00', 0x8, 0x401, 0x27}, {@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e21, 0x2000, 0x5, 0x4, 0xffffffff}}, 0x44) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000280)) 03:31:18 executing program 5: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000080)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) close(r0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) [ 431.576018] FAULT_INJECTION: forcing a failure. [ 431.576018] name failslab, interval 1, probability 0, space 0, times 0 [ 431.587343] CPU: 0 PID: 1664 Comm: syz-executor6 Not tainted 4.18.0-rc2+ #121 [ 431.594631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.604164] Call Trace: [ 431.606763] dump_stack+0x1c9/0x2b4 [ 431.610405] ? dump_stack_print_info.cold.2+0x52/0x52 [ 431.615613] ? graph_lock+0x170/0x170 [ 431.619434] should_fail.cold.4+0xa/0x1a 03:31:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) [ 431.623508] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 431.628622] ? calc_wheel_index+0x260/0x260 [ 431.632947] ? trace_hardirqs_off+0xd/0x10 [ 431.637183] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 431.642290] ? add_timer+0x5f1/0x1410 [ 431.646099] ? trace_hardirqs_off+0xd/0x10 [ 431.650340] ? timer_reduce+0x15c0/0x15c0 [ 431.654500] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 431.659622] ? mark_held_locks+0xc9/0x160 [ 431.663780] ? del_timer+0xf9/0x150 [ 431.667419] ? detach_if_pending+0x6f0/0x6f0 [ 431.671839] ? trace_hardirqs_on+0xd/0x10 03:31:18 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xffffff7f00000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 431.675998] __should_failslab+0x124/0x180 [ 431.680246] should_failslab+0x9/0x14 [ 431.684057] kmem_cache_alloc_trace+0x4b/0x780 [ 431.688761] ? print_usage_bug+0xc0/0xc0 [ 431.692834] ? work_busy+0x340/0x340 [ 431.696556] ? __local_bh_enable_ip+0x161/0x230 [ 431.701234] switchdev_port_attr_set+0x14f/0x3e0 [ 431.705987] ? switchdev_port_attr_set_deferred+0x110/0x110 [ 431.711701] br_set_state+0x1d9/0x2d0 [ 431.715498] ? br_designated_port_selection+0x620/0x620 [ 431.720863] ? mod_delayed_work_on+0x1a1/0x260 [ 431.725442] br_init_port+0xc5/0x260 [ 431.729145] br_stp_enable_port+0x15/0x50 [ 431.733284] br_stp_enable_bridge+0x1a2/0x2c0 [ 431.737771] br_dev_open+0x53/0x70 [ 431.741298] ? br_dev_stop+0x70/0x70 [ 431.744996] __dev_open+0x26d/0x410 [ 431.748617] ? dev_set_rx_mode+0x40/0x40 [ 431.752669] ? __local_bh_enable_ip+0x161/0x230 [ 431.757332] __dev_change_flags+0x739/0x9c0 [ 431.761642] ? dev_set_allmulti+0x30/0x30 [ 431.765780] ? find_held_lock+0x36/0x1c0 [ 431.769839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.775366] dev_change_flags+0x89/0x150 [ 431.779416] dev_ifsioc+0x83f/0xb90 [ 431.783047] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 431.787443] ? register_gifconf+0x70/0x70 [ 431.791597] dev_ioctl+0x1b5/0xcc0 [ 431.795138] sock_do_ioctl+0x1d3/0x3e0 [ 431.799028] ? compat_ifr_data_ioctl+0x170/0x170 [ 431.803778] ? lock_downgrade+0x8f0/0x8f0 [ 431.807918] ? kasan_check_read+0x11/0x20 [ 431.812056] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 431.816457] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 431.821638] sock_ioctl+0x30d/0x680 [ 431.825258] ? dlci_ioctl_set+0x40/0x40 [ 431.829223] ? match_held_lock+0x851/0x8d0 [ 431.833450] ? expand_files.part.8+0x9c0/0x9c0 [ 431.838029] ? kasan_check_write+0x14/0x20 [ 431.842254] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 431.847178] ? dlci_ioctl_set+0x40/0x40 [ 431.851148] do_vfs_ioctl+0x1de/0x1720 [ 431.855033] ? __lock_is_held+0xb5/0x140 [ 431.859085] ? ioctl_preallocate+0x300/0x300 [ 431.863479] ? __fget_light+0x2f7/0x440 [ 431.867453] ? fget_raw+0x20/0x20 [ 431.870895] ? __sb_end_write+0xac/0xe0 [ 431.874868] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 431.880400] ? fput+0x130/0x1a0 [ 431.883681] ? ksys_write+0x1ae/0x260 [ 431.887481] ? security_file_ioctl+0x94/0xc0 [ 431.891877] ksys_ioctl+0xa9/0xd0 [ 431.895318] __x64_sys_ioctl+0x73/0xb0 [ 431.899196] do_syscall_64+0x1b9/0x820 [ 431.903071] ? finish_task_switch+0x1d3/0x890 [ 431.907560] ? syscall_return_slowpath+0x5e0/0x5e0 [ 431.912481] ? syscall_return_slowpath+0x31d/0x5e0 [ 431.917404] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 431.922759] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.927619] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.932795] RIP: 0033:0x455a99 [ 431.935966] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.955316] RSP: 002b:00007fd82a274c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.963018] RAX: ffffffffffffffda RBX: 00007fd82a2756d4 RCX: 0000000000455a99 [ 431.970278] RDX: 00000000200001c0 RSI: 0000000000008914 RDI: 0000000000000013 [ 431.977542] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 431.984805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 431.992062] R13: 00000000004bfa5d R14: 00000000004cebf8 R15: 0000000000000000 [ 431.999419] bridge0: error setting offload STP state on port 2(bridge_slave_1) [ 432.006847] bridge0: port 2(bridge_slave_1) entered listening state [ 432.013430] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.019836] bridge0: port 1(bridge_slave_0) entered listening state 03:31:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x3f0, 0x20000102000007) [ 432.027098] device bridge0 entered promiscuous mode 03:31:18 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:19 executing program 4: unshare(0x8000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/224, 0xe0, 0x0, &(0x7f0000000200)={0x0, 0x989680}) r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xfffffffffffffd23, 0x10000) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000240)={0x5, 0x7b}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000180)={0x7f, 0x5, 0x6, {0x0, 0x989680}, 0xbda, 0x80000001}) socket$can_bcm(0x1d, 0x2, 0x2) [ 432.117133] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:31:19 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x4888, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:19 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x200000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:19 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:19 executing program 6 (fault-call:2 fault-nth:1): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:19 executing program 4: mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffff80000001, 0x200) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) futex(&(0x7f0000000080)=0x4, 0x80000000000b, 0x1, &(0x7f000043bff0), &(0x7f0000048000), 0x0) 03:31:19 executing program 3: r0 = socket$inet6(0xa, 0xfffffffffffffffe, 0x81) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7f, 0x4000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000040)={'security\x00', 0x2, [{}, {}]}, 0x48) bind$netlink(r1, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc) fadvise64(r1, 0x0, 0xbfd, 0x5) getsockname(r1, &(0x7f0000000300)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000280)=0xf5bc1d640ea0d3b) mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0xa9011, r3, 0x0) 03:31:19 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x1f020000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:19 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:19 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) [ 432.387264] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.393785] bridge0: port 1(bridge_slave_0) entered disabled state 03:31:19 executing program 4: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x3c1, 0x1, 0x270, [0x200000c0], 0x0, &(0x7f0000000340), &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0x2e3) r1 = syz_open_dev$midi(&(0x7f00000004c0)='/dev/midi#\x00', 0x4, 0x140) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000500)={0x1, {0x0, 0x989680}, 0x1, 0x3}) r2 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x6, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r3, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) sendmmsg(r3, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000140)=[{0x161}], 0x10}}], 0x1, 0x0) connect$unix(r2, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4001) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, &(0x7f0000000380)={0x10000, 0x7}) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000480), 0x4) 03:31:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xd0000000, 0x20000102000007) 03:31:19 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xfec0}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:19 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xe, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:19 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") r1 = socket$nl_generic(0x10, 0x3, 0x10) shmget(0x1, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@loopback, @in=@dev}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)) fstat(r0, &(0x7f00000005c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) getpgrp(0x0) fcntl$getownex(r1, 0x10, &(0x7f00000006c0)) r2 = socket(0x13, 0xa, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000002c0)={0x20}, 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7f5d}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={r3, 0x4, 0x30}, &(0x7f0000000280)=0xc) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x8c, 0x0, 0x80, 0x0, 0x0, {0xc}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000000}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback=0x7f000001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffc00}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2853}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x16}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x8c}, 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic='\fA']}]}, 0x1c}, 0x1}, 0x0) [ 432.520105] kernel msg: ebtables bug: please report to author: Wrong len argument 03:31:19 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x900000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 432.564111] device bridge0 left promiscuous mode [ 432.579244] kernel msg: ebtables bug: please report to author: Wrong len argument 03:31:19 executing program 4: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = accept(0xffffffffffffff9c, &(0x7f0000000140)=@ax25, &(0x7f00000000c0)=0x80) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x18, r2, 0x100, 0x70bd28, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_DEST={0x4, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8001, 0x2c0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x11, @rand_addr=0xcd, 0x0, 0x3, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0xeb) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) keyctl$get_persistent(0x16, 0x0, r0) 03:31:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x81000000, 0x20000102000007) 03:31:19 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x689, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xb802, 0x20000102000007) [ 432.954091] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.960568] FAULT_INJECTION: forcing a failure. [ 432.960568] name failslab, interval 1, probability 0, space 0, times 0 [ 432.971826] CPU: 1 PID: 1712 Comm: syz-executor6 Not tainted 4.18.0-rc2+ #121 [ 432.979104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.988461] Call Trace: [ 432.991063] dump_stack+0x1c9/0x2b4 [ 432.994709] ? dump_stack_print_info.cold.2+0x52/0x52 [ 432.999910] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 433.006050] should_fail.cold.4+0xa/0x1a [ 433.010130] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 433.015243] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 433.020823] ? irq_work_queue+0xb7/0x130 [ 433.024892] ? wake_up_klogd+0xcb/0x110 [ 433.028870] ? console_device+0xc0/0xc0 [ 433.032846] ? vprintk_emit+0x6ad/0xdf0 [ 433.036829] ? __down_trylock_console_sem+0x155/0x200 [ 433.042029] ? vprintk_emit+0x3f2/0xdf0 [ 433.045999] ? wake_up_klogd+0x110/0x110 [ 433.050068] ? lock_downgrade+0x8f0/0x8f0 [ 433.054217] __should_failslab+0x124/0x180 [ 433.058465] should_failslab+0x9/0x14 [ 433.062275] kmem_cache_alloc_trace+0x4b/0x780 [ 433.066853] ? vprintk_default+0x28/0x30 [ 433.070907] ? vprintk_func+0x81/0xe7 [ 433.074707] switchdev_port_attr_set+0x14f/0x3e0 [ 433.079450] ? switchdev_port_attr_set_deferred+0x110/0x110 [ 433.085159] __set_ageing_time+0x198/0x260 [ 433.089376] ? br_set_max_age+0x100/0x100 [ 433.093525] ? mod_delayed_work_on+0x1a1/0x260 [ 433.098093] br_init_port+0x194/0x260 [ 433.101875] br_stp_enable_port+0x15/0x50 [ 433.106006] br_stp_enable_bridge+0x1a2/0x2c0 [ 433.110495] br_dev_open+0x53/0x70 [ 433.114027] ? br_dev_stop+0x70/0x70 [ 433.117726] __dev_open+0x26d/0x410 [ 433.121346] ? dev_set_rx_mode+0x40/0x40 [ 433.125390] ? __local_bh_enable_ip+0x161/0x230 [ 433.130053] __dev_change_flags+0x739/0x9c0 [ 433.134376] ? dev_set_allmulti+0x30/0x30 [ 433.138538] ? find_held_lock+0x36/0x1c0 [ 433.142588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.148115] dev_change_flags+0x89/0x150 [ 433.152171] dev_ifsioc+0x83f/0xb90 [ 433.155786] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 433.160175] ? register_gifconf+0x70/0x70 [ 433.164313] dev_ioctl+0x1b5/0xcc0 [ 433.167845] sock_do_ioctl+0x1d3/0x3e0 [ 433.171713] ? compat_ifr_data_ioctl+0x170/0x170 [ 433.176456] ? lock_downgrade+0x8f0/0x8f0 [ 433.180590] ? kasan_check_read+0x11/0x20 [ 433.184721] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 433.189114] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 433.194287] sock_ioctl+0x30d/0x680 [ 433.197895] ? dlci_ioctl_set+0x40/0x40 [ 433.201851] ? match_held_lock+0x851/0x8d0 [ 433.206066] ? expand_files.part.8+0x9c0/0x9c0 [ 433.210638] ? kasan_check_write+0x14/0x20 [ 433.214853] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 433.219775] ? dlci_ioctl_set+0x40/0x40 [ 433.223741] do_vfs_ioctl+0x1de/0x1720 [ 433.227611] ? __lock_is_held+0xb5/0x140 [ 433.231659] ? ioctl_preallocate+0x300/0x300 [ 433.236065] ? __fget_light+0x2f7/0x440 [ 433.240036] ? fget_raw+0x20/0x20 [ 433.243491] ? __sb_end_write+0xac/0xe0 [ 433.247449] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 433.253067] ? fput+0x130/0x1a0 [ 433.256327] ? ksys_write+0x1ae/0x260 [ 433.260116] ? security_file_ioctl+0x94/0xc0 [ 433.264524] ksys_ioctl+0xa9/0xd0 [ 433.267971] __x64_sys_ioctl+0x73/0xb0 [ 433.271842] do_syscall_64+0x1b9/0x820 [ 433.275716] ? finish_task_switch+0x1d3/0x890 [ 433.280194] ? syscall_return_slowpath+0x5e0/0x5e0 [ 433.285108] ? syscall_return_slowpath+0x31d/0x5e0 [ 433.290034] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 433.295385] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.300214] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.305390] RIP: 0033:0x455a99 [ 433.308563] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 433.327815] RSP: 002b:00007fd82a274c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.335508] RAX: ffffffffffffffda RBX: 00007fd82a2756d4 RCX: 0000000000455a99 [ 433.342760] RDX: 00000000200001c0 RSI: 0000000000008914 RDI: 0000000000000013 [ 433.350024] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 433.357280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 433.364533] R13: 00000000004bfa5d R14: 00000000004cebf8 R15: 0000000000000001 [ 433.371886] bridge_slave_1: failed to offload ageing time [ 433.377478] bridge0: port 2(bridge_slave_1) entered listening state [ 433.384109] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.390482] bridge0: port 1(bridge_slave_0) entered listening state [ 433.397205] device bridge0 entered promiscuous mode 03:31:20 executing program 6 (fault-call:2 fault-nth:2): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 03:31:20 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:20 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x7fff, 0x2]) r1 = socket$inet6(0xa, 0x9, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x8000, 0x8224, 0x2, 0x8, 0x4, 0xffffffffffff0147, 0x4, 0x8, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={r3, 0xd0}, 0x8) sendmsg$inet_sctp(r2, &(0x7f00000006c0)={&(0x7f0000000240)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000580)="d0", 0x1}], 0x1, &(0x7f0000000640)}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24}}, [0x3f, 0x8f, 0x6, 0x7, 0x80, 0x800, 0x83, 0x101, 0x8001, 0xe69d868, 0x1, 0x2, 0x5, 0xf2e, 0xffff]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000002c0)={r4, @in={{0x2, 0x4e21, @rand_addr=0x3}}}, 0x84) 03:31:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:20 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8864000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:20 executing program 3: r0 = socket$inet6(0xa, 0x40000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffff8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002380)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000002480)=0xe8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x951b}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r3, &(0x7f0000000280)=0x4) sendmsg$nl_route(r1, &(0x7f0000002540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)=@bridge_delneigh={0x38, 0x1d, 0x3a, 0x70bd27, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x0, 0x86, 0x3}, [@NDA_PORT={0x8, 0x6, 0x4e20}, @NDA_DST_MAC={0xc, 0x1}, @NDA_PORT={0x8, 0x6, 0x4e21}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8005) [ 433.402785] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:31:20 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xfffffff0}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) [ 433.527976] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.534506] bridge0: port 1(bridge_slave_0) entered disabled state 03:31:20 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0xa, 0x1, 0x0) unshare(0x40000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="d6000000022a592590f8c31f64b3d7ba87cf65ff41c46c3da4b7a8a016069f77933eb1a43eccb13372ee117d24459699ac1ff4779c30d16ca2fedb367d42717656b3c70e41422d11e74cfb0eb45e7e9cf7f495e3d22e2283682bde8768e2f543acf8ce3fba5673eed881414318c025fcd202aed4b5942570a2e80cef208caf8ffbcefda1ad0f9b2092b68b3c5656a177667d5d4a370c043920000000fbc6a88df6e2a446450b0137d44f6020ea28db042f9f617cd710f03bc7db8ad4daaf611c026382effd813c69c3feb28adf945ac5bdfbc9886e6a1dbf26f6"], &(0x7f0000000000)=0xde) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0x5}, &(0x7f0000000140)=0x8) sendmsg$nl_route(r2, &(0x7f0000005700)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000056c0)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x1fffff}, [@IFLA_IFNAME={0x14, 0x4, 'C\x00\x00\x001\x00'}]}, 0x34}, 0x1}, 0x0) 03:31:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x40010000, 0x20000102000007) 03:31:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x5c6e, 0x4ab, &(0x7f0000000040)=""/251}, 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='map_files\x00') getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x7}, &(0x7f00000001c0)=0x8) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in={{0x2, 0x4e24}}}, 0x84) [ 433.595257] device bridge0 left promiscuous mode 03:31:20 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001580)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000400)={'bridge_slave_1\x00', {0x2, 0x4e20, @loopback=0x7f000001}}) splice(r0, &(0x7f0000000280), 0xffffffffffffffff, &(0x7f0000000080), 0x200, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x9, 0x7, 0x6, 0x61b, 0x3}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x8, 0x9, 0xff, 0x3bf, 0x6}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x5, 0x101, 0x4, 0x0, 0x80, 0x8, 0x8000, {0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0xfffffffffffffcf3, 0x3, 0x6, 0x0, 0x8001}}, &(0x7f00000001c0)=0xb0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000440), 0x4) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000002c0)={r1, 0x1, 0xfffffffffffffe00, 0xffffffffffffffff, 0x1, 0x9, 0xff2, 0x200001, {r2, @in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0x9, 0x1003, 0x80000001, 0x5, 0x4}}, &(0x7f0000000200)=0x47e) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000380)={'mangle\x00'}, &(0x7f0000000240)=0x54) fallocate(r0, 0x18, 0x7, 0x5) 03:31:20 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xfe80000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:20 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x88caffff00000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x5003000000000000, 0x20000102000007) [ 433.999569] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.006020] FAULT_INJECTION: forcing a failure. [ 434.006020] name failslab, interval 1, probability 0, space 0, times 0 [ 434.007792] IPVS: ftp: loaded support on port[0] = 21 [ 434.017293] CPU: 1 PID: 1809 Comm: syz-executor6 Not tainted 4.18.0-rc2+ #121 [ 434.029829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.039182] Call Trace: [ 434.041786] dump_stack+0x1c9/0x2b4 [ 434.045414] ? dump_stack_print_info.cold.2+0x52/0x52 [ 434.050594] ? trace_hardirqs_on+0x10/0x10 [ 434.054813] ? is_bpf_text_address+0xd7/0x170 [ 434.059305] ? kernel_text_address+0x79/0xf0 [ 434.063720] should_fail.cold.4+0xa/0x1a [ 434.067774] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 434.072869] ? save_stack+0xa9/0xd0 [ 434.076499] ? kasan_kmalloc+0xc4/0xe0 [ 434.080372] ? kmem_cache_alloc_trace+0x152/0x780 [ 434.085381] ? switchdev_port_attr_set+0x14f/0x3e0 [ 434.090296] ? __set_ageing_time+0x198/0x260 [ 434.094690] ? br_init_port+0x194/0x260 [ 434.098647] ? br_stp_enable_bridge+0x1a2/0x2c0 [ 434.103315] ? graph_lock+0x170/0x170 [ 434.107105] ? dev_change_flags+0x89/0x150 [ 434.111323] ? dev_ifsioc+0x83f/0xb90 [ 434.115115] ? dev_ioctl+0x1b5/0xcc0 [ 434.118822] ? graph_lock+0x170/0x170 [ 434.122606] ? ksys_ioctl+0xa9/0xd0 [ 434.126214] ? __x64_sys_ioctl+0x73/0xb0 [ 434.130257] ? do_syscall_64+0x1b9/0x820 [ 434.134312] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.139672] ? print_usage_bug+0xc0/0xc0 [ 434.143747] ? print_usage_bug+0xc0/0xc0 [ 434.147795] __should_failslab+0x124/0x180 [ 434.152026] should_failslab+0x9/0x14 [ 434.155819] kmem_cache_alloc_trace+0x4b/0x780 [ 434.160386] ? mark_held_locks+0xc9/0x160 [ 434.164520] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 434.169091] switchdev_port_attr_set+0x14f/0x3e0 [ 434.173850] ? switchdev_port_attr_set_deferred+0x110/0x110 [ 434.179573] ? trace_hardirqs_on+0xd/0x10 [ 434.183704] ? debug_object_assert_init+0x368/0x4b0 [ 434.188705] br_set_state+0x1d9/0x2d0 [ 434.192488] ? br_designated_port_selection+0x620/0x620 [ 434.197835] ? del_timer+0xf9/0x150 [ 434.201445] ? detach_if_pending+0x6f0/0x6f0 [ 434.205835] br_make_forwarding+0x213/0x260 [ 434.210141] br_port_state_selection+0x486/0x5e0 [ 434.214893] br_stp_enable_port+0x34/0x50 [ 434.219217] br_stp_enable_bridge+0x1a2/0x2c0 [ 434.223707] br_dev_open+0x53/0x70 [ 434.227236] ? br_dev_stop+0x70/0x70 [ 434.231022] __dev_open+0x26d/0x410 [ 434.234640] ? dev_set_rx_mode+0x40/0x40 [ 434.238684] ? __local_bh_enable_ip+0x161/0x230 [ 434.243350] __dev_change_flags+0x739/0x9c0 [ 434.247663] ? dev_set_allmulti+0x30/0x30 [ 434.251799] ? find_held_lock+0x36/0x1c0 [ 434.255867] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.261387] dev_change_flags+0x89/0x150 [ 434.265442] dev_ifsioc+0x83f/0xb90 [ 434.269065] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 434.273457] ? register_gifconf+0x70/0x70 [ 434.277607] dev_ioctl+0x1b5/0xcc0 [ 434.281146] sock_do_ioctl+0x1d3/0x3e0 [ 434.285027] ? compat_ifr_data_ioctl+0x170/0x170 [ 434.289789] ? lock_downgrade+0x8f0/0x8f0 [ 434.293928] ? kasan_check_read+0x11/0x20 [ 434.298067] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 434.302462] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 434.307646] sock_ioctl+0x30d/0x680 [ 434.311264] ? dlci_ioctl_set+0x40/0x40 [ 434.315226] ? match_held_lock+0x851/0x8d0 [ 434.319444] ? expand_files.part.8+0x9c0/0x9c0 [ 434.324015] ? kasan_check_write+0x14/0x20 [ 434.328255] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 434.333180] ? dlci_ioctl_set+0x40/0x40 [ 434.337159] do_vfs_ioctl+0x1de/0x1720 [ 434.341055] ? __lock_is_held+0xb5/0x140 [ 434.345108] ? ioctl_preallocate+0x300/0x300 [ 434.349494] ? __fget_light+0x2f7/0x440 [ 434.353462] ? fget_raw+0x20/0x20 [ 434.356900] ? __sb_end_write+0xac/0xe0 [ 434.360884] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 434.366414] ? fput+0x130/0x1a0 [ 434.369677] ? ksys_write+0x1ae/0x260 [ 434.373462] ? security_file_ioctl+0x94/0xc0 [ 434.377970] ksys_ioctl+0xa9/0xd0 [ 434.381417] __x64_sys_ioctl+0x73/0xb0 [ 434.385288] do_syscall_64+0x1b9/0x820 [ 434.389160] ? syscall_slow_exit_work+0x500/0x500 [ 434.393986] ? syscall_return_slowpath+0x5e0/0x5e0 [ 434.398910] ? syscall_return_slowpath+0x31d/0x5e0 [ 434.403835] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 434.409195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.414034] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.419207] RIP: 0033:0x455a99 [ 434.422373] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 434.441557] RSP: 002b:00007fd82a274c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.449253] RAX: ffffffffffffffda RBX: 00007fd82a2756d4 RCX: 0000000000455a99 [ 434.456515] RDX: 00000000200001c0 RSI: 0000000000008914 RDI: 0000000000000013 [ 434.463777] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 434.471038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 434.478297] R13: 00000000004bfa5d R14: 00000000004cebf8 R15: 0000000000000002 [ 434.485623] bridge0: error setting offload STP state on port 2(bridge_slave_1) [ 434.493174] bridge0: port 1(bridge_slave_0) entered blocking state 03:31:21 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:21 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x100000000000048, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getpeername$inet6(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) 03:31:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0x406855c9, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) 03:31:21 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8847, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x2d00000000000000, 0x20000102000007) 03:31:21 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:21 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xf0}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 434.499561] bridge0: port 1(bridge_slave_0) entered listening state [ 434.506254] device bridge0 entered promiscuous mode [ 434.512063] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 434.536468] netlink: 'syz-executor3': attribute type 4 has an invalid length. 03:31:21 executing program 5: r0 = semget$private(0x0, 0x2, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1) semop(0x0, &(0x7f0000000000), 0x177) r1 = semget$private(0x0, 0x5, 0x0) semop(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x1800}], 0x1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x400000, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000080)) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000100)) 03:31:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xe800000000000000, 0x20000102000007) [ 434.613468] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 434.695449] IPVS: ftp: loaded support on port[0] = 21 [ 434.730328] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 434.837719] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.844252] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.862230] device bridge0 left promiscuous mode [ 435.017515] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.023913] bridge0: port 2(bridge_slave_1) entered listening state [ 435.030476] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.036848] bridge0: port 1(bridge_slave_0) entered listening state [ 435.043507] device bridge0 entered promiscuous mode [ 435.049141] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 03:31:23 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1000000200005, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000040)) connect(r2, &(0x7f0000931ff4)=@rc={0x1f, {0x6, 0x6, 0x1000, 0x1, 0xabb7, 0x1}, 0x6}, 0x80) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x5) 03:31:23 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xa00}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f47767") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:23 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x6558, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:23 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4ac, 0x100) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e20, 0x9, @empty, 0x8}, {0xa, 0x4e22, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0xffffffffffffff11}, 0x3, [0x7fffffff, 0x6, 0x7, 0x3, 0x401, 0x5, 0x7, 0x7]}, 0x5c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r1, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x42002) write(r1, &(0x7f0000c34fff), 0xffffff0b) close(r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 03:31:23 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = epoll_create1(0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0xc0000, 0x0) r3 = gettid() r4 = geteuid() getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000007c0)=0x0) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000008c0)=0x0) getresuid(&(0x7f0000000900), &(0x7f0000000940)=0x0, &(0x7f0000000980)) r11 = getegid() r12 = fcntl$getown(r0, 0x9) r13 = geteuid() r14 = getegid() r15 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/autofs\x00', 0x2468c3, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000dc0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000e00)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000f00)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000f40)={0x0, 0x0, 0x0}, &(0x7f0000000f80)=0xc) r19 = gettid() getresuid(&(0x7f0000001000)=0x0, &(0x7f0000001040), &(0x7f0000001080)) r21 = getgid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000010c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001100)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000001200)=0xe8) getresgid(&(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)=0x0) r25 = getpgid(r9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001300)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000001400)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001440)={0x0, 0x0, 0x0}, &(0x7f0000001480)=0xc) r28 = gettid() r29 = geteuid() getresgid(&(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001580)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0}, &(0x7f0000001600)=0xc) stat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000001840)=[{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)="ad4769e07c628fa508c9785a488361018cc74662c9f081d4e7dae4c969eadce8df8d28db990dfe9388f10d3f6c4cadd8a59b59128f5ec1235449f0110f963c58e811eadb7cf80440", 0x48}, {&(0x7f00000002c0)="752ea8b3b2eef8459c5003495d1682fab4817518b868d3148de04a05d78d1585ed289751d083758e997fd45ea279da60cd83d0a6c0b127c8382a825324b9d049e5e7336259e99ceb31b75d06d96b39b3c2b409813ca5349c2297dc304d8d099e815ec31789d6ea063a00574250f71c2c5d2b329dea36f45e527b0ded80075ccadaa51d806506a68c9a7b35e398d88d330b8134c381ae433d1e8f95", 0x9b}, {&(0x7f0000000380)="5b0437e9246414504930160609f11f263481f135d51fdb9fa4e7f5f3601b8969ea50c9a2943fb105725ddc3524d872df638cfee771b0f3c71eb74bb985c3384d00cd3ceb1eaa2eea8b9558d9900d6b1448cd58c9ace1703a4ccd06", 0x5b}], 0x3, 0x0, 0x0, 0x4004004}, {&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000004c0)="ba4b009367f662330d1ddf25ea9f8bc2ebac460e50b3eb633f8d10bd08f9859959dd3194bb72ce0a4b236956cb802d688b4bbe0796b65958b70801362942e0d4a9ea5c5ca8672920cd24dd3aae8914a4940ef06d3b060a4d64c1be3f5a895f802ac9d63c48fb74e2e9b79625e1f0031dde32c57813bd521210b095af0729b1be13df8b08d574bf930988fa36a8e362d1b06c63838fe612cf8537c8a1f7720147abd732219d2cd15947ff677db8dd1bbe78cb588cff64b2564edb8990e3ec805a53066b8e78e18640126256726c98e8465356b9ea857ebb38a9df9be4124230b5f5f588b8bd4c1097d0e3becbdc46bebb690119", 0xf3}, {&(0x7f00000005c0)="f20e71", 0x3}, {&(0x7f0000000600)="81dfeb9ca41674038a336112c889e10090aae2042f267f8291635c5778371be802a88fd47c74a178d521a75eb17feb309b502a55a65e3ef53743241a33f25f95147b6662bc85509c369a838eba9a23537e2fdedcf5cecdef87ac60f1c43fa2c7d85fb0c6427c78a89cd0b740dd9862e9aee6d6ac59e3f6b9635511a79dedbd4a8519f5", 0x83}], 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="e1ff000020000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x8044}, {&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000b40)="151e9ca117735139af0cd3f22b15dfe7025bd6cb4ddecb3c162695a5780558d42052bebe07", 0x25}, {&(0x7f0000000b80)="52652f1372fa4c43f947319a8ff32b4598baba8d418088a7b967b7342978a6a280e6d26667f1b274edfefd03d0af19cd82eea3c325d25d81edc2fe3b882d29bfb7ed83a3a31d2572a7b6df5b45b3c0274e1fc7dfb1e91126a1509a23ef3b0003ad00a555bf9914e490bfbfc33d2d85b65bb9aa8ffb1a50aaf7f83854cfb417f6bacb026a0c9860976313b0c58f26a207ee5b2eecc266800c993e83b372a585784f3191ec00f66947c8bd595f2165678de7765b84ef82e7c97d16bb0a00ca04ed14042e92005f4d0682c0314b6e3d51182d99bd7b37b945813fd17107755e2efbebf4debfe3aad34bb409029ff7f41edfe0b1909213048e6b52", 0xf9}, {&(0x7f0000000c80)="441c1fa497b6c194e1cd4e58a03de7628373b4fc92b20fb140aa42de0b0fd58eef56f8f444379cadc9fe9c040987a5035c4a9e7c30d6e1f99bef49f2421fcf022c2a4f32ab30df451cfa40bb5f2a7c977baf2aa5fee15e4b35228f4dc1c3d10c86ba84a8f76b7239fbd2107f25a107b257a93fd7379d308f60efe3ed92146e9cb4910b1c0c63bcab6fce9ee22809a7bf7ad1475cb3c6720be0036f", 0x9b}], 0x3, &(0x7f0000001700)=[@rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r15, r0]}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @rights={0x20, 0x1, 0x1, [r0, r1, r0]}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @cred={0x20, 0x1, 0x2, r22, r23, r24}, @rights={0x20, 0x1, 0x1, [r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r25, r26, r27}, @cred={0x20, 0x1, 0x2, r28, r29, r30}, @cred={0x20, 0x1, 0x2, r31, r32, r33}], 0x140, 0x81}], 0x3, 0x40000) r34 = epoll_create1(0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r35 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r34, 0x1, r1, &(0x7f0000000040)={0x40002017}) getdents64(r0, &(0x7f0000000080)=""/202, 0xca) timerfd_settime(r35, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0)) epoll_pwait(r34, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, &(0x7f00009d2000), 0x8) dup3(r35, r34, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r35, &(0x7f0000021ff4)={0x2001}) 03:31:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x6000000, 0x20000102000007) 03:31:23 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x541b, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 436.401295] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.407819] bridge0: port 1(bridge_slave_0) entered disabled state 03:31:23 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x34000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 436.482247] device bridge0 left promiscuous mode 03:31:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xf0000000, 0x20000102000007) 03:31:23 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x2a439d83, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000100)={0x7, 0x7, 0xb5d3}) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000180), 0x4) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000040), 0x0, r3}) dup3(r3, r3, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x4) 03:31:23 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xfffffffffffff000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:23 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x5805, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x2400, 0x20000102000007) 03:31:23 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x80400, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000180)={0x10201, 0x0, &(0x7f0000ffd000/0x3000)=nil}) mount(&(0x7f0000000200)='/\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x500f, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") chroot(&(0x7f0000000040)='./file0\x00') syz_fuse_mount(&(0x7f0000000400)='./file0\x00', 0x0, 0xee00, 0x0, 0x0, 0x80000) r2 = syz_open_procfs(0x0, &(0x7f0000000640)='mountinfo\x00') preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 03:31:23 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x500000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:23 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8848, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x7, 0x20000102000007) 03:31:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f47767") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:24 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x34000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x3) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x9, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_team\x00', r2}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@loopback={0x0, 0x1}, @dev={0xfe, 0x80}, @loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) getgroups(0x2, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff]) setresgid(r4, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x80, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r5, 0x4018ae51, &(0x7f0000000300)={0x3ff, 0x400, 0x54f}) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000400)={'mangle\x00'}, &(0x7f0000000340)=0x54) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000380)={@mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, @empty, 0x0, 0x0, 0x0, 0x400}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)={0x303, 0x33}, 0xfffffffffffffc2e) 03:31:24 executing program 5: r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x2) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000180)=0x1000) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x0, 0x0, 0x0, {0xc}}, 0x14}, 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0xe315, 0x4) close(r0) 03:31:24 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xe001000000000000, 0x20000102000007) 03:31:24 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xa000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:24 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8948, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:24 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='C']}) accept4$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x14, 0x80800) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x200080, 0x0) bind$xdp(r2, &(0x7f0000000180)={0x2c, 0x7, r3, 0x35, r4}, 0x10) close(r2) close(r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x1, 0x8, 0xfffffffffffffff8, 'queue1\x00', 0x3}) 03:31:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f47767") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:24 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8920, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:24 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x558, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:24 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xfc000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:24 executing program 4: r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001180)='/dev/vga_arbiter\x00', 0x80, 0x0) write$cgroup_subtree(r2, &(0x7f00000011c0)={[{0x2f, 'io', 0x20}, {0x2b, 'pids', 0x20}, {0x2f, 'pids', 0x20}, {0x0, '\x00\x00\x00', 0x20}, {0x2d, 'io', 0x20}, {0x2b, 'cpu', 0x20}, {0x2b, 'io', 0x20}, {0x2d, 'cpu', 0x20}]}, 0x27) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000001140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x2c, r1, 0x202, 0x70bd28, 0x25dfdbff, {0xa}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x380}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcd7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") fstatfs(r0, &(0x7f00000000c0)=""/4096) write(r0, &(0x7f000002b000)="1f0000000202fffffd3b54c007110000f30501000b000600000423ca0000cf", 0x1f) 03:31:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f4776710") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:24 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x70030000, 0x20000102000007) 03:31:24 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)="2afdd25febdfd0fc9371e61addac5e53c5a8debf7a923ca0c5b9c7e097a299dedea0847d6171e3bae3dc8b47d4c18fba8e86bb362228fc8cd9abc813fe048380e193c51c0ec9f3cd4511b1e191d17e334f73ee92e0d824deca4543c9110202d281f543de9c040cb4950c743322453999919ed0687075c8f055717b2de0bec2ee1e9fd13056374239eda0d678e300ae", &(0x7f0000000000)="4bd50715511c010e7be31b97e3c2946e2a02de60effe1780643fde90b5867a4d7fb93a170b874044e476aa933d9cbc9656087e40237911fe8c4a4c838392724df9e772ed80383e4aeaa5fad2e44f8a666118a05e20b1c43611485908185bf546a0582b7f6d8f3af99ddb4f5c37006f258c957cdcebaaeba7286edeea2be457", 0x2}, 0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x40096101, 0x707000) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x1, 0x802) 03:31:24 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x900}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:24 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0xc0045878, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f4776710") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) [ 437.662613] QAT: Device 0 not found 03:31:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xffffffffffffff9e) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast2=0xe0000002}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}]}, &(0x7f0000000200)=0x10) 03:31:24 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xfe80}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 437.709725] QAT: Device 0 not found 03:31:24 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f4776710") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:24 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8947, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x20, 0x1, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f00000000c0)=""/196) 03:31:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x208, 0x20000102000007) 03:31:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x400000000000001, 0x0, 0xffffffffffffffff}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40000, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x3c4e, 0x3, 0x4, 0x2, 0x3, 0x4, 0xde46, 0x3, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140)={r4, 0x200}, 0x8) poll(&(0x7f0000000000)=[{r2, 0x4}, {r2}, {r2}], 0x3, 0x3b9ac9ff) 03:31:25 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x6}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:25 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) sync_file_range(r1, 0x968b, 0x6, 0x5) ioctl$VT_RELDISP(r2, 0x5605) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0xac, 0x0, &(0x7f0000000340)=[@increfs_done={0x40106308}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x8, &(0x7f00000000c0)=[@flat], &(0x7f0000000100)=[0x38]}, 0x40}}, @reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f00000002c0)=[@flat={0x73682a85, 0x10b}, @fda={0x66646185, 0xa, 0x0, 0x3e}], &(0x7f0000000240)}}}], 0x0, 0x0, &(0x7f0000000400)}) 03:31:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:25 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5451, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x806000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) [ 438.348208] binder: 2123:2130 BC_INCREFS_DONE node 54 has no pending increfs request [ 438.356272] binder: 2123:2130 got transaction to invalid handle [ 438.362414] binder: 2123:2130 transaction failed 29201/-22, size 24-8 line 2852 03:31:25 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000000)) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getneightbl={0x14, 0x42, 0xf17}, 0x14}, 0x1}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x9, 0x8, 0x3, 0x3, 0x0, 0x1, 0x400, 0x8, 0x20, 0x1, 0xff, 0x2, 0xe6, 0xfd2, 0x1, 0x7fff, 0x70000000, 0xfff, 0x1f, 0x0, 0x3, 0x7, 0x3, 0x1b04, 0xff, 0x1ae4, 0x7ff, 0x3, 0x7, 0x61f2, 0x1000, 0x3, 0x3, 0x4, 0x100, 0x3, 0x0, 0x4000, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x1200, 0x1, 0x401, 0x4, 0x1ff, 0x5, 0x7c3ed4}, r2, 0xe, r0, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@upd={0xe0, 0x12, 0x301, 0x0, 0x0, {{'\nrc32\x00'}}}, 0xe0}, 0x1}, 0x0) 03:31:25 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89e0, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:25 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x1f02000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000100)="66b8dc0000000f23d00f21f86635300000000f23f8260fc72766b9ff02000066b89cd33a9866ba000000000f300f32650f01d13e0fc7aff275260f01d1660fc5fc57ea0700c500f3dbe3"}], 0x2a, 0x0, &(0x7f0000000000), 0x10000000000001bd) ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)="8ad969bdc8d0403ffc9d", 0xa}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000400)="193618f5a0a7f61f7de63a1adf5fc987d42492cbd7b2feaaa20fca5b8b8d1ecaf244dbf27f6e506166509fbf62e3de5031b234e9fa9aa0980650b84319dee1488f963135f483929e70c29cc7fb0a05dec63fb3830199b32c7761e1a8a6278829b049b7385241fea59782ab900c8597cfddc59ce77d9cbf1eb9cb5e511117c69a3a406e09cc09312191b331c7a0a1618cdf2d74912011d75038310987cc45307f5742448a9dc3f01cf696111612427bf1cd014b776096", 0xb6) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000200)={r6, 0x1}, 0x8) [ 438.459856] binder: BINDER_SET_CONTEXT_MGR already set [ 438.465514] netlink: 192 bytes leftover after parsing attributes in process `syz-executor5'. [ 438.504182] binder: 2123:2152 ioctl 40046207 0 returned -16 [ 438.543284] binder: 2123:2152 BC_INCREFS_DONE u0000000000000000 no match 03:31:25 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8949, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:25 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xff00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 438.550258] binder: 2123:2152 got transaction to invalid handle [ 438.556394] binder: 2123:2152 transaction failed 29201/-22, size 24-8 line 2852 [ 438.563320] netlink: 192 bytes leftover after parsing attributes in process `syz-executor5'. 03:31:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) [ 438.602576] Unknown ioctl 1075883590 [ 438.620074] Unknown ioctl 1075883590 [ 438.629362] Unknown ioctl 1075883590 [ 438.640489] binder: undelivered TRANSACTION_ERROR: 29201 [ 438.646372] binder: undelivered TRANSACTION_ERROR: 29201 03:31:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)) gettid() r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000300)="7affc4f1d7e4bb04870937bed60f68e7242dccc63fd635977808ad73c1cb6952679b5e6dd11fec4f23e24ce7af5a716c3fdc4bed424ea0499590f0b331bb2408da86104540b10e8d622ca619afb881be43bddc11e3ebbe7a16ecf7b6f001d44185784ee8554b62b28a601514679ae0c73f6c697e9c11066504a66369bb18105f55426a17a42aa9dcff0506ff000b10bc289d9f96cbe14675c2f5181482b4d1d97ea20648077990f0906629d06a84ffc267bdb8f1755ef95d78a4747ba0b8ac174689ee90814b317a69da8971b4acf4bb99e0b2c41677804b8a1fe10791f52eb7daf7238d557fd5bdebe7acca") bind$alg(r0, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r0, &(0x7f0000000080)=0xfffbfffffffffffc, 0x405) accept4$alg(r2, 0x0, 0x0, 0x800) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0xda) [ 438.652564] Unknown ioctl 1075883590 03:31:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xa8, 0x20000102000007) 03:31:25 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x88470000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:25 executing program 5: r0 = socket$inet6(0xa, 0xf, 0x4) sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000080)=@llc={0x1a, 0xffff, 0x8001, 0xcab, 0x0, 0x80, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)="7ec22a5e85320150", 0x8}, {&(0x7f0000000140)="bf75bf2c6356c497fa54a420d844736c8f935813f7c6a23b3305690b1faa014f4c6f3b3369abfd29ba6452801363503e82ffa8da12693bfe5ba642dfc8d35b14be8dc237008de120ff7dbb55204bae4034fdefeb302f5740039bf44586cee0358094040cac6c29f5bcdfda5309d35b5ffaa46a24441f3ad40c543a4f020f2f1054762bd34d7a8bba8d92beaef17a9f33fecce4e2c19eb4a15122262e003b50166a26eb250f807cbf763dd5e48476f9f6e5cab6976653227f1d988c3c0c47afe1497a642f7ab259fb", 0xc8}, {&(0x7f0000000280)="7cef0cc3b15933c684ceb41bde8fc7c53fb1fc069d40ae20e2b3c43ed45496b3e5f024499e8ddfdf5ec8c8f4a16e637f5fc8398a2dc9d7a5d71f213ef9cf24e2035d3819af36f477ef6a", 0x4a}, {&(0x7f0000000300)="1e4c71ffa03a65363d5718403c6ba4eb5f09aa913bbeb333e9a129e87bb8a2084c920da40e2a20d12b13b542303aaf4156fcc7f6518aa4507056c2ed64ceaf1504a252d25c19569f5b095afe0a10939a7d0d20a85a86a676f99eac7eed67afcd0e3251f653e678c8e8cbcddb19f710", 0x6f}, {&(0x7f0000000380)="e0a7c690782e39e312e6e54e49d6834e251ff7d44518c6e3b9e46c5a231928bbfbb164ddee317375775f250877f85d7152489f78a070cf9c349aff2c359acdaebaaf4f", 0x43}], 0x5, 0x0, 0x0, 0x4000000}, 0x4) r1 = socket(0xa, 0x1, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) setsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000000040)="060b4c7cbb0a4f091918a1264ace2ce1aaddb7b13036854c141f47cb4bdea62b59cebae23a6bcf12b8f327fde44b", 0x2e) 03:31:25 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8990, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 438.684965] Unknown ioctl 1075883590 03:31:25 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xffffff7f}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) [ 438.717006] Unknown ioctl 1075883590 [ 438.728171] Unknown ioctl 1075883590 [ 438.738895] Unknown ioctl 1075883590 [ 438.743006] Unknown ioctl 1075883590 [ 438.755205] Unknown ioctl 1075883590 [ 438.761231] Unknown ioctl 1075883590 03:31:25 executing program 4: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x2) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000100)=0x8, 0x4) creat(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='securityem0\x00'], &(0x7f00000002c0)=[&(0x7f0000000100), &(0x7f00000001c0)='vmnet1selinux\'self\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='mime_typeselinux%@\\\x00']) [ 438.806240] Unknown ioctl 1075883590 [ 438.838512] Unknown ioctl 1075883590 03:31:25 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x5000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:25 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a3, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:25 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) [ 438.862507] Unknown ioctl 1075883590 [ 438.875541] Unknown ioctl 1075883590 [ 438.891188] Unknown ioctl 1075883590 [ 438.906297] Unknown ioctl 1075883590 03:31:25 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(chacha20-simd,md4-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r4 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x7, 0x42801) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x90}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x10, 0x70bd2a, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x5) getdents64(r4, &(0x7f0000000400)=""/192, 0xa0) r6 = dup(r1) ioctl$ASHMEM_GET_PIN_STATUS(r6, 0x7709, 0x0) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x28010000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, r5, 0xe00, 0x70bd2c, 0x25dfdbfd, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xd}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r8, 0x0) r9 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x161) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000180)={@mcast2, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000200)={r10, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="07005494a424c4ff240935bf9bf366ed64b60800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x20) socket$inet_udp(0x2, 0x2, 0x0) bind$rds(r1, &(0x7f0000002ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) getsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f00000004c0)={@remote}, &(0x7f0000000500)=0xc) sendmsg$rds(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000004000), 0x0, &(0x7f0000003fb8)=ANY=[@ANYBLOB="480000000000000014010000010000000000000000000000", @ANYPTR=&(0x7f0000012f46)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e89300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="ba00000000000000", @ANYPTR=&(0x7f000001a000)=ANY=[@ANYPTR=&(0x7f0000001f34)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="cc00000000000000"], @ANYBLOB="010000000000000000000000000000000000000000000000"], 0x48}, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000540), &(0x7f0000000580)=0xc) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) [ 438.928478] Unknown ioctl 1075883590 [ 438.943972] Unknown ioctl 1075883590 [ 438.979276] Unknown ioctl 1075883590 [ 438.997184] Unknown ioctl 1075883590 [ 439.007414] Unknown ioctl 1075883590 [ 439.028104] Unknown ioctl 1075883590 [ 439.037486] Unknown ioctl 1075883590 [ 439.045265] Unknown ioctl 1075883590 [ 439.054459] Unknown ioctl -2126991741 [ 439.082396] Unknown ioctl 44672 [ 439.115175] Unknown ioctl 1075883590 [ 439.125099] Unknown ioctl 1075883590 [ 439.129626] Unknown ioctl 1075883590 [ 439.137803] Unknown ioctl 1075883590 [ 439.141875] Unknown ioctl 1075883590 [ 439.147114] Unknown ioctl 1075883590 [ 439.152318] Unknown ioctl 1075883590 [ 439.156379] Unknown ioctl 1075883590 [ 439.159217] Unknown ioctl 44672 03:31:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/151, 0x97}, {&(0x7f0000000100)=""/228, 0xe4}, {&(0x7f0000000200)=""/147, 0x93}, {&(0x7f00000002c0)=""/219, 0xdb}, {&(0x7f00000003c0)=""/247, 0xf7}], 0x5) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x0, @multicast1=0xe0000001, 0x0, 0x0, 'lc\x00'}, 0x2c) 03:31:26 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x88caffff, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:26 executing program 4: r0 = socket$packet(0x11, 0x5, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x200, 0x2000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x6}}, 0x7, 0x3}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e21, 0x3, @loopback={0x0, 0x1}, 0xd9}}}, 0x84) syz_emit_ethernet(0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff0000000000007700000008004500001c000000000000967838325ebdfab571cd4c4a05882f018f93d18ebe8ef646b927e2e6ef1378e0742b0728a9c13192df21e08b2b07f145a9c2d99468d1e86146889c34582e2d8b3c38b1b4e86585c5032ccd9a05890e3efacbd67e3cffca62023b1c61c8f53002d9b4bc7f54e2307de8d0c746bcbc1eabf1145d8592b06a2ecefa03d708eaadb096e05fa2e584f44a5018744795128cad50934658312a310c2e2fbb1c19a9159dc2f479eb2ff60fb975d33c7edcae053f8c9a185194ff"], 0x0) 03:31:26 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:26 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8921, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:26 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x600}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x3c0, 0x20000102000007) 03:31:26 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffffc}) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x800) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x1000, "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"}, &(0x7f0000000080)=0x1024) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3, 0x80) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000140)) sendmmsg(r0, &(0x7f0000000000), 0x0, 0x800) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x3}, 0xc) [ 439.161284] Unknown ioctl 1075883590 [ 439.167306] Unknown ioctl 1075883590 [ 439.171143] Unknown ioctl 1075883590 03:31:26 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x40030000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:26 executing program 1 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:26 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x10400) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x401, 0xff, 0xf5, 0x10001, 0xffff, 0x20, 0x1, 0x88b, 0x2, 0x414, 0x5, 0x2}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x48d1bb188132f0a3}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={r2, 0xac, "4ef48684f2e9e237b7ac47a1e34a5b98c9150a0ddc497ce79b3d281d5a2dd71c38d59e1e517511a6a5cf57cbfb35094f628b8f6bb7cac43d9f9d8f3d0addfe71f728872dfc5e1c5e9bb98de74dba369426d9b0d2c992ba10a58f96bd07afd591030a10773db5aef9ac619a70443a185ff5bd7afb885a15751f737c123f4152615af2503dfe70282eeca353f4ad67a06cfaf7f1d59d53cbd88ef885ba42699c5bc06701a49bf5f204a8182adb"}, &(0x7f00000002c0)=0xb4) socket$inet_udp(0x2, 0x2, 0x0) listen(r0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x10d, 0x10, &(0x7f0000000040), 0xc) fstatfs(r0, &(0x7f00000000c0)=""/145) 03:31:26 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8912, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:26 executing program 4: r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb857) syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x4400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg$unix(r1, &(0x7f0000005cc0)=[{&(0x7f00000005c0)=@abs, 0x6e, &(0x7f0000002a40), 0x0, &(0x7f0000002dc0)=[@rights={0x10, 0x1, 0x1}, @cred={0x20, 0x1, 0x2}], 0x30}], 0x1, 0x0) [ 439.333794] FAULT_INJECTION: forcing a failure. [ 439.333794] name failslab, interval 1, probability 0, space 0, times 0 [ 439.345119] CPU: 0 PID: 2273 Comm: syz-executor1 Not tainted 4.18.0-rc2+ #121 [ 439.352399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.361755] Call Trace: [ 439.364356] dump_stack+0x1c9/0x2b4 [ 439.367996] ? dump_stack_print_info.cold.2+0x52/0x52 [ 439.373205] should_fail.cold.4+0xa/0x1a [ 439.377276] ? lock_downgrade+0x8f0/0x8f0 [ 439.381432] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 439.386544] ? find_held_lock+0x36/0x1c0 [ 439.390623] ? find_held_lock+0x36/0x1c0 [ 439.394709] ? check_same_owner+0x340/0x340 [ 439.399043] ? rcu_note_context_switch+0x730/0x730 [ 439.403980] ? wait_for_completion+0x8d0/0x8d0 [ 439.408568] __should_failslab+0x124/0x180 [ 439.412810] should_failslab+0x9/0x14 [ 439.416621] kmem_cache_alloc+0x2af/0x760 [ 439.420785] getname_flags+0xd0/0x5a0 [ 439.424599] getname+0x19/0x20 [ 439.427804] do_sys_open+0x3a2/0x760 03:31:26 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xf00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 439.431526] ? filp_open+0x80/0x80 [ 439.435080] ? syscall_slow_exit_work+0x500/0x500 [ 439.439936] __x64_sys_open+0x7e/0xc0 [ 439.443749] do_syscall_64+0x1b9/0x820 [ 439.447653] ? finish_task_switch+0x1d3/0x890 [ 439.452277] ? syscall_return_slowpath+0x5e0/0x5e0 [ 439.457212] ? syscall_return_slowpath+0x31d/0x5e0 [ 439.462156] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 439.467529] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.472387] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.477576] RIP: 0033:0x40fcf1 03:31:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000180)=ANY=[@ANYBLOB="bd0a000000000000020000000000000005000000000000000000000000000000010100000000000001080392000000000000000000000000000000000000000000000000000000ff03000000000000040000000000000003000000000000009e010281000000000000000000000000000000000000000000000000000000000000000000000000"]) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000001480)=[{&(0x7f0000000140)="3020ef", 0x3}], 0x1, 0x0) [ 439.480760] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 439.500138] RSP: 002b:00007f4e00529bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 439.507855] RAX: ffffffffffffffda RBX: 00007f4e0052a6d4 RCX: 000000000040fcf1 [ 439.515133] RDX: 00007f4e00529bee RSI: 0000000000000002 RDI: 00007f4e00529bd0 [ 439.522404] RBP: 000000000072bea0 R08: 0000000000000000 R09: 000000000000001e 03:31:26 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 439.529679] R10: 0000000000000013 R11: 0000000000000293 R12: 0000000000000015 [ 439.536948] R13: 00000000004c23e9 R14: 00000000004d3740 R15: 0000000000000000 [ 439.613466] ýÿ: renamed from bridge0 [ 440.054659] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:0 03:31:27 executing program 1 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:27 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) socketpair(0x9, 0x7, 0x80000000, &(0x7f00000041c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f000000a040)=[{{&(0x7f0000004680)=@pppoe={0x0, 0x0, {0x0, @random}}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000005700)=""/127, 0x7f}, {&(0x7f0000005780)=""/228, 0xe4}, {&(0x7f0000005880)}, {&(0x7f00000058c0)=""/177, 0xb1}, {&(0x7f0000005980)=""/192, 0xc0}, {&(0x7f0000005a40)=""/106, 0x6a}, {&(0x7f0000005ac0)=""/47, 0x2f}, {&(0x7f0000005b00)=""/9, 0x9}], 0x9, &(0x7f0000005c00)=""/208, 0xd0, 0x9}, 0x8a6}, {{&(0x7f0000005d00)=@pptp={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f0000005f80)=[{&(0x7f0000005d80)=""/44, 0x2c}, {&(0x7f0000005dc0)=""/255, 0xff}, {&(0x7f0000005ec0)=""/60, 0x3c}, {&(0x7f0000005f00)=""/49, 0x31}, {&(0x7f0000005f40)=""/52, 0x34}], 0x5, &(0x7f0000006000)=""/161, 0xa1, 0x4}, 0x7fff}, {{&(0x7f00000060c0)=@alg, 0x80, &(0x7f0000006240)=[{&(0x7f0000006140)=""/197, 0xc5}], 0x1}, 0x6}, {{&(0x7f0000006280)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f00000075c0)=[{&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/79, 0x4f}, {&(0x7f0000007380)=""/76, 0x4c}, {&(0x7f0000007400)=""/155, 0x9b}, {&(0x7f00000074c0)=""/254, 0xfe}], 0x5, &(0x7f0000007640)=""/194, 0xc2, 0x3f}, 0x81}, {{0x0, 0x0, &(0x7f00000088c0)=[{&(0x7f0000000140)=""/66, 0x42}, {&(0x7f00000077c0)=""/4096, 0x1000}, {&(0x7f00000087c0)=""/252, 0xfc}], 0x3, &(0x7f0000008900), 0x0, 0x8}, 0xffffffffffffff24}, {{&(0x7f0000008940)=@xdp, 0x80, &(0x7f0000008b80)=[{&(0x7f00000089c0)=""/225, 0xfffffffffffffe98}, {&(0x7f0000008ac0)}, {&(0x7f0000008b00)=""/36, 0x24}, {&(0x7f0000008b40)=""/50, 0x32}], 0x4, &(0x7f0000008bc0)=""/48, 0x30, 0x3ff}, 0x400}, {{&(0x7f0000008c00)=@ax25, 0x80, &(0x7f0000009c80)=[{&(0x7f0000008c80)=""/4096, 0x84b86c2da8339951}], 0x1, &(0x7f0000009cc0)=""/204, 0xcc, 0x3}, 0x5}, {{&(0x7f0000009dc0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000009fc0)=[{&(0x7f0000009e40)}, {&(0x7f0000009e80)=""/43, 0x2b}, {&(0x7f0000009ec0)=""/193, 0xc1}], 0x3, &(0x7f000000a000)=""/3, 0x3, 0x7}, 0x2}], 0x8, 0x40000000, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x3, 0x5, 0x3, 0x300, 0xb533}) sendmsg$can_raw(r1, &(0x7f000000a300)={&(0x7f000000a240)={0x1d, r2}, 0x10, &(0x7f000000a2c0)={&(0x7f000000a280)=@can={{0x1, 0x3, 0x4, 0x7f}, 0x2, 0x1, 0x0, 0x0, "0a8be8037dc774ef"}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4000) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000080)=""/21, 0x212000, 0x900}, 0x18) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x6}) 03:31:27 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x9000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:27 executing program 4: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000040)=0xf2, 0x3f, 0x0) mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x2, 0x0) mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) 03:31:27 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8864, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:27 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0xc0189436, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:27 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400400, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x20011, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040), &(0x7f0000000100)=0x4) 03:31:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xc00000000000000, 0x20000102000007) [ 440.237956] FAULT_INJECTION: forcing a failure. [ 440.237956] name failslab, interval 1, probability 0, space 0, times 0 [ 440.249299] CPU: 0 PID: 2322 Comm: syz-executor1 Not tainted 4.18.0-rc2+ #121 [ 440.256576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.265931] Call Trace: [ 440.268526] dump_stack+0x1c9/0x2b4 [ 440.272169] ? dump_stack_print_info.cold.2+0x52/0x52 [ 440.277378] should_fail.cold.4+0xa/0x1a [ 440.281448] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 440.286564] ? trace_hardirqs_on+0x10/0x10 [ 440.290816] ? print_usage_bug+0xc0/0xc0 [ 440.294890] ? find_held_lock+0x36/0x1c0 [ 440.298981] ? check_same_owner+0x340/0x340 [ 440.303316] ? rcu_note_context_switch+0x730/0x730 [ 440.308254] ? graph_lock+0x170/0x170 [ 440.312064] __should_failslab+0x124/0x180 [ 440.316309] should_failslab+0x9/0x14 [ 440.320118] kmem_cache_alloc+0x2af/0x760 [ 440.324278] ? trace_hardirqs_on+0x10/0x10 [ 440.328528] ? find_held_lock+0x36/0x1c0 [ 440.332602] get_empty_filp+0x12d/0x530 03:31:27 executing program 4: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="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", 0x594, 0x8000, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) truncate(&(0x7f0000000180)='./file0\x00', 0xffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x4000, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20}, [{}]}, 0x58) 03:31:27 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8910, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:27 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xf00}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 440.336581] ? proc_nr_files+0x60/0x60 [ 440.340473] ? lock_downgrade+0x8f0/0x8f0 [ 440.344631] ? graph_lock+0x170/0x170 [ 440.348438] ? kasan_check_read+0x11/0x20 [ 440.352588] ? rcu_is_watching+0x8c/0x150 [ 440.356742] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 440.361159] path_openat+0x11e/0x4e10 [ 440.364978] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 440.370007] ? path_lookupat.isra.45+0xbf0/0xbf0 [ 440.374778] ? find_held_lock+0x36/0x1c0 [ 440.378859] ? lock_downgrade+0x8f0/0x8f0 [ 440.383017] ? do_sys_open+0x3a2/0x760 [ 440.386918] ? kasan_check_read+0x11/0x20 [ 440.391076] ? do_raw_spin_unlock+0xa7/0x2f0 [ 440.395498] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 440.400095] ? __lock_is_held+0xb5/0x140 [ 440.404166] ? _raw_spin_unlock+0x22/0x30 [ 440.408322] ? __alloc_fd+0x34e/0x710 [ 440.412126] ? usercopy_warn+0x120/0x120 [ 440.416205] do_filp_open+0x255/0x380 [ 440.420011] ? may_open_dev+0x100/0x100 [ 440.423982] ? strncpy_from_user+0x3be/0x510 [ 440.428381] ? mpi_free.cold.1+0x19/0x19 [ 440.432426] ? get_unused_fd_flags+0x122/0x1a0 [ 440.436992] ? getname_flags+0x26e/0x5a0 [ 440.441046] do_sys_open+0x584/0x760 [ 440.444745] ? filp_open+0x80/0x80 [ 440.448273] __x64_sys_open+0x7e/0xc0 [ 440.452060] do_syscall_64+0x1b9/0x820 [ 440.456803] ? syscall_slow_exit_work+0x500/0x500 [ 440.461628] ? syscall_return_slowpath+0x5e0/0x5e0 [ 440.466542] ? syscall_return_slowpath+0x31d/0x5e0 [ 440.471458] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 440.476810] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.481641] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.486815] RIP: 0033:0x40fcf1 [ 440.489987] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 440.509224] RSP: 002b:00007f4e00529bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 440.516925] RAX: ffffffffffffffda RBX: 00007f4e0052a6d4 RCX: 000000000040fcf1 [ 440.524176] RDX: 00007f4e00529bee RSI: 0000000000000002 RDI: 00007f4e00529bd0 [ 440.531427] RBP: 000000000072bea0 R08: 0000000000000000 R09: 000000000000001e 03:31:27 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8911, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 440.538679] R10: 0000000000000013 R11: 0000000000000293 R12: 0000000000000015 [ 440.545928] R13: 00000000004c23e9 R14: 00000000004d3740 R15: 0000000000000001 03:31:27 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8100000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:27 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x21f}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:27 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x9}, 0x1c) recvfrom(r0, &(0x7f00000002c0)=""/4096, 0x1000, 0x0, &(0x7f00000022c0)=@ethernet={0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x709000) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7}, 0xb) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x40, 0x4) sendto$inet6(r0, &(0x7f0000000140)="05", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x27a0, 0x100) sendto$unix(r1, &(0x7f00000012c0)="06e39c26bd37dcdb2a142eb16f13620aa8b63af5b3ef692732d793d9ddf56d3273546fdfb18c4bebabfbb6d5d230c622140ea9000376aa43fc633da63aa97533a11e997e824d92b97f93e5d63782fdf37d587a589fbef485f6fd344480c04db56f8d22a90bfac168f5595f20694304e517970c82fae4e9f842246bcb51a4b84deec6b253f8f0acdc385ca243579431e0e9d2ec5a66e22d362a6f54d1ca3c137d5596af2d15fc55f7c6df3ad0bee3c137327b2ed80b06ad8e19035d43cdb1683e425c372658e9fbdbca", 0xc9, 0x4040804, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 03:31:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xe003000000000000, 0x20000102000007) 03:31:27 executing program 1 (fault-call:4 fault-nth:2): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:27 executing program 3: mmap(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x1000, 0x3, &(0x7f0000a95000/0x1000)=nil) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000040)={0x2, 0x1, 0xffffffff80000000}) sigaltstack(&(0x7f0000a94000/0x4000)=nil, &(0x7f00000000c0)) 03:31:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000055e8e35f81cbca62d87e8c49000000000060af04ca0108040000000000000000000000ffffac1414bbff0200000000000000000000000000010420655400000000004b0bbe55d3a17f300088be000000000800020000000000000000000000080065580000"], 0xfdef) socket(0x13, 0xa6dc621bb54abc22, 0x6) 03:31:27 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5450, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:27 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x600000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 440.812752] FAULT_INJECTION: forcing a failure. [ 440.812752] name failslab, interval 1, probability 0, space 0, times 0 [ 440.824117] CPU: 0 PID: 2390 Comm: syz-executor1 Not tainted 4.18.0-rc2+ #121 [ 440.831384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.840719] Call Trace: [ 440.843298] dump_stack+0x1c9/0x2b4 [ 440.846924] ? dump_stack_print_info.cold.2+0x52/0x52 [ 440.852103] should_fail.cold.4+0xa/0x1a [ 440.856153] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 440.861244] ? trace_hardirqs_on+0x10/0x10 [ 440.865475] ? print_usage_bug+0xc0/0xc0 [ 440.869535] ? find_held_lock+0x36/0x1c0 [ 440.873598] ? check_same_owner+0x340/0x340 [ 440.877905] ? rcu_note_context_switch+0x730/0x730 [ 440.882816] ? graph_lock+0x170/0x170 [ 440.886601] __should_failslab+0x124/0x180 [ 440.890821] should_failslab+0x9/0x14 [ 440.894607] kmem_cache_alloc+0x2af/0x760 [ 440.898743] ? trace_hardirqs_on+0x10/0x10 [ 440.902966] ? find_held_lock+0x36/0x1c0 [ 440.907021] get_empty_filp+0x12d/0x530 [ 440.910993] ? proc_nr_files+0x60/0x60 [ 440.914871] ? lock_downgrade+0x8f0/0x8f0 [ 440.919009] ? graph_lock+0x170/0x170 [ 440.922799] ? kasan_check_read+0x11/0x20 [ 440.926928] ? rcu_is_watching+0x8c/0x150 [ 440.931076] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 440.935472] path_openat+0x11e/0x4e10 [ 440.939266] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 440.944267] ? path_lookupat.isra.45+0xbf0/0xbf0 [ 440.949013] ? find_held_lock+0x36/0x1c0 [ 440.953070] ? lock_downgrade+0x8f0/0x8f0 [ 440.957200] ? do_sys_open+0x3a2/0x760 [ 440.961072] ? kasan_check_read+0x11/0x20 [ 440.965206] ? do_raw_spin_unlock+0xa7/0x2f0 [ 440.969598] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 440.974162] ? __lock_is_held+0xb5/0x140 [ 440.978215] ? _raw_spin_unlock+0x22/0x30 [ 440.982345] ? __alloc_fd+0x34e/0x710 [ 440.986128] ? usercopy_warn+0x120/0x120 [ 440.990179] do_filp_open+0x255/0x380 [ 440.993964] ? may_open_dev+0x100/0x100 [ 440.997922] ? strncpy_from_user+0x3be/0x510 [ 441.002325] ? mpi_free.cold.1+0x19/0x19 [ 441.006376] ? get_unused_fd_flags+0x122/0x1a0 [ 441.010943] ? getname_flags+0x26e/0x5a0 [ 441.014992] do_sys_open+0x584/0x760 [ 441.018694] ? filp_open+0x80/0x80 [ 441.022224] __x64_sys_open+0x7e/0xc0 [ 441.026012] do_syscall_64+0x1b9/0x820 [ 441.029889] ? finish_task_switch+0x1d3/0x890 [ 441.034367] ? syscall_return_slowpath+0x5e0/0x5e0 [ 441.039279] ? syscall_return_slowpath+0x31d/0x5e0 [ 441.044197] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 441.049547] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.054375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.059544] RIP: 0033:0x40fcf1 [ 441.062714] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 441.081949] RSP: 002b:00007f4e00529bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 441.089642] RAX: ffffffffffffffda RBX: 00007f4e0052a6d4 RCX: 000000000040fcf1 [ 441.096893] RDX: 00007f4e00529bee RSI: 0000000000000002 RDI: 00007f4e00529bd0 [ 441.104155] RBP: 000000000072bea0 R08: 0000000000000000 R09: 000000000000001e 03:31:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x4000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:28 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x4020940d, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 441.111404] R10: 0000000000000013 R11: 0000000000000293 R12: 0000000000000015 [ 441.118665] R13: 00000000004c23e9 R14: 00000000004d3740 R15: 0000000000000002 03:31:28 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) sendmsg$alg(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="98000000000000001701000002000000"], 0x10}, 0x0) listen(r0, 0x5eb857) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can={0x0, 0x0}, &(0x7f0000752ffc)=0x10, 0x0) connect$can_bcm(r2, &(0x7f0000000040)={0x1d, r3}, 0x10) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) [ 441.162637] IPVS: ftp: loaded support on port[0] = 21 03:31:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x8802000000000000, 0x20000102000007) 03:31:28 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x800000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:28 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x891f, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:28 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xfec0000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xeffdffff, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:28 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8992, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 441.413842] IPVS: ftp: loaded support on port[0] = 21 03:31:28 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") clone(0x0, &(0x7f000075cf53), &(0x7f000015dffc), &(0x7f0000b25ffc), &(0x7f0000923000)) prctl$getreaper(0x1a, &(0x7f00000000c0)) 03:31:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x20020000, 0x20000102000007) 03:31:28 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x1000000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:28 executing program 1 (fault-call:4 fault-nth:3): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:28 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8901, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:28 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x58050000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:28 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") fcntl$setstatus(r1, 0x4, 0x4000) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000040)={'broute\x00'}, &(0x7f0000000100)=0x78) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) dup2(r1, r0) [ 441.743017] FAULT_INJECTION: forcing a failure. [ 441.743017] name failslab, interval 1, probability 0, space 0, times 0 [ 441.754521] CPU: 1 PID: 2458 Comm: syz-executor1 Not tainted 4.18.0-rc2+ #121 [ 441.761795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.771142] Call Trace: [ 441.773737] dump_stack+0x1c9/0x2b4 [ 441.777371] ? dump_stack_print_info.cold.2+0x52/0x52 [ 441.782576] should_fail.cold.4+0xa/0x1a [ 441.786643] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 441.791746] ? graph_lock+0x170/0x170 [ 441.795557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.801093] ? pick_link+0x260/0xb00 [ 441.804817] ? find_held_lock+0x36/0x1c0 [ 441.808892] ? lock_downgrade+0x8f0/0x8f0 [ 441.813046] ? rcu_is_watching+0x8c/0x150 [ 441.817195] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 441.821613] __should_failslab+0x124/0x180 [ 441.825852] should_failslab+0x9/0x14 [ 441.829652] kmem_cache_alloc_trace+0x4b/0x780 [ 441.834236] ? delayed_put_pid+0x30/0x30 [ 441.838305] ? iget5_locked+0x190/0x190 [ 441.842283] ? security_inode_permission+0xd2/0x100 [ 441.847304] proc_self_get_link+0x16f/0x1c0 [ 441.851628] ? proc_ns_dir_readdir+0x560/0x560 [ 441.856213] link_path_walk+0x1013/0x1540 [ 441.860359] ? pick_link+0xb00/0xb00 [ 441.864094] ? walk_component+0x2630/0x2630 [ 441.868420] ? get_empty_filp+0x382/0x530 [ 441.872572] ? proc_nr_files+0x60/0x60 [ 441.876470] ? lock_downgrade+0x8f0/0x8f0 [ 441.880634] ? perf_trace_lock+0xde/0x920 [ 441.884803] path_openat+0x24e/0x4e10 [ 441.888626] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 441.893645] ? path_lookupat.isra.45+0xbf0/0xbf0 [ 441.898412] ? find_held_lock+0x36/0x1c0 [ 441.902491] ? lock_downgrade+0x8f0/0x8f0 [ 441.906647] ? do_sys_open+0x3a2/0x760 [ 441.910544] ? kasan_check_read+0x11/0x20 [ 441.914700] ? do_raw_spin_unlock+0xa7/0x2f0 [ 441.919113] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 441.923693] ? __lock_is_held+0xb5/0x140 [ 441.927754] ? _raw_spin_unlock+0x22/0x30 [ 441.931888] ? __alloc_fd+0x34e/0x710 [ 441.935677] ? usercopy_warn+0x120/0x120 [ 441.939737] do_filp_open+0x255/0x380 [ 441.943526] ? may_open_dev+0x100/0x100 [ 441.947485] ? strncpy_from_user+0x3be/0x510 [ 441.951896] ? get_unused_fd_flags+0x122/0x1a0 [ 441.956474] ? getname_flags+0x26e/0x5a0 [ 441.960550] do_sys_open+0x584/0x760 [ 441.964263] ? filp_open+0x80/0x80 [ 441.967795] ? syscall_slow_exit_work+0x500/0x500 [ 441.972628] __x64_sys_open+0x7e/0xc0 [ 441.976417] do_syscall_64+0x1b9/0x820 [ 441.980291] ? finish_task_switch+0x1d3/0x890 [ 441.984773] ? syscall_return_slowpath+0x5e0/0x5e0 [ 441.989692] ? syscall_return_slowpath+0x31d/0x5e0 [ 441.994615] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 441.999969] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.004807] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.009983] RIP: 0033:0x40fcf1 [ 442.013172] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 442.032516] RSP: 002b:00007f4e00529bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 03:31:29 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x9effffff00000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 442.040213] RAX: ffffffffffffffda RBX: 00007f4e0052a6d4 RCX: 000000000040fcf1 [ 442.047467] RDX: 00007f4e00529bee RSI: 0000000000000002 RDI: 00007f4e00529bd0 [ 442.054731] RBP: 000000000072bea0 R08: 0000000000000000 R09: 000000000000001e [ 442.061987] R10: 0000000000000013 R11: 0000000000000293 R12: 0000000000000015 [ 442.069245] R13: 00000000004c23e9 R14: 00000000004d3740 R15: 0000000000000003 03:31:29 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8906, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:29 executing program 3: io_setup(0x10000, &(0x7f0000000480)=0x0) io_pgetevents(r0, 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000080)={&(0x7f0000000040), 0x8}) 03:31:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x36, 0x20000102000007) 03:31:29 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x88a8ffff, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:29 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x4000000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:29 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8993, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mincore(&(0x7f0000601000/0x600000)=nil, 0x600000, &(0x7f0000000080)=""/144) fcntl$setflags(r0, 0x2, 0x1) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x400, 0x402) 03:31:29 executing program 1 (fault-call:4 fault-nth:4): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:29 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet(0x2, 0x1, 0x1000) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x80, 0x3, 0x8}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x3}, 0x8) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(salsa20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r4 = accept$alg(r1, 0x0, 0x0) recvmsg(r4, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/78, 0xfffffe06}], 0x1}, 0x0) 03:31:29 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x3f00}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:29 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0xc0045877, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 442.410654] FAULT_INJECTION: forcing a failure. [ 442.410654] name failslab, interval 1, probability 0, space 0, times 0 [ 442.422286] CPU: 0 PID: 2506 Comm: syz-executor1 Not tainted 4.18.0-rc2+ #121 [ 442.429561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.438910] Call Trace: [ 442.441504] dump_stack+0x1c9/0x2b4 [ 442.445144] ? dump_stack_print_info.cold.2+0x52/0x52 [ 442.450346] ? check_noncircular+0x20/0x20 [ 442.454590] ? print_usage_bug+0xc0/0xc0 [ 442.458673] should_fail.cold.4+0xa/0x1a [ 442.462750] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 442.467869] ? __lock_acquire+0x7fc/0x5020 [ 442.472107] ? graph_lock+0x170/0x170 [ 442.475912] ? print_usage_bug+0xc0/0xc0 [ 442.479983] ? find_held_lock+0x36/0x1c0 [ 442.484056] ? __lock_is_held+0xb5/0x140 [ 442.488136] ? check_same_owner+0x340/0x340 [ 442.492472] ? __lock_acquire+0x7fc/0x5020 [ 442.496724] ? rcu_note_context_switch+0x730/0x730 [ 442.501666] __should_failslab+0x124/0x180 [ 442.505912] should_failslab+0x9/0x14 03:31:29 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xf000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:29 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x894c, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 442.509720] kmem_cache_alloc+0x2af/0x760 [ 442.513874] ? trace_hardirqs_on+0x10/0x10 [ 442.518117] ? print_usage_bug+0xc0/0xc0 [ 442.522184] __d_alloc+0xc8/0xd50 [ 442.525649] ? shrink_dcache_for_umount+0x2b0/0x2b0 [ 442.530668] ? __lock_acquire+0x7fc/0x5020 [ 442.534905] ? print_usage_bug+0xc0/0xc0 [ 442.538975] ? print_usage_bug+0xc0/0xc0 [ 442.543050] ? trace_hardirqs_on+0x10/0x10 [ 442.547303] d_alloc+0x96/0x380 [ 442.550588] ? __lock_acquire+0x7fc/0x5020 [ 442.554829] ? __d_alloc+0xd50/0xd50 03:31:29 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xfc00}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:29 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a2, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 442.558555] d_alloc_parallel+0x15a/0x1ea0 [ 442.562803] ? trace_hardirqs_on+0x10/0x10 [ 442.567045] ? trace_hardirqs_on+0x10/0x10 [ 442.571292] ? kasan_check_read+0x11/0x20 [ 442.575441] ? rcu_is_watching+0x8c/0x150 [ 442.579601] ? __d_lookup_rcu+0xaa0/0xaa0 [ 442.583755] ? print_usage_bug+0xc0/0xc0 [ 442.587826] ? find_held_lock+0x36/0x1c0 [ 442.591906] ? lock_downgrade+0x8f0/0x8f0 [ 442.596064] ? kasan_check_read+0x11/0x20 [ 442.600212] ? rcu_is_watching+0x8c/0x150 [ 442.604364] ? rcu_report_qs_rnp+0x7a0/0x7a0 03:31:29 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xf0ffffffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:29 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x891e, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 442.608776] ? __lockdep_init_map+0x105/0x590 [ 442.613276] ? __lockdep_init_map+0x105/0x590 [ 442.617786] ? lockdep_init_map+0x9/0x10 [ 442.621851] ? __init_waitqueue_head+0x9e/0x150 [ 442.626520] ? init_wait_entry+0x1c0/0x1c0 [ 442.630770] __lookup_slow+0x1e6/0x540 [ 442.634662] ? vfs_unlink+0x510/0x510 [ 442.638473] ? down_read+0xb5/0x1d0 [ 442.642101] ? lookup_slow+0x49/0x80 [ 442.645819] ? __down_interruptible+0x700/0x700 [ 442.650488] ? lookup_fast+0x470/0x12a0 [ 442.654469] ? __follow_mount_rcu.isra.36.part.37+0x890/0x890 [ 442.660356] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 442.665379] lookup_slow+0x57/0x80 [ 442.668928] walk_component+0x94a/0x2630 [ 442.672995] ? find_held_lock+0x36/0x1c0 [ 442.677076] ? path_init+0x2340/0x2340 [ 442.680969] ? lock_downgrade+0x8f0/0x8f0 [ 442.685123] ? kasan_check_read+0x11/0x20 [ 442.689277] ? rcu_is_watching+0x8c/0x150 [ 442.693435] ? pid_task+0x115/0x200 [ 442.697063] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 442.701590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.707136] ? generic_permission+0x121/0x520 [ 442.711639] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.717180] ? security_inode_permission+0xd2/0x100 [ 442.722196] ? inode_permission+0xb2/0x560 [ 442.726436] link_path_walk+0xa6e/0x1540 [ 442.730504] ? pick_link+0xb00/0xb00 [ 442.734235] ? walk_component+0x2630/0x2630 [ 442.738562] ? get_empty_filp+0x382/0x530 [ 442.742722] ? proc_nr_files+0x60/0x60 [ 442.746616] ? lock_downgrade+0x8f0/0x8f0 [ 442.750766] ? graph_lock+0x170/0x170 [ 442.754567] ? kasan_check_read+0x11/0x20 [ 442.758720] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 442.763136] path_openat+0x24e/0x4e10 [ 442.766957] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 442.771980] ? path_lookupat.isra.45+0xbf0/0xbf0 [ 442.776743] ? find_held_lock+0x36/0x1c0 [ 442.780821] ? lock_downgrade+0x8f0/0x8f0 [ 442.784970] ? do_sys_open+0x3a2/0x760 [ 442.788866] ? kasan_check_read+0x11/0x20 [ 442.793016] ? do_raw_spin_unlock+0xa7/0x2f0 [ 442.797429] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 442.802015] ? __lock_is_held+0xb5/0x140 [ 442.806086] ? _raw_spin_unlock+0x22/0x30 [ 442.810233] ? __alloc_fd+0x34e/0x710 [ 442.814033] ? usercopy_warn+0x120/0x120 [ 442.818106] do_filp_open+0x255/0x380 [ 442.821911] ? may_open_dev+0x100/0x100 [ 442.825888] ? strncpy_from_user+0x3be/0x510 [ 442.830303] ? simple_attr_release+0x50/0x50 [ 442.834714] ? get_unused_fd_flags+0x122/0x1a0 [ 442.839307] ? getname_flags+0x26e/0x5a0 [ 442.843378] do_sys_open+0x584/0x760 [ 442.847095] ? filp_open+0x80/0x80 [ 442.850640] __x64_sys_open+0x7e/0xc0 [ 442.854445] do_syscall_64+0x1b9/0x820 [ 442.858333] ? finish_task_switch+0x1d3/0x890 [ 442.862834] ? syscall_return_slowpath+0x5e0/0x5e0 [ 442.867770] ? syscall_return_slowpath+0x31d/0x5e0 [ 442.872709] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 442.878079] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 442.882934] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.888125] RIP: 0033:0x40fcf1 [ 442.891305] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 442.910771] RSP: 002b:00007f4e00529bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 442.918490] RAX: ffffffffffffffda RBX: 00007f4e0052a6d4 RCX: 000000000040fcf1 [ 442.925760] RDX: 00007f4e00529bee RSI: 0000000000000002 RDI: 00007f4e00529bd0 [ 442.933128] RBP: 000000000072bea0 R08: 0000000000000000 R09: 000000000000001e [ 442.940396] R10: 0000000000000013 R11: 0000000000000293 R12: 0000000000000015 [ 442.947664] R13: 00000000004c23e9 R14: 00000000004d3740 R15: 0000000000000004 03:31:29 executing program 3: socket$l2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x240) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000040)=0x3) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00005f4000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="e599b5bf867ff68f91aa7855fb54211300", 0x11) 03:31:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a000000005a8e0d0a69eed935d3128bcd31a4b467ed0ebff9bc5ff7472e685617bc97da0cc39c82a116e503da9b6c2c93bbad05049d6b3142b9907e") fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f0000000200)=[@dead_binder_done={0x40086310, 0x4}, @request_death={0x400c630e, 0x4, 0x1}], 0x63, 0x0, &(0x7f0000000240)="1efb0f74ca15cd680f3596e90468f69ef154aecd314fa0b80561201f911a276421cee91986e3e307b804eef8b65c4107500066b21d73f1ec8d30834fa215eb1aa0a8b679e111e63da0921ab0968bec75a1cd146ea372c92b5fb4edcdd823871a3cd2e4"}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fchown(r0, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/29, &(0x7f0000000040)=0x1d) 03:31:30 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x3f00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:30 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8945, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:30 executing program 1 (fault-call:4 fault-nth:5): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:30 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet(0x2, 0x1, 0x1000) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x80, 0x3, 0x8}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x3}, 0x8) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(salsa20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r4 = accept$alg(r1, 0x0, 0x0) recvmsg(r4, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/78, 0xfffffe06}], 0x1}, 0x0) 03:31:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}]}, 0x110) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000976000), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000ad6fad)='\x00', 0x1, 0x3fffffd, &(0x7f0000254000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 03:31:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x5200000000000000, 0x20000102000007) 03:31:30 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xfffffdef, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x1, 0x2, 0x2c, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x100, 0x0, 0x5d37}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000480)={0x0, 0x1000, 0xffff, 'queue1\x00'}) read(r0, &(0x7f0000000040)=""/11, 0xffed) ioctl$KDENABIO(r1, 0x4b36) read(r0, &(0x7f0000000280)=""/211, 0xd3) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)) r2 = syz_open_pts(r0, 0x34800) ioctl$TCXONC(r2, 0x540a, 0x0) 03:31:30 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8980, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 443.344693] FAULT_INJECTION: forcing a failure. [ 443.344693] name failslab, interval 1, probability 0, space 0, times 0 [ 443.356143] CPU: 1 PID: 2571 Comm: syz-executor1 Not tainted 4.18.0-rc2+ #121 [ 443.363421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.372771] Call Trace: [ 443.375365] dump_stack+0x1c9/0x2b4 [ 443.379011] ? dump_stack_print_info.cold.2+0x52/0x52 [ 443.384215] ? __lock_acquire+0x7fc/0x5020 [ 443.388466] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 443.394031] should_fail.cold.4+0xa/0x1a [ 443.398103] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 443.403217] ? trace_hardirqs_on+0x10/0x10 [ 443.407457] ? graph_lock+0x170/0x170 [ 443.411259] ? lock_downgrade+0x8f0/0x8f0 [ 443.415416] ? find_held_lock+0x36/0x1c0 [ 443.419480] ? __lock_is_held+0xb5/0x140 [ 443.423555] ? check_same_owner+0x340/0x340 [ 443.427877] ? rcu_note_context_switch+0x730/0x730 [ 443.432815] __should_failslab+0x124/0x180 [ 443.437059] should_failslab+0x9/0x14 [ 443.440858] kmem_cache_alloc+0x2af/0x760 [ 443.444999] ? find_held_lock+0x36/0x1c0 [ 443.449063] ? proc_i_callback+0x30/0x30 [ 443.453112] proc_alloc_inode+0x1b/0x190 [ 443.457163] alloc_inode+0x63/0x190 [ 443.460780] new_inode_pseudo+0x71/0x1a0 [ 443.464827] ? prune_icache_sb+0x1b0/0x1b0 [ 443.469047] ? kasan_check_read+0x11/0x20 [ 443.473228] ? rcu_is_watching+0x8c/0x150 [ 443.477394] new_inode+0x1c/0x40 [ 443.480747] proc_pid_make_inode+0x23/0x210 [ 443.485053] proc_pident_instantiate+0x8c/0x2a0 [ 443.489708] proc_pident_lookup+0x1cc/0x230 [ 443.494019] ? init_wait_entry+0x1c0/0x1c0 [ 443.498245] proc_tgid_base_lookup+0x29/0x30 [ 443.502640] __lookup_slow+0x2b5/0x540 [ 443.506514] ? vfs_unlink+0x510/0x510 [ 443.510302] ? down_read+0xb5/0x1d0 [ 443.513911] ? lookup_slow+0x49/0x80 [ 443.517609] ? __down_interruptible+0x700/0x700 [ 443.522258] ? lookup_fast+0x470/0x12a0 [ 443.526223] ? __follow_mount_rcu.isra.36.part.37+0x890/0x890 [ 443.532108] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 443.537111] lookup_slow+0x57/0x80 [ 443.540636] walk_component+0x94a/0x2630 [ 443.544679] ? find_held_lock+0x36/0x1c0 [ 443.548727] ? path_init+0x2340/0x2340 [ 443.552597] ? lock_downgrade+0x8f0/0x8f0 [ 443.556733] ? kasan_check_read+0x11/0x20 [ 443.560864] ? rcu_is_watching+0x8c/0x150 [ 443.564993] ? pid_task+0x115/0x200 [ 443.568607] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 443.573012] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.578545] ? generic_permission+0x121/0x520 [ 443.583033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.588555] ? security_inode_permission+0xd2/0x100 [ 443.593555] ? inode_permission+0xb2/0x560 [ 443.597773] link_path_walk+0xa6e/0x1540 [ 443.601815] ? pick_link+0xb00/0xb00 [ 443.605517] ? walk_component+0x2630/0x2630 [ 443.609823] ? get_empty_filp+0x382/0x530 [ 443.613958] ? proc_nr_files+0x60/0x60 [ 443.617836] ? lock_downgrade+0x8f0/0x8f0 [ 443.621974] ? graph_lock+0x170/0x170 [ 443.625776] ? kasan_check_read+0x11/0x20 [ 443.629919] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 443.634315] path_openat+0x24e/0x4e10 [ 443.638127] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 443.643127] ? path_lookupat.isra.45+0xbf0/0xbf0 [ 443.647870] ? find_held_lock+0x36/0x1c0 [ 443.651922] ? lock_downgrade+0x8f0/0x8f0 [ 443.656054] ? do_sys_open+0x3a2/0x760 [ 443.659931] ? kasan_check_read+0x11/0x20 [ 443.664066] ? do_raw_spin_unlock+0xa7/0x2f0 [ 443.668460] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 443.673031] ? __lock_is_held+0xb5/0x140 [ 443.677082] ? _raw_spin_unlock+0x22/0x30 [ 443.681214] ? __alloc_fd+0x34e/0x710 [ 443.685000] ? usercopy_warn+0x120/0x120 [ 443.689057] do_filp_open+0x255/0x380 [ 443.692843] ? may_open_dev+0x100/0x100 [ 443.696798] ? strncpy_from_user+0x3be/0x510 [ 443.701202] ? simple_attr_release+0x50/0x50 [ 443.705595] ? get_unused_fd_flags+0x122/0x1a0 [ 443.710165] ? getname_flags+0x26e/0x5a0 [ 443.714214] do_sys_open+0x584/0x760 [ 443.717914] ? filp_open+0x80/0x80 [ 443.721450] ? syscall_slow_exit_work+0x500/0x500 [ 443.726276] __x64_sys_open+0x7e/0xc0 [ 443.730061] do_syscall_64+0x1b9/0x820 [ 443.733933] ? syscall_return_slowpath+0x5e0/0x5e0 [ 443.738855] ? syscall_return_slowpath+0x31d/0x5e0 [ 443.743773] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 443.749120] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 443.753953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.759127] RIP: 0033:0x40fcf1 [ 443.762293] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 443.781527] RSP: 002b:00007f4e00529bb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 443.789221] RAX: ffffffffffffffda RBX: 00007f4e0052a6d4 RCX: 000000000040fcf1 03:31:30 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xb000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 443.796472] RDX: 00007f4e00529bee RSI: 0000000000000002 RDI: 00007f4e00529bd0 [ 443.803724] RBP: 000000000072bea0 R08: 0000000000000000 R09: 000000000000001e [ 443.810974] R10: 0000000000000013 R11: 0000000000000293 R12: 0000000000000015 [ 443.818229] R13: 00000000004c23e9 R14: 00000000004d3740 R15: 0000000000000005 03:31:30 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3f, 0x2100) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x3, 0x4) r2 = socket$inet6(0xa, 0x1, 0x80000000) ioctl(r2, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 03:31:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x33000000, 0x20000102000007) 03:31:30 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xf0ffff}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:30 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8937, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:30 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x80350000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000200000002000000e000000100000000000000000800120002000200000000007d220000180000000303000000000300000000000000001f03000000160000000301000000000000000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}, 0x1}, 0x0) getpeername(r0, &(0x7f00000002c0)=@l2, &(0x7f0000000180)=0x80) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="02130000020000000006000000000000"], 0x10}, 0x1}, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000240)={0x2, 0x1, 0x5ae, 0x0, &(0x7f0000000040)=[{}]}) 03:31:30 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8981, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:31 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xf}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:31 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffeffffffff}, 0xa000003fe, 0x0, 0xfffffffffffffffc, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:31:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x7e000000, 0x20000102000007) 03:31:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x80000000) r1 = accept4(r0, &(0x7f00000000c0)=@alg, &(0x7f0000000040)=0x80, 0xfffffffffffffffc) r2 = socket$inet6_sctp(0xa, 0x6, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom$packet(r1, &(0x7f00000003c0)=""/255, 0xff, 0x2, 0x0, 0x0) 03:31:31 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8932, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 444.323006] xprt_adjust_timeout: rq_timeout = 0! [ 444.366150] xprt_adjust_timeout: rq_timeout = 0! 03:31:31 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x1000, 0x6, 0x7, 0x2}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x1ffffffffffffffe, 0x1) 03:31:31 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:31 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xfc}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:31 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8907, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:31 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x10001) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r3 = getpgrp(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x5, 0x7}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x3f, 0x7ff, 0x800b, 0x7fff, 0x4, 0x80000000, 0x76, 0x4, r4}, 0x20) r5 = syz_open_procfs(r3, &(0x7f0000000140)="6e65c3937506ab742f6465768a") ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) ioctl(r0, 0x1f, &(0x7f0000000080)="468b251bc5fdc8bf4e4f3d788e393eccc45468e4529fe7a294c4e4b86ea51a6edd0104fc45f184e3fc8e10d76f5d85f04b6756e8af3c4af44ea5931eaa62c31baf764e87323a0192789d1fff160184f22b8a9b26407c39c15c8a479dc7431a7b484918bccb3dc7ce7643681b38a9a208a02fcbb4c60d3db835d136") 03:31:31 executing program 3: r0 = gettid() socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0xffffffffffffff74, 0x3e6, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x10000000000001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {0xffffffff, 0x0, "3104eb", "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"}}, 0x110) 03:31:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x700, 0x20000102000007) 03:31:31 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x14, 0x0, 0x0, 0x0, 0x0, {0xc}}, 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@generic="0141"]}]}, 0x1c}, 0x1}, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)="6d717565756500c60e52623eabd75dc5a4021f303d3c6be5d87144dd3d055a24b6ca6f88471d4996bfc41cb1c79581005409141e4ddd8b92afe99e9abe9edca413fc7137b9bf1621a001dc66005d931e8e6857f364608c551fbc15cd708268cdd9ed7d9076c4ccb4b791e5e9089237eb354892a888ae5b1b47d36ac785309ebe4a7dfdb0d2", 0x0, 0x0) 03:31:31 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xdc00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:31 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8902, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:31 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0xc1, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 03:31:31 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xb00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:31 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8983, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:31 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x6558000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:31 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x402}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x3) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2000000000000175, &(0x7f0000000140)}) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x301800) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 03:31:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(serpent),sha1_mb)\x00'}, 0x4c) r1 = dup2(r0, r0) sendmsg$rds(r1, &(0x7f0000000a40)={&(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/46, 0x2e}], 0x1, &(0x7f0000000940)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x8}, &(0x7f0000000300)=0x4, &(0x7f0000000340)=0x7f7, 0x1, 0x3, 0x7, 0x8, 0x0, 0x9}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000380)=""/250, 0xfa}, &(0x7f0000000480), 0x10}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0xffffffffc2e4928b}, {&(0x7f00000004c0)=""/71, 0x47}, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/182, 0xb6}, {&(0x7f0000000600)=""/45, 0x2d}, {&(0x7f0000000640)=""/184, 0xb8}, {&(0x7f0000000700)=""/85, 0x55}, {&(0x7f0000000780)=""/124, 0x7c}, {&(0x7f0000000800)=""/159, 0x9f}], 0x6, 0x0, 0xff}}], 0xd0, 0x4000000}, 0x40) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x80000, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @rand_addr}, &(0x7f00000002c0)=0xc) sendmsg$alg(r2, &(0x7f00002fefc8)={0x0, 0x0, &(0x7f0000985000), 0x0, &(0x7f0000164000)}, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r4, 0x1, &(0x7f0000000000)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f000007d000)='m', 0x1}]) 03:31:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x3e00, 0x20000102000007) 03:31:31 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="85000000001500000000000000a66ab15c1f0179bb368830f4ef42a4546fa89cec9efd4b0752ce913d8eef236ab66dfb0662"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r1 = socket(0x2, 0x1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x20) r2 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000940)="f2ad594f5334f2d4423c1c2a91f4cb19d178b124a8f5eb0bee785172b0a14ff3d9bcdac1e17c7b06d24befc49a199d8192d4b5199be81c369fe175aa554a957a837037ea4c51e5f490b69dd015664fed25a27e9e0ec9a0e2100443570bc94f6c83dc544edafcca4941ff8ed5a58fb1b27545e961d23979", 0x77, 0xfffffffffffffff8) request_key(&(0x7f00000004c0)='pkcs7_test\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000a40)='/dev/qat_adf_ctl\x00', 0xffffffffffffffff) keyctl$negate(0xd, r2, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000800)) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080), 0xfffffffffffffcb7) r3 = socket(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x18) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300), 0x4) r5 = socket$inet6(0xa, 0x202000000802, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000180)=""/39, &(0x7f00000001c0)=0x27) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000100)=0x5, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000003c0)=[{0x6, 0xffffffffffffa42c}, {0x3}, {0x4, 0xeb}, {0xa, 0x7667}], 0x4) fcntl$setlease(r1, 0x400, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x2, 0x80000000000041}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x1000000800, 0x2}, 0x20) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)={0xd12, 0x5, 0x1, 0x0, 0x0, [{r5, 0x0, 0xc80b}]}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000006c0)={r4, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}, 0x8, 0x14, 0xcc, 0xffffffff, 0x2}, &(0x7f0000000540)=0x2b) timerfd_create(0x7, 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000580)={r7, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}, [0x7ff, 0xff, 0xffffffff, 0x325b, 0x0, 0x7fffffff, 0xffff, 0x3, 0x5, 0x50, 0x4, 0x8, 0x3, 0x100000000]}, &(0x7f0000000680)=0x100) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x80000001) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r6, 0x50, &(0x7f0000000400)}, 0x10) sendfile(r5, r8, &(0x7f0000000340)=0x201, 0x7ffffffe) 03:31:31 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xdc}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:31 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8941, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x101800, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x3f, @local={0xfe, 0x80, [], 0xaa}, 0x81}], 0x1c) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000280)='attr\x00') dup3(r4, r4, 0x80000) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:32 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = dup(r0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0xffff) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4fffffffe) 03:31:32 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xfec00000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:32 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8971, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:32 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000180)={0x0, {{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1, 0x4, [{{0x2, 0x4e22, @rand_addr}}, {{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e24, @broadcast=0xffffffff}}, {{0x2, 0x4e21, @multicast1=0xe0000001}}]}, 0x290) ioctl(r1, 0x3, &(0x7f0000000040)="ff7f6dd267dcab29550000") writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd00000010000100090c0c00fcff0000040e05a5", 0x58}], 0x1) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200) 03:31:32 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8906000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:32 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xff000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:32 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x6, 0x3, 0xfffffffffffffeff, 0x0, 0x2}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0xfff, 0x7f, 0x0, 0x5, 0xfffffffffffffffa, 0x4, 0x8, 0xfff, r1}, 0x20) clock_gettime(0xfffffffffffffffb, &(0x7f0000000400)) r2 = socket(0xc, 0x2, 0x0) bind(r2, &(0x7f0000000140)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @local}, &(0x7f0000000280)=0xc) bind(r0, &(0x7f0000000340)=@llc={0x1a, 0x0, 0x5, 0x1, 0x100000001, 0x8, @random="69110d085aea"}, 0xd0) 03:31:32 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5452, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:32 executing program 1: socket$inet6(0xa, 0x1, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x202, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000000c0)) ioctl(r0, 0x3d8, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000480)={0x1f, 0xfffffffffffffff9, 0x385, 0x7, [], [], [], 0x1, 0x569, 0x44, 0x0, "a6c1ba86f3bf7c60f127d76abe882e81"}) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000003c0)=""/146) syz_open_procfs(0x0, &(0x7f0000000280)="6e65742f736e6d70002f6b396ea57f498062a1c92a4e00b6593700a4ab9d016fc671c2ab23c62a363233c7cd9d032f8450c36c1bf36a0fe4a8621021f27d075cd5000000") 03:31:32 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000380)={0x2, 0x5000, 0x6, 0x1, 0x6a8}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000100)=0x4) r3 = socket(0xa, 0x2, 0x0) r4 = getpgrp(0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000140)={0xf400}) connect$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0x2}}, 0x1e) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x3fffffff80000}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={r5, 0x6, 0xfffffffffffff26b}, &(0x7f0000000300)=0x8) ioctl$sock_ifreq(r3, 0x89a2, &(0x7f00000000c0)={'bridge0\x00', @ifru_settings={0x1, 0x0, @fr_pvc=&(0x7f0000000080)}}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x8}) 03:31:32 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xf0ffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:32 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x81, 0x800) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000880)={0xe0, 0x5}) r1 = socket$inet6(0xa, 0x80000, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x40, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)=@allocspi={0x458, 0x16, 0x610, 0x70bd2c, 0x25dfdbfe, {{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80, 0x3b, r3, r4}, {@in=@multicast1=0xe0000001, 0x4d2, 0xff}, @in=@dev={0xac, 0x14, 0x14, 0x1f}, {0x3, 0x1, 0x0, 0x8, 0xfffffffffffffffd, 0x1000, 0x3ff, 0x5}, {0x7, 0x8, 0x8, 0x4}, {0x3f, 0x7, 0x4}, 0x70bd26, 0x34ff, 0xa, 0x3, 0x6, 0x42}, 0x80}, [@algo_comp={0x138, 0x3, {{'lzjh\x00'}, 0x778, "16ee51a8f834c0637769f5f1fc47bde50c286f133e9f730ba35f34f160ff8898b206bfda8296b9c6d01361b2acc0ad33fbe1c6b09c087d4c5e4d06afb93803aa6adf762e4e8236acc6c98816941d3b25e8ee14ef68c2561ff540dc501c41a4e21afa73d4cee55861b1aa71432452d4a8e56f814c417d307d2ba1b33b8de2fa43d20ee4708b2ed418ea00d167e5ff879a48e8e513b8d150499ba43cbec2be8868f24bda384a58541d31b7fc1174878a9d77cdd1b6b644cb2addd63e0a649dd565ab67ee0bc17976c52006318506c882cc4c4e18fd4a1f9535eb45d9180b3730d97f7c63856f2fd570d5315ea52d8e7b"}}, @algo_comp={0x8c, 0x3, {{'lzjh\x00'}, 0x208, "cfc16442b8277d2f16ceb86ff736d2aabb29a1312d9e57275a679dffe9fdc701d9f197fbf11e0de57bf9dd15582a970cba53c734f5e4fd996798cba0d4428327ad"}}, @algo_aead={0xb8, 0x12, {{'rfc4543(aegis256)\x00'}, 0x348, 0x300, "a504a15ec45631325ce44cf53985e2ab673bff5656afb13b3f179a1e35629e853f3fab9d826f124d41651bd9d7d4945adccdce04cb7d64aad38bd4262cea09ac879ada1f7a132acdf815073f1de87f44410a29a5f8d47592546b1ab8a2733706dc73619b04f837a17e"}}, @ipv6_hthresh={0x8, 0x4, {0x50, 0x5c}}, @lastused={0xc, 0xf}, @sec_ctx={0x94, 0x8, {0x8d, 0x8, 0x1, 0xdb6c, 0x85, "122df3a682275b1b75a01ad85f927bba6f186fd065b07e9a2d89315d140d0af5cfe41b87dfafca60f3f3de559f9d7556229c8ed9c6e7cbeb60db32e602ecb53a09f8ed6a2d0b506a56b12b01801023e224c08f0da2090d754f44cf49daf49d2294d3f4cbaa30cdf49beb7959304f3823ddbc1a9b86fa850b5d6ae0d5056b430315de916fe4"}}, @user_kmaddress={0x2c, 0x13, {@in, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0xa}}, @proto={0x8, 0x19, 0x3c}, @etimer_thresh={0x8, 0xc, 0x4}]}, 0x458}, 0x1, 0x0, 0x0, 0x4800}, 0x8000) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000008c0)={0x7fffffff}) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x14, &(0x7f0000000000), 0x4) 03:31:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x3500000000000000, 0x20000102000007) [ 445.495210] Unknown ioctl 4730 03:31:32 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8930, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 445.554451] Unknown ioctl 984 03:31:32 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 445.604464] Unknown ioctl 4730 03:31:32 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000001040), 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000080), &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup(r0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x14) r3 = dup(r0) utimensat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}, 0x100) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0x1, r2, 0x14, r3}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") futex(&(0x7f000000cffc)=0x4, 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x4) 03:31:32 executing program 4: statfs(&(0x7f0000000000)='./file0/.ile0\x00', &(0x7f0000000040)) read(0xffffffffffffffff, &(0x7f0000003380)=""/4096, 0xf) 03:31:32 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xc0ffffff, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) [ 445.628744] Unknown ioctl 984 03:31:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xc0000000}) splice(r0, &(0x7f0000000000), r1, &(0x7f0000000040), 0x3, 0x1) dup2(r1, r0) ioctl$TIOCNXCL(r1, 0x540d) 03:31:32 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xd8, 0x400000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000280)={{0x2, 0x2, 0x7, 0x3, 0x2}, 0x9, 0x8c46, 'id1\x00', 'timer0\x00', 0x0, 0x4, 0x40, 0x401, 0x40}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008915, &(0x7f00000001c0)="33aa503171a0ca401fdb3e4c1c4999991f4189f9c4840100000000000000657224") r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/180, 0xb4}, {&(0x7f00000006c0)}, {&(0x7f0000000480)=""/192, 0x3f}, {&(0x7f0000000140)=""/119, 0x88}, {&(0x7f0000000700)=""/118, 0x76}, {&(0x7f00000000c0)=""/32, 0x20}, {&(0x7f00000005c0)=""/20, 0x14}, {&(0x7f0000000780)=""/17, 0x11}], 0x8, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:32 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8927, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:32 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xb00}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:32 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x7, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x2}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r6, 0x8, 0x4}, 0xc) r7 = dup3(r1, r0, 0x0) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, &(0x7f0000000380)="66b8003800000f23d00f21f86635100000090f23f80f21760f01b700103e0f01c9b89b000f00d0b859000f00d866b80500000066b9867100000f01d90f51a503000f9217d24331", 0x47}], 0x1, 0x0, &(0x7f0000000440), 0x0) 03:31:32 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x891d, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x75000000, 0x20000102000007) 03:31:32 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) fallocate(r1, 0x42, 0x1, 0x8001) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$instantiate(0xc, r2, 0x0, 0x0, 0xfffffffffffffff8) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:32 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xc0fe}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:32 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x50040, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000040)={0x2, 0x0, [{0x1, 0x0, 0x5}, {0x9, 0x0, 0x2ff5}]}) syz_emit_ethernet(0x0, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)={0x0, 0x0, [0x0, 0x0, 0xb5e]}) r1 = fcntl$getown(r0, 0x9) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x30000, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3ff, 0x2, 0x8, 0x3f, 0x0, 0x1, 0x80080, 0x2, 0x7ff, 0x0, 0x2, 0xfffffffffffffff9, 0x0, 0x3, 0x4, 0x5, 0x8, 0x0, 0xb8, 0xfffffffffffffffd, 0x7, 0x378, 0x1, 0x3, 0x4, 0x0, 0x100, 0x5, 0x1f, 0x5, 0x21f8b2ba, 0x1, 0x2, 0x0, 0xc5f2, 0x8000, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x20004, 0x7719, 0xfff, 0x7, 0x63ea, 0x9, 0x7}, r1, 0xb, r2, 0x1) 03:31:32 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x86ddffff, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:32 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a0, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x105000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) recvmmsg(0xffffffffffffffff, &(0x7f0000002780), 0x0, 0x4, &(0x7f0000002840)={0x77359400}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x101000}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) pkey_alloc(0x0, 0x2) 03:31:33 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2002, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x54, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)}}], 0x0, 0x0, &(0x7f0000000280)}) 03:31:33 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xa00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bcsh0\x00', &(0x7f0000000000)=@ethtool_ts_info={0x41, 0x89, 0x0, 0x9, [0x9, 0x3f, 0x1], 0x100000001, [0x1, 0x1, 0x1]}}) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r2, &(0x7f00000001c0)) 03:31:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x6b00, 0x20000102000007) 03:31:33 executing program 3: syz_open_dev$loop(&(0x7f00000011c0)='/dev/loop#\x00', 0xfffffffffffff1de, 0x82000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r0, &(0x7f0000001180)={0x2, 0x4e24, @broadcast=0xffffffff}, 0x10) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000001340)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001080)={0x0, @loopback}, &(0x7f00000010c0)=0xc) r2 = msgget(0x2, 0x224) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000012c0)=0x5) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/4096) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'gretap0\x00'}) mprotect(&(0x7f000031e000/0x1000)=nil, 0x1000, 0x41f1f137c51e1839) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001200)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000001240)=0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1d) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000001280)={r4, 0x59, 0x1000, 0x8, 0x80000000, 0xf4d2}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001100)={0x2, 0x7, 0x8000}, 0x4) ioctl$TTUNGETFILTER(r0, 0x801054db, &(0x7f0000001140)=""/35) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000001300)=0x1f) 03:31:33 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8903, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(seqiv(rfc4106-gcm-aesni))\x00'}, 0xd) unshare(0x2000400) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7ff, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000100)={r1, r1, 0x5, 0x6, &(0x7f0000000080)="0f405da3a5cd59ae22a779f6094a25c44aca00875c400b7f4a1fd5ec6f4ee6515e5ce16b2d201d58c241662d3a22426a1d87a7b17f1cbb77f27e60a49beb6dc82dc29e429fd9", 0x80000000, 0x8, 0x1, 0x101, 0x0, 0x7d5ff734, 0x7, "9783a9e5bd82e266966ec9bbf8176bd013ffbad0b782ab2e3681daf3ef70286e588a1f865602c1a3d23f67e585ad38c4378a4a"}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000ff8000), 0x10) 03:31:33 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x1100, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:33 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89a1, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:33 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x1000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c07fff6ed8581b4b0") getsockopt$bt_hci(r0, 0x0, 0x22, &(0x7f0000000100)=""/241, &(0x7f0000000040)=0xf1) [ 446.944161] binder: 2917:2918 BC_CLEAR_DEATH_NOTIFICATION death notification not active 03:31:33 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0x9, 0x4) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x2) unshare(0x2000400) ioctl(r2, 0x800000000000937c, &(0x7f0000000000)) 03:31:33 executing program 1: r0 = socket$inet6(0xa, 0x13, 0x7) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000080)={{0x3, 0x0, 0x4, 0x2aadd701744250d6, 0x7ff}, 0x1ff, 0x5}) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x440, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x8, r3}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) [ 447.008727] binder: 2917:2918 got transaction to context manager from process owning it [ 447.017071] binder: 2917:2918 transaction failed 29201/-22, size 0-0 line 2843 03:31:34 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x400300}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:34 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xeffdffff00000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:34 executing program 5: mmap(&(0x7f000012b000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x900, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0xc5) r1 = socket(0xa, 0x2, 0x0) mmap(&(0x7f0000187000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 03:31:34 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000011c0)={0x0, 0x1, 0x6, &(0x7f0000000100)=0x9}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000001c0)=""/4096, &(0x7f0000000000)=0x1000) ioctl(r1, 0xfffffffffffffe00, &(0x7f00000000c0)="295ee1311f16f477671070") mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000040), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 03:31:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffff}, 0x2, {0xa, 0x4e21, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x23}}}, 0x38) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x9e8e2927d579545f}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x8, 0x70bd26, 0x25dfdbff, {0x1}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r2}}, 0x18) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000003c0)=0x2) syz_open_procfs(0x0, &(0x7f00000001c0)) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000400)=""/219) [ 447.203390] binder: undelivered TRANSACTION_ERROR: 29201 [ 447.239432] IPVS: length: 4096 != 8 [ 447.281590] IPVS: length: 4096 != 8 03:31:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x128, 0x20000102000007) 03:31:34 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c6530202020262023212020232120202a73656d3020000a180e22511ec2b809160d9462246837f938cc1a65472b60c043f244fe893021a99e639d895e00000e1d3576530137bbc5267ed4b40f4c299de425ef3136e54ff155426f234ae3a5314ff9c330ee604e5bda4d01c9c084ff0529e1a9f404a8e7030430720af03038ae01e14e6509"], 0x7f) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) 03:31:34 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0xf000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:34 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x2, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x200000088) recvfrom$inet6(r0, &(0x7f0000000000)=""/4, 0x798c2e70f51d0cc3, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x709000) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000080)=0x8000000072b0d142, 0x4) r2 = accept(r1, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="ab000000b6ab63e370e0592b7f024c8e836cd2cc0a3f87b0034693856ec0b636a09829926c39aa20a50c93e8aee648160e7c18284e73c81c70582f710c6bff9b7807bc41446e3904cb40ccbde6723f05bf8effd88f079274b7bbf6814b64469a2decc5b8ca52ce3351c319bf951bb89809a6e7bd0c08b3275079fd73e9c30cdd06a4c2c637ce7331afa36b1a46102971e0f10586264569165bb50bcbfd73229d819d5cb69f9a96d2a29e8cc60c0000000000000000000000000000"], &(0x7f00000001c0)=0xb3) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r3, 0x6}, 0x8) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r4 = socket$inet6(0xa, 0x807, 0x88) sendmsg$inet_sctp(r4, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 03:31:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x111, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3, r1}}, 0x18) 03:31:34 executing program 3: mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace$setopts(0x4206, r1, 0xb199, 0x1) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)=[@exit_looper={0x630d}, @exit_looper={0x630d}, @acquire={0x40046305, 0x4}, @enter_looper={0x630c}], 0x8e, 0x0, &(0x7f0000000180)="cd982cac94096cca66482be36c667d900b53c6e7ebc198876c74cb8a4a3135d2ca299101a3a7c40b057933943dfdb35a265d1ce592f664ea877e627008e54b08b7028416e8ed61ee97728cbfc1fc4f9472e33f03ec4f66e33c14fa5e0c024469b738d9a3eec2ac5e1ac7493c1902fb7ffce1f0b58b47cf36efa9bda1eac540eac20286e8c33ba61ee224fa4e0d50"}) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000002ffc)) r3 = dup2(r0, r2) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000280)={0x2, 0x8001, 0x788, 0xf943, 0x8, 0x7f}) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/75, 0x4b) 03:31:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xc0010020, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:34 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:34 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8904, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:34 executing program 4: r0 = socket$inet(0x2b, 0x1, 0xfffffffffffffffd) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x4000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000140)=[{{0x0, 0x2710}, 0x1, 0x8, 0x10001}, {{0x77359400}, 0x400, 0x3, 0xfffffffffffffff7}, {{0x0, 0x2710}, 0x6, 0x8, 0x5}, {{r2, r3/1000+30000}, 0x6, 0x5, 0x1}, {{0x0, 0x7530}, 0x1ff, 0xd0, 0x2}, {{r4, r5/1000+10000}, 0x7, 0x4, 0x3}, {{}, 0x3, 0x8, 0x3f6}, {{}, 0xc59, 0x39e, 0x9}], 0xc0) connect$inet(r0, &(0x7f0000000100)={0x2}, 0x1) 03:31:34 executing program 3: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x3, 0x40) 03:31:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = shmget$private(0x0, 0xf000, 0x24, &(0x7f0000ff1000/0xf000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000000ed00006db1fd368e332ac50000000000000000"]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000540)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'erspan0\x00', r3}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'rose0\x00', r4}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r5, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r6 = shmget$private(0x0, 0x3000, 0x1800, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_RMID(r6, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:34 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:34 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:34 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffff}, 0x13f, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r1, 0x0, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}}, 0x90) 03:31:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x76, 0x20000102000007) 03:31:34 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0xffffffffffffffe1) close(r0) close(r2) 03:31:34 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x11000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x8}}, [0xaf9, 0x6, 0x1, 0x7, 0x5, 0x3, 0x7fc0000000000, 0x101, 0xff, 0x2, 0x7fff, 0xfffffffffffff450, 0xffffffffffffff81, 0xfffffffffffffff9, 0x10000]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e21, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0xf55}}, 0x6, 0x5, 0x4, 0x814, 0x1}, 0x98) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:35 executing program 5: getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)="2f65786500595ba6210fd6f64fc76f946d65ec5b5a000000000409004bddd9de91be10eebf890ee9a90f798858439ed554242210e67d0000000000000000786c1daf07424a00e901d2e39c5a323094c5") fadvise64(r1, 0x100000, 0x20000, 0x4) 03:31:35 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8905, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:35 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xb}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:35 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8000000000008912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000180)=0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0xed1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0xffffffffffff7fff, 0x2, 0x8009, 0x5, 0x1, 0xc02, 0x7ff, 0x6, r3}, 0x20) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/103, 0x67}, {&(0x7f0000006080)=""/160, 0xa0}], 0x2, &(0x7f00000061c0)=""/4096, 0x1000}}], 0x1500, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) 03:31:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') 03:31:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8100, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x52, 0x20000102000007) 03:31:35 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x400300}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:35 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5460, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:35 executing program 5: getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000140)="2f65786500595ba6210fd6f64fc76f946d65ec5b5a000000000409004bddd9de91be10eebf890ee9a90f798858439ed554242210e67d0000000000000000786c1daf07424a00e901d2e39c5a323094c5") fadvise64(r1, 0x100000, 0x20000, 0x4) 03:31:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) mknod$loop(&(0x7f0000000080)='.\x00', 0x20, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) accept4$inet6(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) 03:31:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x5405000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:35 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x84a00, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r1) 03:31:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x20000, 0x20000102000007) 03:31:35 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0xc) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000000040), 0x0, 0x20000003, &(0x7f00000000c0)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='ip_vti0\x00', 0x10) r2 = memfd_create(&(0x7f0000000000)='dev ', 0x0) ftruncate(r2, 0x2000e5) sendfile(r1, r2, &(0x7f0000000180), 0xa00004000000002) r3 = getpgrp(0x0) getpgrp(r3) 03:31:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x1522) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x68, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, @in6={0xa, 0x4e21, 0x4, @loopback={0x0, 0x1}, 0x2}, @in6={0xa, 0x4e22, 0x9}, @in={0x2, 0x4e21, @multicast2=0xe0000002}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={r2, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f0000000340)=0x10) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000080)={0x0, r3}) clock_getres(0x5, &(0x7f0000000100)) ioctl(r1, 0x4004000008912, &(0x7f0000000180)="295ee1311f16f477671070") mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3, 0x12, r0, 0x0) 03:31:35 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xb00}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000300)='cmdline\x00') fanotify_mark(0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') write$fuse(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000ff0100e7f2f1ed549b21e6123c02e0ebf3b009a6c41e47ed702d5ef0de78982083664d03fbe86fb9d862ac0099e8584c16fb2f53c9b20054f7f0abccd9ba86a6f328000000000000006338ec86a25db4d4392324c439fb392428bf00fc5344f9970e034abcfb7c6b72467a675d97ce437ab5388375393504484d83a3a7e8bbd614f20c7b46e8d95eeb5337d3ba9dea4daebad08cb248005efd279776e5ab36444cea4655c8963072c2e090f727b384dc3094e1f30aa3c3c64556b76c8983091878c7283f087702e54512b216a997712372ca3ffdf26289ea880f62d42e860396e413a4"], 0x12) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x4, 0x4) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)='bond0\x00') lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@rand_addr=0x2, @in, 0x4e21, 0x0, 0x4e24, 0xd1, 0x3d37442dad3ba6f6, 0x80, 0x20, 0x62, 0x0, r3}, {0x0, 0x6, 0x1, 0x4, 0x93, 0x81, 0xe6, 0x5}, {0x9, 0xff, 0x200}, 0x5, 0x6e6bbd, 0x3, 0x0, 0x0, 0x1}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4d6, 0x33}, 0xa, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x3506, 0x1, 0x1, 0x2, 0x80000000, 0x80, 0xffff}}, 0xe8) preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) 03:31:35 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8946, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 448.845794] binder: 3130:3132 ioctl 1 20000140 returned -22 03:31:35 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x1f02000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:35 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8922, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) [ 448.896911] binder: binder_mmap: 3130 209fd000-20dfd000 bad vm_flags failed -1 03:31:35 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000010100000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000010000000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000030000000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000006b0000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="000080005ff85318b7c80000cf3d86a11ecde000000003000075a0042b2f0749fe888f8e3019", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000010000000000000000000000000000000000000000000000"]) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x9, 0x6db8}, &(0x7f0000000180)=0x8) fcntl$setstatus(r0, 0x4, 0x400) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) [ 448.941870] binder: 3130:3132 ioctl 1 20000140 returned -22 [ 448.968353] binder: binder_mmap: 3130 209fd000-20dfd000 bad vm_flags failed -1 03:31:35 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x100000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:35 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8940, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:35 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x5805000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:35 executing program 5: ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_cancel(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000040)="0924696b6f658d327c1789a81c37c8ac09f958ba4b3f18e81cd8660ef6318c12769b90c41407d13fb8289fa214a1e5", 0x2f, 0xfffffffffffffe01, 0x0, 0x1, r1}, &(0x7f0000000200)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000240)="baf80c66b87f56048d66efbafc0cb00bee67dbcfba430066b84675000066efbaf80c66b8d0d3c38466efbafc0cb007ee0f0966b9c40200000f3236660fdcb3f9ffbaf80c66b81008f98866efbafc0cec66b80cd500000f23d80f21f86635800000600f23f866b9e00800000f32", 0x6d}], 0x1, 0x0, &(0x7f0000000200), 0x0) 03:31:36 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc4240, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="b08f78ec6815e0c1641eba71103c76d1cf2f2aed5e518e3a59eca3ab0d2b4888b36980c584ed74df372f8bd9aa5aa6d830e6fa4d55940dd1970f91f6b286907775293eb59e3e86d34bb4c3de8874a9c02285de2e67887b33389ebc97d5f00868d4803f5b939a88c471f496401f700c4c45a95c76348d67846a18bbcae5956ca28f8ee0868948173ded98212a70c09d4e4d8dd1cb6d3163ca3e2047c08ee244ad5d8f", 0xa2) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000480)=@assoc_id=0x0, &(0x7f00000004c0)=0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000500)={r1, 0x1}, &(0x7f0000000540)=0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000400)=0x0) r3 = perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0xffffffffffff0001, 0xfffffffffffffffc, 0x1, 0x81, 0x0, 0x6, 0x0, 0x0, 0x529c, 0x1, 0x8, 0x0, 0x5, 0x0, 0x6, 0x81, 0x2b7e, 0xf7, 0x3b42, 0x6d2e, 0x3f, 0xb64f, 0x2, 0x1000, 0x1ff, 0x81, 0x4, 0x7, 0x7f, 0x2, 0x10000, 0x3, 0x10000, 0x7, 0x3ff, 0x1, 0x0, 0xfff, 0x0, @perf_config_ext={0x200, 0x2}, 0x150, 0x4, 0x3f, 0x7, 0x5, 0xed, 0xffffffff}, r2, 0x3, r0, 0x1) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000440)) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000080)={0x28, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@typed={0x14, 0xa, @ipv6=@local={0xfe, 0x80, [], 0xaa}}]}, 0x28}, 0x1}, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)={{0x108, 0x4, 0x0, 0x235, 0x420, 0x1000, 0xe8, 0x7ffffffffe}, "4fb8ac54a1b2db7fa34a241d393b647560a24fb1d4d7c40421468ae6e7f1ee932d35151bdea8a7aefaa3163380f1d2b95d86d4cbac1db003c499b3314c3cd3036366a8428ba7089e99f1941f0300000000000000000000000000000000c3341d95bf57de6d1eba3249ba7c7a5df315829bbba4484d1f52e01a036d5eba6dd7539fe0af1938afe793771a46fcd6e2d9ca03e59399", [[]]}, 0x1b4) prctl$setendian(0x14, 0x2) 03:31:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) accept4$packet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x14, 0x80800) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000180)={@loopback={0x0, 0x1}, r2}, 0x14) r3 = gettid() syz_open_procfs(r3, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x80000001, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x2}, @in6={0xa, 0x4e24, 0x3, @loopback={0x0, 0x1}, 0x1}, @in6={0xa, 0x4e20, 0x100000000, @local={0xfe, 0x80, [], 0xaa}, 0xa3}, @in6={0xa, 0x4e24, 0xfe2b, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e20, 0x800, @empty, 0x6}, @in6={0xa, 0x4e20, 0x100000000, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x7}, @in={0x2, 0x4e21, @loopback=0x7f000001}], 0xb8) 03:31:36 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000080)={0x2, 0x1}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000000c0)) 03:31:36 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xfffff000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:36 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8982, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:36 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ptrace$setregset(0x4205, r0, 0x3, &(0x7f0000000100)={&(0x7f0000000080)="c94b9212c56d8f0ba025ffb1c10f4d3ef86dcbcdcd22e4aa490d75c4fe20af2251449757568ffa6bc3ee8c834089c1a9ec04ba90efc87bd5e96c094adbe8881da9209da14543bd0e76cd8a7a0c0c7c150d48a7df09ff3a4a463dac82e47bdd23a29c8bcaaddc345e9d73fe191f30573525", 0x71}) mprotect(&(0x7f00007c3000/0x2000)=nil, 0x2000, 0x1000004) times(&(0x7f0000000000)) 03:31:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r1, r2) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffd000/0x3000)=nil], &(0x7f00000000c0), &(0x7f0000000140), 0x0) move_pages(0x0, 0x21c2, &(0x7f0000000000), &(0x7f000026bfec), &(0x7f0000002000), 0x0) 03:31:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x1f8, 0x20000102000007) 03:31:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x71e5192c, &(0x7f0000000040)="295ee1311f16f477671070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080)) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:36 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8847000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:36 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8995, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, &(0x7f0000000140)=""/60) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) write$eventfd(r1, &(0x7f0000000080)=0x7fffffff, 0x8) r2 = getpgid(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000000440)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) write$eventfd(r1, &(0x7f00000003c0)=0x1, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000480)) r4 = getpid() syz_open_procfs(r4, &(0x7f0000000300)='net/ip6_tables_matches\x00') 03:31:36 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') unshare(0x400) r3 = getpid() ioctl$sock_FIOSETOWN(r2, 0xb704, &(0x7f00000000c0)=r3) 03:31:36 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x6000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:36 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0xf, 0x1, 0x20) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000580)=@nat={'%at\x00', 0x19, 0x1, 0x1e0, [0x20000380, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, &(0x7f0000000040), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'team_slave_0\x00', 'bridge_slave_0\x00', 'bond_slave_1\x00', 'veth1_to_bridge\x00', @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xe0, 0x12f, 0x150, [@stp={'stp\x00', 0x48, {{0x0, {0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @snat={'snat\x00', 0x10, {{@random="5f5a1fad6899"}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x258) 03:31:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x40030000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:37 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8970, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:37 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xfec00000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:37 executing program 4: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) socketpair(0x5, 0x1, 0x401, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="74000000252f8c3cd554be1240d11c00232046b8478349d0a49bbfce378566abe9dd683375cce4fb07afd782d3974c96cdf56d7e50a6d388ff9ec3406ed7db112d8387dc342598311a5868f203000000000000009251b135ca94eb6030eda3aae6f9afd79cdbdb723d2439c108ba47a81497b6625ab3ef56"], &(0x7f0000000100)=0x7c) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) r0 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r1 = add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000240)="de9f069a455d10fbac35ff7a45c47cbcdc1cb8dc80bd3d7f15d4ea3f8f1513d8dcd88d38ed0f68b1e729b564899c9372b08783057723f1afb81cfe9ebb27a365563cc7a440822bfa2acb39c5ee078f9eb2d143f9db121311b5f4074e56b54d5d31b4d16f560d52194201b8450c0dbc3275f3913ee45def5abf647c9558fb5434c3ecc62040273ccc5063303e5edbb9a831087b6737b1389eef0c50b3046c5163bb4ec2b3d68724616eb933da83af1fd41c6fd57dd6552e563c5e7517183bbf0d8535f1373f3fe9075f44578c690fec5248", 0xd1, 0xfffffffffffffffa) r2 = request_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000003c0)='ramfs\x00', 0xffffffffffffffff) keyctl$negate(0xd, r1, 0x101, r2) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe) timerfd_create(0x7, 0x0) r3 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0x623) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000), 0x4) chroot(&(0x7f0000000180)='./file0\x00') 03:31:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x20}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)={r3, 0xe0, "d101a4c0177754962fa7e5556ab222873657e326e3979d104369d73dcd08b827c02f804374f729ecaf10119a48a6d2ab8cc7de402e72207b69fed846f32ee2b8ea807ae9676d170e801050c45d64f01da0443d59166d12758979f5258eda8f5f35680f820cb914bcea7196bad72a96f8cced640937b90757cf98d627b3b9b653927b22777e2d5da5a559791b412a4516a9714a365421ab459d53e4cb843a8ef5eda26f82221568aaaab35566a9988ae5f2af88f1d91e2234ba575b99a7f775845057088d632a906d34d7f3c36eae09bffa8191f92ec5a64b0b092466def5e4fc"}, &(0x7f00000000c0)=0xe8) 03:31:37 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$seccomp(0x16, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xffffffffffffffff, 0x1, 0x7, 0x8}, {0x4, 0x3, 0x9, 0x5}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x1a0]}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100, 0x0) 03:31:37 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xf000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:37 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4012}) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000040)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0xee01, 0xee00]) fchown(r0, r1, r2) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11) 03:31:37 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x40049409, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="0000000000000000000000852a939b01bf68041e8ce2c71c1689216d9498c532871915601c0e44744406") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth1\x00', 0x1}) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x1000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:37 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x88) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create(0x5) ioctl$VT_RELDISP(r0, 0x5605) bind$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x817, 0x8d22, 0x8001, 0x80000001, 0x7fff, 0x1ff}, 0xfffffffffffffff9}, 0xa) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000280)={{{@in=@multicast2=0xe0000002, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e23, 0xffffffff80000000, 0x4e21, 0x20, 0x2, 0xa0, 0xa0, 0x0, 0x0, r5}, {0xffffffffffffff8c, 0x7012, 0x9, 0x1, 0x6, 0x3, 0x80000000, 0x100000000}, {0x7, 0x401, 0x970f, 0x454f518d}, 0x7, 0x6e6bb5, 0x3, 0x0, 0x1, 0x3}, {{@in=@multicast2=0xe0000002, 0x4d2, 0x32}, 0xa, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x3505, 0x0, 0x3, 0x0, 0x5, 0x5, 0x3}}, 0xe8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000380)={{0x800, 0x5}, 'port0\x00', 0x10, 0x10, 0x23d, 0x2, 0x1, 0x46, 0x100000000, 0x0, 0x7, 0x7}) ioctl$TCXONC(r1, 0x540a, 0x5) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) r7 = getpgid(0xffffffffffffffff) r8 = getgid() r9 = dup(r4) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000020c0)=0x0) stat(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000002300)={&(0x7f0000000440)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002080)=[{&(0x7f0000000500)={0x2f8, 0x10, 0x30, 0x70bd26, 0x25dfdbfc, "", [@nested={0xf8, 0x60, [@generic="cd60beb3e22f5a5e02f8523ddf557bde31b2367bc2c40a0d358c87afd550eeaef7eea413a942fa31fb91d32b51ef3bb5ea6e4e8735030b99ee88fbb94c786f591e155bc076983a49e929c4d5deb70a4ead4633d48d601aa67896f254bd785c9034c007aab86582cd464b32d531e77f5c8485aea70943c13dfb5191d8c614e50a8e75a47c909f861e2a13a6af2f4c2d511768047a8de4e65f2ad1e9a1edaa4afe1fc658b80d02d34896d0ad6aabec4e421eef4c56823f43a577e49b776511b170ec29aa6d659932090962b5490a23f0b4c2afb39cbfbc5d746ee23c4fac6f65af410ea949e66a2d44536029981f4b115fc2f949"]}, @nested={0x1f0, 0x96, [@typed={0x8, 0x2e, @fd=r4}, @generic="99ea0e8e689b09c946f48d8dc13abbe944e02e393fb169b41ca658b4b8e54f1caeac5b54c2c8e68cc98ca99d8023f6beca806cca0a81c5a9bd654d6e508c4998c20894dc8981551e2103f6732b79694c866a32e8cc4eafab31a2b1445949b8115308835dea1544102a0abbe101ce49e533122494883d9bd0d0b0cd990542ebf72b7d374fa7795a2c753d", @typed={0x4, 0x35}, @generic="dff047ab8a3b101158aa560b68063aaa0a0e5fc5fb4ea8c359f0047add0c314234abb84f04699d455147103ec42faf82222a9aeef2594a31ad8abd1d44637730607cef5de4cd542025c0fae0387ac3a19bfc3644d959aacf99678159fb97630c43832c2f734dca3af1e4bcd5d1c70fa092fdbc869ac527fb8a0c3d88bff1338238ba53951cd0159d7adbc59fda85756a7523006c240f9828cc5c08f78fe440e59a7c5c0fafec", @typed={0x8, 0x8c, @pid=r6}, @generic="bb8a65c0aec7fe00e527f466bb518fd540c02858720ce203e823d44db613fd5f1d108402604973acea5806b3d932f3cae6b077f5a6a9c68eb5ececd67b2315e882f8af3f71b2d60613757f07f996c0417d90cd8ab53b8acb6fb1f2108cdba5102e24d9aad94c89ff8cb33b85f5e9b3a09641", @generic="519fb368ab3f21a949c50198087a7edbdbd48648de041547db192fcd6f42cb6fbf19a79133d0a36e44cc1486c455bce8a9a04847eee5"]}]}, 0x2f8}, {&(0x7f0000000800)={0x28, 0x12, 0x300, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x3f, @u32}, @generic="e08a06ae83cf5bd5a26854cd4d"]}, 0x28}, {&(0x7f0000000840)={0x12fc, 0x19, 0x200, 0x70bd25, 0x25dfdbfb, "", [@typed={0xc, 0x67, @str='port0\x00'}, @generic="f58a8d17b79bb89f005f31b31c8c7fa81fa1a1ac84ed1b7d1a3af26ecd75cd71ced909bb2a9e7c4f0de10f1d6950a57503657c8c8def45547f28fee4b0b9e36002f58c616eed2a980bbf628138b626c361424fd19585142b75ca809af67a6cd4125a258a4341486d3317e859d03c81d48b38d4abcb1379b302afabcb28a6ec184e6807e8d2206edea69bbc7478efbdf45c", @typed={0xe8, 0x81, @binary="3b3dde0333401bbc4a1d45c16287ac7a89229003d62d0db15416765de018d7aefe579fd4b2f91e3481bcbcdd990563aea3ef702ef3138fcc79448207c1c38171256a580be741ad771d411ff537b76254e588cab9532d93a356cd4f7835b70698fbe8d41681b9d63eaebf11cd741bcb54ab401ae48aa65d2d54169464a03ab7298702a3a88cc5b044acb9788512cad6afb3104acedd88f67b8ba8e43a65b260ecab7ef1bb907fc5828e720525d60a12b5b3ed3332306747ebd4aed8600abf47a92c1de215f1188f92bdde863757cd69becac823e70fba429bc843a8b7a7c3d2b2d6"}, @generic="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", @typed={0x8, 0x8a, @u32=0x7}, @nested={0x18, 0x55, [@typed={0x14, 0xb, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}, @generic="8a51a03276ace4f4f97bc8cacce14ca94a3cf21869cec10e26ec1ff105f335a50d3531b0c7dd8b67634af5820393221d08acf05fafe11d974a9a827e00c3d094dd29645f051c2ca6441565fe529c00e5d4666b8d54674533cdd640008e1e4bebbefbc410021a72720dc11448c7daaf3a0e47e5122da908e465fe76dc20dd6bc2235fb26284b2fd20d40fcd62f13e5799587b9b4646a3c1a0284fa3c2feec3cbeaed214e32ef0a8ff14e2b23953cf022df95c5627f5d7", @generic="c4a78e57697cf03e68ea999e0cb892e625f18a91b1cc2b088e36299ed85f818f60446f2750c4c01bfd5e02e1d8adb69ceb9f93224423284f9b92b4c7c855bbabe3b89302a314cbb9f445f9181c75cd6eb0ba88e79e22f8549d41c14c71148b898fc8f8873f9b683ed70d1c7940d2e9090dfe1c158a733bfeebca0ea7c238dabbc371088d8ccc9d5cd6695150fa7e668ffb"]}, 0x12fc}, {&(0x7f0000001b40)={0x510, 0x23, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@nested={0xc, 0x7, [@typed={0x8, 0x1, @u32=0x8001}]}, @nested={0x1cc, 0x4f, [@generic="6a5d367275815c4563b5d93eede338a17c99b9f6c4d9f37a7dd46b5fdde8dcdeeef672b53e566c7867216f87f72e1185434fd0f9bd071aaf9419615ac4c006cce6c2e080590c5dbdc5cd7b71ca1c74a78ff386fa026196ca7c5fdefc52d046dd0330137eb2f72864a1b2641a666153de8d20f550f839ca4310e98b8abb5b1c1ecb35866ebc7cd22cbb0567a67637d75d51ffc8fa1d5c2e736e2e79dc6fd09a741bdab224ce56814c65736d12e5", @typed={0xc, 0x34, @u64=0x9}, @generic, @typed={0x14, 0x6f, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @typed={0x8, 0x69, @u32}, @generic="8bfaf76363a38c38fc8d3cfad551488509d3df38a0856d21860b564588176bb74da9c3d23415c824350a6998908dd551d0bbe9ac4e8b94c2967791ae038a791bd7908ae31e76e304464a2b1e274754156bedfb34c89ceaba82b859c8de862935b74fd1dd4c948b35e327670ffe1593903d7ba22bc9f0467443040b0a7d92d59bdd6209730e000b8ecd41a62337f2cb02a1fa3e0c058bd645f6aca29f277884659e6d356380d8ea761d45d0dcbfd4d5901ae124d80d5c341f1f0dc9346413e0f6f23828040266df36f298f5bcaf02ce72e803bf945a901838b406a70438e85013013529fafdd3db1eec09195aaa14c55777"]}, @typed={0x100, 0x40, @binary="30641c9a6e9c32985ad21f3f6758a4bd034c124373ea133992cba27a995576ce0fe4df5e46a11e5e52739f7038302dce8e1f44daddc0db358f6f91eb32758505e7ff1f88cbb30bd0018044b06a04730b4cde2c4ba730ee4ae233645a07727f11567a8d6022016de8736cb8722e333bd90de9a052cf656766def97f6ae6bc5e20a94bcd674db61a344f962627b8e9c561516d336b1388c09babf0a7b90152a63520a00c5d2adf8ad71dfbfbfd8c834d191b0749e70c5ccc7fbba7cfa8e43425608071d9353055dae8f1bfcf3db4792c6a87fa328e51c10eadcf94f5edda39542fbf380ee1cac5b94a9d988ba397ebac2e0ba5ea4d6a79628808881d"}, @generic="25d35c6a94a05012d3c86bf638595fb9049d27eb6984", @typed={0x4, 0x6c}, @generic="baadaeaea6559f68acf71b74584c712b78f3e192ffd6b388351d3770be288386d613508c261f9e10301db3d1b433d3c6ebe59ca3a7da08b6f3349300891dd7a22852ae85bf9d5695ae7ae6a8c21269f6e0a589f8d9daf83a8981612455589f7828399bf3c1a3a0f125f7b036211e3809a0c682da2ae8bd307b7365dce64f43a413a4b921d4ac004c7ec45c68f521c918dbbea0b9e6b58044dc16f7a1307e9f5b2eaacb4f32048b0b9c345e95046a73abf706b1e2054481b98436e819d0cd6cb4ca82bbd09f83ba1bdf7766b2031082c504c64f296fd099448d4c56842950ecd8aec6", @nested={0x4, 0xd}, @nested={0x30, 0x62, [@generic="58796c8239023bcc6077780dd80c5c8b09dad27a71823340ed7422a24f083ec7df0aa510b02f03c46b4da6"]}, @generic="b46e1dc2bca28fc84b3615a030d30016247d22a7690b6082d06b22cf065e46b7bce20f32ac74f780a543fc07ebdbba1d500059f3cd63bd5ec50609b3885433192869110b250817a0a5fe32187baeb8a92cdef31926f60cf6d0bfedd143daa147c68b94ed313bc75191278d7f31eff5d71d7bdc1e805dd43fe9c8172236004f2a582b14e9bc1de9ff98f4ffe406c20ca34aba19c1ea2b45802cfd52218de0479cd809be2e461bd6a31c85e3562c5076726389a0d66050ff1872102ef00d9d21c24a27fb54e65da9539f6c35acb857696dd88957c90bd267736d67707a9419286ba506dfd1a5d7093434c91e228526dc6c", @typed={0x8, 0x80, @fd=r0}]}, 0x510}], 0x4, &(0x7f00000021c0)=[@rights={0x18, 0x1, 0x1, [r3, r2]}, @rights={0x18, 0x1, 0x1, [r4, r2]}, @rights={0x18, 0x1, 0x1, [r3]}, @rights={0x38, 0x1, 0x1, [r1, r1, r4, r0, r3, r1, r1, r3, r4, r4]}, @cred={0x20, 0x1, 0x2, r7, r5, r8}, @rights={0x30, 0x1, 0x1, [r2, r1, r0, r0, r0, r1, r1]}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @rights={0x18, 0x1, 0x1, [r9, r3]}, @cred={0x20, 0x1, 0x2, r10, r5, r11}, @rights={0x18, 0x1, 0x1, [r3]}], 0x138, 0x5fb2bdcbb84773d2}, 0x40000) stat(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380)) ptrace$getenv(0x4201, r7, 0x1, &(0x7f0000002400)) setns(r9, 0x22000000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000002440)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$RNDCLEARPOOL(r9, 0x5206, &(0x7f00000024c0)=0xd7) writev(r2, &(0x7f0000002780)=[{&(0x7f0000002500)="630d1bea24303a81a6b75f20cf0722a7f74a5ee40a6f194ccc24147c1bb17d937fed0f5900d9a8e9a6868011a1c830a4b046d150f482f621601f89a06cea3435c2da3dd10b8bbe746eb28df0a523c1f1f3e710a9c67b48cdd2991203e03327fdd43fbfd8e6740bd7b6ea0b62a1ee7cefad9fd58a5909830bafba6235f6b2b1163f4a5789de240c87090f27c4e98ade58078101f3d7ac3b8f1d7936639b29ad5caef9", 0xa2}, {&(0x7f00000025c0)="0b11da17ebfa775fa82614232d0a4a2964972f25b510471af69607bde9635d1bfced3f83021253e7066d73b99eff8eaac05efacaf868fcb937a3142f18ceb42d7fdca8e8586323637a4436ac5b65d121bedafedc92a56dd8b7068f52b962000156ca0cb617f65efde410c6c76c6fe0835d", 0x71}, {&(0x7f0000002640)}, {&(0x7f0000002680)="3ad1888b740d02799d2168193f39376f524af1e91dfbe2d6adee4a0291eeb39cd5f3c0f935a98f6e661aeda60fd42506104ee69c7a68cf69aa6a3ccb6877449de3abcce7f4a29ecd9fee44f6b2d0f4d476a867f56bd84292bcbe6441e2a66fb5788395cc66941cb14d6453bc0f1cfc3fdc3598fb0eb2ceb0808d97113df28f40f89e2609b8d75b5d50c4abd082afce43daa2ada889ca41a78f5ef839e6c0da47927e14db3fe1e694fa058ea666936132b8edd162faca2b0b5ba0dc2951ded3fb0f52b1e76b5bcec485e06a2663a92f26babd5fdbff64dc1dc18835e009477170c1342dfbc253c099af8a7f88cb6dd8235e71abb360073792eb5f56", 0xfb}], 0x4) ioctl$SG_GET_REQUEST_TABLE(r9, 0x2286, &(0x7f00000027c0)) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002940)='/dev/autofs\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r12, 0x2401, 0x200) creat(&(0x7f0000002980)='./file0\x00', 0x4) 03:31:37 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@abs={0x1}, 0x8) listen(r2, 0x0) r3 = accept$inet6(r2, &(0x7f0000000b00), &(0x7f0000000b40)=0x1c) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x1000000000016) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x1, @empty, 0x9}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x118) connect(r1, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) 03:31:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x4000000000000000, 0x20000102000007) 03:31:37 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:37 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x500000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x2d}, &(0x7f0000000080)=0x8) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000140)={0x3, 0x3}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x7}, 0x8) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:37 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8942, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:37 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x2200, 0x4) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000001c0)="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") getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x14) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={r3, @multicast2=0xe0000002, @multicast1=0xe0000001}, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x7, &(0x7f0000000180), 0x4) close(r4) close(r1) 03:31:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) listen(r0, 0x5) accept(0xffffffffffffffff, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) listen(0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r1, 0x10000000001) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r2, 0x3}, 0x8) 03:31:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x2500000000000000, 0x20000102000007) 03:31:37 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xf0}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:37 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0xc020660b, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:37 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000000)="a688ce05acf78439f7324282afd7d73aa88983a292265c4ffc2acb85") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) open_by_handle_at(r0, &(0x7f0000000280)={0xb1, 0xfffffffffffffff9, "0bb8e918e9b6f430963995d62e4ce606a96b47c7a72ddcec14345b862e4c05ef1e5cced8378e0643ab56bc3ce73c4580cfd6f4f81ecc56f27411d04b0c2c8ce783e5791d9129b9f07a07b19d57920e62a397758372c592fcd42db9462641a15179bd45ef81fe1cecc54c15a56fa9850bcc975e5f86f944c4f72ccc8c163b7500477297debdae23871f61ef3ae176999b2d9616cf03d68d24cf06abdb1cdfff476e1c72a5bbbe57eb02"}, 0x1) 03:31:37 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8035, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:37 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xdc00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x4b00000000000000, 0x20000102000007) 03:31:37 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5421, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000000c0)=0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x44) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast=0xffffffff}], 0xffad) 03:31:38 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x34000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:38 executing program 1: r0 = socket$inet6(0xa, 0x40000001, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") pwrite64(r0, &(0x7f0000000000)="decc73d6744076276d9c77de167315dfe22314931750f59cda0aae5f5f27af1548daff", 0x23, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:38 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8943, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x2e000000, 0x20000102000007) 03:31:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:38 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x4, 0x420480) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)=r1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830020200a000a000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 03:31:38 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8994, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:38 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xf0ffffffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="fdc012a7ad7ef61caa65cec1e582d68eab7c69a0e3e25440a13a390b99b3a1371dd7ad56f7d0ad4f8ce9ae1ff4bcfbe61e8072569a0a0c268c07b33291f0813f012ef7c058c50f2ea4577c500e0eeb1de31a6087e372d41df8bdf6e735c63c86b1b0cf2412d539084a3655115094cfbbe97651b6e44146dd3c53189f") ioctl$KDADDIO(r2, 0x4b34, 0x200) 03:31:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x7000000, 0x20000102000007) 03:31:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000071a000100000000000000b685775b0000000000000000000004000100"], 0x20}, 0x1}, 0x0) 03:31:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x3580, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:38 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x2004000008912, &(0x7f0000000000)="295ee1311f16f4777710fff165310bf2d9a6912d4fb7058c18ed64a9aeca061ab31aac701f68fb79fefb1dc850803309bbd471b76163db93605f26fd3d997d64be30b3") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0x8030ae7c, 0x709000) 03:31:38 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xff000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:38 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8913, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:38 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept4(r0, &(0x7f0000c71ff0)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000f5effc)=0x10, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x40100, 0x0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000080)="c0c15bf0d403649f232ecc32a95504d4e9334e") dup2(r1, r2) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f00000000c0)="9e56cf00bc1adb677e84dd71c8f32d") 03:31:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) prctl$setendian(0x14, 0x0) 03:31:38 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1313016f477671070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x28}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 03:31:38 executing program 5: r0 = socket$inet6(0xa, 0x40100000003, 0x87) sendto$inet6(r0, &(0x7f00000002c0)="ba851095fba8", 0x6, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x61, "19fd66e8ce90eccb928335fe9c6044b379b198f1f4ccf7be76fecb3f8e89034862035112ec189a7d766c79d2eee1e12b9c05cbb822fb67140fffbc9f62594e1fd056b576a91f142c0b83513011a9fe0b1ebaf8c838e3de1e9dae345e6df44e9096"}, &(0x7f0000000080)=0x69) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x6}, &(0x7f0000000100)=0x8) 03:31:38 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xfe800000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:38 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x5411, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xc9000000, 0x20000102000007) 03:31:38 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x200001c0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0xa8080, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000000)={0x5, 0x3, 0x97aa}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200000, 0x0) 03:31:38 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x71, "2466bdd723f009930b55a53eb0c02213cb584f20b64e90826c6446fa5e89c53d18bf7a49281e16e28236771f4a5aca2fbbecec2848089d8da0e08bb96ae93876f82416148bd298e0ac3cb75b855826718ad92722372ac5210393231994bd1ee50046292691cee7634a990c84e8fdc65e68"}, &(0x7f0000000140)=0x79) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) setfsgid(r4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @rand_addr=0x1ff}}, 0x20}, &(0x7f0000000240)=0x90) r5 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x4, 0x80000) perf_event_open(&(0x7f0000000340)={0x5, 0x70, 0x7f8, 0xadc5, 0x0, 0x7, 0x0, 0x7fffffff, 0x8, 0xd, 0x101, 0x1, 0xa7a, 0x20, 0x9, 0x6, 0x7, 0x8000, 0x0, 0x8, 0x4, 0x3f, 0xfffffffffffffff8, 0x10cd139d00000, 0xffffffff, 0x10001, 0x2, 0x4, 0x8001, 0x3f, 0x4, 0x0, 0x80, 0xfffffffffffffff8, 0x100, 0x401, 0x8454, 0x7, 0x0, 0x1, 0x7, @perf_bp={&(0x7f0000000300), 0x4}, 0x21, 0x20, 0xb39, 0x7, 0x8}, r3, 0x3, r5, 0x9) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x37, &(0x7f0000000000), 0x20a154cc) 03:31:38 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x3f00}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:38 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8931, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:38 executing program 4: nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000380)={0x0, 0x1c9c380}, &(0x7f00000003c0)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vsock\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000540)={'security\x00', 0x2, [{}, {}]}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000517000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000300)=0x6f0, 0x21, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/194, 0xc2) r1 = socket(0x4, 0x6, 0x2) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000004c0)) ioctl(r1, 0xb73, &(0x7f0000000400)="225f58fb7d4cc0cb49f70311ba24a3d319abc61c9823020ca3844939ec85dd0106a5755b065cbb97c4953baeefb3a2dd9e0eaf239d9ddfe3bdf0363fe6891699f9b32483630a4cef84c5005bebcf89c88b7679522e6a188c4e76a7e5afec1fbb795b52ca488f78d08514b8ce597523c883b222bcec9820d4f42cbe4115c2ff6be2bd03d113f0d3263bb7dc32b3a39623eab8104c48696ed9d38552a3ef2a65003b94260debd5d646ed1242ba70") r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x90002, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) socketpair$packet(0x11, 0x4000000000000003, 0x300, &(0x7f0000000180)={0xffffffffffffffff}) splice(r1, &(0x7f00000000c0)=0x1f, r4, &(0x7f0000000340), 0x8000000000000000, 0x3) 03:31:38 executing program 5: unshare(0x8020000) semget$private(0x0, 0x4007, 0x0) semtimedop(0x0, &(0x7f00000001c0)=[{0x0, 0x0, 0x1800}], 0x1, &(0x7f0000000200)={0x77359400}) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) unshare(0xc020000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x3f, @dev={0xac, 0x14, 0x14, 0x19}, 0x4e24, 0x4, 'sed\x00', 0x28, 0x9b5, 0x38}, 0x2c) 03:31:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x7a000000, 0x20000102000007) 03:31:38 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:39 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$describe(0x6, r0, &(0x7f0000000080)=""/141, 0x8d) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000180)={0x7, 0x2}) r2 = msgget(0x0, 0x40) msgrcv(r2, &(0x7f00000001c0)={0x0, ""/236}, 0xf4, 0x3, 0x1000) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000002c0)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={0x0, r3, 0x6, 0x1}, 0x14) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000380)) getsockname$unix(r1, &(0x7f00000003c0)=@abs, &(0x7f0000000440)=0x6e) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x100000000}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000500)={r4, 0x10001, 0x2, [0x9, 0xfffffffffffffffc]}, &(0x7f0000000540)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000580)={r4, @in={{0x2, 0x4e23}}, 0x6, 0x5}, &(0x7f0000000640)=0x90) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000680)={0x6, 0x30fa, 0x9, 0x0, 0x0, [{r1}, {r1, 0x0, 0x400}, {r3, 0x0, 0x6}, {r1, 0x0, 0x4}, {r3, 0x0, 0x1ff}, {r3, 0x0, 0x9}, {r1, 0x0, 0x5c47}, {r1, 0x0, 0xfffffffffffffffa}, {r1, 0x0, 0x4}]}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f00000007c0)={0x20000000}) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) ioctl$KDSETMODE(r1, 0x4b3a, 0x1a) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880), 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000900)={0x0, 0x5, 0x97, &(0x7f00000008c0)=0x8}) keyctl$update(0x2, r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000940)={0x101, 0x6, 0x7, 0x1000, 0x7, 0x1000100000000000}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000009c0)={r6, 0x80c8, 0x20}, &(0x7f0000000a00)=0xc) prctl$getreaper(0x3f, &(0x7f0000000a40)) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000a80)=""/204, &(0x7f0000000b80)=0xcc) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000bc0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000c00)={r5, 0x4}, &(0x7f0000000c40)=0x8) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000c80)={0x2, 0x4, [{0x400, 0x0, 0x8}, {0x4e2f, 0x0, 0x7fffffff}]}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000cc0), &(0x7f0000000d00)=0x14) 03:31:39 executing program 1: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="154a9d2f6d90208d1b242acac99ff4c1", 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:39 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:39 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xc801, 0x20000102000007) 03:31:39 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8848000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:39 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8929, &(0x7f00000001c0)={'bridge0\x00', 0xfffffffffffffffd}) 03:31:39 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="51ba5e1a569500000000000006b465") pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f000000bff7)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x80000080044dfd, &(0x7f0000000000)) 03:31:39 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x5000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:39 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'\nridge0\x00', 0xfffffffffffffffd}) 03:31:39 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x100, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x8}}, 0x5, 0x1, 0x8, 0xfff, 0x5}, &(0x7f0000000000)=0x98) getsockopt$inet_tcp_int(r2, 0x6, 0x1b, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r3, 0x6, 0x3}, 0xc) 03:31:39 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x5) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) dup2(r3, r4) 03:31:39 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'b\nidge0\x00', 0xfffffffffffffffd}) 03:31:40 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x84) msgget$private(0x0, 0xf18c9aba9f0ff6d4) r0 = msgget$private(0x0, 0x300) msgrcv(r0, &(0x7f0000000140)={0x0, ""/79}, 0x57, 0x3, 0x0) 03:31:40 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xfe80}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000100)={{0xa, 0x4e24, 0x6, @loopback={0x0, 0x1}, 0x8000000}, {0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, [], 0x1e}, 0x1}, 0xffff, [0x27d, 0xfffffffffffffffd, 0xf2, 0x1f, 0x8, 0x8, 0x6b, 0x16]}, 0x5c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01070000000000000055326bcef7017c594590fbcd298193664d8217714c6cc76e395952faa24f0fc335be0f23e5d598bcdff59be70700df6fa793762cd3085d45e210fc54ad2768c7000000006207da8f"]) 03:31:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xe000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:40 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x148, 0x20000102000007) 03:31:40 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x54050000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:40 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x900000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) 03:31:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x80}) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000240)=0x3, 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x5}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x7}, &(0x7f0000000200)=0x8) 03:31:40 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'b%idge0\x00', 0xfffffffffffffffd}) 03:31:40 executing program 3: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f4c7d033bec771e877671070") ioctl$SG_GET_NUM_WAITING(r1, 0xc0c0583b, &(0x7f0000000180)) 03:31:40 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x200000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:40 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'br\ndge0\x00', 0xfffffffffffffffd}) 03:31:40 executing program 5: r0 = gettid() ptrace$peekuser(0x3, r0, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000180)) 03:31:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000000)={0x3, 0x1, &(0x7f0000000280)=""/188, &(0x7f00000003c0)=""/247, &(0x7f00000004c0)=""/146, 0x6000}) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x6, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) sendto$inet6(r0, &(0x7f0000000080)="4f00070000000000000085980400000000a9572426a476c2", 0x18, 0x0, &(0x7f0000005fe4)={0xa, 0x0, 0x100000012, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 03:31:41 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 03:31:41 executing program 4: r0 = socket$packet(0x11, 0xfffffffffffffffe, 0x300) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={"1100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x2000000c0ffffff}) 03:31:41 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x9effffff00000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:41 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f00000000c0)={0x9ad, 0xad, 0x8}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2b5a1082da1fccdefb1fe6e0a69e496e", 0x10) sendto$inet6(r0, &(0x7f0000000140)="3886d4b1217c7424e4c5ccbf0ea8af58", 0x10, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 03:31:41 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'br%dge0\x00', 0xfffffffffffffffd}) 03:31:41 executing program 1: ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) 03:31:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x43050000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x19, 0x20000102000007) 03:31:41 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xf0ffffff00000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendto$inet(r0, &(0x7f0000000040), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000480)="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", 0x123) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 03:31:41 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bri\nge0\x00', 0xfffffffffffffffd}) 03:31:41 executing program 1: r0 = socket$inet6(0xa, 0x80005, 0x5) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') r2 = getpgid(0xffffffffffffffff) syz_open_procfs(r2, &(0x7f0000000040)='net/netstat\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:41 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet6(r0, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x22000000000, 0xfffffffffffffead) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r2, 0x10001, 0x1, [0x256]}, 0xa) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r1, 0x406, r1) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r3, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 03:31:41 executing program 5: r0 = socket$inet6(0xa, 0x41000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") r1 = socket$inet6(0xa, 0x7, 0x4) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0xbc4d) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="6c0aa4c2b435", 0x6}, {&(0x7f00000000c0)="73d8ef9c84b26b788c79c792b3afddeb771d67e4b908950359ce6eebea9cce46b3ce7467b7ac731198760ebfd6754673d6bca5e6916f617b3ed4f1e078158b79d6eac702848a9b263544edd8005170cc4f6d73f10836edea1b81bcd38b19f2620b1a03dffe", 0x65}, {&(0x7f0000000140)="dc67893b14900eb10b008353096926b0c8ac2f0360cd9820ad47e625de9f029f8a0a36bc6c51cd364aa7fa766fd13241a6a052b714d3d9b675c8e3186418d2d64c4f0b3cedcf3ae89cfcf4c79f4fec41eeb36f1cfd967c85c18e529877d89e5701ad6131e106351a6ca51191d781361fe1fbf703341d00cd653b743d65", 0x7d}, {&(0x7f0000000300)="4f0b64be7f7a0240ff437f24ab543b7e98760b70288ec90a7856e807b17f39970f2cb6f1fc1c81b4793a073a18022fb6089de45a71c90f0cf46de64446e9781fea181acb1bdbb259d52799ae71c4777ae23221bc5be45793553b0fbe22a5c60016f5f16aa8fa3dbdf89b752b98ee6a4c340a1493a6f4b38fdcf06b0ba9d27bed418501cacfb7282b0ed5e3e967a0058b263637c6ce96866b912bc99b623abd6f7fdbd7c0311f3e95b56ad2c9a0cc6a3fee6a1c910474dc7e3964d510821a894679ad2d04823be7ab54566e6c1cbb334bfb22b1d75a921c96f46f19", 0xdb}, {&(0x7f0000000400)="75784f9798e7fab56479bc79c6588ebefc5e42a363b2dc94f3f4af5eae8c1a6a9e29e4edcfb29c07f5fa64d3b50d36a322dc274434112893d960233fb0f6f3a2ea4b84e04d351d58f2bce11538db10c6f8401da83e947ce303b8f5ce00e5717fc51b5c4cd0b826c2e575df493163a41cf1bf8ff3073af773698cee4a59d7cd712227b0fc0a7e60572cc38eaf96eb9f9fdcca2d078300962d5c3018226b7365c81da1d5c4c183dc2559a4907b530ed2f062da11f09a536fb5b953f671c1a458511e4d799dbfad4685a50cccde67e76f82f3aa1eeabdb0c9a0a935", 0xda}, {&(0x7f00000001c0)="8b549acb2456066523ae0a6904c6", 0xe}], 0x6, 0xb) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa}}, 0x8000}, 0x90) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x40000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000680)=0x3) setsockopt$inet6_dccp_int(r3, 0x21, 0xf, &(0x7f00000006c0)=0x800, 0x4) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000580)="eaa0cea2f4f36d12449b281743c7eb5b83fc9a69c0ad7d6c5efffecdad9a6f49e6c02bfa06a9028a3cd16a8a8d216ab0daceb0d99b98259bbbf5b37494404e15621449c03ca5be93f2d78d7293bd521aef6e42a2a48b73879f96981e569fc65ee939d2627411764900fb3a3e48c8bc5bdfe5424584a6a10a97cc0f9a58c6b97275aa8c32c97e8321ada0c027087aa7ee21373ce4979e9d1ed874da59bd74fcb2ae11a9532aa58b67f7d3a972a91bf5a5346698fe629754bb6882c4290a666f4b6813291e0b6f161dc89930abbf7c092add386108ee260a1449f4c113dc2858c4de662d6584b7ec8935708b") 03:31:41 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xa000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xa00, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:41 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40284504, &(0x7f0000000040)=[0x0, 0x2c3]) set_thread_area(&(0x7f0000000000)={0x5, 0xffffffff, 0x4400, 0x4, 0x7fffffff, 0x1ff, 0x57, 0x9, 0x4, 0x1}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000280)={0xa, 0x4, 0xfa00, {r4}}, 0xc) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000002c0)=""/35) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{0x4, 0x5, 0x95, 0x2}, 0x6, 0x1, 0x0, 0x0, "ac35c2912a96637e"}, 0x10}, 0x1, 0x0, 0x0, 0x40400d4}, 0x1) [ 454.711541] TCP: request_sock_TCPv6: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. 03:31:41 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bri%ge0\x00', 0xfffffffffffffffd}) 03:31:41 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x100000000000000, 0x20000102000007) 03:31:41 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xa00}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:41 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty=[0x0, 0x0, 0xfeffffff00000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x2b}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f00000000c0)) 03:31:41 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'brid\ne0\x00', 0xfffffffffffffffd}) 03:31:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008915, &(0x7f0000000180)="295ee1319f16f467671070be72d657adb7406d5a010f974de8d093454c87e177613592d927c82ef5abecd000f196dc68a987e55f3f021fea97883c175c22cebc2c9977a32b802de2e52a2cfb9df67b30307aa539766bbf4caa8a1c3748daa4d2cf76905af1012a1436ef9a277d212f2ed2b5b2cd9f8f2833c71e002d8bbd46b2b1ad9868d46f8d1a6f1316bd2d0ca48051480fa54e75de41fdd50d68a17a64d844dac2") getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="f0000000a8fa8413780f55ef9b39c07933e3306cfd1b116be0a9644e6a5feb8760e982e5b9c99559b52142f244bcbb3ad3c50337c55e07c41534c3d93f5f1f32d2aaaddc9854494f08b0fb933c7d753bb226d58e3bb945f76470c4c64edeaf83d1c9b0255bf9568204ac1fc64eb5d38b1f14cbb15934bac8b1d5d5cf43d7458da0717d39bbb206d49c0fd411d35c9d075d91d1fba1363f241db0c3210ee813fa9309eb2b908b793122f42461fbc32e45bcf75a84002f720db656601532d92f81b1faef9874a2db68dc8f7909201d04ed0000000000000000000000000000000000000000"], &(0x7f0000000080)=0xf8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x9}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000180), 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000140)=0x0) getpgid(r4) set_tid_address(&(0x7f0000000000)) 03:31:41 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x35) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x7f, 0x7ff}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000200)={r2, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0xffffffffffffff6e) 03:31:41 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x3) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, &(0x7f0000000000), 0x0, &(0x7f000012e000), 0x0, 0x1}, 0x0) ioctl(r1, 0x2, &(0x7f0000000000)="216dcc4d6cf62a98b46d0b83fb21de6ac56f50114f214049ea65a8c68cce6b4a5748dcad9874cc195f973dff559171d7ca51d2e7541a6f2ac2d1bb7b094c9d17d5298efdd0a9d09bfcdb4c53f6177d43701d8871ed0ae05fef74cf0564ba39c1a59f182597ba2c7e1f99aab8eb3dbd893e4796200f57e70dec3c23") socket(0x1, 0x4, 0x9) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x200000d8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) 03:31:41 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xa00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:41 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridg\n0\x00', 0xfffffffffffffffd}) 03:31:41 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xffffffc0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x9, 0x0, &(0x7f00000001c0)="2b189474cfb26f09a035eb88154ab5d1ccb103bc821242868b5bc29771f2cad1f170fe463eb07bc82da656dec075cdd667609c80f7c50886eafbfb85dfe37b11178c84143fcefe2b39155200aa2af64c43203a134e38a5e81d7a1f066d54e98b4ff8fd625741c73b50a253d591daa5d9cc7de4f00d3284cb4fc052d4c4ae4bfe503a9eb3096fe7a77d8ddc09d80ce0309162f5c46603fa16582e8fcca0f6b03b7cf62331cffb01d5b7ab031273eac58c40f01461bd1200c28cf2", 0x8000000000, 0xffffffffffffffc0, 0xfff, 0x9, 0x800, 0x1, 0x100000001, "0d5cc5ae21798b592558e5b79f5655fdd9695b517bc05bc3b55b2eb4bed400a543392b5344ed35ae668350061040249664f6ba2a440083ad68cb16ff653e3f386bfdbe42b9691572f3508b497d4a806362fc2d48f5d7fab2faebfb84296846853418ee8eeb4a2d1c5e73012ba9d0de3a5801d474656d5638685103723e138b4e0b5fe60294bdf9767c6747d8abd12a9d89a8a4f599112586f02fddf176f9c0dea698098b2b0aaf1232ead857df0f45d5fbaff233b0a63a0381302fe647ee25101452cfa45d401bb895652db38d1e9ebaf5f8f4f5e7dd06a6fe3104f30302d92e6dbe36841d1cbc7a"}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) sched_getscheduler(0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f0bf477671070") mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x20011, r2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x2012, r0, 0x0) 03:31:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x300000000000000, 0x20000102000007) 03:31:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') socket$pptp(0x18, 0x1, 0x2) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:42 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x8000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:42 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridg%0\x00', 0xfffffffffffffffd}) 03:31:42 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c, &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2000000000000000840000000800000000000000000000ff0007000000000000"], 0x20}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x5) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x9, 0x8001}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) msgget$private(0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)) getuid() getgid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000940)}}, {{&(0x7f0000000000)=@generic={0x0, "23f725e7b84d065383d8e8aa5ea1737ab9525bcfa003c81033db12ace35f949365df82dc5df46579fe09b30c1b76e072d120664b5c59690dd2b39e490dab5fd5a4a67a2cbfdb7ac55ae2dfd65b4e46d5bfb100d97f3a6da00957e9cb640c57dd09f8466a0d287eb30b045e94065d14f414e5f33f6c09c9fba48f14dd20e4"}, 0x80, &(0x7f0000000140), 0x2f5, &(0x7f00000005c0)}}], 0x2, 0x0) 03:31:42 executing program 4: rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x400467, {0xffffffbfffbff270}}, &(0x7f0000000380), 0x8, &(0x7f0000000100)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x80400, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x80000000, 0xd02, 0x200, 0x68, 0x6, 0x6, 0x8, 0x1, 0x0}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e20, @rand_addr=0x2}}, 0x101, 0x2}, 0x90) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x101001, 0x102) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x10001, 0x20, 0x3, 0x100000000}, &(0x7f00000000c0)=0x18) mincore(&(0x7f0000419000/0x1000)=nil, 0x1000, &(0x7f0000000140)=""/167) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], 0xb3) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/cgroup\x00') 03:31:42 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x900}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f00000000c0)='erspan0\x00', 0xfffffffffffffff8}) r3 = syz_open_procfs(r2, &(0x7f0000000140)='sched\x00') mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) chdir(&(0x7f0000000080)='./file0\x00') write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x8000000}, @time=@time={0x77359400}}], 0x30) removexattr(&(0x7f0000000240)='./control/file0\x00', &(0x7f0000000280)=@random={'osx.', '\x00'}) rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') timer_gettime(0x0, &(0x7f0000000340)) close(r4) pread64(r3, &(0x7f00000003c0)=""/4096, 0x1000, 0x0) 03:31:42 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/4096) r1 = socket$inet(0x10, 0x1000000000000c, 0x800000000000000d) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000020f88)="24000000100007031dff02000000000000000a0009000300001d85685e0000000400ff7e28000000140a43ba16a0aa1c810bb356da5d8060000000060000000029ec2400020cd37ed81cc073", 0x4c}], 0x1000000000000068}, 0x0) 03:31:42 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge7\x00', 0xfffffffffffffffd}) 03:31:42 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x0, 0x9ffc}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0xfffffd5c, 0x20000005, &(0x7f0000000000)={0xa, 0x4e22}, 0x19) shutdown(r2, 0x1) 03:31:42 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x7200, 0x20000102000007) 03:31:42 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridgeE\x00', 0xfffffffffffffffd}) 03:31:42 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xfffffffffffff000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:42 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xa, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:42 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000140)={0x80000001, 0x7ff, 0x9, 0x5, 0x0, 0xfffffffeffffffff, 0x100000001, 0x1ff, 0x5, 0x100}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) 03:31:42 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge,\x00', 0xfffffffffffffffd}) 03:31:42 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x4000000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x3d6c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3ff, 0x400000) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r3, 0xbfff7fffff79) sendmsg$nl_crypto(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="08010000110000002cbd0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000000000000000000000000000000000040c201000100000000002cf70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200000000000e40000000008000100b0000000080001000900000008000100010000000800010099403a3d0554bcafe5254dbd926942e82bbdbf5e59347103114c13000000000000000000000000000000"], 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x40840) sched_getscheduler(r1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd(0xe0) read(r6, &(0x7f00000003c0)=""/236, 0xec) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000015c0)={r6}) write$eventfd(r6, &(0x7f0000000040)=0x66e7f4b5, 0x8) 03:31:42 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridgeF\x00', 0xfffffffffffffffd}) 03:31:42 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xc0fe}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:42 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3, 0x1c) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score_adj\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x2000000000000021, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000140)={0x80000001, 0x7ff, 0x9, 0x5, 0x0, 0xfffffffeffffffff, 0x100000001, 0x1ff, 0x5, 0x100}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) 03:31:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="f2f719ba210066b8d4d2eab566ef6626df53000f0136b6e0660fe119bad00466b80100000066ef0f1a4e0066b95a03000066b8faffffff66ba000000000f300f01cb640f76e6", 0x46}], 0x1, 0x0, &(0x7f0000000100)=[@cr0={0x0, 0x40000000}], 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_emit_ethernet(0x230, &(0x7f0000007000)=ANY=[@ANYBLOB="aaaaaaaaaaaacf2bb43c40b80800450002220000000000069078ac14ffaae000000100000000", @ANYRES32=0x42424242, @ANYRES32=0x42424242, @ANYBLOB="50005e2286cc4fce"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fstatfs(r2, &(0x7f00000002c0)=""/176) 03:31:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x119}], 0x19f, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:43 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge+\x00', 0xfffffffffffffffd}) 03:31:43 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xfc}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x6002, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x400, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000000c0)={0x6}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x10, 0x0, [0x40000105]}) userfaultfd(0x80000) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x2) ioctl$KDDISABIO(r4, 0x4b37) 03:31:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x1f}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={r1, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @loopback=0x7f000001}, @in6={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x1}]}, &(0x7f0000000140)=0x10) openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x8000, 0x0) socketpair(0xa, 0x2, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000002c0)=0x100000001, 0x4) sync() openat$cgroup_ro(r2, &(0x7f0000000340)='cgroup.stat\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) unshare(0x80000003ffffffb) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004) mkdirat$cgroup(r3, &(0x7f0000000180)='syz0\x00', 0x1ff) socket$key(0xf, 0x3, 0x2) mincore(&(0x7f00006c9000/0x2000)=nil, 0x2000, &(0x7f0000000280)=""/46) syz_fuseblk_mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 03:31:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x1100000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x9001000000000000, 0x20000102000007) 03:31:43 executing program 5: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000580)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) kexec_load(0x8, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000080)="4f830f6533523203c376455b4c9a273425a280730e63b5560c2d3a32f52709d0002e31a20c665c4559260da96f581120dbc7b4b1d4336b621a5d55b420fea23d65d46eeff6a12349a216e566f3e5a6ed6dedd9d2bef3e238c5570a36c7834e129981017856abf0bbc6f70b24cf3f4feab146e96ea1b1e423e768bf5912fcc4896bbaf8b99e0f28fb270c9477d1bef510108fa7a649834f63b6d2ccfe4ea9ae46631824c5060d7942e6c1e6d8851e766d99c5d329a30b8f74a2abdb24cca024cad5bdf640e93bb086d1ced23b5716ee56c1727a9106a19574508a96187982d4a31b97734744", 0xe5, 0x81, 0x800}, {&(0x7f0000000180)="958376d166453070baabff332a1c2508104ddbe2a04c401616c2eb025c8790e737a38d2887756454496c638ed0d6d01530f7717ecf0c79b9ee113cc97382faa1c6258421b014cfa73bfdf16a69a65dc750ae807ac326e991af670d438c34180383", 0x61, 0x1, 0x4}, {&(0x7f0000000200)="262308e76b6d71e9e4fcf0ac3479adf4dee5bd19871fcde62347c07f903eca5439e5a659624395849835372c63636ddeab044b73a79eaa9e4358fe5304a8eb89738e514bccadfa0533348903905e689091da0423777dfa77108a8ef94c79a7163ceabd1d295d50a58489027bb07cc3827133c042e746c17fcd5c242c87a3f51027135a8811c54544", 0x88, 0xfcd}, {&(0x7f00000002c0)="1fb9d29c358a1fe5e30bbf9877d0c959774b17e138c9d5c2e6bea29e02b6751650330ec6d2fb8c541891c3f77fdf90fdb0e398d38813599142c633d082960e1ec5970e50b4683b7840d551820ddf6d59c34df1d3f0568aff10c979ee00328211c1573c8369ea9ed3c9f71ef2930f447d36d5caafdd39386c482f75bc4bc5895a7ad1273ff1292bde2aa1b6c4de14eebc9485292b7d6dcd290096dc7515ad5a0b367700e7b3938de184610f1c10d9b9639e3fcde8e56fe4b9f78e9276e07b2a1e8ba1dd3ef88c933a57e2b7a32b5b059bcd29ea", 0xd3, 0x3598, 0x4f06e91a}, {&(0x7f00000003c0)="f2c1d4c378870bddeeb8fc8555e97af469b9a45862ea2038a2022e5a4994a8bcb9b82dacbea6286eead9f7d92d321483f670f76b01812c313da4f3fd82da8b84e4a5fa8e86e26c73bfacb6ff8be39498a0cec7ab2f7f1ab8f25a220351790d2412aa720ac49bd6ec1a0a5562", 0x6c, 0x910, 0x4}, {&(0x7f0000000440)="4102dc3a1e571920c644aa0ffca40b253b935f9c3adccfaa00b496b5fa7a7a23f77b21c4fe5225428d81d8acbe45931bdab952ec4ff74b6be31af0676a2a47d9b5b4e118a7da40", 0x47, 0x491, 0x999}], 0x2a0000) ioctl$UFFDIO_REGISTER(r1, 0x8010aa01, &(0x7f0000f8dfe0)={{&(0x7f00007c3000/0x3000)=nil, 0x3000}}) 03:31:43 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467650200", 0xfffffffffffffffd}) 03:31:43 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xdc}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), 0x4) [ 456.413425] Unknown ioctl 21531 03:31:43 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xb00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 456.450497] Unknown ioctl 21531 03:31:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:43 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge%\x00', 0xfffffffffffffffd}) 03:31:43 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000180)={r0, 0x0, 0x8, 0x6, 0x3}) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") listen(r0, 0xffffffffffffff7f) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = accept(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x0, 0x1}, 0xc) getsockname$inet(r4, &(0x7f0000000000)={0x0, 0x0, @remote}, &(0x7f0000000140)=0x10) 03:31:43 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x5, @loopback={0x0, 0x1}, 0x1}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e24, @multicast1=0xe0000001}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e22, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x2687}], 0x88) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f0000000000)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) close(r1) 03:31:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xf802000000000000, 0x20000102000007) 03:31:43 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xffffff7f}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:43 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x7, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000180)={0x1e, 0xffff, 0x6, {}, 0x7, 0x1}) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x5}, 0x1c) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000740)=[{&(0x7f0000003040)=""/4096, 0x1000}], 0x1, &(0x7f0000000000)=""/117, 0x75}, 0x8000}], 0x1, 0x0, &(0x7f0000000cc0)={r1, r2+10000000}) sendto(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000080)=@in={0x2, 0x4e23, @loopback=0x7f000001}, 0x80) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000280)={0x4000, 0x10000, 0x208, 0x10003, 0x7}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000000200)=ANY=[@ANYBLOB="04f70000"], 0x10}}], 0x2, 0x8000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="fa6f399306255c1f170b9f5afc5f661261fc6cc8c6af53fd21dad3d70d77", 0x1e) 03:31:43 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765c00200", 0xfffffffffffffffd}) 03:31:43 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/58, 0xff19}, {&(0x7f0000000280)=""/239, 0xef}, {&(0x7f0000000540)=""/148, 0x94}, {&(0x7f0000000480)=""/148, 0x94}], 0x4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x6, 0x4, 0x75c4, 0x7, 0x3, 0x3ff, 0xfff, 0x3723, 0x28000, 0x0, 0x4e, 0x4, 0x9758, 0x4, 0xd7], 0x13000, 0x444}) 03:31:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x400000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000100)={0x0, 0x10000000}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x2000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000280)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f00000000c0)={0x101, 0xfffffffffffffe01, 0x200}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80200, 0x0) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) 03:31:43 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridgeG\x00', 0xfffffffffffffffd}) 03:31:43 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3}, 0x1c) recvfrom$inet6(r0, &(0x7f00000002c0)=""/230, 0xe6, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x709000) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_1\x00', 0x5000}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = socket$inet6(0xa, 0x802, 0x100000000000088) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r2, &(0x7f0000959fc8)={&(0x7f0000a34000)=@in={0x2, 0x3}, 0x10, &(0x7f0000f71000)=[{&(0x7f0000f6ff9b)='G', 0x1}], 0x1}, 0x0) 03:31:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xe0000, 0x20000102000007) 03:31:43 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x2000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:43 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x240e304, 0x420400) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x80003) syz_open_procfs(0x0, &(0x7f0000000000)) 03:31:43 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt(r0, 0xff, 0x7, &(0x7f0000000100), 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1a1100, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:31:43 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge#\x00', 0xfffffffffffffffd}) 03:31:43 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x1f020000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:43 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x2000000, 0x20000102000007) 03:31:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000280)=0x2, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xf1, 0xf, 0x80000001, 0xffe3}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={r1, 0x2c, "b5a6f2777e5840b9c42771bdbb56927540031f6748575ff95371bf69edcf6d8a1ded2a0e345dbc352cc575dd"}, &(0x7f00000000c0)=0x34) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffff}, 0x117, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0xff, 0x7fffffff, "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", 0x64, 0x100000000, 0x3, 0x7, 0x91, 0x5, 0x2}, r2}}, 0x120) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r1, 0x7}, &(0x7f0000000240)=0x8) 03:31:43 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000040)={&(0x7f0000000400)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003400)=""/153, 0x99}], 0x1, &(0x7f0000000940)=""/42, 0x2a}, 0x202) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f00000004c0), 0x1000002c0) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) recvfrom(r1, &(0x7f0000000080)=""/174, 0xae, 0x2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x20000000) r2 = getpgid(0x0) tkill(r2, 0x14) recvfrom(r1, &(0x7f00000001c0)=""/237, 0xed, 0x0, &(0x7f0000000500)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d1c35abddb0f14a969863931e1d17156b40ee23e8f92a893a7c8de662ff98588c8fe9700efb81fe5c86575aa4ae702fe494b6b05b3b72c1db68f9c827da182"}, 0x80) close(r0) 03:31:43 executing program 1: r0 = socket$inet6(0xa, 0x7fc, 0x4000003) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) fadvise64(r1, 0x0, 0x7, 0x5) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:43 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge-\x00', 0xfffffffffffffffd}) 03:31:44 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x89060000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:44 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xf000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:44 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge\n\x00', 0xfffffffffffffffd}) 03:31:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="59e2897e6b7fb0e3d993638c8669fb09", 0x10) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:44 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7ff, 0x460040) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) 03:31:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000280)={'filter\x00'}, &(0x7f00000000c0)=0x44) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x100, 0x4) sendto$inet(r0, &(0x7f0000000040)='$', 0x1, 0xc870a3c305c5634f, &(0x7f0000257ff0)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000000240)=',', 0x1, 0x0, &(0x7f0000000340)={0x2, 0x0, @rand_addr}, 0x10) socket$inet6(0xa, 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000140)=""/176, 0xffffffffffffffca, 0x40012021, &(0x7f0000000400)={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x709000) 03:31:44 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x2a8, 0x20000102000007) 03:31:44 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x21f}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:44 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\b\x00', 0xfffffffffffffffd}) 03:31:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20002, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:44 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x806, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:44 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653000000000fffffffe00", 0xfffffffffffffffd}) 03:31:44 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xffffff7f00000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:45 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/hwrng\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00') getsockname$netlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000000)=0xfffffffffffffdfa) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000080)={{0x3c, @multicast2=0xe0000002, 0x4e22, 0x2, 'wrr\x00', 0x2a, 0x4, 0x5d}, {@broadcast=0xffffffff, 0x4e24, 0x2000, 0x7, 0xfffffffffffffffc, 0x5e}}, 0x44) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x2710}}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000340)={0x0, 0x9, 0xfffffffffffffcb9, &(0x7f0000000300)=0x6}) setns(0xffffffffffffffff, 0x0) 03:31:45 executing program 3: msgsnd(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000087648ce60ae49cea00003982f3b633009b4fd4a496d602575572d7479acb21462acd864e4bc1a6d37c259fd5ba6f4eb4cd47068f6f"], 0x8, 0x0) 03:31:45 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00A\x00', 0xfffffffffffffffd}) 03:31:45 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[@ANYPTR64, @ANYBLOB="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"], 0xfffffffffffffe12) setsockopt$inet_tcp_int(r1, 0x6, 0x1d, &(0x7f0000000040)=0x9, 0x4) ioctl(r0, 0x5, &(0x7f0000000080)) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffffffffffffff32, 0x4000) 03:31:45 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xfc00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000280)=""/145) syz_open_procfs(r2, &(0x7f00000000c0)='net/protocols\x00') 03:31:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x3a0, 0x20000102000007) 03:31:45 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x88a8ffff00000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:45 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x3f00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:45 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0xfff, 0x400, 0x6efa, 0x3, 0x7fffffff}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000007c0)={r1, @in6={{0xa, 0x4e23, 0x1ff, @mcast2={0xff, 0x2, [], 0x1}, 0xe47}}, 0xff, 0x2, 0x1, 0x8000, 0x80}, 0x98) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) sendto$inet(r0, &(0x7f00000002c0)='6', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="71654953132c0e3ed99a0a51a6c7a075e385ce012759b77ed249e7381d67ff00000079", 0x23}], 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000001c0), 0x4) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000280)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000300)="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", 0x4a2}, {&(0x7f0000001400)="4c0ad5957ded49bf61f504c888d5c09a67211cc3571c35f341b34cfb1fd52a248312e2e34a176659525948982ed864964a070a490b4821c2f44ae1e186ac137006c87aaa58cf51a86cd00ece6dd96b99751e61802612eeff94bb5c0b19a1b11c9e836778a53d5f5554e8115e34dce519e7521bb75acbc90cc10d12e041f85c3a334a990d", 0x84}], 0x2) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2}, 0x6) 03:31:45 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530029800", 0xfffffffffffffffd}) 03:31:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e6, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="c129", @ANYRES32=0x0], &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}}}, 0x84) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4}) mq_unlink(&(0x7f0000000000)='+(+^\x00') 03:31:45 executing program 3: r0 = getpgid(0x0) wait4(r0, &(0x7f0000000000), 0xd, &(0x7f0000000040)) clone(0x0, &(0x7f00000010c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000001200)) r1 = getpgrp(0x0) waitid(0x2, r1, 0x0, 0x41000004, &(0x7f0000000180)) 03:31:45 executing program 1: r0 = socket$inet6(0xa, 0x7, 0x400000000000) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.syz\x00') ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:45 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xf0ffff}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:45 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653000000000ffffffc000", 0xfffffffffffffffd}) 03:31:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000000, 0x400) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r1, 0x1) 03:31:45 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xa000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:45 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x9effffff}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:45 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765300000000000000100", 0xfffffffffffffffd}) 03:31:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000001200)=@dstopts, 0x8) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000100)=""/204, &(0x7f0000000040)=0xcc) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000001100)='/dev/amidi#\x00', 0x4, 0x200) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000001240)=""/253) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000001180)={0x1}, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @remote}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@deltclass={0xcf0, 0x29, 0x704, 0x70bd26, 0x25dfdbfe, {0x0, r2, {0xffff, 0x9}, {0x0, 0x7}, {0xffff, 0xffeb}}, [@tclass_kind_options=@c_atm={{0x8, 0x1, 'atm\x00'}, {0x2c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xf, 0x7}}, @TCA_ATM_HDR={0x18, 0x3, "c75076d28b4ec3d248d572a9a2606af392dcf41f"}, @TCA_ATM_FD={0x8, 0x1, r0}]}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0xc, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x6}]}}, @tclass_kind_options=@c_dsmark={{0xc, 0x1, 'dsmark\x00'}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x8, 0x5, 0xfffffffffffeffff}}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0xc64, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x80000000, 0x1, 0x10001, 0x4632, 0x694, 0x7}, {0x5, 0x1, 0x9, 0x3, 0x66f7, 0x9}, 0xffffffffffff7fff, 0x7ff, 0x0, 0x7fffffff, 0x3}}, @TCA_HTB_CTAB={0x404, 0x3, [0xfffffffffffffff9, 0xc6e, 0x0, 0xfffffffffffff09e, 0x0, 0xff, 0x2000000000000000, 0x4, 0x3ff, 0x3, 0x9, 0x2, 0x7, 0x2, 0x4, 0x5, 0x9, 0x3, 0x8, 0x7, 0x1, 0x7fff, 0x4, 0x600000000000, 0x5, 0x0, 0x20, 0x87, 0x80000001, 0x7, 0x0, 0x1, 0x8, 0x2, 0x9, 0xe9, 0x3, 0x7, 0x8, 0x2, 0xdb4, 0x6, 0x5, 0x4, 0xcea, 0x81, 0x7, 0x6, 0x8000, 0x40, 0xfbdf, 0x22a, 0x50, 0x0, 0x10001, 0x1831, 0xc1, 0x0, 0x7fff, 0xaf, 0x4, 0x6, 0x1ff, 0x8, 0x10000, 0x100000001, 0x3, 0x8, 0x0, 0x80, 0x100000000, 0x8001, 0x6, 0x7, 0x3, 0x200, 0x7, 0x80000001, 0x6, 0x0, 0xb33, 0x3, 0xad31, 0x3f, 0x70b1, 0x4, 0x5, 0x3ff, 0x8, 0xfffffffffffffed4, 0x9, 0x8, 0x5, 0x6, 0x100000001, 0x8, 0x1f, 0x2, 0x8, 0x7, 0x2, 0x1000, 0x1, 0x1, 0x8, 0x1f, 0x1f, 0x6, 0xee, 0x8, 0x3, 0x2ab9, 0x2, 0xfa4, 0xb6, 0x4, 0xfffffffffffffffe, 0x811d, 0x1, 0x1, 0x9, 0xffff, 0x9, 0x3, 0x401, 0x6, 0x5, 0x9, 0x0, 0x4, 0x3f, 0x0, 0x3, 0x7, 0x1, 0x101, 0x80000000, 0x4, 0x4, 0x80000001, 0x1, 0x4, 0x5, 0x997, 0x1ff, 0x6, 0x101, 0x0, 0x4, 0x3, 0x5, 0x9, 0x81, 0xb, 0x1, 0x6, 0x492, 0x5f3d, 0x2, 0x4d, 0x0, 0x7e0d, 0xc5e, 0x4, 0x0, 0x0, 0x800, 0x9d, 0x4a, 0x6, 0x20, 0xd248, 0x7, 0xfffffffffffffff9, 0x7, 0x2, 0x5, 0x9, 0x80000000, 0x2, 0x20, 0x5, 0x5, 0xc4, 0x6, 0x5, 0x7, 0x2, 0x1, 0x100000001, 0x3ff, 0x68b5, 0x4, 0x6, 0x3, 0x8, 0x7, 0x1, 0x5, 0xfff, 0x6, 0x81, 0x8, 0x4, 0x7, 0x7, 0x0, 0x3b, 0x5, 0x80, 0x1, 0x7f, 0x3, 0xd66, 0xffffffffffff0000, 0xffff, 0x40, 0xfffffffffffff800, 0x7, 0xfff, 0xff, 0x401, 0x100000000, 0x4, 0x0, 0x8, 0x10001, 0x9, 0x1, 0x1, 0x742, 0x108, 0x9, 0x6, 0x88d6, 0x1, 0x2, 0x15cc, 0x7fffffff, 0x8, 0x3ff, 0x8, 0x6, 0x7f, 0x4, 0x8, 0x5, 0x6, 0x8, 0x8000, 0xffffffffffff66db, 0x101, 0x4, 0x1, 0x800, 0x5]}, @TCA_HTB_RATE64={0xc, 0x6, 0x6}, @TCA_HTB_CEIL64={0xc, 0x7, 0x8}, @TCA_HTB_RTAB={0x404, 0x4, [0x4349, 0x4b, 0x100000000, 0x5, 0x7, 0x9, 0x9f7, 0x9, 0x2308, 0x6, 0x8, 0x9, 0xd6ae, 0x2, 0x2d, 0x7f, 0x80, 0x0, 0x4, 0x2, 0xffffffffffffed90, 0x0, 0x40, 0x5, 0x100000000, 0x2, 0x9, 0x0, 0xff, 0x1, 0x33b5, 0xc3c, 0x1000, 0xfff, 0x100000000, 0x100000000, 0x3, 0x1, 0x401, 0x7, 0x5, 0x2e, 0xe7, 0xda5, 0x7, 0x5, 0xffff, 0x8000, 0xff, 0xbaae, 0x1ff, 0x3, 0x6, 0x7, 0xcac7, 0x8000000000000, 0x10000, 0x2, 0x0, 0x0, 0x1f, 0x1ff, 0x602, 0xfff, 0x80000001, 0x0, 0x3, 0x4, 0x6, 0x1, 0x20, 0x8, 0x7, 0x687, 0x4, 0x6, 0x9, 0x3, 0x3e, 0x3ff, 0x80000000, 0x6, 0x2, 0x1400, 0x400, 0x0, 0x4, 0x4, 0x100000001, 0xff, 0x3c03, 0x100, 0x7f, 0xd07, 0x8000, 0x3, 0x8, 0xa0, 0x7, 0x8, 0x200000000000000, 0x4, 0x77c, 0x68dc, 0x4, 0x2, 0xffffffff, 0x1, 0x101, 0x4, 0x5, 0x6, 0x101, 0x6, 0xffffffff, 0x100, 0x3f, 0xffffffffffffff4e, 0x1000, 0x2, 0x48, 0x400, 0x5, 0xfffffffffffeffff, 0x3b76, 0x101, 0x40, 0x6, 0x87, 0x101, 0x0, 0x6, 0x100000001, 0x97f, 0x9, 0x5, 0x9, 0x7, 0x1, 0x81, 0x6, 0x2, 0x3e, 0x7, 0xfffffffffffffff8, 0x100000001, 0xff, 0x13, 0x3, 0xff, 0x8, 0x0, 0xffff, 0x7ff, 0x2, 0x7ff, 0x1, 0x3, 0x9, 0x80000001, 0x4, 0x0, 0x833, 0xffffffffffff9c26, 0x3, 0x7ff, 0x9, 0xa808, 0xfff, 0x5, 0x1e2c, 0x6, 0x5, 0x9, 0x800, 0x3f, 0x8, 0x1, 0x9, 0x1, 0x0, 0x66, 0x200, 0x400, 0x0, 0x5, 0xfff, 0x1, 0x7, 0x61, 0x0, 0xfffffffffffffe01, 0x800, 0x6, 0x5, 0x9, 0x4, 0x1, 0x3, 0x9b5a, 0x7, 0x6, 0x2, 0x0, 0x10001, 0x2000000000000, 0x7, 0x5bbd, 0x0, 0x3f, 0x6, 0x6, 0x44, 0x4, 0x5, 0x3, 0xfffffffffffff001, 0x8, 0x7, 0x1, 0x2000000000, 0x6, 0x2, 0x9, 0x80000000, 0x8000, 0x2, 0x8, 0xffffffff, 0x1, 0x0, 0x4, 0x8, 0x1, 0x0, 0x0, 0x40, 0x3, 0xfffffffffffffffc, 0xda, 0x4, 0x4, 0x1ff, 0x3, 0x401, 0xfffffffffffff800, 0x4, 0x100000001, 0x1, 0x401, 0x0, 0x7, 0xa2, 0x5, 0x10000, 0x5]}, @TCA_HTB_RTAB={0x404, 0x4, [0x8001, 0x40, 0x0, 0x6, 0x8, 0x9, 0x1, 0x5, 0x846, 0x3, 0x8, 0x100000001, 0x8001, 0x1, 0xfffffffffffffffa, 0x0, 0x8, 0x101, 0xfffffffffffffffa, 0x200, 0x4, 0x5, 0x100, 0x9, 0x9, 0x9, 0x4, 0x4c, 0x7fffffff, 0x81, 0x2, 0x4, 0x8001, 0xfffffffffffffc01, 0x5, 0x7, 0x1, 0x4, 0x5, 0x38c, 0x8722, 0xfab8, 0x91, 0x1, 0x1, 0x7, 0x3, 0x6, 0x7, 0x4, 0x29, 0x7, 0xfffffffffffffffc, 0x1, 0x5, 0x10001, 0x7fff, 0x6, 0x7, 0x4, 0x2, 0xffffffff80000000, 0x8, 0x2, 0x1db, 0x10000, 0x29, 0x3, 0x8001, 0x7fffffff, 0x20, 0x20, 0x100000000, 0x1, 0x7f, 0x2, 0x8, 0xffff, 0x6, 0xffffffffffffffc0, 0x8, 0x9, 0x8, 0x0, 0x1, 0x0, 0x6, 0x0, 0x2, 0x2, 0x5, 0x5, 0x80000000, 0xfffffffffffffffb, 0x6, 0x2, 0x2, 0x9, 0x4e, 0x7, 0x5319, 0x3a, 0x5, 0xef8, 0x8000, 0x44, 0x4666, 0x80000000, 0x6, 0x7, 0x0, 0x6, 0x2, 0x1f, 0x0, 0x9, 0x3, 0x6, 0x3ff, 0x4682, 0x7, 0xfff, 0xffffffffffffff50, 0x9b, 0x401, 0x1, 0x0, 0x4cc2, 0xffffffffffffffff, 0x7f, 0x5, 0x3, 0x40, 0x6, 0xcd, 0xff, 0x1, 0x9, 0x6, 0x3, 0x7, 0x1000, 0x6, 0x2, 0x6, 0x40100000000, 0x2a, 0x7923, 0x100000000, 0x4, 0x1, 0x7ff, 0x1, 0xf3de, 0x2, 0x2, 0x1, 0x3f, 0x5, 0x7, 0xda33, 0x7c039faf, 0x2, 0xa0fd, 0x1, 0x6, 0x4, 0x20, 0x9, 0x8, 0x100000001, 0xf2f, 0xfffffffffffffff8, 0x4, 0x5, 0x5523, 0x5, 0x3, 0x5, 0x40, 0x7, 0x1800000000000000, 0x1, 0x9, 0x1, 0x3, 0x400, 0x2, 0x100, 0x3ff, 0x100, 0x8, 0x5, 0x1, 0xffffffffffffffa0, 0x4, 0x113b, 0x0, 0x8001, 0x2, 0x80000000, 0xe945, 0x61ba, 0x81, 0xffffffff7fffffff, 0x3ff, 0x400, 0x0, 0x5, 0x1, 0x100000001, 0x8, 0x3, 0xa7, 0x5, 0x6, 0x100000000, 0x800, 0x7, 0x9a, 0x8, 0x9, 0x80, 0xffffffffffffffff, 0x9, 0x0, 0x4, 0x5, 0xfffffffffffffffd, 0x8000, 0x0, 0x44d, 0x7, 0x8000, 0x3, 0xd29, 0x6, 0x9528, 0x80, 0x3, 0x1ff, 0x4, 0xfffffffffffffffd, 0x5, 0xfffffffffffffff8, 0x4, 0x5, 0x5, 0x80, 0x3f, 0x7, 0xe3, 0x8, 0xffffffffffffffff, 0x8, 0xf7]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x7ea2}]}}]}, 0xcf0}, 0x1, 0x0, 0x0, 0x800}, 0x8010) r3 = fcntl$getown(r0, 0x9) fcntl$lock(r1, 0x7, &(0x7f0000001140)={0x2, 0x7, 0x800, 0x0, r3}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=@gettaction={0x2c, 0x32, 0x301, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x7}}]}, 0x2c}, 0x1}, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x0, 0x200000) ioctl$TCGETA(r4, 0x5405, &(0x7f00000010c0)) getsockname$packet(r4, &(0x7f00000002c0), &(0x7f0000000300)=0x14) 03:31:45 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x88020000, 0x20000102000007) 03:31:45 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00h\x00', 0xfffffffffffffffd}) 03:31:45 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x1f02}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:45 executing program 3: r0 = getpgid(0x0) wait4(r0, &(0x7f0000000000), 0xd, &(0x7f0000000040)) clone(0x0, &(0x7f00000010c0), &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000001200)) r1 = getpgrp(0x0) waitid(0x2, r1, 0x0, 0x41000004, &(0x7f0000000180)) 03:31:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000280)=""/172, 0xac}], 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) creat(&(0x7f0000000140)='./file0\x00', 0x3b) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14) 03:31:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getflags(r0, 0x40a) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500003000000000006790a060fe0b0082ccd8cee32038ffffffff2100907800000000450000030000000000000000ac14ffbbe0000001b24be98df00af5039a70de0bd6573c0e3ec68ff2060f6c4f3826bef4e2405520a2c50779cad94e058a6b40bc48ad6d1d86a1fc5ee9ec67f0cacc4f4ca2df1bd5c926fe86ffcea838ec4433d75c33198033860b4e"], &(0x7f0000ea3000)) 03:31:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xffffdd86, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:46 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\x00\x00\x00:\x00', 0xfffffffffffffffd}) 03:31:46 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xa}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:46 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000180)='GPL\x00', 0xfb, 0x1000, &(0x7f00000001c0)=""/4096}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x50, &(0x7f0000001240)}, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x144) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x8001, 0x200, 0x401, 0x0, 0x9a, 0x4, 0x3ff, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={r2, 0x8a3}, 0x8) 03:31:46 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x418002) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)={0x3000, &(0x7f0000000040), 0xc, r1, 0x1}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) capget(&(0x7f0000000080)={0x20080522, r2}, &(0x7f00000000c0)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000140)={0x2}) 03:31:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x58000000, 0x20000102000007) 03:31:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') syz_open_procfs(0x0, &(0x7f00000001c0)) lookup_dcookie(0xe5, &(0x7f0000000080)=""/93, 0x5d) 03:31:46 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\x00\x00\x00H\x00', 0xfffffffffffffffd}) 03:31:46 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xfe80000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:46 executing program 3: r0 = socket$inet(0x2, 0x4000000000000041, 0x1f) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback=0x7f000001}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66702000000000000007ba44947a79015f0fe57917c7c2a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef3818a17900"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=""/39, &(0x7f0000000140)=0x27) sendto$inet(r0, &(0x7f0000000000)="1b", 0x1, 0x8000, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) close(r0) 03:31:46 executing program 5: pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x2a31e2889d60be74) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000000c0)=0x5) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x8001}, 0x1c) bind$inet6(r2, &(0x7f000044f000)={0xa, 0x4e20, 0x3, @empty, 0x4}, 0x1c) signalfd(r2, &(0x7f0000000040)={0xa1ce}, 0x8) ioctl(r2, 0x3f, &(0x7f00000001c0)="963534f60c768960fb72557e29bb2a8835c72293d79b207bd25c4f15c6a7711675368c3e5c11a01ccadf66d0884dc886f22383a1b69532937c0c3c48d78e287041af1d4ea37b4ef859ec1353ebcf56d48033f33b5b8103446fd35e825fa991ae162b10234e6fd9a316ceec81e89b66251d6f40bb32508c89e14016ca2ffa0051eeacee88fcd85f5193db50dd36065968fa") listen(r2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x40008001}, 0x1c) bind$inet6(r1, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000280)) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff87dd60d8652b00140600fe8000000000000000000000000000000000aa00004e200000000000000000000000000074d0ac2ef3405d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000990780000"], &(0x7f00000002c0)) 03:31:46 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xf00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:46 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765300000000300", 0xfffffffffffffffd}) 03:31:46 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f0000000080)=0xffff, 0x4) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e23, 0x40, @remote={0xfe, 0x80, [], 0xbb}, 0x7}, {0xa, 0x4e24, 0x19, @empty, 0x2}, 0x7f, [0x812, 0xfffffffffffffff9, 0x6, 0x88, 0x4, 0x1, 0x1ff]}, 0x5c) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000000440)=@ethernet={0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80, &(0x7f00000016c0), 0x0, &(0x7f0000001700)}}, {{&(0x7f0000002980)=@rc={0x1f}, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000002d80)}}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x10, r0, 0x0) 03:31:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xc0ffffff00000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") fcntl$getownex(r0, 0x10, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:46 executing program 4: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bc000/0x4000)=nil, 0x4000, 0x1000008, 0x40010, r0, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x0) flock(r0, 0x8) 03:31:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xc8020000, 0x20000102000007) 03:31:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0xfff7fffffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x47f}]}) 03:31:46 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x600000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:46 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765300600", 0xfffffffffffffffd}) 03:31:46 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) unshare(0x2000400) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x4ed3c86901129103) getsockopt$inet_int(r2, 0x10d, 0xf, &(0x7f0000000180), &(0x7f0000000040)=0xffd8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) 03:31:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000000)='fd\x00') 03:31:46 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x40000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:46 executing program 5: perf_event_open(&(0x7f0000000040)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80803, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000180), &(0x7f0000000240)=0x75fdb1b7e096c228) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x100, 0x5, 0x5}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r1, 0xb6}, 0x8) delete_module(&(0x7f0000000140)='veth1_to_bond\x00', 0x200) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'veth1_to_bond\x00'}, 0x18) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'ip6tnl0\x00'}, 0x18) acct(&(0x7f0000000100)='./file1\x00') 03:31:46 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530c3ffffff00", 0xfffffffffffffffd}) 03:31:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x4305, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") splice(r0, &(0x7f0000000000)=0x16, r0, &(0x7f0000000080), 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:46 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x4600, 0x20000102000007) 03:31:46 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xfc00}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:46 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c0e000/0x1000)=nil, 0x1000, 0x1000023, 0x32, 0xffffffffffffffff, 0x4) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) clock_nanosleep(0x2, 0x0, &(0x7f0000011000)={0x77359400}, &(0x7f0000013000)) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0xd) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 03:31:46 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x100000000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r1, 0xe7e}, &(0x7f0000000380)=0x8) syz_emit_ethernet(0x5e600bd22d1ca09b, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipx={0x8137, {0xffff, 0x0, 0x2, 0x15, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, {@random, @current, 0x2}, "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"}}}}, &(0x7f0000000080)={0x0, 0x0, [0x0, 0x0, 0x10000000, 0x19]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x800, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x1, 0x7f, 0x8008, 0x20, 0xff, 0x0, 0x1, 0xdbc, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={r3, 0xdf, "4710efd06f263aeaadd2bd506fc4cbbc4bf52e3e70f68d1a4aa8690e70508e8b99a78f942dc079fc686578abf2fc08e7cca0f7de4fb0b5302742ff7839e2d3636055ee86a887df08aed75d575a4f6dc5a13c8f5b590aebabaebe671e8955b2e5df10da5f7b54f016d0f95c652d1b2f19f636cb007b4f7919d9da43e98eaeda800c3b9959fc2f3966e9adffee7ec26af75041b6b7790b069a2eb2bc0267b38045b4a64d4986c2e1b619436dc57e547e5504147dd9d13d959dbce0dae1e8db2c55a66ddff9e589af4c89a0cd5ae6e60d07a227a7798deeec2a92b983498fe471"}, &(0x7f0000000240)=0xe7) [ 459.974759] IPVS: stopping backup sync thread 4308 ... [ 459.974963] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 0, id = 0 03:31:46 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653000000000000001fa00", 0xfffffffffffffffd}) 03:31:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='fdinfo\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:46 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x8}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 460.100725] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 0, id = 0 [ 460.111525] IPVS: stopping backup sync thread 4326 ... 03:31:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8060000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$sock_ifreq(r0, 0x89bf, &(0x7f0000000080)={'\x00', @ifru_data=&(0x7f0000000040)="f9abba95df3aaaf6d51f72e6e5b948a07e5d3b32c984425fb412c7cf6b4f387c"}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x7) ioctl$fiemap(r0, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) 03:31:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x4e, 0x20000102000007) 03:31:47 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x1000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:47 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\x00\x00\x00?\x00', 0xfffffffffffffffd}) 03:31:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x3, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffd, 0x204000) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x4, [@random="8d6bf45af0b6", @empty, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)) 03:31:47 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xfc000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:47 executing program 5: setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x1, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e22, 0x3, 'none\x00', 0x8, 0x4, 0x80}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e23, 0x2, 0x4, 0x7, 0x81}}, 0x2c9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x20, 0x201}, 0x14}, 0x1}, 0x0) 03:31:47 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765300000000400", 0xfffffffffffffffd}) 03:31:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x990) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x1000}) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000000)) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f00000000c0)={0x8, 0x100, 0x401}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x7fffffff) 03:31:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x81000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:47 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x81000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:47 executing program 4: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x8004e23, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x32}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8c}}, 0xe8) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)}, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80800, 0x100) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000080)={0x1, 0x100000000, 0x101, 0x2, 0x1}) 03:31:47 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:47 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pkey_alloc(0x0, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x384, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0xf) close(r0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x101000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') r3 = getpid() ptrace$peek(0x1, r3, &(0x7f0000000340)) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xb0, r2, 0x40e, 0x70bd2c, 0x25dfdbfd, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local={0xfe, 0x80, [], 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x15}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffff0000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffff8000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000840}, 0x4810) socketpair$inet6(0xa, 0x1, 0xd5, &(0x7f0000000180)) 03:31:47 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x5865, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:47 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0h\x00', 0xfffffffffffffffd}) 03:31:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) 03:31:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0040028, 0x0, 0x0, 0x0, 0x0, 0x8100}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 03:31:47 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x1d0, 0x20000102000007) 03:31:47 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765300000000500", 0xfffffffffffffffd}) 03:31:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000080)="295ee1311f16f477671070") r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:48 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xf}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:48 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffff64, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xc9) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000004ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000140)=""/20, 0x286}, 0x100) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x40000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x7ff}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000002c0)={r2, 0x3}, 0x8) sendto$inet(r0, &(0x7f00000000c0)='A', 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) 03:31:48 executing program 3: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280), &(0x7f00000001c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="8e", 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x2f, "e52896db2befb72c8905eee333b6ab4ac41dd20f6a460e73976e89bcc847e78efeac3d25fe8f262af35215c4fdbf9c"}, &(0x7f00000000c0)=0x37) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r1, 0x80}, &(0x7f00000001c0)=0x8) creat(&(0x7f0000000040)='./file0\x00', 0x0) 03:31:48 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x554, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:48 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00@\x00', 0xfffffffffffffffd}) 03:31:48 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xffffff9e}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") getpid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/arp\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100041}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbff, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x4) 03:31:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pkey_alloc(0x0, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x384, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0xf) close(r0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x101000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') r3 = getpid() ptrace$peek(0x1, r3, &(0x7f0000000340)) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xb0, r2, 0x40e, 0x70bd2c, 0x25dfdbfd, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local={0xfe, 0x80, [], 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x15}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffff0000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffff8000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000840}, 0x4810) socketpair$inet6(0xa, 0x1, 0xd5, &(0x7f0000000180)) 03:31:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x500000000000000, 0x20000102000007) 03:31:48 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x5}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:48 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00H\x00', 0xfffffffffffffffd}) 03:31:48 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x3f000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:48 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x543, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pkey_alloc(0x0, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x384, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0xf) close(r0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x101000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') r3 = getpid() ptrace$peek(0x1, r3, &(0x7f0000000340)) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xb0, r2, 0x40e, 0x70bd2c, 0x25dfdbfd, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local={0xfe, 0x80, [], 0xaa}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x15}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffff0000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x67}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffff8000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ff}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000840}, 0x4810) socketpair$inet6(0xa, 0x1, 0xd5, &(0x7f0000000180)) 03:31:48 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x7003000000000000, 0x20000102000007) 03:31:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x4, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f00000003c0)) 03:31:48 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765300000000100", 0xfffffffffffffffd}) 03:31:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006800)={'lo\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_NET_NS_PID={0x8, 0x13, r2}]}, 0x28}, 0x1}, 0x0) r3 = dup3(r0, r0, 0x80000) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000000)) 03:31:49 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x800000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:49 executing program 1: r0 = socket$inet6(0xa, 0x7, 0xfffffffffffffffe) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6, @in6=@local}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @multicast1=0xe0000001}, 0x10) preadv(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/168, 0xffffff2e}], 0x120d, 0x34) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xfffffff0, 0x20000102000007) 03:31:49 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000300", 0xfffffffffffffffd}) 03:31:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040)=0x2, 0x4) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x1e, 0x4, 0xffff) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x80000001}, 0x10) bind(r1, &(0x7f00000000c0)=ANY=[], 0x0) close(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e23, @multicast1=0xe0000001}, @in6={0xa, 0x4e20, 0x7fff, @local={0xfe, 0x80, [], 0xaa}, 0x1000}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e24, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, @in6={0xa, 0x4e22, 0xfffffffffffffffe, @local={0xfe, 0x80, [], 0xaa}, 0x6}], 0x84) 03:31:49 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x608, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:49 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x200000, 0x0, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r2, 0x0, &(0x7f00000002c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_submit(r2, 0x343, &(0x7f0000000080)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7000, r1, &(0x7f0000000080), 0x121, 0x0, 0x0, 0x803e}]) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f00000000c0)={0x2, 0xffffffff, 0x101, 0x7fffffff, 0xff, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2100, 0x0) 03:31:49 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653001fa00", 0xfffffffffffffffd}) 03:31:49 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="770000001e00070f0000000000000000ffffffff0000000000000000000000000000000000000000fe80000000000000000000000000000000000000000000000c001500000000000000000008000c0000000000"], 0x54}, 0x1}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/193, 0xc1, 0x20, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x4, 0x3, 0x0, 0x4}}, 0x80) r1 = socket(0xd, 0x0, 0xfffffffffffffffe) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="0d424be6e9fb6d158090781b5620dca3e6e29c832493ee1927309be45a0c705eca7c3380055cc1eb4b9b7aa2b87c8125460529acc55be4ce056dcbc4293bae231b43237f55d68298c20777e9c087210cb099d386e2bf9fd69880ac071ce874929918f12c670be702eb44d4fca9d216924db356ad9a7a3567c18f129f5a21bc2460d0ef558f420a88e1d5b0983ed3ea84a4074a0b2998cc7abb2f88c97ca909a139d36e2edef1a59ed9b3b174044dbd2f346d2342b911d6330aeca033c1aeda8afeb6cdf0ead32666a10d662b948d8c8b5e7aa228c07117e35d8db05772a2fb4c2016ad4a7d6c458cd11acfba681767da4c4a5f", 0xf3) syz_open_dev$loop(&(0x7f0000000440)='/dev/loop#\x00', 0x1, 0x400) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000700)={@loopback, @multicast2, 0x0}, &(0x7f0000000740)=0xc) recvmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f0000000780)=@xdp={0x0, 0x0, 0x0}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000800)=""/34, 0x22}, {&(0x7f0000000840)=""/93, 0x5d}], 0x2, &(0x7f0000000900)=""/133, 0x85, 0x8}, 0x2) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000a00)={@remote, 0x0}, &(0x7f0000000a40)=0x14) accept4$packet(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000ac0)=0x14, 0x800) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000480)='yeah\x00', 0x5) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000bc0)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000cc0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000d00)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000e00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000e40)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000f40)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000f80)={0x218, r2, 0x700, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x134, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 03:31:49 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x40030000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:49 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x4000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0400000000c00033"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x40000071]}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x8, 0x30, 0x8, 0x9}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r4, 0x7, 0x8, [0xfffffffffffffff7, 0xc0, 0x4, 0x100000001, 0x3, 0x3b1c, 0x2, 0xda]}, 0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x8206, 0x0, 0x100000000, r4}, 0x10) 03:31:49 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="0a07921ac6e37fe5b3b60ced5c54dbb7", 0x0) socket$inet6(0xa, 0x2, 0x9) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x382, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x30a, 0x70bd26, 0x25dfdbfe, {0x3}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000002840)=""/4096, 0x139f}], 0x1, &(0x7f0000fb3fa9)=""/87, 0xfffffffffffffce7}, 0x0) 03:31:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:49 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x6300, 0x20000102000007) 03:31:49 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530960200", 0xfffffffffffffffd}) 03:31:49 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xc001002000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:49 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xfec0}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="636d646c24deb6e6") preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:49 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x400005, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000080)) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="8cc77039ca3949666788d9c2148f26dd3891b425964d119724b7b4d85a1752a2c0958421e8112521c795d045aa5d57b90f1a796abb0328607e42a822a01b453235b7ea67979d8923632bf956f41b2f7bb6bb08f6860a23e6b9ff203b227b43133e0c54c22dff3b8c758b5e2ec857d06d823f503206afb10ab880d822eb423aa9d75637e9d7d4517575976021b7c4cf69764e172e1ef87b4afd534b4d555efb5469d695298449e39af717a3ee88b05dc994ba2a662cec17b2a7cd3fb0aabb0314652c4a86c9c2b8ec3a4aaaff6d1b9260ae71580d4c9e31a9e977b109a4a1f0026a1122a9ec8d385c2c16d02f6067610375aa2afa", 0xf4) 03:31:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8, 0x4100) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x40000001}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x20100010, r1, 0x0) getsockname$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x63, &(0x7f00000004c0), &(0x7f0000000500)=0x1e) close(r3) close(r2) 03:31:49 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0:\x00', 0xfffffffffffffffd}) 03:31:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:49 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xff00}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:49 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6(0xa, 0x41000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa}, 0x1c) r3 = socket$kcm(0x29, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000180), 0x20000180) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r4 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB="0020e839439be4cb5517fa00000000000000000000000000"], 0x2}, 0x1}, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x8) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000200)={@multicast2, @broadcast}, &(0x7f0000000240)=0xc) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) sendmsg(r1, &(0x7f0000000300)={&(0x7f0000000040)=@llc={0x1a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}, 0x0) 03:31:50 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x105440, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[], 0x54ab) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000680)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000500)={@ipv4={[], [0xff, 0xff]}, 0x3c, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000000000000000000000950000003df1957a"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183, 0x0, 0x0, [], 0x0, 0x3}, 0x48) r4 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r1, r3}) recvmsg(r4, &(0x7f0000000dc0)={&(0x7f0000000b40)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000200)=""/14, 0xe}], 0x2, &(0x7f0000000cc0)=""/229, 0xe5}, 0x2041) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x10000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in6, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) 03:31:50 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fchmod(r0, 0x54) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 03:31:50 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653000000000000000fe00", 0xfffffffffffffffd}) 03:31:50 executing program 5: lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', '\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x1) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80, 0x0, 0x0, 0x5, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0xfef, 0x0, 0x0, 0x0, 0xff, 0xffffffffffffbffd, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) 03:31:50 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xa00000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:50 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x600}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x3002000000000000, 0x20000102000007) 03:31:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") fcntl$dupfd(r0, 0x406, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000001780)={0x0, 0x4}, &(0x7f0000002a00)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000002ac0)={r2, 0x64, &(0x7f0000002a40)=[@in6={0xa, 0x4e24, 0xfffffffffffffff8, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x9}, @in6={0xa, 0x4e20, 0xff, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffffa15}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x1}, 0x3ff}]}, &(0x7f0000002b00)=0x10) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)) pwrite64(r1, &(0x7f0000000080)="ca90b82b0a27a0e9b3ad14e1d6e970f6bf252f248692f95b1fa2ad4ef1db4f6d73a018d1030f32ff217dd91417cb2eac97e557099873135661b7598d1c365c3113947da4536444cc16033096652f982b01669204cf484294c1e93dbdfd5d0befb47d492fd922fb60cb4246c289883ad94937762e3e908bc614bc39b720", 0x7d, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000002980)={0x53, 0xfffffffffffffffc, 0x1000, 0x4, @scatter={0x4, 0x0, &(0x7f0000001800)=[{&(0x7f0000001680)=""/102, 0x66}, {&(0x7f0000001700)=""/101, 0x65}, {&(0x7f0000001780)}, {&(0x7f00000017c0)=""/35, 0x23}]}, &(0x7f0000001840)="c3c44ba95fd9d674f8d65b199f95fbf6889a0a14619e8e4691101d91efe7ed82488ac6ecb60b4672a00d0ba6d5e10933c1153fb5bd03d3a8a658394d447852ba2d09fd7b62e6598d211aafa4ec8fbe773b1ef061e491a4b478a401922f565df55b34a44424bf1f255f9d691859899d8700a4d588141fa3ecf9afbda08ffb808de3068ba1a7dd980b9faf39f115f670d33fb27761c4fb54059f68acb0cb1a2c3e1d6de6369153a9d97598cdd3efb329fde82feb26be0ed2cd72504e1577a028b0b322d4712aa21c9172fb12027929f28143b8cb0c6aa26ff33c465acbb32a250f78f0e58d4084e36cff00a7dbfb1e59c842bc942f7759f37db39220789ca77c2847837169660cc3b45adcae0981ef9d96ddea03a58c7dc01e06bb7aadeb25f2c13580f8a1b3d42a9a5b571751bbe3e29b48d4e63468d2e977d744f7caea19562e1177fb15b8ea68916a9d1ec54dc1d3201674dfd0e3e93d94f42e0fe53b462c75a62a7426d2dbf477f00efe3dd95d41bb6c7ec43483e9f47c894fddbbe9a4faef157226f9e6ef1220b68a67e9abb79b6941911a6d77904d8fcac5df5e78a8f0cbf2e15fc553a04bc27840807db4da4c2b609b47fb4e5d8255705befd66b63c6805e9f897842f46b03e006cef269dbe5f5c7b7526bd65a3b4893d98e17d2c26b86422cf6880ac7ae5ea7ba8f89a5d52585dbbb37a817c9bfbcb53677d5198ca920dcfef54c4f1b764140e65767eee14b68b8f8b3a63d6ce2de7fb445a309451b31711877f14f3e722500e3751f26a65f44d71273ec7b5e71f1bda378b5cc68e4a4129fd974b784f84bfd06f32c3c4593e590fec7f4ba71502df7963de8e8603097e5611d3eaab95d356b4f48af7b373db410b13ed6c5612186870ea0ed25c6e08a45336a7a3fca5b948995f6b39cf3d7bb045527e4fcba97b878efd8ac61fe71c9733e0c7d54d11d6ea97969cbed361f2ceae3434357f854c36679d2b0d412cfa85f04df6bba6e83e2f3da73485f09eac72533279d98e5e065b29ea75deeea68c8fb5358f9486e65daf8cccaa30e4295aa39b98ebb845fcd4dc7546b5ba4d11443f3c1f1c8fcc0a23454830a66884389914fc724b45a21e8e9918efccf081691ff8b8c69de495afe55d992b7becdfbc75fea3d24e194be31ae6b5aaf294a4cb6d735bca0b3715ecb71f1647e73d325312661a7ce50ceab01acde1e7e90d3b96ddb6802682d007d26ab0aa69fbed786f70e81e907aabc6bd864f1e6fd33d46df972350853f2aaeffb7ddd9e5f5bd00761295f2c68d24d294233d9805fe1ccf321e832ff6be0ce654c025597b4266d351e883e520fef669165129db95fa5121aabc6575e0a151e4c6f45d265b7ab0d15ce3c2624396355aeea0c32d0955ced5af900394b2c0e8caa0696ef1a8753158a54a95916c0d08a96fd309fd72b434bff0e878c987fe15bcf21458e47d22035f0fc74de3bbc40267e16138f445976c94fc3e731d94067a8c525c9f05f8166aaee0b59b7ddf83f3885a2912e68a989803882098be1c52fa9421dd969fbe454fe70d291926c65b77c301b81a8693a97007d460d2457f31e6b45ec429336866c711f2125d31ca9a59ae25ca5604f4aa903f3b76827f8da56e82e90d948670624d933b2d085a8f5ce501be1b92056532bc4b5ac74c838a11f5746743f39ccac9b2660d8b1e7f9f425521f92439893809d869ecc03ea5b91b9a9c4c7d062e568dbdc4fcebb779634d07740d2f6537253dc72eea0146f919e792db14273a12883324fc416fe55612f28c924637f86c8c6e9518653c7e8669314a2a705a7a908a3187a6b2bf86acfdcd7d9b09288bf60f7a63205995c79bda776afa96109ed028db97fb416e81b5976d94d882ad86797bd6f5013b607ac0fd741ae9e5f9a5ef90bb8cc16e2bbc31a9c4a8e7690e42dd456882613b3c653843561781f656f04b2d0c2da890f96d5490b4e40542e7dd18f058f82031facb23dfaf2ff98383637170e17a4cb52a2a64cda6e151addfb34f89050718f0be78d265b662d1b8cd21e9eca2751f5db0d1c97896fca59f2525eb75c8055943c41b44f27f4a378ca9cea385157237dad4eecf1064e248228b8b75f183c48d5c204c4cb88dfbf73bdaf95b3cd24e4d417ff40d763eca270e41cf401094f2570ac48fdc041fe8e1527b9173bee341e700f911af756faa607baa26009adb5332531825774e5fb2349f664ed770c05bc0142bf80b320fc2599b694da835f7a1379b4503447670383531f1af3efebd2f9a4bd101d6de062d7acceff71893d57b7da9d6f5343fcf819b0bc1e2bfff58c79228791020fc55be08e32f4b45d289a129e70406f16b0b313651d1edd53f5b07d8e5cd68aab7d3377a22a679ee1a08f5026d5de836c7b84b133f346f6184c8fc144219e54f2ded897489d343c5835caa49703006410b5f5b4b69b8588e423ce9f77b9105e5df5c1d7ff1d2aec35e1554bdbe6d447c748ee7cb55b7020bd83f270faa548acb999d8faa02dde06e9de92d99049df38e1f6bb3217b01de8a19d30b0fe229442f1e5931d2059bf4c97d874d3eb73f9edabb1ffbe6dd81c87c8e48a0401e1a9188c445c3bf64049d740537ef35c15b1501f2c4ead680d57bc5db5af3e297709b164703028e7d3a6e2bad93d594d6ca576b182820adc54780814a2b7c2e2d3083e301ad6a9ac397b7e23a52891127f014fa9867404429820f74116a84e28878c99e6effd3c3e3e85b69bc246c3349509e662ec2cd1d73c8860a9996ca533e198f91fb609fb4117201b4da073a2740a7423895356f7fdb8a1e70c1b1053b32ed84a6f5ef549e3336c158e73a6d2be246c4d5850f45a0f355542fa4c86209d7d8c2021365e095ab18f68b00ef4817ce2336e0820c6f486734c7cd0103087b59e6576c151c114256a0ed44521f2c4ec40d6e36ae6880ce7bd43f89deffcf1803960ebf3fad682e6268f7ca0052d5fc606a674a06b04d0f9a6d5fca46438530b5c5689b40bcfbf91840159c6addb20eb7275c9f362fe454fa0ebe1d0eef8ad68de869dcdac288ac47fb481b6cad5ddf4652a7d242b3d1f9f1127f38b296129d3d200b470a6ac0ebad672a356bc2a210278bbd300e973515c583174a26dbceb8144b376c6c4c4d89fd7ae129e01504743a235dbf518cfbab75f432010d91a962a060d84e9e534e529f16cfe0fa72daec4f39deefa23725b670211c00b3ef1342e95ae17ca8cc8978477d336e3899cacf57c00f89ba6e791fca0a8a7b540cf39a31b37254ce0b80f91bbb0a4b29ab4c88ab603752bb60577afabf2f3f814c1697efc9e34d82cbd882912a978daf33ad8d754802833e2768bdd57464d00927628050fb25f0e7965a5fdd8acbedb373ec99cea94377f6f3ee76faf6da2f6f75dd9427fb567af877f1f9f0fec82ba44c1e32161cb324ecd6b9563e1067d6640cfd7be9e7eb6c28167345fe8e867470a1dbe3e85231fe1bf53141b1292d05905fb54980c2a204431115a24023bec4edfc70a5727bb65f849cea12c17e0c3b455c3331a4be165f5cbc17cf333de66c6386a2c152b56b60b5eea767d49e9ae15b8f55636508d83def85fb099ecb9ac82520125c9377b1104f65d9fd40dd87dcf502ed08e8e7520aea5a129a81dbbf54828e24343173fc179a3d7b5c732a2bdc0c3ed67f6630072d32100e9ab1cc080669fe6808deb4af784cd87cdbd7e54a4c56013d8556374a25f91ebd03c6cc0f75bf514f20a387dbb80d56dec1949547cce0bbef36801615589408463517d84b3c4e9bb4a1919631f4d389367dde2078a72b736421d824cbf2c254f52bcf25da68293a096dd64131f22c75161da35e58dcc7f5d281a940ed72bb17ee5991d6b597d3525e6c60ed61e82437761fa10e40bdb468c2fe8ddc4881120d49320e199968d8a32b89945c9059133eb608d1a27699027613efe15e0c65cb76ca44cf0ed3f6a40d9f8cff1248e6d514abc09cb615b1a3f3d836a7dad42d6c8cffd77821f767e20977172c4696b387e605989eb3dccce62be0d4a509b28a6ae8801a73331b264ee71b25b9352fb95457c67ebbcdcccbf57d315153c0214834c640b4491b4372d620d0954565b10484623e771e41475372a2eb70d415eca9b39e4ffa8caee071683d449a96b768d0c8fb8330f44707cc886523a46b74d3b4c0bc1bd7a875be27dac8f0e969eaa80a1a3b02ca902405d38f8bca5a590c42198886d4e3986f3c1c40b49f913aecc8e476998ed9406bf6250db0e68667c7586a502621670e7929f509d2aae91b41013557cb63774265e00d75d61f15617fc8c86f9684a4975826e74ade6a0c32135c186b0cb88b7dfc0474566947204f91268bf7eac6fbf44b7af3ae14a94aa25e2a58ba569fc155746d4cb4254b2bd532a5f37fafa538d67520304398ed439a107a7869024064b90e2476a5a44a702e81730f4f5f61554a4695f1ec17d9d4d904e060be1ec38191c0e84875b329c97ca760ab6ea70cc052dd95c9e1a6e72cf4d02d86d72eeab314a87afca04ebcaacaadd4aae0c786350cfc5d71bae07e02590aed109d3d87e3cce2b21439184e5710b4009128d73ec996afa9b534debc7de224c45f7067587988e02c2cc83feb1fb740455cfcbcdea6b18ba844b0c252881c99cc2bf396a40f97771045787df4730de733c38a5cf722ad2cde19477f33f566a371e53d75a427f2e024fedd1d60034d2f96173049565a523383d7c6a4d5b80db1894ab37e0a67fa45093f6c71132726faef3c65f3889deafedd45efefaedf78759bb93225a876eb4d1e32b66778dea1968635ef33570f638d04d8744521399277684823eb2ffe1b5ff839f5c44e71afbd224cedbdf63bb38928ca51fcda5600136af881644f9b742f9a8be5d27b9c36b75a986f57496df63fdec9d3cb6465effa5738f2b7463202d9c842fefc41c1d28a5321d6ddf1c0ff1065883509ad93bcd1b89503575e5d1addf31c58104f9093dece77edb051d5186951945a1cca81c720211e587ffdc2edb95820b9e466ce0cf05e8cd80f7e4c75459eeb1e69575e5da5f15dfe9d178756a3006da501d98d01a8bcfa6c02693c873f0c75a36cbe9af016041cb0bf22a6c658589198bd3b3d7f561bd970e4d508d1243a1302075a2e7828204707c96adb03dafc531c0f05105f313dfb4fb6da4fdf122469111063baf20dbee132a7bed50b78015b31bb7570dab8f36032ead714499653a64e9f0ee0cfca15ec938d8f4ba010d5ecef9d18af88b606da9826ad2610a46fee14d31605aca12fc39abfcbf27c2aa6746e1e4b92f753099698640c807898cbb45ac8c11ad6b2eb11309a6f8391d758eb4b6ed32a4b1d7d174c0017a12ab097e4c34f3d3460b155a5a6c873768d9365f1d316b7952f9bcb01e5dea50acf4b3b131127e6cfd8fa10ebba6fe33b3f3769d7f35cb078126e471a353d66ae26f058353c517fcba1c6083d61b47bf21ca35bc4a59e7c65eb3572f0d98f65d4326e9d0953fb3557d74b820f7014e47c7ff179a280f67a5815bbfbba93feec0807d1e433c24ff46bb3c1166b70f3dedd30040101767113b0ea9814ef3a98f201088f5fc800077373325403a6de3d52c15942c5b01751c635dbbf067be02c1b6a3a8d56b5dc9e7c8115147f48f040ad88633ee716459db1b7ac22e70f06f1cf3f8f70f31ac98f57de0a6f9b2d71b85227e060c2c178a93a60d808ffd8df26d6131ccaa1aad815b4e33da6160e7b8bab9bd0b53c8db74edb63ebcb59c50ce03679a65c5d39bd477ca78f86d", &(0x7f0000002840)=""/219, 0x6b, 0x10014, 0x2, &(0x7f0000002940)}) read(r0, &(0x7f0000000680)=""/4096, 0x1000) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000000280)=""/245, 0xf5}, {&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f00000004c0)=""/148, 0x94}], 0x4, 0x0) read(r3, &(0x7f0000000580)=""/220, 0xdc) 03:31:50 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20c001, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0x2, 0x7, 0x8, 0xdf7, 0x7ff, 0x8001, 0x51, 0x1, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e20, 0x72, @empty, 0xff}}, 0x400, 0xb0, 0xfffffffffffffff8, 0x7, 0x3}, &(0x7f0000000100)=0x98) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r3, 0x0, 0x0) 03:31:50 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xff00000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:50 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653000000000000000e600", 0xfffffffffffffffd}) 03:31:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x20, 0x70bd2c, 0x25dfdbff, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfc}, @IPVS_CMD_ATTR_DEST={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r3 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:50 executing program 4: r0 = socket$inet6(0xa, 0x100000000000005, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) getpeername$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) flistxattr(r1, &(0x7f0000000240)=""/29, 0x1d) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040)={0x2c, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e23, 0x4, 'wlc\x00', 0x0, 0x6, 0x6}, 0x2c) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000006000000216bffff00000000060000000000000001000000000000000800000000d37c000600000000000000080000000000000001010000000000000900000000000000ffffff7f00000000010000000000000001000000000000000400000000000000a7a2b77100000000ffff0000000000000700000000000000000000000000060000000000000000000000000000000000"]) socket$inet6(0xa, 0xf, 0x2) 03:31:50 executing program 3: r0 = memfd_create(&(0x7f0000000080)='/dev/vhost-net\x00', 0x1) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0xaf01, &(0x7f00001e3000)) r2 = socket$inet6(0xa, 0x3, 0x3c) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") mmap(&(0x7f00007eb000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, r2, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0x4008af14, &(0x7f0000000000)) [ 463.557854] ptrace attach of "/root/syz-executor5"[4579] was attempted by "/root/syz-executor5"[4702] 03:31:50 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\x00\x00\x00\b\x00', 0xfffffffffffffffd}) 03:31:50 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x1000000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 463.601541] sctp: [Deprecated]: syz-executor4 (pid 4712) Use of int in max_burst socket option deprecated. [ 463.601541] Use struct sctp_assoc_value instead [ 463.693566] sctp: [Deprecated]: syz-executor4 (pid 4712) Use of int in max_burst socket option deprecated. [ 463.693566] Use struct sctp_assoc_value instead 03:31:50 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000000e600", 0xfffffffffffffffd}) 03:31:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1}, 0xfffffc25}, 0x1}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b0, 0x160, 0x388, 0x278, 0x160, 0x278, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00'}, @common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x18, 0x20, 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0xe}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}, 0x19, 0x1e, 0x6}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xc}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x1}}}, {{@ipv6={@remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff0000ff], 'ifb0\x00', 'gretap0\x00', {}, {0xff}, 0x3a, 0x4, 0x4, 0x37}, 0x0, 0xc8, 0x110}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote={0xac, 0x14, 0x14, 0xbb}, @ipv4=@broadcast=0xffffffff, 0x6, 0x10, 0x7fffffff}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}, @common=@srh={0x30, 'srh\x00', 0x0, {0x3a, 0x2, 0x3, 0x9f, 0xc6, 0x44, 0x100}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote={0xfe, 0x80, [], 0xbb}, @ipv6=@loopback={0x0, 0x1}, 0x3e, 0x28, 0x7f}}}, {{@ipv6={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, [0xff0000ff, 0xffffffff, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0x0, 0xffffffff], 'veth0_to_bridge\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0xffffffffffffffe1, 0x4, 0x48}, 0x0, 0xc8, 0xf0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x1ff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x710) 03:31:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000000)=0x54) 03:31:50 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xb000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xa002000000000000, 0x20000102000007) 03:31:50 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e9670402e2b7216e24"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x6000, 0x25}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb0}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) fcntl$setflags(r0, 0x2, 0x1) 03:31:50 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x100) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r2, &(0x7f00000001c0)=""/105, 0x69) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3087f5454c0f9ddd84d361204047370ad2bfec8aeaa30496ff8d12c03f38c62323ae087ee63e09ed82a123f16eb97b5bb717a76426e7325ee89c5a87d70e0526ddc44d1a508e3927d4a63eba1e19ab32f1d714ff427aaf21b56f577d5761e85cffa7f5f8f8818ac0fc2385555152abf34e0795ecf1b1e4796d0973286568211cb4dfef60f601b7b1d7771bb37ea5f998fd6ece5cf93e20d6f6c26b6b64e70783139eb63497a5a70a4080b09d5785fed155b8b09d4e4a3eeac1de7ec98941111198e969fbdb1085fef172b8bbba05167a51", @ANYRES16=r4, @ANYBLOB="0c012bbd7000fedbdf2502000000500001000c0007000000000020000000080004004e210000140003007f00000100000000000000000000000008000b00736970000c0007002000000030000000080002005e00000057fcffff0800040007000000"], 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4) tkill(r0, 0x15) 03:31:50 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x65580000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:50 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x9000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:50 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1c000, 0x0) getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r1, 0x56, "9687a4", "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"}}, 0x110) futimesat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x77359400}, {0x0, 0x2710}}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000300)={0xeba3, 0x9, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0x50, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)=r2, 0x4) r4 = getpgrp(0x0) sched_setattr(r4, &(0x7f0000000440)={0x30, 0x2, 0x198fa2f723509afe, 0x10000, 0x620e00000, 0x6, 0x9d77, 0x8}, 0x0) lremovexattr(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)=@known='system.advise\x00') r5 = openat(r0, &(0x7f0000000500)='./file0/file0\x00', 0x68a540, 0x40) r6 = open(&(0x7f0000000540)='./file0\x00', 0x40, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={0x0, r3, 0xf, 0x2}, 0x14) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000005c0)={0x0, 0x8001}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000640)={r7, 0x66, "a2252fb677205934e4dffa58f440c03f9e04973aaf943da6ea198b09b8aec7f7631de43f122dcb10b1be9c46c1d7766d274f20e654e971e84b479efbdf3a5a20b497ee48fbda847a6a4ae2f064f2dd23510d88ad3e7cc9fda5e6f26023f40ad9d1413b2cda12"}, &(0x7f00000006c0)=0x6e) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000700)) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000740)={0x6, 0x0, [{0x80000008, 0x5, 0x0, 0x3, 0xb0b7c7d}, {0x7, 0x400, 0x2, 0x7, 0xffff}, {0x1, 0x8000, 0x7, 0xffffffffffff3238, 0x10001}, {0xc0000000, 0x6, 0x2, 0x0, 0x7}, {0x1, 0x7, 0x0, 0x3ff, 0xffffffffffffffff}, {0x4000000f, 0x3, 0x9, 0x8, 0x400}]}) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000000800)=""/103) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000880)={0x3, 0xfffffffffffffff9}) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f00000008c0), &(0x7f0000000900)=0x40) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000940)=0x9, 0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000a40)={0xb, 0x10, 0xfa00, {&(0x7f0000000980), r1, 0x7}}, 0x18) close(r5) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000a80)={0x1a, 0x1, 0x2}) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000ac0)={0x7}, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000b00)={r7}, 0x8) sysfs$3(0x3) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000b40)={r8, 0x3}, 0x8) r9 = semget$private(0x0, 0x2, 0x8) semctl$SEM_STAT(r9, 0x6, 0x12, &(0x7f0000000b80)=""/76) 03:31:50 executing program 1: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:50 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765300000029600", 0xfffffffffffffffd}) 03:31:50 executing program 4: r0 = socket$inet6_sctp(0xa, 0x47c7eef6476d5790, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2}}, 0x1, 0x0, 0x81, 0x18, 0x21}, 0x98) 03:31:50 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:51 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0xfffffffffffffee6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a", 0x4) 03:31:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:51 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530f5ffffff00", 0xfffffffffffffffd}) 03:31:51 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x8}, 0x306) 03:31:51 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x78020000, 0x20000102000007) 03:31:51 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xf0ffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:51 executing program 5: r0 = socket(0xa, 0x80000, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, [@exit={0x95}, @map={0x18, 0x7, 0x1, 0x0, 0xffffffffffffff9c}, @alu={0x0, 0x2, 0x6, 0x0, 0x5, 0xffffffff, 0xffffffffffffffff}, @ldst={0x3, 0x2, 0x3, 0xf, 0xf, 0x4c, 0xfffffffffffffff0}, @ldst={0x3, 0x3, 0x7, 0xf, 0x5, 0x2}, @generic={0x1, 0x2, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffff}, @jmp={0x5, 0x2, 0x2, 0xa, 0x0, 0xfffffff8, 0x1}], {0x95}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x17, &(0x7f00000001c0)=""/23, 0x41100, 0x1, [], 0x0, 0xf}, 0x48) splice(r0, &(0x7f0000000000), r1, &(0x7f0000000280), 0x4, 0x4) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setregid(0x0, r3) 03:31:51 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x20}, 0x22, r2}) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000040)=0x7f, 0x4) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="280029000000020000002b07df2fd0846bc0964f4ffde3d917e30f00000000000000"], 0x28}}], 0x1, 0x0) 03:31:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000080)="dd4b050f009cc75b0f0db3df6af3ad0f01c80fc7aa070066b98d08000066b87600000066ba000000000f30670f71f3008032050f32", 0x35}], 0x1, 0x0, &(0x7f0000000040), 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, r3}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r5, r2}}, 0x18) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0xffffffffffffffff, 0x6, 0x1, 0xca9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3}, 0xfffffffffffffff7) setsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000440)={0x40, 0x0, 0xf3f, 0x5, 0x100000000, 0x50e, 0x9, 0x5, 0x5, 0x80000000, 0x9}, 0xb) setsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f00000003c0)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000400)=@int=0x8, 0x4) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KDGKBSENT(r7, 0x4b48, &(0x7f00000002c0)={0x7fff, 0x4, 0x44d0}) 03:31:52 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0z\x00', 0xfffffffffffffffd}) 03:31:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r2, 0x20, 0x70bd29, 0x25dfdbfc, {0x1}, [@IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1b}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ifb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:52 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x4788, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x2b00, 0x20000102000007) 03:31:52 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xf00}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:52 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, 0x20011, r1, 0x1000000000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463044001000000474213a505ff3db8098b07178c96f44c98cc1ef36982a8a98fa89458d2cbb90ba414318505ac7acc36002a8b44ecc8cd08465ab7ebb0a6b5982b59cf5598fc65877125cb7ccd29a12ca3361129c4a8eb72307574fb9b9069b1bef026fff4367d67d7a1f2ab998154e8c5cb6e87700000000000000000"], 0x0, 0x0, &(0x7f0000000500)}) 03:31:52 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 465.260827] binder_alloc: 4846: binder_alloc_buf, no vma [ 465.266459] binder: 4846:4848 transaction failed 29189/-3, size 24-8 line 2967 03:31:52 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x90240) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000000)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00'}) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x1, r1, 0x0, r2}, 0x10) 03:31:52 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653000000000fffffdfd00", 0xfffffffffffffffd}) 03:31:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:52 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xfffffff0}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 465.336758] binder: undelivered TRANSACTION_ERROR: 29189 [ 465.353264] binder: 4846:4848 IncRefs 0 refcount change on invalid ref 1 ret -22 03:31:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x0) mq_getsetattr(r1, &(0x7f0000000080)={0x8, 0x81, 0x400, 0x7ff, 0x40000000009, 0x9, 0x6, 0x7fff}, &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') readahead(r2, 0x10000, 0x3) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000140)={@rand_addr=0x1f, @broadcast=0xffffffff}, 0x8) preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) ftruncate(r2, 0x5) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f00000003c0)) 03:31:52 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x6488, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:52 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x200, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x20) getpgrp(0xffffffffffffffff) fcntl$getown(r1, 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) r2 = fcntl$getown(r1, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000002c0)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r3) r4 = syz_open_procfs(r2, &(0x7f00000000c0)='net/ptype\x00') getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) r5 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x301000) ioctl$SG_GET_NUM_WAITING(r5, 0xc0c0583b, &(0x7f0000000040)) 03:31:52 executing program 3: personality(0x35375d2db5f70313) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40100000000001, 0x81031, 0xffffffffffffffff, 0x0) [ 465.407070] binder: BINDER_SET_CONTEXT_MGR already set [ 465.426470] binder: 4846:4880 ioctl 40046207 0 returned -16 03:31:52 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653000000000ffffffff00", 0xfffffffffffffffd}) 03:31:52 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 465.468796] binder_alloc: 4846: binder_alloc_buf, no vma [ 465.474408] binder: 4846:4848 transaction failed 29189/-3, size 24-8 line 2967 [ 465.497195] QAT: Invalid ioctl 03:31:52 executing program 1: r0 = socket$inet6(0xa, 0xf, 0x4000000000009) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) r2 = getpgid(0xffffffffffffffff) ptrace$peek(0x1, r2, &(0x7f00000000c0)) [ 465.523505] binder: undelivered TRANSACTION_ERROR: 29189 [ 465.537561] QAT: Invalid ioctl 03:31:52 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x100000d, 0x33, 0xffffffffffffffff, 0x1d) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000001c0)={0x6, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x108) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff7f00c5599200000000000000000000000000000000"]}) close(r3) close(r1) 03:31:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x7802, 0x20000102000007) 03:31:52 executing program 4: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000a00000)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="01", 0x1, r1) r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001940)="b3", 0x1, r1) keyctl$update(0x2, r3, &(0x7f0000001b80)="df02754677212dfc3e2acc26fdc3ffa64813da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa023895113293535d1c0066d20e0f275188b4b4c187e18774fc2227cbb60fc6697f5337726164c8f3e1181e6d50986cd98a5c44ac0ec3755bae750fe9a073eadeb27eafcf10d87bd91d03e7dc2faed85adcd88ca30e75b1e104002d94defa187e48b89efbbbcc9b9a9a307353df7a21affce4e9149eb122cbc356cb681365afd979e97b5db596e901864a68", 0xc0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x200800, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e24, 0x40, @empty, 0x80}, {0xa, 0x4e23, 0xffffffffffff0001, @remote={0xfe, 0x80, [], 0xbb}}, 0x10001, [0xdf96, 0x5, 0xffff, 0x1, 0x1f, 0x4, 0x4, 0x22a2]}, 0x5c) keyctl$dh_compute(0x17, &(0x7f00000019c0)={r2, r3, r3}, &(0x7f0000001a00)=""/157, 0x9d, &(0x7f00000000c0)={&(0x7f0000001ac0)={'sha1-avx\x00'}, &(0x7f0000001b00)}) 03:31:52 executing program 5: r0 = gettid() r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f00000001c0)) write$sndseq(r1, &(0x7f0000000480)=[{0x8, 0x10000, 0x2, 0x6, @tick=0xfffffffffffffffa, {0xbf, 0x5}, {0x2, 0x1}, @queue={0xffffffffffffffff, {0x9, 0x80000000}}}, {0x4a5f5036, 0x7f, 0x1e74, 0xff, @tick=0x2, {0x0, 0x1}, {0x4289, 0x92}, @connect={{0x6, 0x800}, {0x1, 0x100000000}}}, {0x100, 0x2, 0x7ff, 0x10001, @tick=0x7f, {0x8, 0x9}, {0x1}, @quote={{0xffff, 0x2176}, 0x8}}, {0x4000000000000000, 0x0, 0x489, 0x360, @tick=0x2, {0xfffffffffffffffd, 0x2}, {0x0, 0x401}, @raw8={"42840644f3ac7e994940dd68"}}, {0xfffffffffffffffb, 0x4, 0x0, 0x7, @tick=0x1000, {0x7, 0x2}, {0xffffffffffffffe0, 0x200}, @raw8={"d47854e5409a9732131f500c"}}, {0x7ff, 0x5, 0x9673, 0x401, @time={0x77359400}, {0x6}, {0x6, 0xffff}, @note={0x7, 0xffffffff, 0x3f91, 0x6, 0x1}}], 0x120) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f0000000380)='\x00') r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x400000) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000280)=""/130) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0x4018920a, 0x1ffffffe) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000100)=""/129, 0x48}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}}, &(0x7f00000000c0)) dup(r4) tkill(r0, 0x15) 03:31:52 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0xfec0000000000000}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:52 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000001f500", 0xfffffffffffffffd}) 03:31:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000000)) 03:31:52 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xe00000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:52 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x8, 0x3740, 0x6, 0x3f, 0x1}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x8, 0x30}, 0xc) socketpair$unix(0x1, 0x8, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xffffffffffeff004}, {0x6}]}, 0x10) getrlimit(0xe, &(0x7f0000000000)) sendmmsg(r3, &(0x7f0000006e00)=[{{&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x80, &(0x7f00000006c0)}}, {{&(0x7f00000058c0)=@can={0x1d}, 0x80, &(0x7f0000005a40), 0x0, &(0x7f0000005a80)}}], 0x2, 0x0) 03:31:52 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00h\x00', 0xfffffffffffffffd}) 03:31:52 executing program 4: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040)=0x2, 0x1, 0x2, &(0x7f00000000c0)={r0, r1+30000000}, &(0x7f0000000140)=0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1800000000003, 0x1) msync(&(0x7f0000b5e000/0x3000)=nil, 0x3000, 0x3) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0xfffffffffffffffe, 0x4032, 0xffffffffffffffff, 0x0) exit(0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) 03:31:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x47, &(0x7f0000000000)="5c9be781", 0x4) 03:31:52 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x0, 0x500}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") pread64(r0, &(0x7f0000000280)=""/144, 0x90, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:52 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\x00\x00\x00z\x00', 0xfffffffffffffffd}) 03:31:52 executing program 3: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x1d, &(0x7f00000005c0), &(0x7f0000000000)=0x176) 03:31:52 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x20000080, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xf000, 0x20000102000007) 03:31:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x11d242, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e23, @loopback=0x7f000001}], 0x20) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x40000, 0x2) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="1f6c56c9c0ae9f1d501e761cf2309e7ad04440e35a3741e1730a2b05e7fcf71c3685b2c7ae334a3ecfa501733855e3121e09fd8abf26120206aefce17713c8b80b42f407131bf0fc9445babafe3551b61bf4faf20b6a0fde3e40d7d65ce80243d71c79d4b8f4f3bbc832f7d9247b65a4baf05c14bacfeafe2efbc3dc95ac27de2b363def8022fbbc10104b23c1c377c23bf0f647b05ee803f350c9738d600313d625efa767cc285360dc002a36332fba79d1339ebb", 0xb5) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r3 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:53 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x20000000, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x3}, 0x1c) 03:31:53 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8906, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:53 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0xb, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:53 executing program 3: shmget(0x1, 0x4000, 0x78000100, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9) 03:31:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000280)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:54 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530fd00", 0xfffffffffffffffd}) 03:31:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x59, 0x20000102000007) 03:31:54 executing program 4: r0 = epoll_create1(0x7ffffffffffffffd) r1 = epoll_create1(0x80000) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x9) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1}) unshare(0x400) fcntl$lock(r0, 0x7, &(0x7f0000000180)) fcntl$lock(r0, 0x7, &(0x7f00000000c0)) 03:31:54 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0205000f0a0000000000000000000000030006000000000002000000e0000001000000000000000002000100e58a94a68eef2acdb1000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x50}, 0x1}, 0x0) 03:31:54 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0xa000000, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) connect$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast1=0xe0000001}}, 0x1e) 03:31:54 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000000000000000300", 0xfffffffffffffffd}) 03:31:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = getpid() timer_create(0x7, &(0x7f0000000080)={0x0, 0x31, 0x2, @tid=r1}, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f760070") ioctl$sock_ifreq(r0, 0x89f7, &(0x7f0000000000)={'ifb0\x00', @ifru_hwaddr=@random="d4d656028c4c"}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x777fd1213dc0e7e1) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000100)=0x91) 03:31:54 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:54 executing program 4: r0 = memfd_create(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x20005) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000000)={0x3c847480}) r2 = dup2(r1, r0) writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000200)="83191cfd344a2c5c5c2170ea40186ba8255c2bf8e7511ab164342fed", 0x1c}], 0x1) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000040)=""/47) 03:31:54 executing program 3: getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000080)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f00000000c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES64, @ANYRES32], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES64, @ANYRES16], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES32, @ANYRES64, @ANYRES16]]], &(0x7f0000000100)='GPL\x00', 0x2, 0xffffffffffffff86, 0x0, 0x0, 0x0, [], r0}, 0x48) 03:31:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x81, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000080)={0x10001, 0x100000000}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:54 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xffffa888, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:54 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000000000000000500", 0xfffffffffffffffd}) 03:31:54 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000200)=0x1, 0x4) r1 = shmget$private(0x0, 0x14000, 0x0, &(0x7f0000fec000/0x14000)=nil) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x1, 0x101, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$TCSBRK(r2, 0x5409, 0xb2) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x7000) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x8001}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000100)={r3, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}}}, &(0x7f00000001c0)=0x84) r4 = shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x5000) shmctl$IPC_RMID(r1, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) shmdt(r4) 03:31:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3537e233, 0x4001) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x9, 0x6, 0xb8, 0x8c8f, 0x2}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r3, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x100000000, 0x6}, 0x90) 03:31:54 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x5c000000, 0x20000102000007) 03:31:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x20, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$notify(r1, 0x402, 0x1d) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0xc0505510, &(0x7f0000000000)={0x1000000, 0xfffffdfd, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000200)={0x1, 0x1, 0x7f, 0x5, '\x00', 0x2}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x208102, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000140)=""/135) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000240)) 03:31:54 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00t\x00', 0xfffffffffffffffd}) 03:31:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)="05000000736e6500") preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) fcntl$setstatus(r1, 0x4, 0x42c00) 03:31:54 executing program 5: capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f0000000240)={0x0, 0x0, 0x2000000000002, 0x0, 0x1}) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000003c0)='net/stat\x00') r2 = dup(0xffffffffffffffff) fchdir(r2) fremovexattr(r1, &(0x7f0000000500)=@known='security.evm\x00') r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x7, 0x700000000000000}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x14}, 0x100}, @in6={0xa, 0x4e22, 0x800, @loopback={0x0, 0x1}, 0x867}, @in={0x2, 0x4e24, @rand_addr=0x1e6}, @in={0x2, 0x4e20}]}, &(0x7f0000000380)=0x10) r5 = socket$inet6(0xa, 0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={r3, 0x0, 0x1, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000140)={r6, 0x400}, &(0x7f0000000180)=0x8) r7 = semget$private(0x0, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000440)={{0x7}, {0x7, 0x19}, 0x4, 0x1, 0x7fff}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000004c0)=0x7, 0x4) semctl$GETVAL(r7, 0x0, 0xc, &(0x7f0000000040)=""/173) rt_tgsigqueueinfo(r0, r0, 0x21, &(0x7f0000000400)={0x13, 0x61, 0x3, 0x7}) 03:31:54 executing program 4: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) geteuid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001440)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000001400)=[{0x0, 0x420000000003, 0x0, 0x1, @tick=0xfffffffffffffffd, {0x1}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x12}) 03:31:54 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:54 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xffffca88, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:54 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530ffffffc300", 0xfffffffffffffffd}) 03:31:54 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="b7859cb8eec705f2288a933d66593ae164c990a0028e6640c522b60bdfedb810", 0x20) r2 = accept$alg(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000ba000/0x2000)=nil, 0x2000, 0x1000006, 0x108132, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000bc0)=""/93, 0x1d) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x10000) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x400080, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r3, 0x147c, 0xd2cf, r4}) 03:31:54 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000000000890f, &(0x7f0000000200)="025cc83d6d345f8f76007079e8ce966997013eebfc3f2b54600a084fd99ee5937a86cff3a5de059fb641a0f816df6b0e1a64847b4cf3ea1559291f4ecd38c98275f9673d75f03db48bdafcec0dae7fcddaa313d2457a139c9119388f3c92c4f49f967196b2e8a49706a848fa4c8e6f060b34") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1}, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="00e70000000000000a9964000000001d0400000000008000"], 0x18) 03:31:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200000, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000280)) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:54 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x800000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x1700, 0x20000102000007) 03:31:54 executing program 5: syz_emit_ethernet(0xfdef, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x7fe545227c00, 0x2c, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x2c00, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}}}}}}}, &(0x7f0000000000)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x240, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffff}, 0x13f, 0xa}}, 0x20) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000340)=0x5) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0xffffffffffffff71, 0xfa00, {&(0x7f0000000300), r1}}, 0x18) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/209, 0xd1}], 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r2, &(0x7f00000002c0)='ns/mnt\x00') 03:31:54 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530029600", 0xfffffffffffffffd}) 03:31:54 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:54 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000140)=0x9) r2 = semget$private(0x0, 0x91bc1054577bc5cc, 0x480) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000040)=""/158) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0xc0f85403) 03:31:54 executing program 1: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f00000000c0)={&(0x7f0000000280)=""/238, 0xee}) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000000)) 03:31:54 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530300200", 0xfffffffffffffffd}) 03:31:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000100)) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00007a8000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000000307ffff0000000000000000000000007a3e56107eb6fc1e2c03dfd4926133ffffffff00000000697f1defb0f98f5fe6c0a1fcc419a36d81ebbbfbf7259f9a36ad2c1949fcf8e02bf039d189b5ad49b1062552faf1adc8a1d16113d691448f9b9509000000b8b0b4fcfe79231d4508a24a8a8d39"], 0x14}, 0x1}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x541100) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000002c0)=""/4096) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000180)=""/142) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80, 0x0) ioctl$KDENABIO(r2, 0x4b36) 03:31:54 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xc0042, 0x0) 03:31:54 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:55 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653000000000fffffff500", 0xfffffffffffffffd}) 03:31:55 executing program 1: clock_nanosleep(0x0, 0x18a7026b446ff282, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) 03:31:55 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00008f7fe7)='#[vboxnet0vmnet1security\x00', 0x4) fcntl$getflags(r1, 0x40a) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x1, 0x2, 0x8, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r2, 0x80000000}, 0x8) 03:31:55 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:55 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x8035000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:55 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000080)={0x8, 0x10001, [{0x5, 0x0, 0x8}, {0x6, 0x0, 0xffffffff}, {0x7, 0x0, 0x8}, {0xffffffffffffffff, 0x0, 0x6}, {0x3, 0x0, 0xffffffff}, {0x0, 0x0, 0x101}, {0x36bfafed, 0x0, 0x4}, {0x7, 0x0, 0x1000}]}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x7, 0x4, [0x80]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000900)=@nat={'nat\x00', 0x19, 0x3, 0x4a8, [0x20000f80, 0x0, 0x0, 0x20000fb0, 0x200012a8], 0x0, &(0x7f0000000200), &(0x7f0000000f80)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0xb, 0x0, 0x0, 'nr0\x00', 'veth0_to_bond\x00', 'bridge_slave_1\x00', 'veth0_to_team\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x230, 0x298, 0x2c8, [@physdev={'physdev\x00', 0x70, {{'bpq0\x00', {}, 'bcsh0\x00'}}}, @comment={'comment\x00', 0x100}]}, [@arpreply={'arpreply\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{{{0x1f, 0x0, 0x0, 'bridge0\x00', 'ipddp0\x00', 'bridge0\x00', '\x00', @random="042ff2202751", [], @random="d43acaaf4fee", [], 0x70, 0x70, 0xa8}}, @common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}}, {{{0xb, 0x10, 0x0, 'bond_slave_1\x00', 'sit0\x00', 'veth1\x00', 'lo\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @empty, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xfffffffffffffffc}}}}]}]}, 0x520) 03:31:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") r1 = socket$bt_hidp(0x1f, 0x3, 0x6) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) close(0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e23, 0xf70, @dev={0xfe, 0x80, [], 0x11}, 0x1}, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x16}, 0x7ff}, 0x6, [0x9, 0x8, 0xffffffff, 0x1800, 0x2, 0x5, 0x3db, 0x11]}, 0x5c) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) 03:31:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x368, 0x20000102000007) 03:31:55 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\x00\x00\x00A\x00', 0xfffffffffffffffd}) 03:31:55 executing program 4: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x80000) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) r1 = open(&(0x7f0000021000)='./control\x00', 0x10000, 0x0) mknodat(r1, &(0x7f0000000000)='./control\x00', 0x100c002, 0x0) faccessat(r1, &(0x7f000003b000)='./control\x00', 0x2, 0x0) 03:31:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008910, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000280)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) [ 468.351479] x_tables: eb_tables: physdev.0 match: invalid size 72 (kernel) != (user) 112 03:31:55 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:55 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\x00\x00\x00L\x00', 0xfffffffffffffffd}) 03:31:55 executing program 5: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e363757367725669643a4465", 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x90) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={[], [], @loopback}}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') 03:31:55 executing program 4: r0 = userfaultfd(0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffff9c, 0x6, 0xa286d18dd61423c9, 0x6, &(0x7f0000000000)=[0x0], 0x1}, 0x20) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000000180)=[{0x200, 0x9, 0x2, 0x8001, @time={r2, r3+10000000}, {0x800}, {0x5, 0x100}, @time=@tick=0x1ebf}, {0x5, 0x6, 0x7, 0x913e, @time={0x0, 0x989680}, {0x7, 0x400}, {0x1, 0x2}, @ext={0xad, &(0x7f00000000c0)="3075ae0268f2be6b563f8ece0c03c3e29526a4743d0c18f4688b45ec353ee0622572d58ed570e1f38d7673484217886f73526ede35944b75199717b88b3592c572e22552f4955a247bdb8f16b546c164438eb02ce0e2a7a64920cdd5c417d6c39b859daad6907970acdf655a4b306c8c637f06a407fb7b57e3c34e4c3ba501827013792c1ec94d51b93584eb60f89d5dd31cd9ea14351fcc2366b8ecaa87f76de72f7b98233e5a93708b5c2640"}}, {0x100, 0x5, 0xff, 0x8, @tick=0x5, {0x4fbf, 0xf2}, {0xbc7, 0x5fd831c5}, @addr={0x0, 0x7fffffff}}], 0x90) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc018aa3f, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) [ 468.460435] x_tables: eb_tables: physdev.0 match: invalid size 72 (kernel) != (user) 112 03:31:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x3) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:55 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x400300, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:55 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765300400", 0xfffffffffffffffd}) 03:31:55 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:55 executing program 3: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)="006400ecff0345") 03:31:55 executing program 5: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={0x73, 0x79, 0x7a}, &(0x7f0000001fee)="520972757374e363757367725669643a4465", 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x90) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@ipv4={[], [], @loopback}}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') 03:31:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffff8}, &(0x7f00000001c0), 0x8) r2 = dup(r0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) close(r0) listen(r3, 0xffffffffffffff7f) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000040)="0700e1311f16f477671070") epoll_pwait(r2, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x6, 0x81, &(0x7f0000000140)={0x6}, 0x8) io_submit(r1, 0x0, &(0x7f0000000080)) 03:31:55 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:55 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x308, 0x20000102000007) 03:31:55 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0xffffffffffffffff, 0x6, 0x1, 0x9, &(0x7f00000001c0)=[0x0], 0x1}, 0x20) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000002c0)=0x2) poll(&(0x7f0000000480)=[{r0}, {r0, 0x20}, {r0, 0x200}, {r0, 0x400}, {r0, 0x80}, {r0, 0x51}, {r0, 0x401}, {r0, 0x402}, {r0}, {r0, 0x81}], 0xa, 0x2) r1 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x41e4efce4a96da5d) inotify_rm_watch(r0, r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)="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", 0x0, 0x0) read(r2, &(0x7f0000000000)=""/181, 0xb5) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x6e9053d4480d51b8, 0x0) open_by_handle_at(r2, &(0x7f00000000c0)={0xf3, 0x7fffffff, "8355a4d0d3dd723ebeb89317250a366728647158304c2eb93a621c78a11b4cf7316b40e12cc7c8b1e785a215ab817f4fe879cf021629b9c835ee9d12c5913151c61e63a971b43037ece5d9d635320cf1cb15438bb1e80c28a2ea20abb51dcf074ca4ebbab20e5a7e4890ed54be6d98c9d29bdda2b4930d115e9cca2ffdee4e56c22e74b12b532e65c3d1e855f3721f9d2808a1a801264996d37df948bac419406fe1cb4bd02b7ada0831b1db3f788abfb286c9053f1950c3272201554223f1c350d907949a0c2fa2f9a884c9594d802eb0120e4ea94c6d86530b84ef2d2b44212493d0a3875c00ac94848d"}, 0x800) 03:31:55 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530c0ffffff00", 0xfffffffffffffffd}) 03:31:55 executing program 5: r0 = socket$inet6(0xa, 0x800000001, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@dev={0xfe, 0x80, [], 0x1b}, 0x4e20, 0xf000000000000000, 0x4e20, 0x100000000, 0xa, 0x80, 0x20, 0x2, 0x0, r1}, {0x0, 0xe387, 0x5, 0x9, 0x1, 0x800, 0x0, 0xf9}, {0xfff, 0x4, 0x46, 0x4}, 0x101, 0x6e6bb9, 0x2, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x4d2, 0xff}, 0x2, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x3503, 0x3, 0x1, 0xfffffffffffffff9, 0x7292aa17, 0x2, 0x800}}, 0xe8) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', @ifru_ivalue=0x700000}) 03:31:55 executing program 4: r0 = socket$inet6(0xa, 0x4, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x301000, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000140)) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xa, &(0x7f000079bffc), &(0x7f0000000000)=0x4) 03:31:55 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x5405, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x800, 0x0) splice(r1, &(0x7f0000000000), r1, &(0x7f0000000080), 0x5884, 0xf) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0xeeb7) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)="88a531ae0dbd88442a197d9bc69ec71261ddc6547f6c4f7846a4eb7ed95810d8672a48f0b9f39d0a9163fdf70449071c4ac24ac414e73f34f508595ef61bc5afdc3aa92cce64670fa3ce7613653a9366f004491dcd2ca2ef5300624f48548188d7db0a72cca376cc52e264dacd2c44e89badb329cb386f9d369c4071dfd47d7e2a1091201528b60ef6b3e04e3affd3ca5859721a6e618552efadbcefde411582ecd1c534e40ebfa98f6cb829f8ced737ea66c83fc8ac2c2a7d5b58af46434b38b68e446700f266ae5944a3aeab1858c935e39f0fa8025e046429b566254e450f8a0f30642df909e7f91b0f7d", 0xec}, {&(0x7f00000003c0)="fe1037b1d5708af4b379edb0117478df2b1964e7e621586f95fc4db5df4c8e976789337580114a627a1117eb27c5ad0d306cd3d752e5f4e16780d2c89dcb9e284320aa16a4a8836eb346c3dc94d31921b3007fc84fb43eba53030297fdeda62eb5bc9b37f15a088b802bf19c717ae04a704e2fe60eba3217f57a4ab2e91b3662aea3ed4bdfeb31ae3da7e93aacdc8be41b92b671f635937a34a828df72efdfc5f00988388ed71108da54e68f", 0xac}], 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:55 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x0) r2 = eventfd(0x200000000001000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0xfffffffffffffffc, 0xfffffffffffffffb}) 03:31:55 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) dup2(r0, r1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000140)=0x1) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x7000}]) 03:31:55 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\x00\x00\x00h\x00', 0xfffffffffffffffd}) 03:31:55 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\x00\x00\x00\a\x00', 0xfffffffffffffffd}) 03:31:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x40045436, 0x6) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x44}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x100000000}, &(0x7f0000000140)=0x8) 03:31:56 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x100, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000200), 0x0, 0x0) r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c, 0x80800) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)=0x7, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x284200, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000002840)={@empty, 0x0}, &(0x7f0000002880)=0x14) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000028c0)={r3, 0x1, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f00003cefe4)={&(0x7f0000000300)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000180)={0x2b7, 0x2e, 0x6fd, 0x0, 0x0, {0x2003}, [@nested={0x25, 0x0, [@typed={0x8, 0x9, @ipv4}]}]}, 0xffce}, 0x1}, 0x0) [ 469.199574] netlink: 663 bytes leftover after parsing attributes in process `syz-executor3'. 03:31:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x51000000, 0x20000102000007) 03:31:56 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0l\x00', 0xfffffffffffffffd}) 03:31:56 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x11, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:56 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) fadvise64(r0, 0xfffffffffffffffe, 0x4000000000000000, 0x0) set_robust_list(&(0x7f0000000040)={0x0, 0xae}, 0x18) 03:31:56 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10042, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x10000, 0x2000000004, 0x800, 0x400}, 0x2e1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x28, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r2, 0x6, 0x8}, 0xc) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000002c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) r3 = socket(0x11, 0x80002, 0x0) setsockopt(r3, 0x107, 0xd, &(0x7f0000001000), 0xc5) sendmmsg$inet_sctp(r3, &(0x7f0000000700)=[{&(0x7f0000000200)=@in6={0xa, 0x0, 0x1}, 0x1c, &(0x7f0000000580), 0x0, &(0x7f0000000680)}], 0x492492492492682, 0x0) 03:31:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200100, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0x115001, 0x103002, 0xfffffffffffffc00, 0x9, 0xaf}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:56 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x4efdd3d4c0555c47, 0xfffffffffffffec6) clone(0x0, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 03:31:56 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:56 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1000000000000005, &(0x7f0000000940)="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") socket$vsock_dgram(0x28, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xffffffff00000001, 0x40000) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000000c0)=""/121) getsockopt$sock_buf(r1, 0x1, 0x6, &(0x7f0000000000)=""/62, &(0x7f0000000080)=0x3e) 03:31:56 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x80, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x3, 0x8000, 0x8, 0x3}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) getcwd(&(0x7f0000000280)=""/109, 0x6d) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/32, 0x15}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2, &(0x7f0000000000)=""/123, 0x7b}, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$inet_mreq(r3, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)=0x8) 03:31:56 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765300000031b00", 0xfffffffffffffffd}) 03:31:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) getpid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)) fcntl$getown(r1, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000280)=0x0) syz_open_procfs(r2, &(0x7f0000000080)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) 03:31:56 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:56 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x4305000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:56 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00 \x00', 0xfffffffffffffffd}) 03:31:56 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xb003, 0x20000102000007) 03:31:56 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = memfd_create(&(0x7f00000003c0)='\x00', 0x2) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000000440)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000008000000710e13"], 0x89) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0xb}}, 0x20) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40000, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000240)=""/195) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x9) ioctl$TCXONC(r3, 0x540a, 0x3) 03:31:56 executing program 3: r0 = socket(0x80000000000010, 0x103, 0x1) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000000)={"74056e6c3000000200", @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) 03:31:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) signalfd4(r0, &(0x7f0000000000)={0x4}, 0x8, 0x800) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:56 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:56 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000000fd00", 0xfffffffffffffffd}) 03:31:56 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000001c0)=@alg, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000740)=""/4096, 0x1000}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000080), 0xff3c) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000400)=0x14) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$void(r0, 0xc0045878) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000240)) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@ll={0x11, 0x17, r1, 0x1, 0x3, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f0000000440)=[{&(0x7f00000004c0)="79e273c26ffe8690f9f854a38e4754a0ec6a1486d07bdf0e278e2541d9ae65a4e227570edbeebac56141cebaf6fbd272d9e5eab85cd684db01d5724343be04c029818a78b5dc605f2eba7bb20a2f12cf21ee7acb3846800a1c285885f9bc3b7638c757b7b7ffb51299509944786568059945836cf1ad3beea33e8ec847edaf9d69be320d49c78f9b5e1f38dd0978cbea7f43aa4ddde27151db2d212c0dd4c44494098ca5915b22c61e36f8142412d12f5d2fd86070bbc410960ba70d38993ff43f8c3215396bb5517c7eb0350a12b851069f4d81428589376d8eea74d36a10e1cf1593496d45cbcd0d3b82954554c06b735f2c681b", 0xf5}, {&(0x7f00000005c0)="cf88172215b9cb831c1f82bbf8a2bb2e9b67b31813debca0e4d19826450b6d1f21a05444bd603e5e7d666bf2d5a7770976bb1af1eb05e294e8c7a563b1275f578c17c44292a8b10dc827942c7861c2c35e9f642162b465baedea312c6fbed7f48e68011e482ba2ebcb0868476beb94e7462a1de9b627757c6179047f54ae2d87f04cb93a6574f196c925f854d8c31c9c02113c36df46b40bac38b448ca4c8463797389cd674345152c012b5521029551c34e0894e93357cef972ec97fd526b0e636e67ce6b93a7465d73b2f5ae542a8896196b7469a1be62f31834c7ccea06f0d52f8596133460d91f1b988eb9c9a7dbdc5f728314e74b63e329bc2f90f7ed", 0xff}], 0x2, &(0x7f0000000000)}, 0x0) 03:31:56 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000000)) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:56 executing program 4: r0 = open(&(0x7f0000000240)='/\x00', 0x2, 0x1a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fchown(r0, r2, r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="dd79"]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x420800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f00000000c0)=[@cr0={0x0, 0x6000000d}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:31:56 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000140)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f00000009c0)="1f", 0x1}], 0x1, 0x81a06) ioctl$TIOCCBRK(r1, 0x5428) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xca7f030000000000, 0x20000102000007) finit_module(r0, &(0x7f0000000080)="000000000000000000000000000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a", 0x3) 03:31:57 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00l\x00', 0xfffffffffffffffd}) 03:31:57 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x100000000000000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:57 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x200) setsockopt$inet_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000100)="17351b668e5996a6eed319529784fa30f0a63342e726a750bad90cc8939bbd5b33cf5df39b6d4467ed87bda5ad908042d7351cee18e6cba30fd54f5fc3658d1a5e89d0125b4268f3e9", 0x49) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000340)=""/148, 0x94}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0) 03:31:57 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x4, 0x1) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x3ff, 0x440) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") fcntl$getownex(r1, 0x10, &(0x7f0000000340)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/packet\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000140), &(0x7f0000000280)=0x60) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:57 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x3e8, 0x20000102000007) 03:31:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000001f00)="2f657865000000000000d50fef7afaf807e3c2f98d0d02812e3ca05fc31e623a2a051fc20fa5a02d84267a0067ac78b8ed1ee48d8097f99d3188a59818771e21974fc3d02efdabd0512782c2474e0a8c17538091e53bdc54aa574b0615a98c9046beb56b8bb5744fcc54b400dec854d2da9efbbdf5e4c75fae864cc0fce7514c133f17a1b93b735d3d5b3e10b683128034ec6e19ed879a810a401f95b9860b41b3b8683ac1b6f21c21769cbd07a9b0f2ab9711ecaaf67a7a74beef377c60b435f3eee826d174ca7516e89abcebd589104d80402accdc8d7ae101c57bbc26c33df519152ef8daf388b20fbc8c55cdb7d471a822531e7d7b88bbb269d72051d9f92d569935ce2b387f9e30fabf336e53827a8bdd4f7c3fba515ade98e68d965b0a52ec80d74eebb4c2904be489d2d473dab9f302545f6fd2973979092a404bdee5aad5d3eb20cb69f2e8c01eab7fbf98463fcdeb034f041dbd1cd779e40828d9db22f3e839a3f58a0e6ac2312fb1f95ffb6e97c6cc55353b7301984f08f9ca247456b5628692d5e443455794a27c4b194226b60a3b19bf09a2595e1d5aa5eb62934533af467d7de9c30c5f7b4db1f048c64587b71b2be65c78") fgetxattr(r0, &(0x7f0000000240)=@known='user.syz\x00', &(0x7f00000002c0)=""/159, 0xffbb) getsockopt$inet6_dccp_int(r0, 0x21, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) 03:31:57 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x803, 0x2) sendto(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f00000003c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x80) 03:31:57 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:57 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x2c00) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x0, 0x0) flock(r2, 0x8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000100)={'bcsh0\x00'}) 03:31:57 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00?\x00', 0xfffffffffffffffd}) 03:31:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000001c0)=ANY=[@ANYBLOB="92ba4812237e30e49f25ea88e246fb15d4f70666cce1abff17353dab4c735929ebba599ecc44d310d868ada09540f3201a248edd57c1ab346f51fe24650a21d94f5d9aa1d927000000"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x380000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={r4, 0x5}, &(0x7f0000000180)=0x8) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000240)) 03:31:57 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x88640000, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x3a, 0x20000102000007) 03:31:57 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:57 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530f80100", 0xfffffffffffffffd}) 03:31:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x1c) r1 = socket$inet6(0xa, 0x4, 0x400000000000) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmmsg(r0, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0xed) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x8, 0x8000, 0x0, 0x0, r4}, &(0x7f00000000c0)=0x10) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000002c0)={'filter\x00', 0x4, "3f1b857e"}, &(0x7f00000004c0)=0x28) io_setup(0x10000, &(0x7f0000000140)=0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) io_cancel(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x5, r3, &(0x7f0000000180)="fcfbd846c87b454f6ca05beaee4e2d1041b7be65cd88d3b0bda9a3322caf03b548dbf1674516a681d6b40cdf9abcb2fb725c793d75e45f530f39757272ec7a8435d8e400b52d8c85dd4fa05974368992731162635e250da4dcb949a1575b5af19b8e6ae65c43ea", 0x67, 0x1bbaea0d, 0x0, 0x1, r6}, &(0x7f0000000280)) dup2(r3, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1004000000016) 03:31:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) r2 = getpgrp(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000300), &(0x7f0000000340)=0x4) pipe2(&(0x7f0000001580)={0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000015c0)={0x1, 0x200, 0x3, 0x68, 0x0}, &(0x7f0000001600)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000001640)={r5, @in6={{0xa, 0x4e20, 0x5, @empty, 0x7}}, 0x8, 0xfffffffffffffffe}, &(0x7f0000001700)=0x90) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x2, 0x0, &(0x7f00000003c0)=""/4096, &(0x7f0000000140)=""/67, &(0x7f0000000280)=""/71, 0x10000}) 03:31:57 executing program 5: r0 = socket$kcm(0x11, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="c1000f00b0b6718067061fe4ac141414eb", 0x11}], 0x1}, 0x0) r1 = socket(0x8, 0xf, 0x9) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0x55, "0a10cd2bd7e47d277df98a2a39a196d5b8e7273549d87d7bb9b261486988378b95cafbc12373825530d07838f74608a161615a889c3859f76d933e8c8d54ca41f5450d6d80c8047b4789e6d4f561da497b5d0bd026"}, &(0x7f0000000180)=0x5d) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="6c1580000000c372753c9e858ea616ada1e8c0e56d740a6bff24b462bcdf05f03936a47173a1dd1fefc0b10e2d1eeed8564021177c6d8e0d5672e02e96172b41a2174e62b39337467a6f8558a3d317dbc58a81e502c4b4584a52d392988fefd76e03d8230835f85d24c2f9410aad1b470fee"], &(0x7f0000000280)=0x74) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000002c0)={r2, 0xbf42, 0x1, 0x0, 0x9, 0x10000, 0x8, 0x4, {r3, @in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0xffff, 0x4, 0x1e59, 0x0, 0x6}}, &(0x7f0000000380)=0xb0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x9) 03:31:57 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0x84101, 0x4) openat$cgroup_int(r0, &(0x7f0000000140)='memory.swap.max\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000080)={0x1c, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x5}, [@typed={0x8, 0x77, @u32=0x6}]}, 0x1c}, 0x1}, 0x0) 03:31:57 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:57 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653000000000000000fd00", 0xfffffffffffffffd}) 03:31:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)) listen(r2, 0x7) 03:31:57 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x42, 0x44000) ioctl$TCFLSH(r0, 0x540b, 0x5) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x200008a8, 0x2b0, 0x0, 0x10c, 0x390, 0x0, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, &(0x7f0000000000), {[{{@ip={@remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x98, 0xbc}, @TTL={0x24, 'TTL\x00'}}, {{@uncond, 0x0, 0x98, 0xbc}, @ECN={0x24, 'ECN\x00'}}, {{@ip={@empty, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'sit0\x00', 'teql0\x00'}, 0x0, 0x98, 0xbc}, @ECN={0x24, 'ECN\x00'}}, {{@ip={@multicast2=0xe0000002, @rand_addr, 0x0, 0x0, 'ip_vti0\x00', 'irlan0\x00'}, 0x0, 0x98, 0xbc}, @inet=@TOS={0x24, 'TOS\x00'}}, {{@ip={@rand_addr, @broadcast=0xffffffff, 0x0, 0x0, 'team_slave_1\x00', 'veth0_to_team\x00'}, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback=0x7f000001}}}], {{[], 0x0, 0x70, 0x94}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4a8) 03:31:57 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x400) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) sendfile(r3, r1, &(0x7f00000000c0), 0x80) 03:31:57 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:57 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0xe00, &(0x7f0000000280)=@in6={0xa, 0x0, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:57 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000001fa00", 0xfffffffffffffffd}) 03:31:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xfffffffffffffff0, 0x20000102000007) 03:31:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000081000040000000000000000003000000"]) 03:31:58 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4630}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0x1}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:58 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede-generic)\x00'}, 0x58) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="502da457d6d9e3097bdc90ddf3247273e876b18d6f21768bfc170b27166eaf3f0bc8fdd0cacef007a17678c0143294b50c7bfa14b51945b044dd9fbd00f3d4e31c5146268b602264e7cd4ee09ad42026bf3c24b06cc8f986", 0x58}], 0x1, &(0x7f00000001c0)}], 0x1, 0x0) accept$alg(r1, 0x0, 0x0) recvmsg(r3, &(0x7f00000007c0)={&(0x7f00000005c0)=@ipx, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/137, 0x89}], 0x1}, 0x0) 03:31:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000040)) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000ff000/0x4000)=nil, 0x4000}, 0x1}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r5, 0x6, 0x12, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @rand_addr, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) dup3(r4, r5, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r4, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_ENABLE_CAP(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, [0x0, 0x5]}) 03:31:58 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530fdffffff00", 0xfffffffffffffffd}) 03:31:58 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000140)={&(0x7f0000000080)="39d04a83cd1aa7672ff0d628096a999fbaa68feeeda6cebd0ed2a436d0d92da387cf53be7a6f54864e06c4e3a10bf8ca289fae9d50d434218204bdacb176cdccf4d2", 0x42}) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r2 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:58 executing program 5: r0 = socket$inet6(0xa, 0x7, 0x10000000000) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000046c0)='/dev/rtc0\x00', 0x4803, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004880)='/dev/uinput\x00', 0x0, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000004900)='/dev/dsp#\x00', 0x100000000, 0x100) r4 = socket$inet(0x2, 0x80004, 0x10001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000048c0)=ANY=[], &(0x7f0000004940)) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000040)={0x400, 0x5, 0xd9, &(0x7f0000000140)="0c167283a1d0e04cef889237535a4da75bc91c8a2841ee63aeba58f29eed196215c3173afcca90de6d51b884d11998db3d16f3663c09d489cbd8e456cc5a212d55e17e58b5b8ae9ff5a9b82c924f9d208b85d4da2994e60ba4a7fea47fb73c77b8108a8233ef77e907675b9ae24182766279851a179af3c525ff123dfad02f26ac8811124d4acb865d759195ab4a9613c36804478018d16bfdac62194c495b82a2a26dac704dae6625c2561073ddce9575fc713a3d1cd6e8f84bd5ebcdb1eeeaa3998326fc2e749a30f8b6e824761a6aff5e080f49553c1a89"}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x5, 0x109000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000000)={0x0, 0x10d000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x80000001}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0x6}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000003c0)={r7, 0x4, 0x7ff, 0x486513cd, 0x0, 0x3, 0x3f, 0x1ff, {r8, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}, 0xffffffffffffff81, 0x80, 0x841b, 0x3f, 0x8}}, &(0x7f0000000340)=0xb0) 03:31:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x3b00000000000000, 0x20000102000007) 03:31:58 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x88caffff00000000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:58 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\a\x00', 0xfffffffffffffffd}) 03:31:58 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf9320db97e57ffd3}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa1c}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x49}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf0}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/200, 0xfffffffffffffde4}, {&(0x7f00000005c0)=""/221, 0xffffffffffffff79}], 0x2bf, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x70010000, 0x20000102000007) 03:31:58 executing program 3: socketpair(0x9, 0xe, 0x9, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000200)="936025602468b89d158d73db9760f8df09724a181446e811da399f5adc4c5e3ba789035fdd61a6818a863ab213b246d84450a2ad63a2d98426f3894254b93654b9") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x100) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000004c0)=0x15, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") pipe2(&(0x7f0000000100), 0x4000) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000080)=0x10, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r2, 0x0, 0x1, 0x3, &(0x7f0000000100)}, 0x20) 03:31:58 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530f50100", 0xfffffffffffffffd}) 03:31:58 executing program 4: readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/123, 0xfe93}], 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="6e65742f69705f7673003a2eb4c2e2da6b3747b31fd2ec1c785e3698713ff8708c0d7d26fa57af2d5855b8943218e2c78b93d449aae581d6002617bcb15e02bc61233ab43192a185b0d24935bb4baae69a0d09aef5f6bd8bda45ae71589fd80a34054dcaa85d5c85d993") preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 03:31:58 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000080)) ioctl(r1, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r3 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000000)={0xffffffffffffffd4, 0x9, 0x1ff, 0x28000, 0x0, 0x4bfa8b8c}) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f0000d4b000)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x80045300, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000180)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000080)={0xf4, {0x2, 0x4e24, @multicast1=0xe0000001}, {0x2, 0x9, @multicast1=0xe0000001}, {0x2, 0x3, @multicast2=0xe0000002}, 0x90, 0xf3, 0x6, 0x1, 0xffffffffffff8001, &(0x7f0000000040)='ipddp0\x00', 0xb29, 0xc01}) 03:31:59 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000000007fffffff00", 0xfffffffffffffffd}) 03:31:59 executing program 3: r0 = socket(0xa, 0x1, 0xfaf4) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$dupfd(r0, 0x0, r0) r1 = memfd_create(&(0x7f0000000100)='*GPLGPL.vboxnet1\x00', 0x6) unshare(0x2000400) fchmod(r1, 0x0) 03:31:59 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x11000000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:59 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x2e00000000000000, 0x20000102000007) 03:31:59 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) r2 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000280)={{0x2, 0x7, 0x6, 0x1200000, 'syz0\x00', 0x2}, 0x4, 0x20000430, 0x9, r2, 0x3, 0x0, 'syz1\x00', &(0x7f0000000000)=['cmdline\x00', 'cmdline\x00', 'ppp0wlan0\x00'], 0x1a, [], [0x3ff, 0x80000001, 0x0, 0x8]}) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:59 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f477671070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)="6367726f75702e6d6178cb5c04af3a2eed6e6023347ec7ff6e7473001548cf79a76ffd23575bcdce92bc5011aa0852dd2488cbe7a06712c38588ccd3cedc3f7cf83a19cfe49299558ae9d29bfeff70d72e27d32c7d3252893058b7920dff0c6c38bac54fcd240d6cc4fc2437333bfe23e68ffdead2f25974d587dc7a1d290d9b15366f890f8f2fbb057ffc49663e20deb1cf80cef606d16b79c559dfc65184a7678b4b28d6d32ae38c7d6f362ee03a88d94b0da6f0038b98", 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000080)={[0x34, 0x3a, 0x37]}, 0x3) 03:31:59 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00A\x00', 0xfffffffffffffffd}) 03:31:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x36, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_stats={0x3c}}) close(r2) 03:31:59 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:31:59 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000280)=""/172, 0xac}], 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006000000d00500003003000010010000000000000000000000000000380500003805000038050000380500003805000006000000", @ANYPTR=&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80010010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000028004453435000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800d80000000000000000000000000000000000000000000000000040005443504f505453545249500000000000000000000000000000000000000009000000440600008100000000000000000000000800000007000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80048010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000008000000000000002800727066696c7465720000000000000000000000000000000000000000000002000000000000006000534554000000000000000000000000000000000000000000000000000000060000000cf1ffff080000008100000000000000090000000400000004000400090000000100000005000000010000009841000000000000fffeffff0707001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b80018010000000000000000000000000000000000000000000000002000736f636b657400000000000000000000000000000000000000000000000060005345540000000000000000000000000000000000000000000000000000007f00000001000000010000000700000000800000ff0300000700000007000100040000000600000007000000ffffffff040000004d0000000010000001f8060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000f0000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000020000000000000030005450524f585900000000000000000000000000000000000000000000000002000000b5000000e00000014e240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x630) syz_open_procfs(0x0, &(0x7f00000001c0)) 03:31:59 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x6558, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:31:59 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765300300", 0xfffffffffffffffd}) 03:31:59 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="707e65f8bcf75322f4a4b2b30a", 0xfef5) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000000)={&(0x7f00000012c0)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/187, 0xbb}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 03:31:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x7801000000000000, 0x20000102000007) 03:32:00 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)="bcc3cd5b07b56d5b7abdd004078741eaf43e0fd68ae78d742bacaaf8c33033c3fbf8815067df7a647671a2b94123f01a11aaa1fd669418f5da0c866d0a", 0x3d, 0x0) 03:32:00 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)) 03:32:00 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") io_setup(0x5, &(0x7f0000000000)=0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x80, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='timers\x00') r5 = socket$inet6(0xa, 0x1, 0x0) ioctl(r5, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x1ff, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0xffffff80, 0xfffffff5, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}}}}}}}}, &(0x7f00000016c0)) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000600)='/dev/cuse\x00', 0x501001, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='io.stat\x00', 0x0, 0x0) r9 = creat(&(0x7f0000000840)='./file0\x00', 0x40) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) io_submit(r1, 0x8, &(0x7f0000000980)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x10001, r0, &(0x7f0000000040)="fef0c27629ba84789e1babc50a179d2ee325121b54e11d4e3366ee150ea10a02ff557a2dc80be03bd256790063d244755204237d0d2cfdd585d15a0d4850b36b17e9434d96c0a3e158db416b39d5f6829051079322a211d18d5c7047f906f59b4aa7", 0x62, 0xff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x401, r0, &(0x7f0000000140)="29097ee2cfbcc297e2428c08fc61f1f065f4c623784c03603b4792ad6ef9d4b6ac1cead98638d8362dfeb5c6a6b0d8ee24b3059f1d6f20de8e15a554b36add8f6e406a27126b1893c234", 0x4a, 0x0, 0x0, 0x1, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000240)="cce4bf7bcf82eb4510967eafca4b7807e99fa28a480d4968130238be338390ce67d00973b4976700cb14dc546e80dcc2ac5f491336f2271a00387b6e45cc517820505cb9bff7d8cbd3a30962ff5fad775b5e50aac9599665b64837e2f37d272e3bfd50853cda219ac9005038b2b1419b49473bbf80ebcf45a9b1fbd4d2fcec2483f133ab332179d6c5f549f221d63ffe9f2737f2a48cdce692ae7374509d42658bb89ab586d1b3", 0xa7, 0x8, 0x0, 0x1, r3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xe, 0x0, r0, &(0x7f0000000380)="7cc81abc7dcfa41b33279d152164f92d23397c4bea083910fe4f491bbd3c33fd93b925759d34bcdc27a882875338eca5b8ee9e81cdf82348b33b12dc2347cb709f1068e69b3c983efcaad2a2a14f00eb310f3979b1243b361414816f92644db67c357f1e6c932aa6461acb251da73999ba353529d772d70e10627eda537b3610cdb08f7bb09cce5c1b3e3cc40a8ad4ec093fc45ae6c1a173a1c1baf7f37a4a5f34fe030919c0dd787362c1c76e82c972b81c18def9512bb0c996634f2874286b55cdbfdadb2bb0d95d46dfdef9e5184105a140671121378877cff749479b0307097f620a491e8c3fb9d623c578741b4f92898e1f87", 0xf5, 0x8, 0x0, 0x1, r4}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x50000, r0, &(0x7f0000000500)="169e2228c3e8bc52aca89cf864ceacbbb0ca6cfbf736febb29b52c627fac23c3250706312764560ffa8488fb7aa67e2ee914aea70136546f4b2babe7a2165594104eea1894ac29d92737182fc4ff1f62fd2a5bc719218c01852b4491dbd3d2d671ba148784f23789c0cc5befa5f1a59622b3438adf441b3de093660105f3cf9ef6cbcb1c06069e0231a0d0c8ba94ddd107b10a1f7084436b8134fed6894c176329f07aab21f54afe503043c28fcc766051f7c5a6ebd2cf0437d4cb9fe1f5cc0346b112d9b525ab4b5d3891625b005eeaec0b2b8131f6a8f5125f665a2a2b63df834388f0b917439fa2574ce30eca", 0xee, 0x2, 0x0, 0x1, r7}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f0000000680)="db946c1be4befc504bcfd4eb085a88a24378e07048d44121b56ec618057dd71a48622e044c33011cf2d2dd43284a4bcbf813c165276ec564c8f3c6a320e5fab04376882db61022074a71957baf085973fb7aa4e3d75ec0ff18e56a0679078fb39962970ed72b232e78bafa7072eac9ded6ee5666028ce6ad80a3cfe8a13067dcf2759ebfa8559fee62b009426cb818081cc58b8e02e99022fe697df5f5e0410a6f0a46d03f9c83980a6678eb673f4d6f615a44803e4d051504855a1b91929a6062ef4e9e", 0xc4, 0x2, 0x0, 0x1, r8}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x91, r0, &(0x7f0000000800)="125b7465c1071c2559443f60", 0xc, 0x6, 0x0, 0x0, r9}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f00000008c0)="aa8bb5637fc1045acb32de3427e7c85b1a9ca6e8bcf090b43efce5a0e65dd3c11f296dc2b54e43ea8d018c671858513dfe956574543957fc568d6ebc", 0x3c, 0x7, 0x0, 0x0, r10}]) mincore(&(0x7f0000124000/0x2000)=nil, 0x6e1d618312435888, &(0x7f0000d6e000)=""/34) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r9, 0x800455d1, &(0x7f00000009c0)) 03:32:00 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530980200", 0xfffffffffffffffd}) 03:32:00 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x1, 0x0, "0efdd9df3d13e9d4b03677374e2cfca56772d649673d744df5f65f2d06cd3a27153e16358c74b918412ddec1f20586eaf1f404e6cf85cf4a39c419dfe2e28cb3f74ac5aaf11d120ffdcb79c93a530697"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1, 0x9, 0x10000, "6ca32c4a9d7116ef67013122f3b7bf6303b13a12e59294c02928b9a341448c6fada9112fad8a7a70a3e3ac470803835fecc7da20e7697c492e334517d1495f47356ad64305085851140dc11b3897eeeb"}, 0xfffffffffffffe1b) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}, 0x0, 0x5, 0x0, "1ad2817a5e258f17dcb9fe60393b96025ef74f35659419514698b8d591bfeb96ca2be1ebf2bec434bc77de464eeed865090967b3279404b511aa9a98a91128ec729634c1893c83f5b9f02953986d6673"}, 0xd8) 03:32:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x7f00, 0x20000102000007) 03:32:00 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0xe, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:00 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:00 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653000000000fffffffd00", 0xfffffffffffffffd}) 03:32:00 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0x1000000a, &(0x7f0000788000)=0x2, 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={r1, 0x3, 0x1, 0xfffffffffffffffc, &(0x7f0000000140)=[0x0], 0x1}, 0x20) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={r1, r1, 0xf, 0x1}, 0x10) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa}, 0x1c) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100), 0x8) 03:32:00 executing program 1: syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000, {[@timestamp={0xffffff86, 0x2}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x42) 03:32:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x24000, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000002c0)="ad1b046ebc678f4551c7cb510300", 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'bond0\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000240)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:32:00 executing program 5: r0 = openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x800, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000840)=0xe8) recvfrom$packet(r0, &(0x7f0000000600)=""/218, 0xda, 0x100, &(0x7f0000000880)={0x11, 0xf7, r1, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) socket$inet6(0xa, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x50000, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES64=r2, @ANYRES16=r2, @ANYPTR], @ANYBLOB="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"]) ioctl(r2, 0x4000008912, &(0x7f00000000c0)="295ee1311f40cf170848284da6431d6116f477671074") r3 = socket$inet6(0xa, 0x6, 0x87f8) pwritev(r3, &(0x7f0000000040)=[{&(0x7f00000002c0)="db762b7da14c40c4c63118a62e007bf3406b9160bb37059f8ea9f6e202bb20b679373acc63ddf1e34aa2d9c73535ddb0173689765e68d04d854658d8686c36b83399e43300f9537bacb6f9a321d0b2f570f16aba81f026fd60614ed20ffb9f9dc4e708659721ef02aa1db35830098006d6df4a43014cdb6fdd960c78868aa5261061ef0d31e90caa9e4367ac8c8b7c2451a386aec288549366d805fe8cfdffa01d040f7a43b53c83eee19a003b28e9944c388da52b3bd30429fe0574420bf000d27bc04681bf9aa855f0d2fb0aededfda1f439e645967c0a9d724c8b", 0xdc}, {&(0x7f00000003c0)="84188336681e78133ed49b4f85a5f02d48d5a76cfc14080c0b1d4234605e31fecbcf0b4f8c452211901f75c01a826c131d7919a6be41e2fd929489101e612c73d2710fbda7fd5532bdd1b234e5a65437a3f5ca3145023e2a565e1ee2bd5f28d4a5dc2f13574ea8dc8d472b25817c65dd69337e39c88eb9839c9579423a5821ad7d0590f6a11c5316e8de990d48abc0a9fbe5a4b195f101123481f7cdaa7c796cedfc89f41a67d8f7a9d215a623565b14e7fe3b2b599f395eef7e85e1b921", 0xbe}, {&(0x7f0000000480)="dba7196f9f81e358d91e72711a05dafe951247ed42543c390dee594c7f758a274dee15fd708385675d3b9b5d3dc08cce47cfc02ebf09d74ea233480d8690acd47421a500730d84c8e701bd95314c14b44656190cc7fa89dc5a275e5cfee1722d6bf86053cabb74ed7c835abf344a6ecf0b560afecb318ab79a0b77c0816656d44ab566c2969934d5f2663d0ca53019c00f8b4a086c447186ba04ba0297e423217440363963129ab5f8570d", 0xab}, {&(0x7f0000000540)="17f55efefd67213a26bed31de2f1cdc0b42043ba44aaa9b669dafa4763c792e869599ca0bd7022565d5458b577878ff04a67e15f751cdf7df8cef2f57e23d095e0b1561d0533126b79d0a8442f196e7e8cc391cc1a971f5e5a998cda9c357e85daf114a04c99842a20720a553980c043", 0x70}], 0x4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x0, 0x2, 0xfffffffffffffffb, 0x0, 0x80}, 0x20) socket$inet6(0xa, 0x8080f, 0x9) 03:32:00 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:00 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000000000000018800", 0xfffffffffffffffd}) 03:32:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") unshare(0x2000400) r1 = geteuid() r2 = geteuid() r3 = geteuid() setresuid(r1, r2, r3) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5207, &(0x7f00000000c0)) 03:32:00 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup2(r2, r1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000004000/0x2000)=nil}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r4, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000001040)=ANY=[@ANYBLOB="06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)={0x9, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}]}) 03:32:00 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x0, 0x80}, 0xc) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x80000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x3ff, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xb247}}, 0x37}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0x0, 0x7, 0x8, 0x3f, 0xff}, 0x14) fcntl$setlease(r1, 0x400, 0x0) r3 = accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000080)='X', 0x1, 0x2, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x2e11}, 0x8) write$binfmt_misc(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) write$binfmt_misc(r3, &(0x7f0000000000)={'syz1'}, 0x34000) 03:32:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x75, 0x20000102000007) 03:32:00 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:00 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x5405000000000000, 0x7, @loopback={0x0, 0x1}}, 0x71) [ 473.487307] pic_ioport_write: 17 callbacks suppressed [ 473.487316] kvm: pic: level sensitive irq not supported [ 473.505496] pic_ioport_write: 14 callbacks suppressed 03:32:00 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00z\x00', 0xfffffffffffffffd}) 03:32:00 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'teql0\x00'}}) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) fcntl$dupfd(r0, 0x406, r0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x2000) dup3(r3, r2, 0x0) 03:32:00 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x393, 0x6) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x121403, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x101}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r2, 0x5}, 0x8) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 473.505502] kvm: pic: single mode not supported [ 473.614542] kvm: pic: single mode not supported 03:32:00 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 473.619393] kvm: pic: level sensitive irq not supported [ 473.689219] kvm: pic: level sensitive irq not supported [ 473.702950] kvm: pic: single mode not supported [ 473.708576] kvm: pic: level sensitive irq not supported [ 473.716051] kvm: pic: level sensitive irq not supported 03:32:00 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653000fd00", 0xfffffffffffffffd}) [ 473.724464] kvm: pic: level sensitive irq not supported 03:32:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000180)={"4c92f3fd845c87d4b2117f98859ecb152e147c23981739f1cc88c2144ce2366e44bc470b062b1a0eb6071030b3353b904121dba78758cb4904bb21efc58355278f6c9b9a214de54f728ff412194f48ca8edddbc4a7c6f28c0633496f420d1d57a3db2fc325aad586993d915a13cfa992e4c50d4998288af556a8c26a25cc7f6024762e954606447bf4927bb94e3993089d851cea349a10c45a0357df6ff0d970afa541ea2a61fd00a0d3967b15967d64fc81ed7990109b44a87e078bda01762aeed72fe33d4a1fdd53181c78b8a011c5aae5dfff105fdfe2d8e95b1a7bdd0e0cf01317dbdda928210ddc547e61aa93d90f1c46cabfc8d058e8162775e71d42884ca620f145a6a007495a8a1bacbe1719acd44d9311a566df7caa16cfb49ec81b3bfcbcec9f3747dff1b90a82ae383aa4f95fde6450070a650811c3658d2e721f617852914c8c67b5ad935c1b3ec97d22a857e6c1d45d8d21c890428e896c653b9b00ac97eedc4f912b79b39b5f0f2355ed31cb8b7d1e4ecc958bff9fca6fb7db88a680090f32f1ebfddc612f777de1448cc273231fc8aa41b4b69b1ff9c6eb4c5b95454276adddbe85fd7195208717bc6559fa072d17a4b0a8274b672536a3134b72ed98d132dc13ad5a11c60b2fbab39dbece6703acd2ed5ce82f23d0c219b052982ea71d7c450cb1dbde2ecbdef29d176bb46949ad8ef5388ba984bda6c863f708de5f5e3205d5991a12629a8d65b32be5bc933df8162ca751dcfc4c37e023ae9f3dbc6f68e54d8e65adf0cde97af000815332351f66c21931aeb9ab79c056d9393e795438b38b84fe93e8ec1e28f64aad0a458fd0e8ee8a5fa45234ab09eb6581b7ff08069998df4729c82c54829350172344af28ce1c1aee8dff7d957e6812353dd2b6982c04d4a6bbb2d5f6fff9fc634d0862da7bf5a71ecc27b3cca571b0285d957004171cd1a8c8b56e4190792a3659ec08693ae3f1cf6db3a33ddebb98951d20b2029e3ded39815e37cec988d959bb85c05c2832bc6fc536928a8fdf2acb54146e4728c780d7a27e5d63cbb6356f8363422e40a01008bb4d1ea44fa2425955deca47ad2ec9ce07be1a3a0bc5e4e5826e70f977ae54a1a6ec6410b8538b5ac8fade5dd56a44c3c9949c5dfd8b088e9e4d1c4f4abd36e98028cedcf66b03175c30dc5e40749f6eaf10633e53cf731f03fe4224909ca1ab737a062fa6759d6a9f50ec2fd83148147a51104cc5b6c0b314c9a56ee61643f517dd66f570be900c03c37bf608c0d625713c38b83a78c7f1998ddac1fd3415980c49e1482561714ff59a94c990288904390af031ef4dc896e931f2fe25dfad14365122d37c2b79d6ce48c958fa665da46accc3c693cced64219b3e00cf33c9ecd94bceefa9512e5a63cbb8b148260e1e9f3cb474ce1ca19e00"}) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4020aea5, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000580)={r4, 0x400}, &(0x7f00000005c0)=0x8) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x401) socket$kcm(0x29, 0x2, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) [ 473.735508] kvm: pic: level sensitive irq not supported [ 473.807128] kvm: pic: level sensitive irq not supported [ 473.841944] kvm: pic: single mode not supported [ 473.847508] kvm: pic: level sensitive irq not supported [ 473.863871] kvm: pic: level sensitive irq not supported [ 473.885579] kvm: pic: single mode not supported [ 473.909409] kvm: pic: single mode not supported [ 473.915991] kvm: pic: single mode not supported [ 473.931885] kvm: pic: single mode not supported [ 474.025558] kvm: pic: single mode not supported 03:32:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000adbdf250000000227ea3d551d043100"], 0x14}, 0x1}, 0x0) 03:32:01 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:01 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530018800", 0xfffffffffffffffd}) 03:32:01 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x4305, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./control\x00') ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f00000000c0)={0x15, 0x79, 0x6, 0x3}) creat(&(0x7f0000000100)='./file0\x00', 0x0) link(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file1\x00') close(r1) 03:32:01 executing program 4: waitid(0x2, 0x0, 0x0, 0x80000008, &(0x7f0000001b00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc4}, [@ldst={0x3, 0x3, 0x1, 0xf, 0x3, 0xfffffffe, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xa}, @ldst={0x3, 0x3, 0x3, 0x7, 0x2, 0x18, 0xffffffffffffffff}, @jmp={0x5, 0x2, 0x7, 0x6, 0x1, 0x100, 0xfffffffffffffffc}], {0x95}}, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0xb5, &(0x7f00000000c0)=""/181, 0x41f00, 0x1, [], r0, 0xd}, 0x48) 03:32:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000080)=@raw, &(0x7f0000000080)='syzkaller\x00', 0x20000000c7, 0x67, &(0x7f00000000c0)=""/103}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f000000a000)='syzkaller\x00', 0x1, 0x32e, &(0x7f0000000140)=""/195}, 0x48) 03:32:01 executing program 4: r0 = socket$inet6(0xa, 0x80000, 0x6) r1 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x0, &(0x7f0000000000), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x9, 0x3, 0x0, 'vcan0\x00', 'bridge0\x00', 'sit0\x00', 'ifb0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @empty, [], 0x1d8, 0x1d8, 0x210, [@comment={'comment\x00', 0x100}, @statistic={'statistic\x00', 0x18}]}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}}, {{{0x1b, 0x0, 0x0, 'team_slave_1\x00', 'irlan0\x00', 'irlan0\x00', 'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2}, [], @random="f646793b7b39", [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}}]}]}, 0x3c0) r2 = shmget(0x2, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000140)=""/166) sendto$inet6(r0, &(0x7f0000000300), 0xfd90, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x9, 0xfbba, 0x8, 0xfbf7, 0x2}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x65, 0x2, 0x8007, 0x2, 0x401, 0x3f, 0x4, 0x63f50894, r3}, 0x20) 03:32:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x35, 0x20000102000007) 03:32:01 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765300200", 0xfffffffffffffffd}) 03:32:01 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:01 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) write$vnet(r0, &(0x7f0000000180)={0x1, {&(0x7f0000001640)=""/194, 0xc2, &(0x7f0000000000)=""/10, 0x0, 0x2}}, 0x68) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0x3b5, &(0x7f0000000280)=""/118, 0x0, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 03:32:01 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0xa, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:01 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:01 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530fdfdffff00", 0xfffffffffffffffd}) 03:32:01 executing program 5: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000240)='lo\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x680, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000000c0)={0xcecf}) shutdown(r1, 0xfffffffffffffffd) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x60840) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000040)='selfvmnet0.%^\x00') 03:32:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = getpid() ptrace$pokeuser(0x6, r1, 0xff, 0x40) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) setpgid(r1, r3) 03:32:01 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:01 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x8864000000000000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:01 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653000000000000001f800", 0xfffffffffffffffd}) 03:32:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x481, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600dab2b001406d92707dfb037b1326f357600aafe8000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500a000090780000"], &(0x7f00000002c0)) 03:32:01 executing program 5: r0 = memfd_create(&(0x7f0000000000)='posix_acl_access*+\x00', 0x5) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) fallocate(r0, 0x0, 0x0, 0x4d) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x51, r0, 0xfffffffffffffffd) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r1, 0x1000, "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"}, &(0x7f0000001140)=0x1008) mincore(&(0x7f0000001000/0x1000)=nil, 0x1000, &(0x7f0000000040)=""/6) 03:32:01 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$TIOCNXCL(r0, 0x540d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:32:01 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000100)='GPLGPLkeyring&\'em0\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='eth1)selinuxem0\x00', &(0x7f00000001c0)='!\x00', &(0x7f0000000200)='!\x00'], &(0x7f0000000380)=[&(0x7f0000000280)='wlan1,!{)eth1\x00', &(0x7f00000002c0)='&\x00', &(0x7f0000000300)=']]#\x00', &(0x7f0000000340)='\x00']) 03:32:01 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\x00\x00\x00l\x00', 0xfffffffffffffffd}) 03:32:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x25, 0x20000102000007) 03:32:01 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x8848, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:02 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:02 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000000000000031b00", 0xfffffffffffffffd}) 03:32:02 executing program 5: r0 = socket(0x11, 0x803, 0x300) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) r1 = socket$inet6(0xa, 0x8000000000000802, 0x1) ioctl$sock_bt(r0, 0x8907, &(0x7f0000000080)) syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0xff, 0x3fffe) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000180)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40000, 0x0) r4 = getpgrp(0x0) capset(&(0x7f0000000000)={0xe1a205f78a8ce079, r4}, &(0x7f0000000100)={0xfffffffffffffe01, 0x1, 0x101, 0x20, 0x6, 0xff25}) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) sendmsg$inet_sctp(r1, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f0000fc8000)}, 0x0) recvmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f0000002b80)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000002d00), 0x0, &(0x7f0000002d40)=""/164, 0xa4}}], 0x40000000000014d, 0x0, 0x0) 03:32:02 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000040)={0x6}) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="502da457d6d9e3097bdc90ddf3247273e876b18d6f21768bfc170b27166eaf3f0bc8fdd0cacef007", 0x28}], 0x1, &(0x7f00000001c0)}], 0x1, 0x0) recvmsg(r3, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc, 0x10, &(0x7f0000030fa0)=[{&(0x7f000009f000)=""/87, 0x57}], 0x1, &(0x7f0000590000)}, 0x0) socketpair(0x1b, 0x80000, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000100), 0x2) 03:32:02 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x400000890e, &(0x7f0000000040)="102d15321f16f47767100a70dc0387a2d196be0567642cf7d50bee6a7fd57e87e9f009523b15832aae3d4bef2b7e510c7adbca3d9eaadbb244d012719fa2b31ce576f43c3f544cb3f191d1000000000000") clock_gettime(0x0, &(0x7f0000007100)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000006e80)=[{{&(0x7f00000000c0)=@ipx, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000200)=""/107, 0x6b, 0xffff}, 0x6}, {{&(0x7f0000000280)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)=""/81, 0x51}], 0x1, &(0x7f00000003c0)=""/126, 0x7e, 0x5}, 0x2}, {{&(0x7f0000000440)=@nfc, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/246, 0xf6}, {&(0x7f00000005c0)=""/186, 0xba}], 0x2, &(0x7f00000006c0)=""/88, 0x58, 0x8000}, 0x3}, {{&(0x7f0000000740)=@pppoe={0x0, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000880)=[{&(0x7f00000007c0)=""/29, 0x1d}, {&(0x7f0000000800)=""/110, 0x6e}], 0x2, &(0x7f00000008c0)=""/15, 0xf, 0x6}, 0x5}, {{&(0x7f0000000900)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000980)=""/15, 0xf}, {&(0x7f00000009c0)=""/184, 0xb8}, {&(0x7f0000000a80)=""/235, 0xeb}, {&(0x7f0000000b80)=""/240, 0xf0}], 0x4, 0x0, 0x0, 0x6}, 0x58}, {{&(0x7f0000000cc0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000d40)}, 0x3}, {{&(0x7f0000000d80)=@nl=@unspec, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e00)=""/238, 0xee}, {&(0x7f0000000f00)=""/124, 0x7c}], 0x2, &(0x7f0000000fc0), 0x0, 0x7ff}, 0x4}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000001000)=""/141, 0x8d}, {&(0x7f00000010c0)=""/117, 0x75}, {&(0x7f0000001140)=""/209, 0xd1}, {&(0x7f0000001240)=""/241, 0xf1}, {&(0x7f0000001340)=""/192, 0xc0}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/213, 0xd5}, {&(0x7f0000002500)=""/10, 0xa}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x9, &(0x7f0000003600)=""/203, 0xcb, 0xd}, 0x80}, {{&(0x7f0000003700)=@ethernet, 0x80, &(0x7f0000003980)=[{&(0x7f0000003780)=""/180, 0xb4}, {&(0x7f0000003840)=""/178, 0xb2}, {&(0x7f0000003900)=""/78, 0x4e}], 0x3, &(0x7f00000039c0)=""/174, 0xae, 0x200}, 0x7}, {{&(0x7f0000003a80)=@in={0x0, 0x0, @rand_addr}, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000003b00)=""/21, 0x15}, {&(0x7f0000003b40)=""/49, 0x31}, {&(0x7f0000003b80)=""/97, 0x61}, {&(0x7f0000003c00)=""/7, 0x7}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/21, 0x15}, {&(0x7f0000004c80)=""/32, 0x20}, {&(0x7f0000004cc0)=""/4096, 0x1000}, {&(0x7f0000005cc0)=""/214, 0xd6}], 0x9, &(0x7f0000005e80)=""/4096, 0x1000, 0x80000001}, 0xfffffffffffffff9}], 0xa, 0x40, &(0x7f0000007140)={r1, r2+10000000}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) msync(&(0x7f0000b24000/0x3000)=nil, 0x3000, 0x3) 03:32:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3", 0x1, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="04000000000000000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000000800120004000500"], 0x28}, 0x1}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) 03:32:02 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00H\x00', 0xfffffffffffffffd}) 03:32:02 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:02 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x806, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:02 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x8848, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:02 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:02 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0t\x00', 0xfffffffffffffffd}) 03:32:02 executing program 3: socket$inet(0x2, 0x80000, 0x7fff) r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0xffffffffffffffff, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x1}, 0x10) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x6, @broadcast=0xffffffff, 0x0, 0x0, 'sh\x00'}, 0x2c) 03:32:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x8001) read(r0, &(0x7f0000000000)=""/143, 0xfffffe5e) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r3, @ANYBLOB="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"], 0xd4}, 0x1}, 0x4004) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000002c0)) 03:32:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xa8000000, 0x20000102000007) 03:32:02 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0xffffca88, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x2, 0xc8480) r1 = memfd_create(&(0x7f00000000c0)='nodev\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "e1d3f877f0ebe453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258de9600000000000001bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) 03:32:02 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:02 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000440)="0047fc2f07d82c99240970") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x2001}, [@typed={0x8, 0x3d, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}]}, 0x1c}, 0x1}, 0x0) 03:32:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8914, &(0x7f00000000c0)="075cc83d6d345f8f760070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md4-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000240)="362c91c102b4c90111732af3c931c5eb12f4cdb3991a93d45501afbf9cea55c3621b2fc8435f7e38f01180aac805ac05166d590a61098ba5623fdf7e51ea102b91703575d8147fa6e4975d75cc280ab8506fe9a718f800afd26be26c08f0f3ebebc32f841b50bf03285b7dc42f1878b0774620b4c2d530167e3cf71d55ea850b", 0x80) 03:32:02 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000001f800", 0xfffffffffffffffd}) 03:32:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4543(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000400)={0x81, 0x2, 'client1\x00', 0x0, "eeda55b6f736087e", "c3986175b7e5948a2b4f88c6bfd0fc34726391d19fcf0c80818beb3f01e37286", 0x8}) close(r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000418f50)={{}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffffc, 'queue0\x00'}) openat$urandom(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/urandom\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x25, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0x200, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x0) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x121000, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000040)={{0x7, 0x2800000000000, 0x7de, 0x100, 0x1, 0x2}, 0x3ff, 0x40d, 0x2, 0x4, 0x10001, "fb799b464c981f78668fe43a84663819f91075b5b77a606ceebcb27686597e473e93dacc268d1a3c20ece0be1379a8e5bdee1b25f8404e09b02c6fc243201cf6177d4313dc78841a7d15e3193e178acba1f2fe7dd142d67b077e1b58e7f1c6325b78a22bd19e3af55e088e7044c4642583595a1de993f2ae025f746b3e4e2ecd"}) getpeername$packet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000180)={@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, r3}, 0x14) [ 474.039154] kvm: pic: single mode not supported [ 475.679620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 475.692889] openvswitch: netlink: Flow key attr not present in new flow. 03:32:02 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:02 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765307fffffff00", 0xfffffffffffffffd}) 03:32:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xa000000, 0x20000102000007) 03:32:02 executing program 3: r0 = socket(0x1e, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000100)={0x32f, {{0xa, 0x4e22, 0x7f, @mcast2={0xff, 0x2, [], 0x1}, 0x3ff}}, {{0xa, 0x4e23, 0xfff, @loopback={0x0, 0x1}, 0x9}}}, 0x108) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0), 0x4) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=@routing, 0x8) 03:32:02 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384-generic)\x00'}, 0x58) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x6, 0x8}, &(0x7f0000000280)=0x8) fcntl$getownex(r2, 0x10, &(0x7f00000005c0)={0x0, 0x0}) capget(&(0x7f0000000600)={0x399f1336, r4}, &(0x7f0000000640)={0x21e, 0x7ff, 0x0, 0x44, 0x8, 0xfffffffffffff000}) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000002c0)={0xb6, 0x4, 0x80000000, 0x19966982, r3}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x24) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {&(0x7f00000003c0), r5, 0x1}}, 0x18) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="5d646409fe6354fad56f6bad8c7dd3bc27831adcb974d9930a1059d7c03eb86ec922de12c1cd10b046eb633ab8fdc7b834d0a0052e63a483b8078145dc984e1e4d6961a8eca00a21eca94b6353c4c5b394146ca2223b31cca6ecd9b6fdcce1110c7fd82204341dafd9786baef1ebf838d2b94a83aaf4bcfc7063bb0c74070c977a", 0xfffffffffffffea1) 03:32:02 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0xe000000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:02 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x14) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x10040, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000200)={0x5, 0x5, 0x6, 0x6, 0xc7}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0xfffffffffffffffc) r2 = getpid() r3 = getpgrp(0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x8002, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f0000000180)={r4, r0, 0x3}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2000, 0x0) ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000080)=0x9) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}], 0x2c) 03:32:03 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00?\x00', 0xfffffffffffffffd}) 03:32:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xd00, 0x20000102000007) 03:32:03 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0xffffca88, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:03 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/rt6_stats\x00') ioctl$FICLONE(r1, 0x40049409, r1) 03:32:03 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x88a8ffff00000000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:03 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:03 executing program 3: r0 = inotify_init() r1 = epoll_create1(0x0) flock(r1, 0xfffffffffffffffd) flock(r0, 0x2) r2 = epoll_create(0x102050204) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) flock(r2, 0x0) dup2(r2, r0) 03:32:03 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2000, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1600100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000520002002bbd7000fddbdf2502000000080003000200000008000500070000000800020005000000080005004900000008000100", @ANYRES32=r2, @ANYBLOB="08000640ff070000"], 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e22, @rand_addr}, 0x10) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000400)=""/109) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000240)={'yam0\x00', {0x2, 0x4e20, @multicast2=0xe0000002}}) fallocate(r1, 0x42, 0x5, 0x3) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000103000000000000e0000a3bf0686ef0186963060b1e00008000000000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x90}, 0x10) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 03:32:03 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653000e600", 0xfffffffffffffffd}) 03:32:03 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0xc001002000000000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:03 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) sendmsg(r1, &(0x7f0000000900)={0x0, 0x340, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000200007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1000000000000149, 0x0, 0x0, 0x4000881}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@loopback}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) syz_extract_tcp_res$synack(&(0x7f0000000400), 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000140)={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1d}}, 0x7d, r2}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0)) 03:32:03 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x55, 0x20000102000007) 03:32:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") r1 = socket$inet(0x10, 0x7, 0x3f) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x1c1000, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x101, 0xffffffff7fffffff, 0x3, 0x1}, {0x7, 0x3ff, 0xbc, 0x3}]}, 0x10) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020207031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 03:32:03 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765301b0300", 0xfffffffffffffffd}) 03:32:03 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:03 executing program 4: fstat(0xffffffffffffff9c, &(0x7f0000000d40)) fanotify_init(0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x1, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x280) ioctl$KDSKBLED(r0, 0x4b65, 0x40) 03:32:03 executing program 3: socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000240)) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4000) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") futex(&(0x7f000000cffc), 0x1, 0x2, &(0x7f0000cc3ff0), &(0x7f00000000c0), 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x10480) 03:32:03 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x1, 0x0) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000004c0)) sendmsg$key(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x8, 0x4, 0x9, 0x7, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd29, 0x3502}, @sadb_address={0x3, 0x17, 0x6c, 0x80, 0x0, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}]}, 0x38}, 0x1}, 0x4000000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0xeb, &(0x7f00000000c0)=""/235}, &(0x7f00000001c0)="de62b74988e2", &(0x7f0000000200)=""/208, 0x0, 0x0, 0x3, &(0x7f0000000380)}) 03:32:03 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0xc0ffffff, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:03 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\x00\x00\x00 \x00', 0xfffffffffffffffd}) 03:32:03 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:03 executing program 4: syz_emit_ethernet(0x3a, &(0x7f0000005faa)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}, @empty, [], {@arp={0x806, @generic={0x7, 0x8847, 0x6, 0x8, 0xf, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, "c6900e17af0e1345", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], "80ad20cdd7ad4b604fbf59254aeb4841"}}}}, 0x0) 03:32:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x81}, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c, &(0x7f00000011c0)=[{&(0x7f00000001c0)="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", 0x595}], 0x1}, 0x8000) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000d00)=0x3, 0x4) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x1a) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100)) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009f0ffc), 0x4) 03:32:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x5f000000, 0x20000102000007) 03:32:04 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00\b\x00', 0xfffffffffffffffd}) 03:32:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295e273b5abcf477671070") r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) rt_sigsuspend(&(0x7f00009b2000), 0x8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 03:32:04 executing program 4: r0 = socket$inet6(0xa, 0x2003, 0x6b5) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}}}, 0x0, 0x6, 0x0, "6b553da4df5cfec5ca715642581b5cc255cb5ca2193c05077bedb5f3a2705b6412c164029f586bcdf2a31ecc46ba84830f22fd3e8eb4a3cfef590606f6978592e8a5852cd2b2d6bb86e179794b7c4600"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, 0x0, 0x8, 0x0, "045e105077eb30259dabe2dc159f505fd62f2cd0875992592328c03e191088d0e8ca6a18f497949007550b9a18fa90128a7afdda9722c1dae8cb56cef8c2df84317d0c2ea0ad18738f0b0a239d7b6829"}, 0xd8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 03:32:04 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x4, 0x0, [{0x80000019, 0xf30, 0x1, 0xe58, 0x1ff, 0x80000000, 0x1}, {0x80000001, 0x40, 0x7, 0xffffffffffffff6d, 0x0, 0x73, 0x5}, {0x8000000b, 0x7ff, 0x2, 0x1, 0x2000000000000, 0x5, 0x8}, {0x80a884517891dd32, 0xfffffffffffff801, 0x5, 0xf451, 0x6, 0x8, 0x6}]}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10}, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@setlink={0x28, 0x13, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0xa}]}]}, 0x28}, 0x1}, 0x0) 03:32:04 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00L\x00', 0xfffffffffffffffd}) 03:32:04 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x80350000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:04 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/164, 0xa4) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffff}, 0x2, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r2, 0x401}}, 0x10) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x800020000000, 0x4) ftruncate(r1, 0x7b) 03:32:04 executing program 3: r0 = socket(0x10, 0x5, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xb) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20006101}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x4, 0x7fffffff, 0x25dfdbff, {0x8}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r3 = syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x1fe, 0x400) mq_getsetattr(r3, &(0x7f00000000c0)={0x2, 0x1, 0x89, 0x9, 0x1493de, 0xfff, 0x8, 0xa70}, 0x0) setreuid(r1, 0x0) 03:32:04 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:04 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530031b00", 0xfffffffffffffffd}) 03:32:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xb0020000, 0x20000102000007) 03:32:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@assoc={0x18, 0x117, 0x4, 0x1}], 0x18}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/123, 0x7b}, 0x0) 03:32:04 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206430000a84309c02623692500080003000200f0ff56039848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x244a00, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000100)={{0xff, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e24, 0x2, 'nq\x00', 0x10, 0xef, 0x7b}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e24, 0x0, 0x9, 0x6, 0x5}}, 0x44) ioctl$KDMKTONE(r1, 0x4b30, 0x7) 03:32:04 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x1000000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:04 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:04 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000500", 0xfffffffffffffffd}) 03:32:05 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x440, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x2, 0x6}) socket(0x11, 0xa, 0x2) socket(0x10, 0x4000000000000002, 0x0) 03:32:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/30) 03:32:05 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x10040000}, 0x8) connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1ff, 0x2}, 0xc) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x14) bind$packet(r2, &(0x7f0000000200)={0x11, 0x15, r3, 0x1, 0x2c4, 0x6}, 0x14) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000080)) 03:32:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x39, 0x20000102000007) 03:32:05 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000000000000029800", 0xfffffffffffffffd}) 03:32:05 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:05 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0xa000000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:05 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) syz_open_dev$adsp(&(0x7f0000000880)='/dev/adsp#\x00', 0xffff, 0x204100) ioctl(r0, 0x8912, &(0x7f0000000040)="295ed277a4200100360070") r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000800)=[@in={0x2, 0x4e23, @broadcast=0xffffffff}, @in6={0xa, 0x4e20, 0x2, @loopback={0x0, 0x1}, 0x8000}, @in6={0xa, 0x4e21, 0xdc1, @remote={0xfe, 0x80, [], 0xbb}, 0xf3b}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e20, @multicast2=0xe0000002}], 0x78) r3 = gettid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000007c0)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x9, 0x1000410}, 0xc, &(0x7f0000000200)=[{&(0x7f00000002c0)={0x144, 0x40, 0x8, 0x70bd28, 0x25dfdbfb, "", [@generic="32b707b8026ec635ce558f89743c68c23b3efdc3e053c72285bbbe6356abc779f3881f5f25", @typed={0x4, 0x23}, @generic="b671fcbd6040e66eb90dc722ed6d7e7168a229e6d07079d8c8632b1cf1e01805538574e29ad97edd6334aba569eb3f45e1540ae21e39e9fba9494a28103f101cb37d21ac4d2fa4f91c2ba57fa97c481ab79e2ca30aadcbce256542a3e93ad64b6727bed4d4a053e0e15daba722e4a76ca83b507f", @typed={0x8, 0x72, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @nested={0xc, 0x3, [@typed={0x8, 0x52, @u32=0x9}]}, @generic="cc476ca68b9371bf7b513fc2d3c607422fb36e276f80c7ff6653eaf5d0992f409e8210e3a5af3a1142ada7fddad14f0d0cb4f1b58fba239bd3d3fa22da5b1e0df2afab97c83374d4c61ed3403f2a3a53bea4d82655a632648665205ede1266feca169f6742d34a8f8f0704755f8dab701aace22ada51c785fa7d0fe333f10b326a73d0"]}, 0x144}, {&(0x7f0000000140)={0xa4, 0x2e, 0x1, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x1f, @ipv4=@multicast1=0xe0000001}, @generic="0a1e32c1bc590107e1ba9afd5569144ab77b8438a8bdec643f3ba51106dbedf202a1ab25b508285a1fc13b916d1aeae8aa02f589cfecb39590ea0e2ae1e72f8b25845c82dab11d6e17ebb4bdf129e716746d28e709ab8125d900ed7ad8959c64f54a0dbee547a0ade8a8c38f931be86ff035394b610ece8086b42308906663e3aac144d0d2e5bbf618"]}, 0xa4}, {&(0x7f0000000440)={0x1d0, 0x22, 0xd14, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x40, 0x8f, @binary="03630cce30e6befb26836311f44e636dbeb509237c966975ebea6cc86e29663b175465c17924d79a44f3304bfc38d37d98dcefc7cdde18c905ae32"}, @generic="d8eed4814b10551eb4c00140d93ff666e63fdf45aeb9c73724076222f6afb3e54812503bbe6eec81f609fd", @nested={0x110, 0x3e, [@generic="43d40b8578a233e82467ae5ffa03edfd88696b69c53272f31fb9cf4bd36ed107d96765f9eb0769c035fee50268f83228eb4a9456da261ff62b92f98212e57eade93a62f0f46b7c0e0d06327c56bfbb585cf82036af21606812ceafb24a0b5052fc944fb9bb04255b2a0a", @typed={0xa0, 0x13, @binary="feed78ced492a75013bb4d742cb0ac72fe761f322a3ecb617088942f0727e24976d9a0c391be8eee58dd685f265d7d366708c02f60a61b65b2e4f4cca37529dc9ffc8291c4390f1277401d9832ca4aef8bf97e710d999b6c1d2ff20731d66eddd488dab8905f54f5e02923bb1d7ed6a1a81c1340f57546e3bb0e4772a83fb3444dd1007a6b42905f1ef25ff8b3607ccebce6990efd58e0a1730db4b7"}]}, @generic="70bf9c85d43e6bcab790ea2c8dac48ec5a6060e7d578b5d4dd8d03c896c06700cdc204bd8b67fa4c2073b760930780ba1961c507316de775148729d39e428b4b142cb89f"]}, 0x1d0}], 0x3, &(0x7f0000000740)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x20, 0x1, 0x1, [r0, r0, r1, r0]}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r1, r0, r1]}], 0x68, 0x40}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400000, 0x0) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000080)={0x4, 0x3, 0x400}) bind$can_raw(r1, &(0x7f0000000280)={0x1d}, 0xffffffffffffff55) setsockopt(r1, 0x65, 0x1, &(0x7f0000000040)="2b90365c824c5b00", 0x8) 03:32:05 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000000000000000200", 0xfffffffffffffffd}) 03:32:05 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:05 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="f2410f1b1c74460fc71a66430f3881a00a0000000f20e035004000000f22e066ba6100b00deeb805000000b9a82e00000f01d966ba4000ed663ed9f7c442c1aac6c4c1245ce4", 0x46}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0xffffffffffffffff, 0x28}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r5, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0x7f, 0x0, 0x1, 0x0, 0x80}, 0x98) ioctl$KVM_SET_GUEST_DEBUG(r3, 0xc018ae85, &(0x7f0000000100)) [ 478.396190] *** Guest State *** [ 478.399620] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 [ 478.408561] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 478.417428] CR3 = 0xffffffffffffffff [ 478.421206] PDPTR0 = 0x0000000000003007 PDPTR1 = 0x0000000000000000 [ 478.427714] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 478.434226] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 478.440235] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 478.446236] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 478.452920] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 478.460932] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 478.468920] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 478.476950] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 478.484941] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 478.492960] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 478.500968] GDTR: limit=0x00000000, base=0x0000000000000000 [ 478.508972] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 478.516996] IDTR: limit=0x00000000, base=0x0000000000000000 [ 478.525016] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 478.533055] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 478.539493] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 478.546956] Interruptibility = 00000000 ActivityState = 00000000 [ 478.553240] *** Host State *** [ 478.556461] RIP = 0xffffffff811f4664 RSP = 0xffff88019bb47350 [ 478.562480] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 478.568900] FSBase=00007f3414244700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 478.576716] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 478.582629] CR0=0000000080050033 CR3=00000001bfaf6000 CR4=00000000001426f0 [ 478.589698] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87a01380 [ 478.596390] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 478.602479] *** Control State *** [ 478.605941] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 478.612622] EntryControls=0000d1ff ExitControls=0023efff [ 478.618088] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 478.625094] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 478.631783] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 478.638379] reason=80000021 qualification=0000000000000000 [ 478.644709] IDTVectoring: info=00000000 errcode=00000000 [ 478.650179] TSC Offset = 0xfffffefc5f3b8de8 [ 478.654517] EPT pointer = 0x00000001b3b5f01e 03:32:05 executing program 1: sendmsg$alg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="d2d2b7bf3c547ca55b450a644a37857b2f9bff4e396c33167db2d8bf001a851c6e16b60c822e4198df9c6c648c52c87c6fa0a3f1040e1a1737263d96938142152040ececd644274603d1ab4f7097267aa1db8803d6eccb5780b4f28986dd9fce416007dd58736289d698a35aaf37f515e3c52f77b6d6dda5a41ec9d5a594465e984a7d40251b74c78b01bc9a69946e3f69b27b6655ee980e440d0306d0edcdc9d99f93229b62f4ec56826b43a331b1fe3d29c68f458761c0527610a00b12a2b8ec4e26f63745038436d3817e8590250170d46bdf7196fe94c1c862d8f68ff3f096e2e8a86d506a3c5719ab9f665ed30530d3c08b6c4966f77fe13c51aa640a4a4ac6109424b72ee2280b8eaf000e18c67b6fdf479800b6f0b79707a7f49ae0a2c9867ad155b314b3a771752284b3c46dc0eed6af666a1f48c212b0acef45ca6fb4fd4e2121ab7fd4cf5179fea647f01b395b13b6e15ba547bd8a0d50f93cf2b3104a84a4783da0a96156b8f70559a50eccf33302706af387a408db5660c934c6398ed7463dfd1f218294f3798e499092a8837d25a243b29a9c2fc7ef1c51e956075b9d2e7c0bbbd9dcf6e1e79164472367fa5252cfcad312b9cfe2cdfab319a5cc9c794338ad8f8cbac04c627129990fdb2670ede015de9808d06188af8967398a55804ce019131bcbdebc30647c526a0e7cc3c45360a0cf793815a9a34af98901a6bf1500af7f7de7fc0e567bade21ac1d74f26da08584a0f7d77b1ec5d74808253ecfba43222abe84e4b5a24aa162d150a75ccc5c16949f09602e09e6d01cbdedfcade5776ce87d313d5d1811a1a362b2f4847fd676c91bf539259209bd8c3eef11b500a5d00018cc8ee58877fb7214e0f98be10ac541d5c3a15b8118b7614248300b530b103d324106d68a92946a467dc80dc5558145647bf2b87fbd15fb0d3946f5469ca89b66b477f378743cb8a31905f731a48633c8dcf7f68c4313288836fd8aac63254aaaa5d2a9105efc9fd6afc142f1a165333ab8395f1f6b78831595967960955dd6999c46bca1c1ec9d0ec06bbd53a78275728cee58c1e31452b09a29f5e26484cf752e47cb9db554837b3c835049d626fd2f3f79d1a691e66cf68e7cd876bde8c8e1d91fbfd41125fe455ed335e91a2c7e4734b2742ea189bac10feb3e21c2ffdc1639b36693e7273319e9f6a3628be6e4e6810647f368c6565fc3bc36dff2c49959d4e03926739625332cd38b450c14eb8989470e3f2672281a8c9e1ed71255ffb8fd15c9a6cd6f83602fb33661f4ff9c5e6d4bd5cad7398faa1b5fea188d42ce3a8c1bed1ceecec990ce64a51af0f114740799779747af6dcd4b534d7b1bbf1c49246c685c16a3fff7cb6724815bab9f8b386b48b5a39b6028b4243522d3937d5c89ffd243b864a30b4d77e0adabbef799960b4881b0574d02c8a3438e1f651044e09b676f06654ad265bf56e29fa5a06c634b1776cf4fb15d32c0b6eb22cee2a9240590e44032d42f6d9d5ae9d4976945f7e19ab86a84ce939d63a1377a5be92c2307b8bbe3c83a929d3c20742bdff76f97944d9b438fc75d75db46be5a73c554a7767df2d19a7273c4c629e755776591215fff0f0dbbae5a71fc9dce7736c3706e4ef958e0995388b1e96a6aedb6f4f9292b1fb076da1d715cdd98addeed6cdd9bba63f77c8aac429eafdfc09f466eb373a1ade6da6b0db8a283755afb0109e102fd21ff82c9c45ec6d74458305d94dffa8ffd810377e64827d6ca2fa188ddd0920ef5db4a0dd1ddf0c1f98aa42907f95f326f8f69a371dc5242be8d464725bc118983ccbe790a6618bfd4f804432dfd3cd727aa723efd81dfe06bba17da40563f0c5b66636f26612e85c268405609aad283150c6cc34879b5d70df037ab20f59ca4935c94f7939f0f5ac748b9ffce661a7bc9abd04678c4cc832e94f8fb4515a7632202efd70af3d0d6151cd55792f4ce792d0fe93e80f0f0ad4cd7c01e594ea0e1241024fc00fd2da7e5b7fae57e0822e26d9ae29b5a6363f00b3d6ac9cd2ebc8fcf06e7b9f40767f0302484b3c3fdd3d3bddccdd2da700ed57fc29528903393bcd8218d0fae2a8c2dc8816fd68a9338112c5861bae450ecd5be56be201681f5b426bae096d815fb5e38cf2f3de73b2c77d9dd14d9b7fd3ddada76cd626384153c4f4e4e33343030f75dbf7e6abb3d458910cb6c2c4655c9662af0a7209c4259a5333e5e7236b8f8f471c755b76578c187c20f01d387ea9563a8a5fbcda2839ab4d6cd710fce95e19674a9bf3f44b700d52653b3e20a5c3252d8d6adda34af0171ead0011b18de841375be3a9957b850ced9e152a1244dc497c137dbc7f0c6fa5f5d6d32bd5dfe9e5b97116f396441304b999ea4e39f9e60cedf6003e411910feb9e51531d2df7af9464370d522964b2fa1b0286af0779d2beae9a984a086b7441d68f673046af4628bcd54a0ac9c18392bbd5ed2b5a102729fc4fb83356f8d2216a0ce1c533a63a5740ac0da3293fad0574ad94fe1834e393fc17ac9c1b72f5907f5667c11c46ad1dab69cd2c25d735b32329b94bebe6b3b65248b0885bce2a6778a395307b0d2d0dbe6b5e3c0086c2472636b634ba5e9fb32413503397f787b7530c1ce3b178ac8eee4ccf03b701b5fa343070e2dc10d8a013cae0d4eb564084a1e4dcce48130c174aed19dbc76186292c6d1efeacf8ceffdd9d988aef86b4bc354d50790252c396f0119de562c35a1f5bba208b3703c59c4bdecc903ef0f5c3a83e9638829ee92817995fc24a2c1cd9876e97dbe1ea8ace395d224267d0c7d50d0ad991a2e85ff7cb83e23b4ec6e49151bfcdf831375c82f08ce393497ab2b7a2d0d1ee2887c81cd1f735264b79db4fcc5c984c28a7963584ab65dac1d5bf6c0c5c5788f5702523b880cb6099ef56a36d3d2942412b2c2cd030926d6fc9841de4b029677678148c37b22f3b2b83ef56bfea6e798167d2db547c8b64cdf64af90206dd8e5ab5acc8724351377eb47f619477e5c4d0ff537705abbf2297cc3e05488273b5230d18365f9225ac0220ef51501e11131401893707f20da62e2116b9677adf45b795fd40b73344fdf3b11e86cb3720e86397b66c3cfbdf30690d7820ecccb9ff1128aa4a35fb0e01573fd62c275c109094b4e1c1fec56384715badf7b99889b0ba660e008c63f67a0ac8afa1c65fac0ddf7780113fa74bd302492631fe847d1be6cf82e3a46fb657e479b64c4647c4617c9956a77cd5db46c74b5579912f69c633d84bfa7c81fd9f3f84dfda7e930b6f02d82ed3be50cac3dc0e313d32d47d7ff18743d8f21a3b6c3ee35c4ff3c1eb7387ad9210cbeff58623fda5496391bfa21fbbcf2377621fb4a47b0bbf969704e5c34e49a8e02eef6cba6454eeb7fc38f21b8e0cfee0d2d7d4f9dd8f612f01de5f9be6b36a8f101a717a3c986804f54e9c10411f3792563e0e2cf0783cf01dbf8994475911640766dce58b787182d81ad2510026a4b8fbff96322f07bc616dbf861ff9c8ce0526cfe96797c48800f41a68b3a0cc3caf18913af60784ca54c89726a97965db9e24fee600bf74d4ff16d8ae60a31e7022cd8cbea65c5881fc2f1fa42fbc6bdeb2610fe558da4d6e8adc80470065b17e30dca82572d424ecd838fb4bb0cea67557aed465600759dcd55824ae4752dffa67908c099ab0af82ecf0ccaeb74e1a4455e5bd84d6e19aff10c5b0040b4fba6407f10630ffff4d71a5fbede849b5e143ceed4ce18a53e7181bee200a65e8620229ab8f795c0107b22be14e8a2d47aaed3f833037ae8deb7411486944d7a062fb2cbe5b360559835852636ec003f31c73b42dcafc0477e97a43cdac0a3f411fcb64c54ed59164ed0ce968acfbc1b4872c40682e97627034504ed512d293282028503ac2d21a56f9249622173e7a3cd7d42eacbebf6c1cb0ec35240e4ecca6ca1d0ee312f2971f36400c1fff3c36270f4b7bf20df5cc2e7d455eb61e20dcda0691c9c07257252ef674caab6d14fbf227b033a461298110cbde7561e9a5b1cecf32e94e28df2e1fb9202c71560425d7640fa1b3738e52b0f29e176a1cb37e4a31beb41c3d920e9d3de136e5273cad51e73749e347cd8c4578ee911fc211b085b06dd5cc7c8c765a2e55ab175d22e284cc2052e46f6b879d3e4a96995130016110ad077aef6f2afacdef45fccbe0f269b13edb12347f33aaa2e6fa12058e7bc31693d5d3d26f670027701158b36f5888e9ffea4421f949e643a509226ac879deb377ff284d2864e1d163521d24bec95692bf487abc3d1eb2cefe19d4be377f89747a3a5cbaebafd449b109f4bda29615b82e1475b0087e0f80c91826e2503c5ccbc8477b983024c3dadea30e4c2e2aa5981bc899b9d9fee9a70778e51420b5c82ec6c8d4ef672105eb10a70c98932f179a6d57d824299ea2e4a846f52fc6a7345786dd3e6219eaab42eecd270e3c7fda18f41fb3f1867c4bfbb8bdc72c37925ec01803e218ba91a13241179c5b82e0570b080cba31ec93d026f3addfc5a475b28f23c0eefe0a1c27102b3b5348187e1bb57682b4ffb640c5f9eea4f600d720bcddc92fe143247e812c48e2d7fa4f446d06e5712", 0xcc4}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="92006f"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:32:05 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f00000002c0)={@multicast1, @broadcast, 0x0}, &(0x7f0000000300)=0xc) sendmsg$can_bcm(r0, &(0x7f0000000040)={&(0x7f0000004000)={0x1d, r1}, 0x1, &(0x7f0000002ff0)={&(0x7f0000000240)={0x6, 0x0, 0x10000000, {}, {}, {0x0, 0x0, 0x200000000000000}, 0x1, @canfd={{0x0, 0x9, 0x1, 0x6}, 0x7, 0x2, 0x0, 0x0, "543bed9d2389f77c75ea069db8350b8e6038569d05548e12aa323b25b654d97fcbfede24bb2d7efc501f4dda1a2052fe4a1a4c96ab063e332b28613e894c0f78"}}, 0x8}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}, 0x1}, 0x0) 03:32:05 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:05 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530ffffffc000", 0xfffffffffffffffd}) 03:32:05 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0xffffa888, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x14, 0x20000102000007) 03:32:05 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000c84fb8)=@routing={0x0, 0x4, 0x4, 0x0, 0x0, [@local={0xfe, 0x80, [], 0xffffffffffffffff}, @remote={0xfe, 0x80, [], 0xffffffffffffffff}]}, 0x28) getsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x6, 0x0, 0xb000}, 0x4) [ 478.962909] QAT: Invalid ioctl 03:32:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) sched_getattr(r1, &(0x7f00000000c0), 0x30, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r2 = syz_open_pts(0xffffffffffffffff, 0x10000) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)) ioctl$VT_WAITACTIVE(r2, 0x5607) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000048f000)="ad56b6c5824c8eb995298992ea54c7beef9f5d56530f90c2", 0x18) r3 = accept$alg(r0, 0x0, 0x0) io_setup(0x7, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000c2bfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f000007d000)="b3", 0x1}]) 03:32:06 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:06 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653001f800", 0xfffffffffffffffd}) 03:32:06 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f00000000c0)="295ee1311f16f47767107091b8d9ce75fc1218559cb29d94abf181821b3e2c7036") ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000100)={'gretap0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}}) unshare(0xc000300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000600)={'sit0\x00', {0x2, 0x0, @rand_addr=0x401}}) 03:32:06 executing program 3: r0 = perf_event_open(&(0x7f0000000500)={0x200000002, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400040) sendfile(r0, r1, &(0x7f0000000140), 0x1) poll(&(0x7f0000000180)=[{r2, 0x6040}, {r0, 0x112}, {r0, 0x2}], 0x3, 0x80000000) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000100)) fcntl$notify(r0, 0x402, 0x2) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) 03:32:06 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x1100000000000000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:06 executing program 1: kexec_load(0x9, 0x7, &(0x7f0000000400)=[{&(0x7f0000000000)="ec7e1626d3aae9ec70e0f85497d93749c02069e92c1248e66c96e75f5d1cd72518b7bc79054294e2ccbac2204aa8eb7169c21e2616fe6583e1c56c634d3c7ec3eb397d209697885df8a2130d926e9ad99273e880f115fd994002ead2f46e2e7efae6ad0c01b3bfca616909b2f82003163343e9b4bef594cd6b8f643fcc6c2b2a7f5ce1dea7d80acb1a20ebe2fc610bc2a374fed8a52c9a6dbc69cf3c22353d1973f3bcc16a409bae20069f1c7466", 0xae, 0x1, 0x7}, {&(0x7f00000000c0)="7557978a7097734c6a4dc6c6e2f0852b4eb5db449648cd105bcf9037f5cfbed5b6ffe03df7", 0x25, 0x5, 0x1}, {&(0x7f0000000100)="b60d400f9cca9fd5a54b9412368aff988308864e8e1ca773f0e525be9fece803961552becabdddabdc60122b2f30899ec918b3ec99b6999d07b1be1a262af76c29eb8591681dd9ab606bd693114672c71978a3b599a90e64875127f7ad630ad85141671ca6b9850f4ab5151682b28d3b8ebea7b4df99a327c2b642e9aa4d2bb0e923f86632e24022d952c1ba4935c11e4d460e78d246010e9ad49d66555ef0931048ef65d9e3bb3b9a169edba9035fd89756a1b24232e1b3de9a701c1811ada970968490b806b432fa24b028853745", 0xcf, 0xab1c, 0x101}, {&(0x7f0000000200)="d54b105b385b8ce1619a1b9f594799d0d1399b8a07c9bfb852163b41f886ffaae4b6c1ee2bded6974578f25c320cce6bfd6b92ca0191e4ec23263b2df3d26bdb51b9b222af0abab976282760aeb3df3d4cf6c742f9e8e9e57ca5d37a03adb6c55a37752d0f5d9feed12cf7e1ca84368a408d8ad1", 0x74, 0x8, 0x8}, {&(0x7f0000000280)="1a471e45dab32be2a1f99748d46ab39636a19981e0fb313b817234fcc8cc3bea2d9b79ab6fb6fc4cb9d1ede8e2202b15bc96111d800b57c34fba663b900f3ac08ccaa4eb08082ec37a3272775cf3c37c54c37474d5b553b316627f27d494be71418cbdd13a69af45b0cdbb465182f00d2e0e46ea738157842734332ce1d1bd2939f6101adeffa5657916c945e9ff3f22d9ca4241db749a05c7b80be1f6fd7e001fa49ceb5a876d032bcb7af68a39199db39a18a120902b", 0xb7, 0x6, 0x92e}, {&(0x7f0000000340)="7131e776f846eeea6b58ac67735501c6114aac20a22d06e076ed2791a364", 0x1e, 0xe5, 0x10a7}, {&(0x7f0000000380)="9b1137566b060373dc0c896d34dba705404ece996d35f3a3abc6bb52219db6b3ca26cc2841478915e97d6d930a9f7f3938afd39ec5ee192d4e950ef3fc6c74cb65925e5b50b3e557d99ea6fd46560c29c0fda31274749dfb1ad1122321813354e31c8fbea1d8d1dfb9c39f54a127872c15b5dcf2", 0x74, 0x100000001, 0x3}], 0x3e0000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500)='/dev/zero\x00', 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) getsockname$inet6(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000580)=0x1c) r2 = getgid() setgid(r2) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f00000005c0)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000740)={r3, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x5}, 0xc) recvfrom(r0, &(0x7f0000000780)=""/49, 0x31, 0x121, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000007c0)) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000800)) open_by_handle_at(r0, &(0x7f0000000840)={0x3d, 0x44, "c062759e0426b26d464784cc32196deab1a3612b5cff6234419d48ecce68bc7a0246a471d219d02b512116cae6f3af258d78086c7d"}, 0x4c0180) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000880)={'vlan0\x00', {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000008c0)={0x8000}, 0x1) quotactl(0x2, &(0x7f0000000900)='./file0\x00', r4, &(0x7f0000000940)="26db3bc85299bed0baa042d169278e2e52ead7c920adf5b10d2ddc7f6d22750178d5440d78278a32753b021bd6c17293b450e9d44afc78753a9d04f42b859e95285da7bc8f434c5e561a4d1edaff0d91a6cda86187e1b03f84f464e03f2a26b63e44e80e1dc8765c3c527a6ca025fa9757b5803a90487e317c356f653672eea626bd6d4bf31fbe0eb7450210f34ed602b5f117ad1e897c85bc4e6df10ce5bf1efed15464fe60f88b93b69811c17a576b330b9e4cbb024bec2ab04854") fgetxattr(r1, &(0x7f0000000a00)=@known='security.evm\x00', &(0x7f0000000a40)=""/226, 0xe2) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000b40)={'veth1_to_bridge\x00', @ifru_flags}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000b80)={0x401}, 0x4) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000c00)={0x7, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20, @rand_addr=0x8}, 0x4, 0xfffffffffffffffb, 0x5, 0xd642, 0x100000000, &(0x7f0000000bc0)='veth1_to_bridge\x00', 0x9, 0x3f, 0x9}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000c80)={{0xa, 0x4e22, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x1000}, {0xa, 0x4e20, 0x7fff, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xb5f}, 0x8, [0x8, 0x6, 0x401, 0x1, 0x8000800000000, 0x0, 0x4, 0x9]}, 0x5c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000d00)=@req={0xfff, 0x4, 0x6, 0x6}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000d40)={0x0, 0xdc, "3dcd4c6fd4c28dfb6f2c841276057d83f3e0848bf0c76e2f9ed9f128618434c50f5feb498e8d10bfa33c33fd86b57073ac7f522ae09d666d12044f4c2bc9b8b693cef3f3b4550e8d6471b10dd38ed16b3c9a5b10c2e21a0d022995cdc4b16822ce353f01c14e1b26d0dcdcf011430ab0181a144dcbf49f73cad8dec4f4d9f256ebaacadf17aef12c2a53226ab9be9df272e2955e7c8daa4300555467cdf14c0a9775826ceecad077119aad0176e0e713bdbb8cb4cbb6a1a9a111146ea66285ad6a395caa7065f5eaab253f10518ae86ad63809dca89f2f2ec28689ce"}, &(0x7f0000000e40)=0xe4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000e80)={r5, 0xffffffff, 0x30, 0x7c, 0x6}, &(0x7f0000000ec0)=0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f40)={&(0x7f0000000f00)='./file1\x00', 0x0, 0x8}, 0x10) write$tun(r0, &(0x7f0000000f80)={@val={0x0, 0x884e}, @void, @eth={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x17}, [], {@canfd={0xd, {{0x0, 0x0, 0x5bb, 0x5b6}, 0x1f, 0x0, 0x0, 0x0, "170a4daec26106a7c9b2238023f491d6f8b59b31257472e74c73a56a4eb669d9d8b87ef036090a49ccc95f536f139d1aa43aabd38c9b4a2476d34d28d8e6fa4e"}}}}}, 0x5a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000001000)) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000001040)=0x400) setsockopt(r1, 0x7, 0xffffffff00000000, &(0x7f0000001080)="9845040065c61781df9cde6a73c632242fc6139a4edfc20396867cde806de3c0ff81fc355a142feabb22d8d20834786677e5dce6a8ce1b5a9b25273056a44ad42bc923dc84d0dfc3a7c3037bb4531811b8e6577cf5b191239b4f4bea30cda29dcbe1702d825c2b5f34a462dc8cab51e5b77a351f5f2fb31bccf4ac826c80fc19b9bc25bfe5e7254c63da24410be086d6ca00aee82b55df208c3b97892718170b16d3aa9b4c66003d258572927b8e614e6f64669886b00b5ea987e8eccaf7984ad2425aa046e71cca27326bce018e6fb35b5d2ca8b4fa4f10bf98d1dae646faa82a10daece5657c602695c7b5bb5fbaeacd00faa5d1e057bcc45d058fe803bec93c161edd609b91fd3089019cf128b1ec5a9907531b8b96f45ecfae217524de4c387d910839c1a99be15b7a55d0d6588d8ade98ab26863e820d25db9770faa75bfcd6626991ebce71af02f2197c603bbf5697b7edadfce17970a939e363c711d39d6db20e1d9e53a3380af6ae70de38dbf97552d5226d07519f44f6ecc5f6828aee9322d54f8df23aa49b1783776b35887ef3a564711e0173e8cdc0c817b86ed5ebe150d93ffbf51cbe42a8cf3d65b1fe50ec7050cdf228e83e7650043a9ab5913b79e2f19f16bc6eda049c15e45f28abb5d35407b62207c889d778ca248ab87d733f334eec5dccb5c74a018b9bf605622ac927e5399328de67cd5f79d93c83ae7ca3f8b0410305cb2eabaa79355352753315efd75c50d29b087a56cafb4598c58a743e41feef18313e8345816f9dfcc44787fd89729598f237cd5e237bedb064d4daa1eb9d71998eb50f3c73199fdcadb8f71bf0f865868bae998bf8fb337ad4055b981cb4c57ec1164f13adaa95ec4099b10700ede0a2e929b4e8761b539e375df6abacea5258c2737717fe203d5df96fcb79caa36be88d5fcccc6d28c1406152a1cf2a3551e1a937eb49741c2fc927bc435e458ad11f916c0a2dd99ddf037cdfc119f3acf8515c8da153ddb08b7f6d0c719941205332896286870895e078e267db923aeedb6f6ba2ae1983abab61837e22285ea4cc7e58f05fd328a3b2011c36d564744c39d04d63d95fda073a8af212e23c7e604d62af5217987470cd9e25b88db636bf791bf9cd734957586af9f322b61df33c4dffd8ca0f5d2cc7694627d42173e2efeef5bf87fe83198335d87d65ce8072cbf42e5eecbb9e2577d86918c3d6d57c8c8a63b714af357d20ad1fd46e0caeb4a84ab9dc90c47189d188e224be2bb941c2977c8344a40ab94d73e12916f5a2d13228d565e84e0e87f9c89959cfd1350bb672dc979052e549cd638196f8098f7d2617ca515270cfac3c2d0267946e517ce4dd74589b62b89db8d5bbfdf231973b60b449f0a1838d18d432156e002e46e8cf138ed624790afe74ca69f7d60d3f0458f04f57386276303b1a804c65cefb675a99e83d9b992e118e54b05208a625316674220fc3b4de9a74bdccc66cf5d4db951dbb3cb4ee2c7cd3997953f80c946c59c741a4d1463e6de211e86d33550509510802c722cb9bf822cdcb71f0fc07ad7617cd5c8de6775c5606e454215d7ec275d1c05c099634d378ca4d9c2eb3ae32cd5e256b326b7a30c3b872a949ac4eaca3c17cf85fd645e027ce4d29abbcb42bd65b89b351a2c885a7fdd8b503b7e14043ccb78a7524c22727d5755151ebc22e703dfd8b301c4ae17c483886f291264442a5d8e0a1661d7942286e9c189c6f3f5d86c79e0c84d8d4f1560d18f39dde818eb977bd68b882ae55312b853a7af9e953b7a0eda2f1e732bfb42bbb99a63775553999864381d6926005413c90c41486397a2a5447c873ccf191d190142199d12ab7d1afb016928e25f42ad8370536f52fc7a61dc33bf7c25d4c7ce02e8b468248c832e353eac9e9184394678f5bb4a9d6cf61f326f5f43eaa24e90246557054e747643136ecc07e96e0f9f6375ddcdf0fd8811274a20ba5a116ef0529e5e96dabe858f3de7cc2d29bbcac946066a08afaa3994608bd030c496df5214a1f9ea31acc1a10b1d4bc4bbb7f7b3e84832aad35712aa44613493aff90ee382826674eb8d4f5123b659a6b8e9c1da693a045ce8efc8169a412efef01244d2dc7d2de32d6d90a0b42163e2648d37f240e966f10aa631f5f0c76407b76ef8afb566f85af5c304e3140883ab496414b24c529235e8d208bebf7122e13c0626dd6aae140f864aed2c6b700652ba1ac8ec3c1ab5dfa8574a872333e2e66c03a622a067eee0608bd9ecb97cd3a6c8dc74353ed6e909e7297206b45c91b05039890fa358bc30e43bf0cfc8d550782935a77f2a86c87d6c9095628e51486353b63a766eb0b3972fcca143501a01fdf3f1a69e711bd514334ed8d2a391de9a4e38329e0ea6570f193fd6abb12a3b525d915dee61d52cc15bae729a7f728301252a0d49c9b0346a07ef5ce343b7ae7c1044d2d1decd65834adde40277db5965d2401466653e14de88f0bf4e140e9f216be4e4df9e97bfeb58d5f8d5bad0a9ce523208983dbefd6b2dd62ee9483ce9e6751eb41dce7189ef6ec59bb7f4d8a69b6fdcec73db6eb6d650366012c51148b703b2efe867319219d7e2b4cdf4a8fd45782afc582619f2cecb3fc31102ab5ed8498ecbf9da4006742bda9ab41bc7e00fa20b983dcf925e3e5d80c1d63ed1c5c7b0b44d520be4911fd896e1454c40121f81364ea8b13423db28e9ab9073f77a2ac29653bde6c22016839a3e7d871f9637d2bbcfb987358409a0b67d0e014030602e778eab93c9f0f47c0f4f190b106e16049c317243c8da7b45c1f185f94b8a7c7f34b960bf978e25578000742d6462089d8f3525702d644041d05d11fa34087311ad196a6cdf36c478c2951fc9e43f63b83b4709818871f1881a8703e30695658649f5e0d07069c0b23080634a8cd099ef83f246a024f6756cae26cf7e5e8f6f8531a755bdefbbafc6285cfa53f40048d94895bc658514bf77788368ff588b51c2a02d3d318d0b0d74fd25c3d876b31647423e8160d2aafc4720cdaebc9f633963b6cdd48051c84710664f714751b2f1cde781b7f02ff4276ab5b34cb542a2dc3a5a228ac36713cc327360cec466dde63e78c90425d5a280925d76e7ea6ac65f0446f0fe90603f7b3312bd216aa3008099b77722044ffae5206cdf07fe5b88875bbc0b5bf90c46470bdb347fe741beee32b9ab2821733eadf1f8c3609e3f62560a442db6415541979f1aa2f0a3c8de46bb543b1800c3de40045f6e464a05469d050619a8eeae59cda00aa506767617ca8f8383bfa104da61b00f23c41af8f8f0deb265c11415b8314340a09eaac7b451af99981c83c2be44a075667108f3156c2dce18244415706d95604e4e499926ed93db385afc3ee828e393e66df0c25d38250b6ffcf2fab209c1d2e8b287633ad306503a99334738287d707904929018b6b4bddff8f99239dc0a1f83b7f5b2981af726a24894c635df0c0584737a233f27650a7293543c59ce6b2d0182bfca6a785a9c74c080feae9cfbf4f8ebf3306ab144e7098316a56fd37c01a22b58007b09cdaa64bc902ce76f20a76bb867616c7184867791ea5189b24830765a8024673511ca0da4ebd55ee25e0c28a440e428fcce4a0fded1f1b84a5f43787956a81b4b2936886d71c9199f9f91809e4200e296ff48f443573f3a21e1c08351388cf1967013e7d5fe78560a1190629ad2a34ad60eb8f404ebba973707359530653866dda764d799acc616f8881c743154ef0ead2799cc18db560faa69640720fac15c4cbc27520021e9601eb7e8a2570106c2b004ada5e878fee6fe40da7adcf8a2e8f1ff4a7a357e1e51a1449d88830071146acb2463d3c5afd3aadc31c96cea2d498669938bd365ff2890ff38dbbe222303de2f287105124935cef33b76304da63238a8d6af09a30accca993f5e577dfaeca553e0252823b3f929d29176301f4547aafa4d9a9d679ce22c0fbf1860b546736b8c02b89e152b4081f50b2d93575164b2b4457c141edcd6e8b73e5b66d4ef3f76f734927179b800257ac41177d000ef15409a6115b685dd3c2ab52121809ad2fbea9dca392b301fe524b4911653b0f9f63a49d104c8ca0a9b86758bdf35abc56be3c11dc6480693b7032d22eaa76ca98e30ab597d2da5b7bfb99d382219e3b23b0f21f86615ea2aa36f68874d1ec5687259acca29bb37339763a74b73d01e1f16c0176ece5afe8be71192ebd21c375eb836038f5002bdd8c74eb2afca3f47556e81d9808ede2808fa63d7eb53215cf60a2e69c1a44c5a71b33f7c4018d0666cf6f678cf989becd6d6ea1ce7441a0615e3dc0638c9fe5992f53f6714e0635e7caca56ce0eed9b15b4d591141d83b2fbede07f0c3498cc3b84c86edf720c3b202b9a9bdd882b97ea042ea5959b3774ff8fd116bf1329e611730ccd67c88d94c8263abb83c5b774048256c910fa145f7dff4c5e832b61e8a226df14d68d1fa8cbdc8404a18b306711469eefefed27750f6fea26c2e8f8f6196235893cb64eb99f3a8d724eea0ac67d7a9804cee70af1b8a324ee6f7e6ee7be43c43c20369f0599b672b5da1a5e4526e3acd08e7a0bc36fbb67b97a11b8461e7040385c430b12ae48641f21c5aa60258422b55e39a9b9b941195e3d9a2683e36c0e3163efc69e41d0ab7c4424aa33348b28daa4948bbb9586c3160ae4da6fd9e2b74729ff7c52e60e1083fd9fe79d2046f3708d40f1dacd4e630314056edf2425a8624df63fb3efdedf67905e592c282bb87fd2e44d705fabb8048b77b9d8639398248b0c7be53f55ced468424e6879af9c243169bde10f77cb1465593e8597c47d484f1b4e7c9635c077e7657d15f0c27792ed0b0236f4f620dbc5e278fdd69cb984a65c3c1a6c7fe3344eda8479f8700f76a0bab75dabf4443384aa5368993f25ea16e7f0b821764c0192023270e5108f0d4d8671aea5fd5a10c526a6ffefde4b048d81d5c81a2ef87996de9122818ea2126707bad6aa915319b6f4a006dc201df63780d8e4dc693338e59ef8c92d1a6297a535dc1c25666a771fe0d71d6caac69d91e1966dac02873a02ef93c22e4afbe5044bc2f23d6a6e4878fecbc42995321d6c30356731b66bfc0b01e7ee6fcb6327187f0c0e1392c47c81d52300475b227d8160eab43fce1244fd15368645d2356698ccaddc437c1531610827e798cca50d73379ea4abdace992252f4543a6c559265d2ce4a6a76b5ccab8031b99ab9315704fa4723618e92fd64f179630204424f20ddd13baa3e95a34778c096ec053e763f2d4f7f83e6b0c7f83b1f57eaf00936e42b466eb76dd4d02cf3ead496c525669b6d2e3d8a2a01fc9bf58eb8458dce3af2b5f6e4370555ba628ed4ab84b718dfc9b6c15a103704a204c1ba1e807424ecdd417290870158a3b75486b70cf15782ce453b75d3981b44917e25fd01197a54189ca5062814bc024cbb36b1326e835829105d713aa189900e235ef1494c4a915715e9eea84a15a8963284cb5a7efcc616df1d4ddfbf0e09a02c08588b7035c7120c1b803a03e41d28d8840f69fc195f65151f94eb53ff13d148a6482e8b3c324d64116cf20fdde29f91321979e2cfa289a485bd284add452b04ac5ae55338033b526aa6cf19921e751dc9ddf69a29ce5b9bc211907813fee595e13a45892970e0fc0e5ef74efa152037c1b61c6839595233a7dca377e5bc35aa09db970e5712719ea32233ab05c6de14f36454ff1274972ed063641b3aa395e608cd1b932eb89981136c4e556b884c582a", 0x1000) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 03:32:06 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008915, &(0x7f00000003c0)="295ee1311f16f477279a707c7e0b732a44d6f9f0c3a2ab8711bdccd39cc689dbf0e0b689626f58b44ba1213ef8400630bf023ecdaaaf36531fc284c082c8b0803b4ecd4608a35e3fe4e73668cfdccf8dc8ad0f754b8f7da626644fafa2dd3ec48aa2436dcd21debd0b2e089942fd88eaab9c6f8d571b28f200be4c71758d3806a31b6853da20e0a320c73fe292585ef7668b23a79163ebcfe3c67fa740ac") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000700)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58) r2 = accept4(r0, 0x0, &(0x7f0000000380)=0x320, 0x0) recvfrom$packet(r2, &(0x7f0000000140)=""/127, 0xffffffffffffffdd, 0xa242, 0x0, 0xfc7d) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@flushsa={0x98, 0x1c, 0x304, 0x70bd2b, 0x25dfdbfd, {0x3c}, [@sec_ctx={0x40, 0x8, {0x3b, 0x8, 0x1, 0x7, 0x33, "aca40eaf2c01c19b0978058da6a974060d7d7906eb979ca77ea1ba38c5e81d68158bfb2272fb9f2c207e12535844913c6763a4"}}, @offload={0xc, 0x1c, {0x0, 0x3}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in=@multicast2=0xe0000002}}, @encap={0x1c, 0x4, {0x0, 0x4e23, 0x4e22, @in=@remote={0xac, 0x14, 0x14, 0xbb}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 03:32:06 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0xe00, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0xffffffffffffff7f) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000280)=0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}}, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x3cb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xaaa) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000016000000000000000000000000000000b3677a3d2c9c0583384c382f0d87ef375b06337099ba10a7b93dc7aa0bfe8252f6bbbce6682b6bf4a6a89a92505f73cbb9f446762fc836f055e11463024db0fb77c1fa71a3d0eedd8a0c3a80d556d3ebfd273965bd1d46a06b60f417f376f456dd85fd0024ce08643c159a8abbb3c1474660c17e2ce33b2b165e71fcf6d5290863260b53e62b43b9a285deb97f27c41a201e2a519bafe447859a2ec748ba9249fae5beec39ae6b56f3d354526e3acd5af3c4a1f662d7098037efc22f0a430257944c92ab420f37f29f4284b566cf9ee1dee62222cf28607a8f6bed18929894ac3c28812f8f38da3953d334b6256254466f1f5fe033f90d3d1eb1113f9c"], 0x1}, 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 03:32:06 executing program 1: getrusage(0x0, &(0x7f00000006c0)) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x5}], 0x1c) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) 03:32:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x7c00000000000000, 0x20000102000007) 03:32:06 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x880, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0xef3596eacef862d6, 0x70, 0x9, 0x7ff, 0x9, 0xfffffffffffff800, 0x0, 0x8001, 0x10100, 0x4, 0x401, 0x7f, 0x4, 0x40, 0x5, 0x8, 0x9, 0x5, 0x9, 0x40d0, 0x2, 0x10000, 0x4, 0x8, 0x2, 0x10000, 0x3, 0x7, 0x10000, 0x7fffffff, 0x2, 0xca, 0x101, 0x3f, 0x6, 0x9ea6, 0x1, 0x7, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x200, 0x3, 0x7, 0x7fffffff, 0x9, 0x2}) flock(r0, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x85db, 0x1, 0x4}, &(0x7f0000000240)=0x13d) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)={r1, 0xb77}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x9}, @in6={0xa, 0x4e21, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, @in6={0xa, 0x4e22, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffff7fffffff}, @in={0x2, 0x4e23, @loopback=0x7f000001}, @in6={0xa, 0x4e24, 0x2, @loopback={0x0, 0x1}, 0xc0}], 0xb0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="277a4c148d89", 'bridge_slave_0\x00'}}, 0x1e) r3 = gettid() sched_getaffinity(r3, 0x8, &(0x7f00000003c0)) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x10, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vk3\x00'}}) 03:32:06 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00 \x00', 0xfffffffffffffffd}) 03:32:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x7001000000000000, 0x20000102000007) 03:32:06 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0xe00000000000000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:06 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000080)={0x0, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 'ovf\x00'}, 0x2c) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x501000) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040)=0x10001, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:32:06 executing program 4: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="5fb88c750196077aa3214bebc13f7d74ad4d9320611cf5a33f2a3f09e1c926359dcfe20001c781cb67c71bb0c6f5f4bf8ed60dce2176c22a20b22b9b24172b5569ec67906e7df93b05b19ba5360f2eab62812070fc181a2483366595113b240804d882a7dcd7ac4ba53e06d02558968b978122716d1823dcc7d40155c1bc1e8433f5ba15f5ee48c0ca941fce872e497d1377e2a5bde956f003caaf58c7520f82d7346c266e8ea70dab3bb7af6d78602a31ab8d232b07f6e3ef524b552ed88a1b1c02bc89f4f671855d40a2c1c173d4bb121bc86270c32d39c480d09a29b8983169914d8df86417a802b772bb638f72ccdcbb46267b5751816c77b6739f484292d5ca5e1bc4efee06f4e07e6a795faee2af27a8f212980558066c60066ffed3d5b91b51c7ac494ee0e961cd5bd077bd7756f9e39dd3abdbe5c598cc5cbd44c5c319af923fbc4731545ff134749c2f42ee8454bf33ef309a6323dc847676d5be2fcb9abc717fc19396943ec0e264a80d64ca66ef2c42a57112a8a146097d9f4256ef6e6fd73be26e9a5f79b21dae42066d9cf4441021d64a2d6fd61c7ea709948d4b", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x240001, 0x0) ioctl$sock_ifreq(r1, 0x8927, &(0x7f0000000280)={'ip6_vti0\x00', @ifru_mtu=0x1}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000200)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x2, 0x8000000000000000, 0x6, 0x4, 0x6f, 0x101, 0xffffffff, 0x8400000, 0x0, 0x7, 0x8, 0x1}) 03:32:06 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa}) fcntl$setlease(r0, 0x400, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x400445a0, &(0x7f0000013000)) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000013000/0x1000)=nil, 0x1000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000012000/0x4000)=nil, 0x7fffdffed000}, 0x1}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e20, 0x7, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x4}}, 0x0, 0x101}, &(0x7f0000000180)=0x90) close(0xffffffffffffffff) 03:32:06 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='ifb0\x00') ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") write$binfmt_elf32(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x3, 0x8, 0xb193, 0x200, 0x3, 0x6, 0x800, 0x125, 0x38, 0x303, 0xfffffffffffffffa, 0x7fffffff, 0x20, 0x2, 0x640, 0x800, 0x2}, [{0x6474e551, 0x0, 0x3ff, 0x8, 0x4, 0x9, 0x2, 0xd7eb}, {0x6, 0x40, 0x9, 0x3f, 0x101, 0x7fffffff, 0x4, 0x9}], "5a6514a5b8d6ae06abe0d71ea690fa6cdd644b5e722fbd4ee82b50c3f0cdef16fb69e545e1f60404e063e1a2949b7a44ac310e9da19477241b63fa926634186d67ef76110fb11699388ef798f7b8717d453f3a9eae88965d8709d0ee686a9d2530b3", [[], [], []]}, 0x3da) prctl$intptr(0x24, 0x7fffffff) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x4) 03:32:06 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765300000029800", 0xfffffffffffffffd}) 03:32:06 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x2c000000, 0x20000102000007) 03:32:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80, 0x800) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 03:32:06 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"627269646765300000000200", 0xfffffffffffffffd}) 03:32:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") clone(0x0, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000200)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x7ffd, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000001c0)={0x1, "02"}, 0x2) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200c00, 0x0) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000002c0)=""/158) 03:32:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@loopback=0x7f000001, @in=@multicast1=0xe0000001}}}, 0x50}, 0x1}, 0x0) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x200000, 0x4) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x8000) sendmmsg$inet_sctp(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)=@in={0x2, 0x4e20}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="83c0e1d3437c32e1103fc7e2b04fcda230712862aec4b3d2ba81523693cdbfa193ba32b8eb67b51993c9a717b1a40032ae85dd0f8ea15cbf62c594a3518bc9b43ed4910f1e402d832312642b0bda145c4e783c98f4457f29c9c82a8419b1f1eb8178ccde50ce566a625e02ce4c2345716fac42ef368fae77557075", 0x7b}], 0x1, &(0x7f00000002c0)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast=0xffffffff}, @dstaddrv6={0x20, 0x84, 0x8, @local={0xfe, 0x80, [], 0xaa}}, @init={0x18, 0x84, 0x0, {0x3, 0x1000, 0x200, 0x80}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback={0x0, 0x1}}], 0xa8, 0x4000000}], 0x1, 0x8841) 03:32:06 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x2, 0x0) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) ppoll(&(0x7f0000000380)=[{r0, 0x4}, {r1, 0x40}, {r1, 0x2000}, {r1, 0x214}, {r2, 0x10}, {r1, 0x1022}], 0x6, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000400)={0x359}, 0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x7fffffff, 0x7, [0x5, 0x0, 0x5, 0x0, 0x7, 0x1, 0x2]}, &(0x7f00000002c0)=0x16) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={r3}, &(0x7f0000000340)=0x8) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x40042) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3, 0x20}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000140)={r5, 0x8c, "621c27ba78831af30a1cf7fba96236f8b11dd1ea93a8767f3114150299c0e6b4c7caff065312bf97e524529be3fe047f0bbf1cbdd5e4ccb757c1ac48deab56675b4fb9a71e7ebc36926048b2d4638dd7151915974b43cefa4c18bcff5b166fc892193ddee3faf44e717573140dda23ebe5f05fdd36fe443978b78473dbc313b2e838158ed1f0dadc2e022e76"}, &(0x7f0000000200)=0x94) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r6, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) fadvise64(r6, 0x0, 0x0, 0x4) 03:32:06 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x8100000000000000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:06 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530feffffff00", 0xfffffffffffffffd}) 03:32:06 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x2f0, 0x20000102000007) 03:32:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 480.437517] handle_userfault: 1672 callbacks suppressed [ 480.437544] FAULT_FLAG_ALLOW_RETRY missing 30 [ 480.447762] CPU: 1 PID: 6523 Comm: syz-executor5 Not tainted 4.18.0-rc2+ #121 [ 480.455035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 480.464399] Call Trace: [ 480.466985] dump_stack+0x1c9/0x2b4 [ 480.470614] ? dump_stack_print_info.cold.2+0x52/0x52 [ 480.475796] ? kasan_check_write+0x14/0x20 [ 480.480023] ? do_raw_spin_lock+0xc1/0x200 [ 480.484260] handle_userfault.cold.32+0x47/0x62 [ 480.488924] ? userfaultfd_ioctl+0x4fd0/0x4fd0 [ 480.493492] ? trace_hardirqs_on+0x10/0x10 [ 480.497713] ? print_usage_bug+0xc0/0xc0 [ 480.501758] ? print_usage_bug+0xc0/0xc0 [ 480.505801] ? __perf_event_task_sched_in+0x24f/0xbb0 [ 480.510974] ? userfaultfd_ctx_put+0x810/0x810 [ 480.515538] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 480.520363] ? find_held_lock+0x36/0x1c0 [ 480.524409] ? __lock_acquire+0x7fc/0x5020 [ 480.528629] ? lock_downgrade+0x8f0/0x8f0 [ 480.532770] ? graph_lock+0x170/0x170 [ 480.536598] ? find_held_lock+0x36/0x1c0 [ 480.540665] ? lock_downgrade+0x8f0/0x8f0 [ 480.544800] ? kasan_check_read+0x11/0x20 [ 480.548937] ? do_raw_spin_unlock+0xa7/0x2f0 [ 480.553340] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 480.557913] ? kasan_check_write+0x14/0x20 [ 480.562131] ? do_raw_spin_lock+0xc1/0x200 [ 480.566351] __handle_mm_fault+0x3a0a/0x4460 [ 480.570867] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 480.575692] ? graph_lock+0x170/0x170 [ 480.579483] ? lock_downgrade+0x8f0/0x8f0 [ 480.583627] ? kasan_check_read+0x11/0x20 [ 480.587763] ? rcu_is_watching+0x8c/0x150 [ 480.591891] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 480.596283] ? handle_mm_fault+0x8c4/0xc80 [ 480.600502] handle_mm_fault+0x53e/0xc80 [ 480.604545] ? __handle_mm_fault+0x4460/0x4460 [ 480.609107] ? find_vma+0x34/0x190 [ 480.612630] __do_page_fault+0x620/0xe50 [ 480.616674] ? mm_fault_error+0x380/0x380 [ 480.620801] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 480.625796] ? graph_lock+0x170/0x170 [ 480.629579] do_page_fault+0xf6/0x8c0 [ 480.633368] ? vmalloc_sync_all+0x30/0x30 [ 480.637500] ? find_held_lock+0x36/0x1c0 [ 480.641549] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 480.646376] page_fault+0x1e/0x30 [ 480.649812] RIP: 0010:copy_user_generic_unrolled+0x9e/0xc0 [ 480.655408] Code: 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 1f 00 c3 0f 1f [ 480.674641] RSP: 0018:ffff88019810f7f0 EFLAGS: 00010202 [ 480.679986] RAX: 0000000000000004 RBX: 0000000000000004 RCX: 0000000000000004 [ 480.687249] RDX: 0000000000000004 RSI: 0000000020013000 RDI: ffff88019810f890 [ 480.694497] RBP: ffff88019810f828 R08: ffffed0033021f13 R09: ffffed0033021f12 [ 480.701748] R10: ffffed0033021f12 R11: 0000000000000003 R12: 0000000020013004 [ 480.708997] R13: 0000000020013000 R14: ffff88019810f890 R15: 00007ffffffff000 [ 480.716271] ? _copy_from_user+0x10d/0x150 [ 480.720491] evdev_do_ioctl+0xb69/0x21a0 [ 480.724535] ? str_to_user+0x90/0x90 [ 480.728230] ? do_futex+0x249/0x27d0 [ 480.731923] ? rcu_is_watching+0x8c/0x150 [ 480.736052] ? graph_lock+0x170/0x170 [ 480.739830] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 480.744233] ? find_held_lock+0x36/0x1c0 [ 480.748277] ? lock_downgrade+0x8f0/0x8f0 [ 480.752407] ? kasan_check_read+0x11/0x20 [ 480.756532] ? rcu_is_watching+0x8c/0x150 [ 480.760657] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 480.765052] ? __fget+0x414/0x670 [ 480.768493] evdev_ioctl_handler+0x144/0x1a0 [ 480.772892] evdev_ioctl+0x27/0x2e [ 480.776412] ? evdev_ioctl_compat+0x30/0x30 [ 480.780713] do_vfs_ioctl+0x1de/0x1720 [ 480.784579] ? rcu_is_watching+0x8c/0x150 [ 480.788710] ? ioctl_preallocate+0x300/0x300 [ 480.793096] ? __fget_light+0x2f7/0x440 [ 480.797050] ? fget_raw+0x20/0x20 [ 480.800483] ? putname+0xf2/0x130 [ 480.803916] ? rcu_read_lock_sched_held+0x108/0x120 [ 480.808913] ? kmem_cache_free+0x25c/0x2d0 [ 480.813129] ? __x64_sys_futex+0x47f/0x6a0 [ 480.817351] ? do_futex+0x27d0/0x27d0 [ 480.821133] ? security_file_ioctl+0x94/0xc0 [ 480.825519] ksys_ioctl+0xa9/0xd0 [ 480.828962] __x64_sys_ioctl+0x73/0xb0 [ 480.832831] do_syscall_64+0x1b9/0x820 [ 480.836696] ? syscall_slow_exit_work+0x500/0x500 [ 480.841522] ? syscall_return_slowpath+0x5e0/0x5e0 [ 480.846439] ? syscall_return_slowpath+0x31d/0x5e0 [ 480.851363] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 480.856708] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 480.861540] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 480.866709] RIP: 0033:0x455a99 [ 480.869873] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 480.889076] RSP: 002b:00007f3414243c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.896766] RAX: ffffffffffffffda RBX: 00007f34142446d4 RCX: 0000000000455a99 [ 480.904018] RDX: 0000000020013000 RSI: 00000000400445a0 RDI: 0000000000000014 [ 480.911274] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 480.918536] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 480.925786] R13: 00000000004bd1b4 R14: 00000000004cb2b0 R15: 0000000000000000 03:32:08 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00004edfd0)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="076304c89cf022323457ffff2d9f5bbbd6f7c6fadf6f724036e0417e2637112f04ee60fd7469fbff1e0672edae626ed6bfd0ff1394ccd6611adea79c31dfcabd5cf223005c81261ec3022453d19530a48eede5b0484005a5935403f8c6b274cf09b84a28e4f670ee104a29d03b217f16fe4a83f0f3bc0cf4ec74900fb400afb7a1b5d3c1071e3c1f1e272049a2b24de39fb3b02119b2d22722d889271701c519ca"], 0xfffffffffffffff0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00004ee64e)}) r2 = dup3(r0, r1, 0x80000) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x1, 0xfdfd, &(0x7f00000000c0)="ac"}) 03:32:08 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="3700000000000000b9411c6c7a63a29e996a28273286ba"]}) close(r2) close(r2) 03:32:08 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0A\x00', 0xfffffffffffffffd}) 03:32:08 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0xfffffffffffffffe, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xb) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) sendto$inet(r0, &(0x7f0000000000)="f2", 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 03:32:08 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x86ddffff, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:08 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = open(&(0x7f0000000140)='./file0\x00', 0x200000, 0x0) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x244401, 0x141) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000000c0)={0x2000}) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000430007241dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:32:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x34, 0x20000102000007) [ 481.267212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 481.271868] binder: 6619:6620 unknown command -939236601 03:32:08 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:08 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0H\x00', 0xfffffffffffffffd}) 03:32:08 executing program 1: openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x111000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x4, 0x100000001, 0x3}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1, 0x5}, &(0x7f0000000140)=0x8) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) [ 481.314380] binder: 6619:6620 ioctl c0306201 204edfd0 returned -22 [ 481.335993] binder: 6619:6620 ioctl 7709 0 returned -22 [ 481.350654] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 03:32:08 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x88480000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x8030000, 0x20000102000007) 03:32:08 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(cipher_null)\x00'}, 0x6b) r1 = accept4(r0, 0x0, &(0x7f0000000100)=0x17f, 0x0) sendto$packet(r1, &(0x7f0000000000)='d', 0x1, 0x0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x14) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@can, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/250, 0xfa}], 0x1}, 0x0) 03:32:08 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x448541) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) 03:32:08 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 482.072653] binder: BINDER_SET_CONTEXT_MGR already set [ 482.078017] binder: 6619:6674 ioctl 40046207 0 returned -16 [ 482.084618] binder: send failed reply for transaction 64 to 6619:6620 [ 482.089562] binder: 6619:6674 unknown command -939236601 [ 482.097286] binder: 6619:6675 transaction failed 29189/-22, size 0-0 line 2852 [ 482.098107] binder: 6619:6674 ioctl c0306201 204edfd0 returned -22 [ 482.107204] binder: 6619:6675 ioctl 7709 0 returned -22 03:32:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="921ea344"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x7530}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 482.125799] binder: undelivered TRANSACTION_ERROR: 29189 03:32:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1c2, &(0x7f0000000380)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x4, 0x4a, [], 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f0000000100)=""/74}, &(0x7f0000000280)=0x78) r4 = socket(0x10, 0xa, 0x9) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000002c0)={0x7fff, 0x6a, 0xfdf, 0x3}, 0x8) sendfile(r1, r1, &(0x7f0000000040), 0x1) 03:32:09 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\x00\x00\x00`\x00', 0xfffffffffffffffd}) 03:32:09 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[]}, 0x1}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x14) bind(r0, &(0x7f0000000040)=@l2={0x1f, 0x4, {0x4, 0x1, 0x2, 0x301, 0xab, 0x5}, 0x400, 0x100000001}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=@bridge_newneigh={0x24, 0x1c, 0x9, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1=0xe0000001}]}, 0x24}, 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f0000000440)=0xffffff4a) r3 = request_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000003c0)='\x00', 0xfffffffffffffffe) keyctl$get_persistent(0x16, r2, r3) 03:32:09 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006800)={'lo\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010000100d20000000000000006000000", @ANYRES32=r1, @ANYBLOB="000000000000000008001300", @ANYRES32=r2], 0x28}, 0x1}, 0x0) ptrace$setregset(0x4205, r2, 0x4, &(0x7f0000000040)) ioctl(r0, 0x7, &(0x7f0000000100)="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") 03:32:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xd002000000000000, 0x20000102000007) 03:32:09 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x4, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:09 executing program 5: getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000003c0)=ANY=[@ANYBLOB="400000005338e4ab8aace94ba40f05"], &(0x7f0000000340)=0x1) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:32:09 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:09 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00\x00\x00\x00\x00t\x00', 0xfffffffffffffffd}) 03:32:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/158, 0x9e, 0x1, &(0x7f0000000140)={0x2}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000180)=0x2) 03:32:09 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') exit(0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000000)={0x2, r0, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x200) 03:32:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c18000180000000000004000001000000080003009c000000000000"], 0x1c}, 0x1}, 0x0) 03:32:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0xd803000000000000, 0x20000102000007) 03:32:09 executing program 5: 03:32:09 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:09 executing program 3: 03:32:09 executing program 1: 03:32:09 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00@\x00', 0xfffffffffffffffd}) 03:32:09 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0xa00000000000000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x4d00, 0x20000102000007) 03:32:09 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:09 executing program 1: 03:32:09 executing program 5: 03:32:09 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'bridge0\x00\x00\x00`\x00', 0xfffffffffffffffd}) 03:32:09 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 03:32:09 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020d2d010200000083c1400000000008"], 0x10}, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 03:32:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1c2, &(0x7f0000000380)) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x4, 0x4a, [], 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f0000000100)=""/74}, &(0x7f0000000280)=0x78) r4 = socket(0x10, 0xa, 0x9) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000002c0)={0x7fff, 0x6a, 0xfdf, 0x3}, 0x8) sendfile(r1, r1, &(0x7f0000000040), 0x1) 03:32:10 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x59c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:32:10 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:10 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530fe00", 0xfffffffffffffffd}) 03:32:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x8906000000000000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x268, 0x20000102000007) 03:32:10 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:32:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") semctl$IPC_RMID(0xffffffffffffffff, 0x0, 0x0) 03:32:10 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530e600", 0xfffffffffffffffd}) 03:32:10 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:10 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000d4c000)={0x0, 0x0, &(0x7f000089c000)={&(0x7f0000000000)=ANY=[@ANYBLOB="45d0fc150b2000010400000040000000100000000630000002000035f5"], 0x1d}, 0x1}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x10000, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x890b, &(0x7f0000000000)={"62726964676530000200"}) 03:32:10 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x800, 0x0) preadv(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=""/178, 0xb2}, {&(0x7f00000007c0)=""/167, 0xa7}], 0x2, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) 03:32:10 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000600", 0xfffffffffffffffd}) 03:32:10 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x6, 0x8000) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000001c0)=0x2, 0x4) r1 = socket$inet(0x2, 0xb, 0xffffffffffffff8d) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0xffffffffffffffbc, 0x20000000, &(0x7f0000000140)={0x2, 0x1000004e23, @loopback=0x7f000001}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000200)="ffdf22c18da32aa75a1c14dfc9b18e61673995635a4e97227a9e41fa5c276f8fe1db22889911293d", &(0x7f0000000240)="c40bb47c19a4cd20fa072c03276b0e095d73696e20cd4b458be01c4515a26dfa676aae7552e2921b33d3c29024f02dcb76e5e97536ec6ce3429049862762ac281875e7e5f7f1dfba95aaf1856c9bf4b0712d62af5de6bc9e0075a07f68fc56293ff5fb8132bc0e395e7e120873eabb7b34002ab693c8076f7e6081e2f6bd39919b3a03a6ae42c20133741da1e15d284a", 0x2}, 0x20) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080), 0x4) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100000000, 0x8004) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) 03:32:10 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xc29, 0x20000) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000080)) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x64, &(0x7f0000000180), 0x4) close(r3) close(r2) 03:32:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x8847000000000000, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:10 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:10 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1000, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000100)={0x0, 0x0, 0x10}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000900)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000008c0)={0xffffffff}, 0x117, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000940)={0x7, 0x8, 0xfa00, {r2, 0x4}}, 0x10) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000880)=0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000240)={{0x6, 0x3, 0xfffffffffffffffc, 0xffffffffffffff80, 'syz0\x00', 0x6}, 0x0, [0x6, 0x0, 0x9, 0x1, 0x4, 0x818, 0x8a3, 0x8001, 0x0, 0x4, 0x0, 0x6c, 0x7, 0x9, 0xc8, 0xfffffffffffff001, 0x2, 0xe85, 0x1, 0x482, 0x401, 0x9, 0x5fc, 0xfff, 0xae, 0x9, 0x3, 0x9afc, 0x6, 0x0, 0x0, 0x6, 0x3, 0x6, 0x0, 0x80000000, 0x3, 0xfffffffffffffff7, 0x792, 0x10001, 0x2, 0x1ff, 0x9c55, 0xffffffffd2671fd5, 0x7, 0x3ff, 0x2, 0xffffffffffff36da, 0xaa, 0x2, 0x1, 0x6, 0xb0ac, 0x400, 0x8001, 0x7, 0x7, 0x1, 0x5, 0x4, 0x9, 0x9, 0x9, 0x7, 0xbd, 0x1, 0x7, 0x3, 0xfffffffffffffffb, 0x4, 0x1f, 0x7fff, 0x1, 0x1, 0x80000001, 0x5, 0x7, 0x4, 0xdf2b, 0x8, 0x8, 0xffffffff, 0x2, 0x10001, 0x3, 0xffffffff, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x3f, 0x1d1, 0x0, 0x4b1, 0x6, 0x88e, 0x101, 0x5, 0x90, 0x80, 0x2, 0xfff, 0x101, 0xafe8, 0x6, 0xffff, 0x1ff, 0x3, 0x9, 0x1, 0x3, 0x0, 0x3, 0x8000000000000000, 0xfb, 0x4, 0x80, 0x6, 0x7ff, 0x6, 0x1, 0x10001, 0xfffffffffffff000, 0xd7f8, 0x9, 0x5, 0x10001, 0x4], {r3, r4+10000000}}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000780)={r5, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0xe}, 0x6}}, 0x9, 0x400, 0x9, 0x4, 0xffff}, &(0x7f0000000840)=0x98) 03:32:10 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"6272696467653000000000ffffffc300", 0xfffffffffffffffd}) 03:32:10 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1082) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) keyctl$dh_compute(0x17, &(0x7f0000000580), &(0x7f00000005c0)=""/217, 0xd9, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000040), 0x2000005) r3 = gettid() perf_event_open(&(0x7f00000003c0)={0x3, 0x70, 0x0, 0x100000000, 0xfffffffffffffff7, 0x1, 0x0, 0x6, 0x20000, 0x4, 0x3, 0xb6, 0xb3bd, 0xffffffff, 0x8, 0xff, 0x3, 0xb390, 0xffffffffffff8000, 0x4, 0xb, 0x3f, 0x2, 0x100000000, 0x80, 0xb09a, 0x0, 0x1, 0x1, 0x7, 0x1f, 0xff, 0x7, 0x7, 0x5684, 0x5, 0x8, 0x6, 0x0, 0x8, 0x1, @perf_config_ext={0x5, 0x2}, 0x80, 0x9f, 0x3, 0x7, 0x1, 0x80, 0x2}, r3, 0x0, r0, 0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) r4 = dup2(r2, r1) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)="f4ac79befcbb99c8bb4fe0409f1501fadd082fa5ffdcfaf9d58d4a64b1091459ab20d32cef1d5b8e6788a3702de6e7bd06bc12b29274307ecbbf3bcec8f9953ceba987330c4e03a00bdaf08754e61e5d9a68f2da01d1b84b1678b97e108fd90bf8bee92b858539a92a0be08c71b9f9a535212c9d32c17a6ef6e4b3", 0x7b) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2040, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x3, 0x3ff}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r6, 0x7f}, &(0x7f0000000180)=0x8) 03:32:10 executing program 4: r0 = pkey_alloc(0x0, 0x2) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000280)) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000800000, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000040)=0xc2) write$evdev(r2, &(0x7f0000001fdc)=[{}, {{0x0, 0x2710}}], 0x30) ioctl(r2, 0x98c, &(0x7f00000000c0)="7df88f55b6ec26c384f2e071bc69dadc71f67fd7f33961483befeb0ec490cb968368ed28c2c410fc652f728d8984683e") 03:32:10 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:10 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f228ca004566593ae164c990a0028e", 0x7e) r1 = accept$alg(r0, 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000040)=0x5001) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)={0x303, 0x33}, 0x4) write$binfmt_script(r1, &(0x7f0000000c40)=ANY=[], 0x30c) recvmsg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f00000005c0)=""/175, 0xaf}], 0x2, &(0x7f0000000780)=""/4096, 0x1000}, 0x0) 03:32:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f0000000140)="0034872d5b628d2d0d6e", 0x0) pwritev(r1, &(0x7f0000000900)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x81a06) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000000)=0x13, 0x20000102000007) 03:32:10 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, &(0x7f0000000080)=""/188, &(0x7f0000034000)=""/95, &(0x7f0000ce1f30)=""/208}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) sendto(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)=@in6={0xa, 0x11, 0x7, @loopback={0x0, 0x1}}, 0x71) 03:32:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000ffff00000000000000000000000005000900810000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000"], 0x98}, 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) 03:32:11 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530000000000000029600", 0xfffffffffffffffd}) [ 484.202733] QAT: Invalid ioctl 03:32:11 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000052aff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) symlinkat(&(0x7f00000003c0)='./file0/file0\x00', r0, &(0x7f0000000400)='./file0/file0\x00') unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0080}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r1, 0x0, 0x0, 0x0, {0x6}}, 0x14}, 0x1}, 0x0) 03:32:11 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) [ 484.223824] QAT: Invalid ioctl 03:32:11 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r1, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000500)='\x00', 0x1}]) r2 = memfd_create(&(0x7f0000000000)='wlan0user,selinuxself[^cgroup%em0security\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r3, 0x846}}, 0x10) poll(&(0x7f0000000040)=[{r2, 0x4}, {r0, 0x4}, {r0, 0x8001}, {r2, 0x2000}, {r0, 0x40e8}], 0x5, 0xe217) 03:32:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x10400, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000180)={0x5, 0x100, 0xacd}) ioctl(r0, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000240)={0x4, 0x72e}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x48e]}) [ 484.366798] BUG: unable to handle kernel NULL pointer dereference at 0000000000000000 [ 484.374945] PGD 190fe5067 P4D 190fe5067 PUD 1ac615067 PMD 0 [ 484.380816] Oops: 0010 [#1] SMP KASAN [ 484.384624] CPU: 0 PID: 6898 Comm: syz-executor5 Not tainted 4.18.0-rc2+ #121 [ 484.391896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.401275] RIP: 0010: (null) [ 484.405144] Code: Bad RIP value. [ 484.408503] RSP: 0018:ffff8801979b7758 EFLAGS: 00010246 [ 484.413854] RAX: 0000000000000000 RBX: ffff8801d2b1da40 RCX: ffffc90005e44000 [ 484.421107] RDX: ffff8801979b7ab0 RSI: ffff8801d2b1da40 RDI: ffff8801ca738300 [ 484.428359] RBP: ffff8801979b7800 R08: ffff880195d0e000 R09: ffff8801979b72b0 [ 484.435612] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8801979b7ab0 [ 484.442869] R13: ffff8801ca738300 R14: ffffffff8818a920 R15: ffff88019af13280 [ 484.450128] FS: 00007f3414244700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 484.458341] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.464207] CR2: ffffffffffffffd6 CR3: 00000001c482d000 CR4: 00000000001406f0 [ 484.471461] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 484.478717] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 484.485971] Call Trace: [ 484.488547] ? sock_poll+0x2e1/0x490 [ 484.492251] ? kernel_sendpage_locked+0x120/0x120 [ 484.497087] ? kernel_sendpage_locked+0x120/0x120 [ 484.501926] do_sys_poll+0x74d/0x1180 [ 484.505723] ? compat_core_sys_select+0xb10/0xb10 [ 484.510571] ? zap_class+0x740/0x740 [ 484.514268] ? __free_pages+0x149/0x190 [ 484.518225] ? free_unref_page+0x9a0/0x9a0 [ 484.522448] ? trace_hardirqs_on+0xd/0x10 [ 484.526582] ? graph_lock+0x170/0x170 [ 484.530371] ? put_task_stack+0x188/0x2c0 [ 484.534514] ? kasan_check_write+0x14/0x20 [ 484.538734] ? finish_task_switch+0x600/0x890 [ 484.543221] ? find_held_lock+0x36/0x1c0 [ 484.547290] ? pvclock_read_flags+0x160/0x160 [ 484.551773] ? __sched_text_start+0x8/0x8 [ 484.555913] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 484.560923] ? timespec64_add_safe+0x204/0x2f0 [ 484.565500] ? nsec_to_clock_t+0x30/0x30 [ 484.569546] ? do_gettimeofday+0x180/0x180 [ 484.573780] ? poll_select_set_timeout+0x156/0x240 [ 484.578692] ? do_restart_poll+0x2e0/0x2e0 [ 484.582920] __x64_sys_poll+0x197/0x530 [ 484.586885] ? __ia32_sys_pselect6+0x270/0x270 [ 484.591454] ? do_syscall_64+0x9a/0x820 [ 484.595417] do_syscall_64+0x1b9/0x820 [ 484.599298] ? syscall_slow_exit_work+0x500/0x500 [ 484.604321] ? syscall_return_slowpath+0x5e0/0x5e0 [ 484.609236] ? syscall_return_slowpath+0x31d/0x5e0 [ 484.614154] ? retint_user+0x18/0x18 [ 484.617858] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 484.622691] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.627862] RIP: 0033:0x455a99 [ 484.631037] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 484.650307] RSP: 002b:00007f3414243c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 484.658003] RAX: ffffffffffffffda RBX: 00007f34142446d4 RCX: 0000000000455a99 [ 484.665269] RDX: 000000000000e217 RSI: 0000000000000005 RDI: 0000000020000040 [ 484.672520] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 484.679785] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 484.687041] R13: 00000000004c0639 R14: 00000000004cffa8 R15: 0000000000000000 [ 484.694300] Modules linked in: [ 484.697479] Dumping ftrace buffer: [ 484.700999] (ftrace buffer empty) [ 484.704697] CR2: 0000000000000000 [ 484.708262] ---[ end trace c11663ac45b09d27 ]--- [ 484.713034] RIP: 0010: (null) 03:32:11 executing program 7: r0 = socket$inet6(0x10, 0x4000000000000002, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a602c0fffa84302910000003900090035000c00060000001900050000000000000000dc1338d54400009bcdc66ef75afb83de448daa7227c43ab8220000060cec4fab91cf", 0x55}], 0x1, &(0x7f0000001480)}, 0x0) 03:32:11 executing program 6: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={"62726964676530fffffffe00", 0xfffffffffffffffd}) [ 484.716942] Code: Bad RIP value. [ 484.720340] RSP: 0018:ffff8801979b7758 EFLAGS: 00010246 [ 484.725739] RAX: 0000000000000000 RBX: ffff8801d2b1da40 RCX: ffffc90005e44000 [ 484.733036] RDX: ffff8801979b7ab0 RSI: ffff8801d2b1da40 RDI: ffff8801ca738300 [ 484.740379] RBP: ffff8801979b7800 R08: ffff880195d0e000 R09: ffff8801979b72b0 [ 484.747666] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8801979b7ab0 [ 484.754958] R13: ffff8801ca738300 R14: ffffffff8818a920 R15: ffff88019af13280 [ 484.762248] FS: 00007f3414244700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 484.770496] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 484.776401] CR2: ffffffffffffffd6 CR3: 00000001c482d000 CR4: 00000000001406f0 [ 484.783703] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 484.791026] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 484.798315] Kernel panic - not syncing: Fatal exception [ 484.804256] Dumping ftrace buffer: [ 484.807784] (ftrace buffer empty) [ 484.811467] Kernel Offset: disabled [ 484.815072] Rebooting in 86400 seconds..