[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 40.528947] audit: type=1800 audit(1547425539.957:25): pid=7869 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 40.564297] audit: type=1800 audit(1547425539.957:26): pid=7869 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 40.585138] audit: type=1800 audit(1547425539.957:27): pid=7869 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.131' (ECDSA) to the list of known hosts. 2019/01/14 00:25:48 fuzzer started 2019/01/14 00:25:50 dialing manager at 10.128.0.26:36747 2019/01/14 00:25:54 syscalls: 1 2019/01/14 00:25:54 code coverage: enabled 2019/01/14 00:25:54 comparison tracing: enabled 2019/01/14 00:25:54 setuid sandbox: enabled 2019/01/14 00:25:54 namespace sandbox: enabled 2019/01/14 00:25:54 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/14 00:25:54 fault injection: enabled 2019/01/14 00:25:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/14 00:25:54 net packet injection: enabled 2019/01/14 00:25:54 net device setup: enabled 00:27:36 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40585414, &(0x7f00000014c0)) syzkaller login: [ 157.306547] IPVS: ftp: loaded support on port[0] = 21 00:27:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x1, r2, 0x8000000000000003}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x4, 0x0, 0x1, r2, 0xb}) [ 157.473269] chnl_net:caif_netlink_parms(): no params data found [ 157.528820] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.535730] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.543761] device bridge_slave_0 entered promiscuous mode [ 157.552713] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.559643] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.567433] device bridge_slave_1 entered promiscuous mode [ 157.593093] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 157.612986] IPVS: ftp: loaded support on port[0] = 21 [ 157.620615] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 157.660780] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 157.669401] team0: Port device team_slave_0 added [ 157.689676] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 157.697248] team0: Port device team_slave_1 added 00:27:37 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @loopback={0x1a0ffffffff}}, 0x80, 0x0}}], 0x2, 0x0) [ 157.705371] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 157.715652] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 157.790162] device hsr_slave_0 entered promiscuous mode [ 157.827123] device hsr_slave_1 entered promiscuous mode [ 157.844800] IPVS: ftp: loaded support on port[0] = 21 [ 157.866725] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 157.873832] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 157.957692] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.964175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.971220] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.977727] bridge0: port 1(bridge_slave_0) entered forwarding state 00:27:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 158.041726] chnl_net:caif_netlink_parms(): no params data found [ 158.267573] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 158.273680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.294294] chnl_net:caif_netlink_parms(): no params data found [ 158.318799] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.325163] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.332962] IPVS: ftp: loaded support on port[0] = 21 [ 158.339409] device bridge_slave_0 entered promiscuous mode [ 158.352477] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.360397] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.368213] device bridge_slave_1 entered promiscuous mode 00:27:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 158.402236] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 158.444341] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.518691] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.535993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.568098] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.588560] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.606795] IPVS: ftp: loaded support on port[0] = 21 [ 158.616639] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 158.629067] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.635431] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.643622] device bridge_slave_0 entered promiscuous mode [ 158.681339] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 158.689566] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.695747] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.702953] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.710828] device bridge_slave_1 entered promiscuous mode [ 158.741123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 158.761959] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 158.770243] team0: Port device team_slave_0 added [ 158.779627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 00:27:38 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") socketpair(0xf, 0x4, 0x8001, &(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket$inet6(0xa, 0x2001000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) unshare(0x40000000) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) [ 158.789557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.806329] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.812763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.833346] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 158.841951] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 158.853339] team0: Port device team_slave_1 added [ 158.865544] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 158.877666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.885604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.893429] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.899842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.909750] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 158.921616] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 158.929752] IPVS: ftp: loaded support on port[0] = 21 [ 158.935335] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 158.946132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.961171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 158.970075] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 158.999202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 159.069372] device hsr_slave_0 entered promiscuous mode [ 159.106297] device hsr_slave_1 entered promiscuous mode [ 159.175417] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 159.186361] team0: Port device team_slave_0 added [ 159.191676] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 159.199001] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 159.217263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 159.225483] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 159.232879] team0: Port device team_slave_1 added [ 159.242056] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.259668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 159.267762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 159.275310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 159.284713] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 159.298608] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.309178] chnl_net:caif_netlink_parms(): no params data found [ 159.327163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 159.334852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 159.345386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 159.385416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.395790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.405378] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.449142] device hsr_slave_0 entered promiscuous mode [ 159.486240] device hsr_slave_1 entered promiscuous mode [ 159.529483] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 159.569894] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 159.601350] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 159.614888] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.623138] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.630482] device bridge_slave_0 entered promiscuous mode [ 159.647164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.654836] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.667764] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 159.673826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.682033] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.689797] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.697381] device bridge_slave_1 entered promiscuous mode [ 159.759315] chnl_net:caif_netlink_parms(): no params data found [ 159.777600] chnl_net:caif_netlink_parms(): no params data found [ 159.805029] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 159.817504] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 159.858098] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 159.873519] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 159.881614] team0: Port device team_slave_0 added [ 159.887788] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 159.895162] team0: Port device team_slave_1 added [ 159.919404] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.925812] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.933229] device bridge_slave_0 entered promiscuous mode [ 159.940122] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.947438] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.954369] device bridge_slave_1 entered promiscuous mode [ 159.968977] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 159.978139] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 159.984700] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 159.999460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.089165] device hsr_slave_0 entered promiscuous mode [ 160.126256] device hsr_slave_1 entered promiscuous mode [ 160.175240] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 160.182750] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.189353] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.200272] device bridge_slave_0 entered promiscuous mode [ 160.207234] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.213599] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.221255] device bridge_slave_1 entered promiscuous mode [ 160.239092] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 160.251676] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.259740] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 160.282067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.328288] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.345671] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 160.363434] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 160.373314] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.379707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.391727] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 160.399154] team0: Port device team_slave_0 added [ 160.404671] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 160.412318] team0: Port device team_slave_1 added [ 160.422391] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 00:27:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 160.484631] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 160.529611] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.542294] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 160.553204] team0: Port device team_slave_0 added [ 160.565677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.619586] device hsr_slave_0 entered promiscuous mode [ 160.676244] device hsr_slave_1 entered promiscuous mode [ 160.717868] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.731339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.738426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.748353] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 160.754432] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.762344] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 160.769868] team0: Port device team_slave_1 added [ 160.778057] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 160.788008] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 160.795025] hrtimer: interrupt took 35003 ns [ 160.885010] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 160.893367] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 160.903425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 160.911610] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 160.918888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.925818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.933527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 160.941974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 160.949791] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.956202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.963394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 00:27:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 161.001522] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 161.043886] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 161.055500] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 161.079186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.090974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.099575] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.105975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.114396] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 161.121335] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.131985] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 161.188363] device hsr_slave_0 entered promiscuous mode [ 161.226489] device hsr_slave_1 entered promiscuous mode [ 161.287560] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 161.407836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.432328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.442353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 161.465093] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.475150] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 161.490389] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 161.501345] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 00:27:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 161.515128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.535590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.543879] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.550296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.557486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.565206] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.572205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.579965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.589654] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 161.608751] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 161.614857] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.718115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.736211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.743896] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.750299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.759781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 00:27:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 161.774089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.784351] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 161.794328] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 161.809066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.818791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.827516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.835173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.849556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.861364] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.867761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.876920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 161.885404] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 161.895464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 161.906653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.026837] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.046973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.054959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.063063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.071052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.079539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.102532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.120617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.140945] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.147361] bridge0: port 2(bridge_slave_1) entered forwarding state 00:27:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaf, &(0x7f00000001c0)) [ 162.171662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.190384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 162.204024] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 162.211097] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.219167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 00:27:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaf, &(0x7f00000001c0)) [ 162.227317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.235725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.243749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.253871] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 00:27:41 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaf, &(0x7f00000001c0)) [ 162.293945] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.306090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.313710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.324461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.332688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.343518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 162.353079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.363723] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 162.369841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.385641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.400811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.409806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.417898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.431041] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 162.443931] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 162.452037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.459653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.468012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.475359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.483453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.493367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 162.507322] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 162.517693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 162.528467] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 162.537506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.545043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.552796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.561015] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.568579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.576247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.583626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 162.590877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.598963] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 162.606056] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 162.612064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.626094] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 162.632118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.641529] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 162.651337] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.662932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.691693] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 162.702874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.714617] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.730970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.744632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.752389] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.758800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.766497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.774870] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 162.787151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.794277] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 162.814882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.848326] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 162.851550] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 162.864812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 162.884375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.892527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.914068] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.920489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.934685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 00:27:42 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x80800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x4000000000000003, 0x100000000098f905, 0xfffffffffffffffb}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @ctrl={0x0, 0x0, @value64}}) [ 162.962553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.976349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.000226] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 163.020059] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.031909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 163.049157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.069691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.086820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 163.110304] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 00:27:42 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @loopback={0x1a0ffffffff}}, 0x80, 0x0}}], 0x2, 0x0) [ 163.122594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.132435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.145566] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.152221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.167280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.175187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.189083] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.195518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.204207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 163.219030] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 163.241115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.256193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.264166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.284882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.293668] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.303393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 163.322843] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:27:42 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000001c0)="1b0000004a001f0fff074311b54edc4cf4f9002304000a04f51108", 0x1b) [ 163.352391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 163.361642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.373611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.383104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.394841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 163.422635] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 163.432954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.441638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.449444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.457749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.468583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 163.476040] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.496314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.503923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.514890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 163.523597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.533233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.542503] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 163.549712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.573195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 163.580603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.591111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.600995] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 163.608938] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 163.615678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.623738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.635170] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 163.641944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.655436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.673319] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 163.694618] 8021q: adding VLAN 0 to HW filter on device batadv0 00:27:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffaf, &(0x7f00000001c0)) [ 163.829301] IPVS: ftp: loaded support on port[0] = 21 [ 163.902563] IPVS: ftp: loaded support on port[0] = 21 00:27:43 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") socketpair(0xf, 0x4, 0x8001, &(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket$inet6(0xa, 0x2001000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) unshare(0x40000000) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) 00:27:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000), &(0x7f0000000080)=0x4) 00:27:43 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x80800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x4000000000000003, 0x100000000098f905, 0xfffffffffffffffb}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @ctrl={0x0, 0x0, @value64}}) 00:27:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000001c0)="1b0000004a001f0fff074311b54edc4cf4f9002304000a04f51108", 0x1b) 00:27:43 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @loopback={0x1a0ffffffff}}, 0x80, 0x0}}], 0x2, 0x0) 00:27:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x7f, &(0x7f0000000000)="00210300", 0x4) 00:27:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 163.995989] protocol 88fb is buggy, dev hsr_slave_0 [ 164.001216] protocol 88fb is buggy, dev hsr_slave_1 00:27:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000001c0)="1b0000004a001f0fff074311b54edc4cf4f9002304000a04f51108", 0x1b) [ 164.069942] IPVS: ftp: loaded support on port[0] = 21 00:27:43 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x80800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x4000000000000003, 0x100000000098f905, 0xfffffffffffffffb}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @ctrl={0x0, 0x0, @value64}}) 00:27:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x7f, &(0x7f0000000000)="00210300", 0x4) 00:27:43 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x80, 0x0}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @loopback={0x1a0ffffffff}}, 0x80, 0x0}}], 0x2, 0x0) 00:27:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000), &(0x7f0000000080)=0x4) 00:27:43 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") socketpair(0xf, 0x4, 0x8001, &(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket$inet6(0xa, 0x2001000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) unshare(0x40000000) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) 00:27:43 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000001c0)="1b0000004a001f0fff074311b54edc4cf4f9002304000a04f51108", 0x1b) 00:27:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x7f, &(0x7f0000000000)="00210300", 0x4) 00:27:43 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x80800) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x4000000000000003, 0x100000000098f905, 0xfffffffffffffffb}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000140)={0x0, @ctrl={0x0, 0x0, @value64}}) 00:27:43 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") socketpair(0xf, 0x4, 0x8001, &(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket$inet6(0xa, 0x2001000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) unshare(0x40000000) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) 00:27:43 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") socketpair(0xf, 0x4, 0x8001, &(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket$inet6(0xa, 0x2001000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) unshare(0x40000000) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) 00:27:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 164.563628] IPVS: ftp: loaded support on port[0] = 21 [ 164.564694] IPVS: ftp: loaded support on port[0] = 21 00:27:44 executing program 0: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x7f, &(0x7f0000000000)="00210300", 0x4) 00:27:44 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x1000000, 0x1103, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x6]}}) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000300)={@local, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) r2 = gettid() getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x6, 0x2}, &(0x7f0000000400)=0x8) getpgrp(r2) getpgid(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) set_mempolicy(0x3, &(0x7f0000000000)=0x401, 0xfe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000480)={0x1, 0x0, 'client1\x00', 0x1, "51551e9699b145ea", "c485f22a19a70fab5c75ea9dd69b956a9ff185860900000000e200", 0x9, 0x7}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000001, 0x14000) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x200007fa, 0x0, 0x0) [ 164.694066] IPVS: ftp: loaded support on port[0] = 21 00:27:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0x0, @mcast2}, r1}}, 0x48) 00:27:44 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) syncfs(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x408) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000007c0), 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r2) syncfs(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) fcntl$notify(r1, 0x402, 0x23) recvmmsg(r5, &(0x7f0000000740)=[{{&(0x7f00000000c0)=@pppol2tpv3in6, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/168, 0xa8}, {&(0x7f0000000200)=""/49, 0x31}, {&(0x7f0000000240)=""/211, 0xd3}], 0x3, &(0x7f0000000500)=""/239, 0xef, 0x3}, 0x4}, {{&(0x7f0000001700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001900)=""/194, 0xc2, 0x3}, 0x7f}, {{&(0x7f0000001a00)=@hci, 0x80, &(0x7f0000001bc0)=[{0x0}], 0x1, &(0x7f0000001c00)=""/4096, 0x1000}, 0x1000}], 0x3, 0x20, &(0x7f0000002c80)={0x77359400}) symlinkat(&(0x7f0000002d00)='./file0\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl(r6, 0x10000, 0x0) ioctl(r6, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xfffffffffffffffe) mmap(&(0x7f0000050000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0186404, 0x0) 00:27:44 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0x0, @mcast2}, r1}}, 0x48) [ 164.997488] *** Guest State *** [ 165.018492] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 165.046167] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 165.104999] CR3 = 0x0000000000000000 [ 165.115213] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 165.167833] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 165.186668] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 165.204436] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 165.213143] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 165.229262] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 165.240930] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 165.252455] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 165.262718] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 165.273099] GDTR: limit=0x00000000, base=0x0000000000000000 [ 165.283092] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 165.293195] IDTR: limit=0x00000000, base=0x0000000000000000 [ 165.302128] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 165.314014] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 165.323909] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 165.334634] Interruptibility = 00000008 ActivityState = 00000000 [ 165.344096] *** Host State *** [ 165.350322] RIP = 0xffffffff811f9920 RSP = 0xffff88805eb87720 [ 165.356441] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 165.356456] FSBase=0000000000000000 GSBase=ffff8880ae600000 TRBase=fffffe0000033000 [ 165.356467] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 165.356482] CR0=0000000080050033 CR3=00000000916a7000 CR4=00000000001426f0 [ 165.373800] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 [ 165.391523] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 165.402131] *** Control State *** [ 165.405596] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 165.412341] EntryControls=0000d1ff ExitControls=002fefff [ 165.417865] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 165.424802] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 165.431520] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 165.438148] reason=80000021 qualification=0000000000000000 [ 165.438157] IDTVectoring: info=00000000 errcode=00000000 [ 165.438164] TSC Offset = 0xffffffa56b9e5605 [ 165.438174] EPT pointer = 0x000000008eb5c01e [ 165.565673] *** Guest State *** [ 165.577199] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 00:27:45 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") socketpair(0xf, 0x4, 0x8001, &(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket$inet6(0xa, 0x2001000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) unshare(0x40000000) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) 00:27:45 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0x2, 0x0, 0x0, @mcast2}, r1}}, 0x48) 00:27:45 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") socketpair(0xf, 0x4, 0x8001, &(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket$inet6(0xa, 0x2001000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) unshare(0x40000000) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) 00:27:45 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") socketpair(0xf, 0x4, 0x8001, &(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket$inet6(0xa, 0x2001000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) unshare(0x40000000) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) 00:27:45 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x1000000, 0x1103, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x6]}}) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000300)={@local, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) r2 = gettid() getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x6, 0x2}, &(0x7f0000000400)=0x8) getpgrp(r2) getpgid(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) set_mempolicy(0x3, &(0x7f0000000000)=0x401, 0xfe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000480)={0x1, 0x0, 'client1\x00', 0x1, "51551e9699b145ea", "c485f22a19a70fab5c75ea9dd69b956a9ff185860900000000e200", 0x9, 0x7}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000001, 0x14000) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x200007fa, 0x0, 0x0) [ 165.654522] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 165.728722] IPVS: ftp: loaded support on port[0] = 21 [ 165.732424] IPVS: ftp: loaded support on port[0] = 21 [ 165.752107] CR3 = 0x0000000000000000 00:27:45 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x1000000, 0x1103, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x6]}}) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000300)={@local, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) r2 = gettid() getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x6, 0x2}, &(0x7f0000000400)=0x8) getpgrp(r2) getpgid(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) set_mempolicy(0x3, &(0x7f0000000000)=0x401, 0xfe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000480)={0x1, 0x0, 'client1\x00', 0x1, "51551e9699b145ea", "c485f22a19a70fab5c75ea9dd69b956a9ff185860900000000e200", 0x9, 0x7}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000001, 0x14000) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x200007fa, 0x0, 0x0) [ 165.786063] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 165.795656] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 165.822179] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 165.845796] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 165.861512] IPVS: ftp: loaded support on port[0] = 21 [ 165.871432] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 165.894010] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 165.907461] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 165.915645] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 165.923932] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 165.932729] GDTR: limit=0x00000000, base=0x0000000000000000 [ 165.943547] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 165.952662] IDTR: limit=0x00000000, base=0x0000000000000000 [ 165.960989] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 165.969230] EFER = 0x0000000000006500 PAT = 0x0007040600070406 [ 165.969249] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 165.983441] Interruptibility = 00000008 ActivityState = 00000000 [ 165.990841] *** Host State *** [ 165.994302] RIP = 0xffffffff811f9920 RSP = 0xffff88805dc1f720 [ 166.031361] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 166.044348] FSBase=0000000000000000 GSBase=ffff8880ae600000 TRBase=fffffe0000003000 [ 166.070690] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 166.079875] CR0=0000000080050033 CR3=00000000916a7000 CR4=00000000001426f0 [ 166.114037] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 166.144663] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 166.174889] *** Control State *** [ 166.181817] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 166.188874] EntryControls=0000d3ff ExitControls=002fefff [ 166.194604] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 166.201977] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 166.209071] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 166.216070] reason=80000021 qualification=0000000000000000 [ 166.222741] IDTVectoring: info=00000000 errcode=00000000 [ 166.228644] TSC Offset = 0xffffffa56b9e5605 [ 166.233271] EPT pointer = 0x000000008eb5c01e 00:27:45 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) syncfs(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x408) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000007c0), 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r2) syncfs(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) fcntl$notify(r1, 0x402, 0x23) recvmmsg(r5, &(0x7f0000000740)=[{{&(0x7f00000000c0)=@pppol2tpv3in6, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/168, 0xa8}, {&(0x7f0000000200)=""/49, 0x31}, {&(0x7f0000000240)=""/211, 0xd3}], 0x3, &(0x7f0000000500)=""/239, 0xef, 0x3}, 0x4}, {{&(0x7f0000001700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001900)=""/194, 0xc2, 0x3}, 0x7f}, {{&(0x7f0000001a00)=@hci, 0x80, &(0x7f0000001bc0)=[{0x0}], 0x1, &(0x7f0000001c00)=""/4096, 0x1000}, 0x1000}], 0x3, 0x20, &(0x7f0000002c80)={0x77359400}) symlinkat(&(0x7f0000002d00)='./file0\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl(r6, 0x10000, 0x0) ioctl(r6, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xfffffffffffffffe) mmap(&(0x7f0000050000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0186404, 0x0) 00:27:45 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x1000000, 0x1103, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x6]}}) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000300)={@local, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) r2 = gettid() getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x6, 0x2}, &(0x7f0000000400)=0x8) getpgrp(r2) getpgid(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) set_mempolicy(0x3, &(0x7f0000000000)=0x401, 0xfe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000480)={0x1, 0x0, 'client1\x00', 0x1, "51551e9699b145ea", "c485f22a19a70fab5c75ea9dd69b956a9ff185860900000000e200", 0x9, 0x7}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000001, 0x14000) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x200007fa, 0x0, 0x0) 00:27:45 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") socketpair(0xf, 0x4, 0x8001, &(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket$inet6(0xa, 0x2001000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) unshare(0x40000000) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) 00:27:46 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x1000000, 0x1103, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x6]}}) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000300)={@local, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) r2 = gettid() getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x6, 0x2}, &(0x7f0000000400)=0x8) getpgrp(r2) getpgid(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) set_mempolicy(0x3, &(0x7f0000000000)=0x401, 0xfe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000480)={0x1, 0x0, 'client1\x00', 0x1, "51551e9699b145ea", "c485f22a19a70fab5c75ea9dd69b956a9ff185860900000000e200", 0x9, 0x7}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000001, 0x14000) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x200007fa, 0x0, 0x0) [ 166.692884] *** Guest State *** [ 166.711679] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 166.721444] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 166.732016] CR3 = 0x0000000000000000 [ 166.743762] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 166.755052] IPVS: ftp: loaded support on port[0] = 21 [ 166.760585] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 166.796855] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 00:27:46 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 00:27:46 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") socketpair(0xf, 0x4, 0x8001, &(0x7f0000000100)={0xffffffffffffffff}) openat$cgroup_ro(r1, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r4 = socket$inet6(0xa, 0x2001000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0x1, 0x4) unshare(0x40000000) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x8001]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) [ 166.845101] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 166.856321] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 166.934028] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 166.956457] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 166.996760] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 167.014201] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 00:27:46 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 167.043208] GDTR: limit=0x00000000, base=0x0000000000000000 [ 167.063969] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 00:27:46 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x1000000, 0x1103, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x6]}}) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000300)={@local, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) r2 = gettid() getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x6, 0x2}, &(0x7f0000000400)=0x8) getpgrp(r2) getpgid(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) set_mempolicy(0x3, &(0x7f0000000000)=0x401, 0xfe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000480)={0x1, 0x0, 'client1\x00', 0x1, "51551e9699b145ea", "c485f22a19a70fab5c75ea9dd69b956a9ff185860900000000e200", 0x9, 0x7}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000001, 0x14000) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x200007fa, 0x0, 0x0) [ 167.127950] IPVS: ftp: loaded support on port[0] = 21 [ 167.130594] IDTR: limit=0x00000000, base=0x0000000000000000 [ 167.161629] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 00:27:46 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 167.173861] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 167.216942] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 167.224643] Interruptibility = 00000008 ActivityState = 00000000 [ 167.292063] *** Host State *** [ 167.304130] RIP = 0xffffffff811f9920 RSP = 0xffff88805d5af720 [ 167.330697] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 00:27:46 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8003, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8001, &(0x7f00000000c0)={0xfffffffffffff1d8}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x1000000, 0x1103, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x6]}}) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000300)={@local, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) r2 = gettid() getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x6, 0x2}, &(0x7f0000000400)=0x8) getpgrp(r2) getpgid(r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) set_mempolicy(0x3, &(0x7f0000000000)=0x401, 0xfe) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000480)={0x1, 0x0, 'client1\x00', 0x1, "51551e9699b145ea", "c485f22a19a70fab5c75ea9dd69b956a9ff185860900000000e200", 0x9, 0x7}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000580)) socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000001, 0x14000) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x200007fa, 0x0, 0x0) 00:27:46 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0xf, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 167.401110] FSBase=0000000000000000 GSBase=ffff8880ae600000 TRBase=fffffe0000033000 [ 167.456488] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 167.462562] CR0=0000000080050033 CR3=000000009109f000 CR4=00000000001426f0 [ 167.494930] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 [ 167.511367] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 167.517992] *** Control State *** [ 167.518003] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 167.518011] EntryControls=0000d1ff ExitControls=002fefff [ 167.518025] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 167.518034] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 167.518043] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 167.518051] reason=80000021 qualification=0000000000000000 [ 167.518059] IDTVectoring: info=00000000 errcode=00000000 [ 167.518065] TSC Offset = 0xffffffa49585d7f2 [ 167.518074] EPT pointer = 0x00000000a7aa801e 00:27:47 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) syncfs(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x408) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000007c0), 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r2) syncfs(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) fcntl$notify(r1, 0x402, 0x23) recvmmsg(r5, &(0x7f0000000740)=[{{&(0x7f00000000c0)=@pppol2tpv3in6, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/168, 0xa8}, {&(0x7f0000000200)=""/49, 0x31}, {&(0x7f0000000240)=""/211, 0xd3}], 0x3, &(0x7f0000000500)=""/239, 0xef, 0x3}, 0x4}, {{&(0x7f0000001700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001900)=""/194, 0xc2, 0x3}, 0x7f}, {{&(0x7f0000001a00)=@hci, 0x80, &(0x7f0000001bc0)=[{0x0}], 0x1, &(0x7f0000001c00)=""/4096, 0x1000}, 0x1000}], 0x3, 0x20, &(0x7f0000002c80)={0x77359400}) symlinkat(&(0x7f0000002d00)='./file0\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl(r6, 0x10000, 0x0) ioctl(r6, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xfffffffffffffffe) mmap(&(0x7f0000050000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0186404, 0x0) 00:27:47 executing program 4: socketpair$unix(0x1, 0x4000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:27:47 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x7010000) 00:27:47 executing program 4: socketpair$unix(0x1, 0x4000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:27:47 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x1004e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x2000141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) [ 167.987939] *** Guest State *** [ 168.025016] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 168.047739] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.076324] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 168.095050] CR3 = 0x0000000000000000 [ 168.106819] RSP = 0x0000000000000000 RIP = 0x0000000000008000 00:27:47 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x7010000) [ 168.153180] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 168.202907] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 00:27:47 executing program 4: socketpair$unix(0x1, 0x4000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:27:47 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x800000000000, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f00000009c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac<\xa0\x02\xeb\x12\tu\\\xb2\x0f.\x05VT\xad\xe3\xd5\xb2\xbf\x1d\xe1p^3\b\xb1\x83O\x00\x91\xe5\x9e\x1b\xc4\xb9g_\xa2\xe4\xbexz\x8a\xa2\xb3\x06\x03\x1e\xbaXvEN\x1d\x06R(\x94zUy\x12\xac\x02t\xe6\xc651,\xdb\x9b\xb1d\xd6\xea\xc8u\xf7\xb9\x1c\x10\xf4\xf4\xad\x1eS1\x0eS\xd1Wu]\xb7\xe7\v%\xe4\x13`\xd3\xd2~\xa1\xeb,\xde\xa5-\xb4\xcfMy\xb7\xfc\x1f\x90]\x1d\xb2\xbe\x90\xdd\xf4p\xd4s\f\xc8\xb5\x1a\xf8\x04\xc7\xb6*\xcais\x8cs\xb3@\x8b\xd2\xc25\xce4\x8cy\x89\xc2\x943\xfa\n\xc2^\xe6\xe6}\x9e\\\xee\xbc\x9d\xd4\x9f\xeam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[], 0xfffffffffffffdfd) close(r4) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x168}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) clock_gettime(0x3, &(0x7f0000000380)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r10, r11/1000+30000}, {0x77359400}}) listen(r9, 0xffffffffffffff00) munlockall() [ 168.293183] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 168.376226] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 168.405452] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 00:27:47 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x7010000) 00:27:47 executing program 4: socketpair$unix(0x1, 0x4000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, 0x0}, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) [ 168.444932] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 00:27:48 executing program 1: r0 = socket$packet(0x11, 0x400000000000002, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pipe2(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue0\x00', 0x9}) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000002) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) [ 168.500997] bridge0: port 3(gretap0) entered blocking state [ 168.537577] bridge0: port 3(gretap0) entered disabled state [ 168.539080] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 168.633493] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 168.689583] device gretap0 entered promiscuous mode [ 168.707080] GDTR: limit=0x00000000, base=0x0000000000000000 [ 168.733265] bridge0: port 3(gretap0) entered blocking state 00:27:48 executing program 4: unshare(0x400) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) [ 168.739552] bridge0: port 3(gretap0) entered forwarding state [ 168.822306] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 168.875470] IDTR: limit=0x00000000, base=0x0000000000000000 [ 168.916611] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 168.924678] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 169.008418] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 169.058635] Interruptibility = 00000008 ActivityState = 00000000 [ 169.059188] protocol 88fb is buggy, dev hsr_slave_0 [ 169.070017] protocol 88fb is buggy, dev hsr_slave_1 [ 169.092148] *** Host State *** [ 169.116004] RIP = 0xffffffff811f9920 RSP = 0xffff88805ef1f720 [ 169.122009] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 169.151455] FSBase=0000000000000000 GSBase=ffff8880ae600000 TRBase=fffffe0000003000 [ 169.160702] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 169.167037] CR0=0000000080050033 CR3=000000008fd51000 CR4=00000000001426f0 [ 169.174228] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff88001360 [ 169.181338] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 169.187646] *** Control State *** [ 169.191186] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 169.205001] EntryControls=0000d1ff ExitControls=002fefff [ 169.210856] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 169.219434] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 169.226478] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 169.233158] reason=80000021 qualification=0000000000000000 [ 169.239867] IDTVectoring: info=00000000 errcode=00000000 [ 169.245441] TSC Offset = 0xffffffa3e67edb94 [ 169.252410] EPT pointer = 0x0000000096bae01e 00:27:48 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) syncfs(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640)='/dev/kvm\x00', 0x40200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) ioctl$KVM_SMI(r3, 0xaeb7) r5 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x0, 0x408) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000007c0), 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r2) syncfs(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) fcntl$notify(r1, 0x402, 0x23) recvmmsg(r5, &(0x7f0000000740)=[{{&(0x7f00000000c0)=@pppol2tpv3in6, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/168, 0xa8}, {&(0x7f0000000200)=""/49, 0x31}, {&(0x7f0000000240)=""/211, 0xd3}], 0x3, &(0x7f0000000500)=""/239, 0xef, 0x3}, 0x4}, {{&(0x7f0000001700)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001900)=""/194, 0xc2, 0x3}, 0x7f}, {{&(0x7f0000001a00)=@hci, 0x80, &(0x7f0000001bc0)=[{0x0}], 0x1, &(0x7f0000001c00)=""/4096, 0x1000}, 0x1000}], 0x3, 0x20, &(0x7f0000002c80)={0x77359400}) symlinkat(&(0x7f0000002d00)='./file0\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl(r6, 0x10000, 0x0) ioctl(r6, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xfffffffffffffffe) mmap(&(0x7f0000050000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0186404, 0x0) 00:27:48 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x7010000) 00:27:48 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x1004e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x2000141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 00:27:48 executing program 4: unshare(0x400) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 00:27:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x800000000000, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f00000009c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac<\xa0\x02\xeb\x12\tu\\\xb2\x0f.\x05VT\xad\xe3\xd5\xb2\xbf\x1d\xe1p^3\b\xb1\x83O\x00\x91\xe5\x9e\x1b\xc4\xb9g_\xa2\xe4\xbexz\x8a\xa2\xb3\x06\x03\x1e\xbaXvEN\x1d\x06R(\x94zUy\x12\xac\x02t\xe6\xc651,\xdb\x9b\xb1d\xd6\xea\xc8u\xf7\xb9\x1c\x10\xf4\xf4\xad\x1eS1\x0eS\xd1Wu]\xb7\xe7\v%\xe4\x13`\xd3\xd2~\xa1\xeb,\xde\xa5-\xb4\xcfMy\xb7\xfc\x1f\x90]\x1d\xb2\xbe\x90\xdd\xf4p\xd4s\f\xc8\xb5\x1a\xf8\x04\xc7\xb6*\xcais\x8cs\xb3@\x8b\xd2\xc25\xce4\x8cy\x89\xc2\x943\xfa\n\xc2^\xe6\xe6}\x9e\\\xee\xbc\x9d\xd4\x9f\xeam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[], 0xfffffffffffffdfd) close(r4) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x168}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) clock_gettime(0x3, &(0x7f0000000380)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r10, r11/1000+30000}, {0x77359400}}) listen(r9, 0xffffffffffffff00) munlockall() 00:27:48 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x800000000000, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f00000009c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac<\xa0\x02\xeb\x12\tu\\\xb2\x0f.\x05VT\xad\xe3\xd5\xb2\xbf\x1d\xe1p^3\b\xb1\x83O\x00\x91\xe5\x9e\x1b\xc4\xb9g_\xa2\xe4\xbexz\x8a\xa2\xb3\x06\x03\x1e\xbaXvEN\x1d\x06R(\x94zUy\x12\xac\x02t\xe6\xc651,\xdb\x9b\xb1d\xd6\xea\xc8u\xf7\xb9\x1c\x10\xf4\xf4\xad\x1eS1\x0eS\xd1Wu]\xb7\xe7\v%\xe4\x13`\xd3\xd2~\xa1\xeb,\xde\xa5-\xb4\xcfMy\xb7\xfc\x1f\x90]\x1d\xb2\xbe\x90\xdd\xf4p\xd4s\f\xc8\xb5\x1a\xf8\x04\xc7\xb6*\xcais\x8cs\xb3@\x8b\xd2\xc25\xce4\x8cy\x89\xc2\x943\xfa\n\xc2^\xe6\xe6}\x9e\\\xee\xbc\x9d\xd4\x9f\xeam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[], 0xfffffffffffffdfd) close(r4) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x168}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) clock_gettime(0x3, &(0x7f0000000380)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r10, r11/1000+30000}, {0x77359400}}) listen(r9, 0xffffffffffffff00) munlockall() 00:27:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) gettid() 00:27:48 executing program 4: unshare(0x400) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 00:27:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) gettid() 00:27:49 executing program 4: unshare(0x400) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) [ 169.578441] bridge0: port 3(gretap0) entered blocking state [ 169.584533] bridge0: port 3(gretap0) entered disabled state 00:27:49 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x800000000000, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f00000009c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac<\xa0\x02\xeb\x12\tu\\\xb2\x0f.\x05VT\xad\xe3\xd5\xb2\xbf\x1d\xe1p^3\b\xb1\x83O\x00\x91\xe5\x9e\x1b\xc4\xb9g_\xa2\xe4\xbexz\x8a\xa2\xb3\x06\x03\x1e\xbaXvEN\x1d\x06R(\x94zUy\x12\xac\x02t\xe6\xc651,\xdb\x9b\xb1d\xd6\xea\xc8u\xf7\xb9\x1c\x10\xf4\xf4\xad\x1eS1\x0eS\xd1Wu]\xb7\xe7\v%\xe4\x13`\xd3\xd2~\xa1\xeb,\xde\xa5-\xb4\xcfMy\xb7\xfc\x1f\x90]\x1d\xb2\xbe\x90\xdd\xf4p\xd4s\f\xc8\xb5\x1a\xf8\x04\xc7\xb6*\xcais\x8cs\xb3@\x8b\xd2\xc25\xce4\x8cy\x89\xc2\x943\xfa\n\xc2^\xe6\xe6}\x9e\\\xee\xbc\x9d\xd4\x9f\xeam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[], 0xfffffffffffffdfd) close(r4) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x168}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) clock_gettime(0x3, &(0x7f0000000380)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r10, r11/1000+30000}, {0x77359400}}) listen(r9, 0xffffffffffffff00) munlockall() [ 169.781478] device gretap0 entered promiscuous mode 00:27:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) gettid() [ 169.811171] *** Guest State *** [ 169.827148] CR0: actual=0x0000000000050032, shadow=0x0000000000050012, gh_mask=fffffffffffffff7 [ 169.840025] bridge0: port 3(gretap0) entered blocking state [ 169.846483] bridge0: port 3(gretap0) entered forwarding state [ 169.908220] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 169.957668] CR3 = 0x0000000000000000 [ 169.970421] RSP = 0x0000000000000000 RIP = 0x0000000000008000 [ 169.988387] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 170.006664] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 170.015835] CS: sel=0x3000, attr=0x08093, limit=0xffffffff, base=0x0000000000030000 [ 170.038684] DS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 170.074073] SS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 170.126733] ES: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 170.140512] FS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 170.160104] GS: sel=0x0000, attr=0x08093, limit=0xffffffff, base=0x0000000000000000 [ 170.186975] GDTR: limit=0x00000000, base=0x0000000000000000 [ 170.206149] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 170.215967] IDTR: limit=0x00000000, base=0x0000000000000000 [ 170.224059] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 170.239114] EFER = 0x0000000000006000 PAT = 0x0007040600070406 [ 170.245619] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 170.260306] Interruptibility = 00000008 ActivityState = 00000000 [ 170.268873] *** Host State *** [ 170.272179] RIP = 0xffffffff811f9920 RSP = 0xffff88805cfe7720 [ 170.282954] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 170.290729] FSBase=0000000000000000 GSBase=ffff8880ae700000 TRBase=fffffe0000003000 [ 170.298713] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 170.304784] CR0=0000000080050033 CR3=000000008ec0c000 CR4=00000000001426e0 [ 170.313358] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff88001360 [ 170.321500] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 170.327835] *** Control State *** [ 170.331288] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 170.339571] EntryControls=0000d1ff ExitControls=002fefff [ 170.345109] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 170.355951] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 170.362624] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 170.369292] reason=80000021 qualification=0000000000000000 [ 170.375617] IDTVectoring: info=00000000 errcode=00000000 [ 170.381157] TSC Offset = 0xffffffa3024a54f9 [ 170.385477] EPT pointer = 0x000000008c29901e 00:27:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) gettid() 00:27:49 executing program 4: r0 = socket(0x200001000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f00000003c0)={0x11, 0x0, r1}, 0x14) sendto(r0, &(0x7f0000000100)="796e3028705aa0ac8cbb688d8035", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 00:27:49 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x800000000000, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f00000009c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac<\xa0\x02\xeb\x12\tu\\\xb2\x0f.\x05VT\xad\xe3\xd5\xb2\xbf\x1d\xe1p^3\b\xb1\x83O\x00\x91\xe5\x9e\x1b\xc4\xb9g_\xa2\xe4\xbexz\x8a\xa2\xb3\x06\x03\x1e\xbaXvEN\x1d\x06R(\x94zUy\x12\xac\x02t\xe6\xc651,\xdb\x9b\xb1d\xd6\xea\xc8u\xf7\xb9\x1c\x10\xf4\xf4\xad\x1eS1\x0eS\xd1Wu]\xb7\xe7\v%\xe4\x13`\xd3\xd2~\xa1\xeb,\xde\xa5-\xb4\xcfMy\xb7\xfc\x1f\x90]\x1d\xb2\xbe\x90\xdd\xf4p\xd4s\f\xc8\xb5\x1a\xf8\x04\xc7\xb6*\xcais\x8cs\xb3@\x8b\xd2\xc25\xce4\x8cy\x89\xc2\x943\xfa\n\xc2^\xe6\xe6}\x9e\\\xee\xbc\x9d\xd4\x9f\xeam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[], 0xfffffffffffffdfd) close(r4) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x168}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) clock_gettime(0x3, &(0x7f0000000380)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r10, r11/1000+30000}, {0x77359400}}) listen(r9, 0xffffffffffffff00) munlockall() 00:27:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x800000000000, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f00000009c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac<\xa0\x02\xeb\x12\tu\\\xb2\x0f.\x05VT\xad\xe3\xd5\xb2\xbf\x1d\xe1p^3\b\xb1\x83O\x00\x91\xe5\x9e\x1b\xc4\xb9g_\xa2\xe4\xbexz\x8a\xa2\xb3\x06\x03\x1e\xbaXvEN\x1d\x06R(\x94zUy\x12\xac\x02t\xe6\xc651,\xdb\x9b\xb1d\xd6\xea\xc8u\xf7\xb9\x1c\x10\xf4\xf4\xad\x1eS1\x0eS\xd1Wu]\xb7\xe7\v%\xe4\x13`\xd3\xd2~\xa1\xeb,\xde\xa5-\xb4\xcfMy\xb7\xfc\x1f\x90]\x1d\xb2\xbe\x90\xdd\xf4p\xd4s\f\xc8\xb5\x1a\xf8\x04\xc7\xb6*\xcais\x8cs\xb3@\x8b\xd2\xc25\xce4\x8cy\x89\xc2\x943\xfa\n\xc2^\xe6\xe6}\x9e\\\xee\xbc\x9d\xd4\x9f\xeam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[], 0xfffffffffffffdfd) close(r4) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x168}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) clock_gettime(0x3, &(0x7f0000000380)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r10, r11/1000+30000}, {0x77359400}}) listen(r9, 0xffffffffffffff00) munlockall() 00:27:49 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x1004e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x2000141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 00:27:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000024c, 0x0) pipe(0x0) 00:27:50 executing program 5: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xffffffff00000001, 0x8, 0x4}, 0x2f) 00:27:50 executing program 4: r0 = socket(0x200001000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f00000003c0)={0x11, 0x0, r1}, 0x14) sendto(r0, &(0x7f0000000100)="796e3028705aa0ac8cbb688d8035", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 00:27:50 executing program 2: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7c82a7b07bf496d8f906b2ee1a691852947744af19e4a149987e644"], 0x26) io_setup(0x101, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x248}], 0x1, &(0x7f0000000140)}, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000102, 0x0, 0x40000100]}) 00:27:50 executing program 5: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xffffffff00000001, 0x8, 0x4}, 0x2f) 00:27:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x800000000000, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f00000009c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac<\xa0\x02\xeb\x12\tu\\\xb2\x0f.\x05VT\xad\xe3\xd5\xb2\xbf\x1d\xe1p^3\b\xb1\x83O\x00\x91\xe5\x9e\x1b\xc4\xb9g_\xa2\xe4\xbexz\x8a\xa2\xb3\x06\x03\x1e\xbaXvEN\x1d\x06R(\x94zUy\x12\xac\x02t\xe6\xc651,\xdb\x9b\xb1d\xd6\xea\xc8u\xf7\xb9\x1c\x10\xf4\xf4\xad\x1eS1\x0eS\xd1Wu]\xb7\xe7\v%\xe4\x13`\xd3\xd2~\xa1\xeb,\xde\xa5-\xb4\xcfMy\xb7\xfc\x1f\x90]\x1d\xb2\xbe\x90\xdd\xf4p\xd4s\f\xc8\xb5\x1a\xf8\x04\xc7\xb6*\xcais\x8cs\xb3@\x8b\xd2\xc25\xce4\x8cy\x89\xc2\x943\xfa\n\xc2^\xe6\xe6}\x9e\\\xee\xbc\x9d\xd4\x9f\xeam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[], 0xfffffffffffffdfd) close(r4) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x168}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) clock_gettime(0x3, &(0x7f0000000380)={0x0, 0x0}) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r10, r11/1000+30000}, {0x77359400}}) listen(r9, 0xffffffffffffff00) munlockall() 00:27:50 executing program 5: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xffffffff00000001, 0x8, 0x4}, 0x2f) 00:27:50 executing program 4: r0 = socket(0x200001000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f00000003c0)={0x11, 0x0, r1}, 0x14) sendto(r0, &(0x7f0000000100)="796e3028705aa0ac8cbb688d8035", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 00:27:50 executing program 5: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xffffffff00000001, 0x8, 0x4}, 0x2f) 00:27:50 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x164, [0x0, 0x20000180, 0x200001b0, 0x200002b4], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1b4) 00:27:50 executing program 4: r0 = socket(0x200001000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f00000003c0)={0x11, 0x0, r1}, 0x14) sendto(r0, &(0x7f0000000100)="796e3028705aa0ac8cbb688d8035", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 00:27:51 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x1004e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x2000141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 00:27:51 executing program 2: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7c82a7b07bf496d8f906b2ee1a691852947744af19e4a149987e644"], 0x26) io_setup(0x101, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x248}], 0x1, &(0x7f0000000140)}, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000102, 0x0, 0x40000100]}) 00:27:51 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x164, [0x0, 0x20000180, 0x200001b0, 0x200002b4], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000000b00000000000000000062637368300000000000000000000000626373683000000000000000000000006263736630000000000000000000000069666230000000000000000000000000000000000000000000000000aaaaaaaaaa000000000000000000ac000000ac000000d40000006c696d6974000000000000000000000000000000000000000000000000000000180000000040000000100000000000000000000000000000000000004155444954000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0x1b4) 00:27:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000024c, 0x0) pipe(0x0) 00:27:51 executing program 5: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7c82a7b07bf496d8f906b2ee1a691852947744af19e4a149987e644"], 0x26) io_setup(0x101, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x248}], 0x1, &(0x7f0000000140)}, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000102, 0x0, 0x40000100]}) 00:27:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000024c, 0x0) pipe(0x0) [ 172.532758] syz-executor1 (8033) used greatest stack depth: 19240 bytes left 00:27:52 executing program 5: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7c82a7b07bf496d8f906b2ee1a691852947744af19e4a149987e644"], 0x26) io_setup(0x101, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x248}], 0x1, &(0x7f0000000140)}, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000102, 0x0, 0x40000100]}) 00:27:52 executing program 2: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7c82a7b07bf496d8f906b2ee1a691852947744af19e4a149987e644"], 0x26) io_setup(0x101, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x248}], 0x1, &(0x7f0000000140)}, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000102, 0x0, 0x40000100]}) 00:27:52 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7c82a7b07bf496d8f906b2ee1a691852947744af19e4a149987e644"], 0x26) io_setup(0x101, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x248}], 0x1, &(0x7f0000000140)}, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000102, 0x0, 0x40000100]}) 00:27:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000024c, 0x0) pipe(0x0) 00:27:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000024c, 0x0) pipe(0x0) 00:27:52 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7c82a7b07bf496d8f906b2ee1a691852947744af19e4a149987e644"], 0x26) io_setup(0x101, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x248}], 0x1, &(0x7f0000000140)}, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000102, 0x0, 0x40000100]}) 00:27:52 executing program 2: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7c82a7b07bf496d8f906b2ee1a691852947744af19e4a149987e644"], 0x26) io_setup(0x101, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x248}], 0x1, &(0x7f0000000140)}, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000102, 0x0, 0x40000100]}) 00:27:53 executing program 5: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7c82a7b07bf496d8f906b2ee1a691852947744af19e4a149987e644"], 0x26) io_setup(0x101, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x248}], 0x1, &(0x7f0000000140)}, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000102, 0x0, 0x40000100]}) 00:27:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000024c, 0x0) pipe(0x0) [ 176.081029] IPVS: ftp: loaded support on port[0] = 21 [ 176.193076] chnl_net:caif_netlink_parms(): no params data found [ 176.253912] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.261512] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.276274] device bridge_slave_0 entered promiscuous mode [ 176.284458] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.298356] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.305753] device bridge_slave_1 entered promiscuous mode [ 176.335486] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 176.352734] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 176.384290] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.399071] team0: Port device team_slave_0 added [ 176.404628] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.412222] team0: Port device team_slave_1 added [ 176.418098] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 176.425535] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 176.488865] device hsr_slave_0 entered promiscuous mode [ 176.536218] device hsr_slave_1 entered promiscuous mode [ 176.576562] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 176.583563] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 176.614236] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.620632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.627326] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.633684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.711984] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 176.723308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.739035] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 176.749176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.757291] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.764597] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.773372] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 176.786866] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 176.804826] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.825689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.834810] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.841214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.856449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.864396] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.870810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.898257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.906700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.922503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.933219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.944595] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 176.952046] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.960190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.968154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.982004] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 176.989591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.011401] 8021q: adding VLAN 0 to HW filter on device batadv0 00:27:56 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x164, [0x0, 0x20000180, 0x200001b0, 0x200002b4], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x1b4) 00:27:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) preadv(r0, &(0x7f0000000480), 0x100000000000024c, 0x0) pipe(0x0) 00:27:56 executing program 2: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7c82a7b07bf496d8f906b2ee1a691852947744af19e4a149987e644"], 0x26) io_setup(0x101, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x248}], 0x1, &(0x7f0000000140)}, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000102, 0x0, 0x40000100]}) 00:27:56 executing program 3: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7c82a7b07bf496d8f906b2ee1a691852947744af19e4a149987e644"], 0x26) io_setup(0x101, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x248}], 0x1, &(0x7f0000000140)}, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000102, 0x0, 0x40000100]}) 00:27:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="abfa93b0286d54be94ff949987d7ebd3a157dea62ee61d922bd0488e97c82859fb308a2c36b26cefa57773dfa74089d9739d003a2ae6426e6b4e95797b46229eae7bb6700495523b68c35bff1b211e3f6f33c20a48799bbcc6b8beae18b3d7d185d7c07dab7296a7d34b3ef0e3b7b6273fd719ca8177e6471be36ce1a5a84291d43cc5fea4a9fd09e8af4fd4790bf7a6bb3c6c25d20a0c368ae36f8fd4397803c69994290607e30b84ee2f28a192fe55d6aaaa24941cd6de3a007dbc6d0aeda78d02651bc9ac26c970f6c15fbc7f3b6cc5590ae929a8c25634f7f268a5ce8286036d904135af1a84445f2d720253f20562e8329c82b255a30b3bb9763b8ea9755414c82a34937d8bfa97febb588502e3fba0471ad10b383dec26343267cc2657509026fe4abd0690ae8ef3c3bb9a040b7f883c7f38596f971526614d79d92713677fb0fa05f2adc319d8dd20790830d4858d1d7dc9da1a51577332c6ce28bf616583c07f7be13ed53899811a3cab410c1ce79245bf1b19008a9a3b378fd1c53c870bd29ada49572f585d7bb6a0311beb63317443696a496dfc2dbcfe60a2c9fb781b2fbc239fa7e6505e7664b842b73a9eb1fda82170b70d225b98327eae6fec75084a250122ae00c326b1dbeaddc91eab01ee073dc7287caa84c221b9e0ba24dc5b993b10911d96ae8f1a6caee99b66696bd48ebc9f0b096685b0c542c749c33b0c17753890b7bdb8744367dc1cf04ee9561136f61b056595a824320f9414402cb49e89545e3a3d003f7e9e41345a93442be87b02dd20d0ae5e16957f23310fb0da7d4a1c30b55f60eff0b6db30314d39ca006040aeafb266942bbcf1cc21dccf183d46eb1e99ae50eb0dba9db9fc61b8432aee65987369a5802819e365053d3ca613c9f82b0abe78fd7ae27718ab39d98846fc811cb7c37eeed7f6fcc3d0ca6619a278d8bca5b130582dd71f7fe2382f3b267735bf5c6d9f0e0c8f1790133c115f2fa81bb7188b59614c7cea35d6aec38ed2cc9de86ac9e42f0856832d6f9e5a70ff93b03ad0102bfa593b2cb187756148816b461cc7a87a1d1fefa527ec6200fe94db959fab8ff795ae5257401c1f6de630ab920e6ef2be3631b072c9c37e504e72dae21ce5765c5608e0b24a01da9a369ec73217b46f35f3a8246cc4bb5e00d46d1d2b1d62652fdcd118e8722994f7e27700fc71d3c19a19662b4584a6866102f534f3bd39a94964508441f4b01d7c17330f51235b85d5841d7587c3114cf1de4274ac6c2922f89844e3b4e77084c578254c2267c220e5d94af3bc9e2c13b88a824bef2ee0d19c5b0f50ff2d98565784976c53f20dfc25621efb00dfe047bcf0baa158739494072129483a589c2f23a4a5eec434b8a2269498db4eaf715dba9529ad15f417c3275fe5a8889f18d2cfceb369fdf9a7cd3de7f8b9def6ac00919105a50bee031707f081d7315c628b13fda6b54c4dadcdeb8fc82c01c62c9128b80b32ce400e31196f111b8e3ce76e7f3f55afa10b9890fb1e77c1c16c6fdd353372ae594fae63fe505f570d082b24c9d56329bd3626c9eae0a113e0313564a10e58af90b42f8b35de81424836d38fdc7238eb50f923ce526e975f185534dcd21aa0886e8c615cc554235fa9e1575577da5a4452cc3cd7810e2ec407e5f7205e42c2427cd8c62310d5902624eeeb65deb9eac2fa9ee04766c717001d2109676f95ca828aeca15ee8331cbcb5fc40988be6df203accdd39152f3a0cad3f96d8d6366d9d19cff230a0a0770ff4fae84be50092aacacdb795b1ff56e26b59697eec71468b25a3abd7266bbf1838c02edc3bb8083a64675ca22513809967459973ea43a6c16d64d9062e370cb262d875f020fa85a91a380af26121c69548feda41df7fd205ea721cc38a545aa47248e2d126b79fb8cb20f828801e3f047ff96a2b225db1f9c968c61d5f9832f854fc51a34ad1baeabdfea6edc1668ff30c0cb424de4f4d1b07366f80255a4f49aa1930ce1270e2d29f22fb964f6e7890236540582ae4f88561b4326bb352261636", 0x5ad}], 0x1}}], 0x1, 0x800) 00:27:56 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) 00:27:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x5ad}], 0x1}}], 0x1, 0x800) 00:27:56 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) 00:27:56 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) 00:27:56 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x5ad}], 0x1}}], 0x1, 0x800) 00:27:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x200000000000006a, 0x0) 00:27:57 executing program 2: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7c82a7b07bf496d8f906b2ee1a691852947744af19e4a149987e644"], 0x26) io_setup(0x101, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x248}], 0x1, &(0x7f0000000140)}, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000102, 0x0, 0x40000100]}) [ 179.632411] IPVS: ftp: loaded support on port[0] = 21 [ 179.930666] chnl_net:caif_netlink_parms(): no params data found [ 179.968763] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.975152] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.982390] device bridge_slave_0 entered promiscuous mode [ 180.131533] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.138041] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.144963] device bridge_slave_1 entered promiscuous mode [ 180.305563] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 180.315476] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 180.338034] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 180.345495] team0: Port device team_slave_0 added [ 180.492615] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 180.500218] team0: Port device team_slave_1 added [ 180.505634] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 180.513035] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 180.728864] device hsr_slave_0 entered promiscuous mode [ 180.756173] device hsr_slave_1 entered promiscuous mode [ 180.796667] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 180.803649] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 180.954610] bridge0: port 3(gretap0) entered disabled state [ 180.964474] device gretap0 left promiscuous mode [ 180.969404] bridge0: port 3(gretap0) entered disabled state [ 181.013202] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 181.047448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.057632] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 181.210307] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 181.223065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.230920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.240703] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 181.247143] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.400113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 181.407250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.415166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.423052] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.429448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.437350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.447745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 181.457050] device bridge_slave_1 left promiscuous mode [ 181.462517] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.517141] device bridge_slave_0 left promiscuous mode [ 181.522634] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.568221] device bridge_slave_1 left promiscuous mode [ 181.573660] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.606595] device bridge_slave_0 left promiscuous mode [ 181.612028] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.557899] device hsr_slave_1 left promiscuous mode [ 185.612297] device hsr_slave_0 left promiscuous mode [ 185.654154] team0 (unregistering): Port device team_slave_1 removed [ 185.666557] team0 (unregistering): Port device team_slave_0 removed [ 185.679657] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 185.731159] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 185.835705] bond0 (unregistering): Released all slaves [ 186.117843] device hsr_slave_1 left promiscuous mode [ 186.193055] device hsr_slave_0 left promiscuous mode [ 186.260401] team0 (unregistering): Port device team_slave_1 removed [ 186.272004] team0 (unregistering): Port device team_slave_0 removed [ 186.285611] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 186.324522] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 186.427514] bond0 (unregistering): Released all slaves [ 186.509845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.518295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.525953] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.532299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.541320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 186.554029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 186.562050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.570757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.581893] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 186.592587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.600819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.609707] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.621645] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 186.639616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 186.646732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.654983] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.663919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.672313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.687981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 186.695742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.706803] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 186.713095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.720203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.728087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.750126] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 186.760317] 8021q: adding VLAN 0 to HW filter on device batadv0 00:28:06 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x1, 0x164, [0x0, 0x20000180, 0x200001b0, 0x200002b4], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000000b00000000000000000062637368300000000000000000000000626373683000000000000000000000006263736630000000000000000000000069666230000000000000000000000000000000000000000000000000aaaaaaaaaa000000000000000000ac000000ac000000d40000006c696d6974000000000000000000000000000000000000000000000000000000180000000040000000100000000000000000000000000000000000004155444954000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0x1b4) 00:28:06 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xf50000)=nil, 0xf50000, 0x1, 0x32, 0xffffffffffffffff, 0x0) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32) 00:28:06 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)="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", 0x5ad}], 0x1}}], 0x1, 0x800) 00:28:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x200000000000006a, 0x0) 00:28:06 executing program 0: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @mcast2, @local, 0xcc, 0x6, 0x0, 0x0, 0x0, 0x2000050}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}}) r2 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r3) dup2(r0, r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) socket$inet6(0xa, 0x804, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 00:28:06 executing program 2: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f0000002240)=ANY=[@ANYBLOB], 0x1}], 0x1, &(0x7f00000029c0)}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7c82a7b07bf496d8f906b2ee1a691852947744af19e4a149987e644"], 0x26) io_setup(0x101, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="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", 0x248}], 0x1, &(0x7f0000000140)}, 0x0) recvmmsg(r5, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0xc0000102, 0x0, 0x40000100]}) 00:28:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x200000000000006a, 0x0) 00:28:06 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x201, 0x0) ioctl$int_in(r0, 0xc0000840045010, &(0x7f0000000000)) write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0x18}, 0x18) close(r0) 00:28:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000040)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 00:28:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000040)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 00:28:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/1, 0x1}], 0x200000000000006a, 0x0) 00:28:06 executing program 0: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @mcast2, @local, 0xcc, 0x6, 0x0, 0x0, 0x0, 0x2000050}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}}) r2 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r3) dup2(r0, r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) socket$inet6(0xa, 0x804, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 189.137191] IPVS: ftp: loaded support on port[0] = 21 [ 189.242149] chnl_net:caif_netlink_parms(): no params data found [ 189.282430] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.289034] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.296513] device bridge_slave_0 entered promiscuous mode [ 189.303748] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.311210] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.318536] device bridge_slave_1 entered promiscuous mode [ 189.342998] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 189.353315] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 189.372952] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 189.380864] team0: Port device team_slave_0 added [ 189.386735] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 189.397126] team0: Port device team_slave_1 added [ 189.402673] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 189.413604] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 189.479385] device hsr_slave_0 entered promiscuous mode [ 189.526440] device hsr_slave_1 entered promiscuous mode [ 189.572912] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 189.580345] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 189.594507] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.600935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.607688] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.614047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.661118] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 189.667487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.675893] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 189.684650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.693454] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.701237] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.710189] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 189.726902] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 189.733032] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.742502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.751491] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.757927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.766218] device bridge_slave_1 left promiscuous mode [ 189.771776] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.827236] device bridge_slave_0 left promiscuous mode [ 189.832747] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.992634] device hsr_slave_1 left promiscuous mode [ 190.042713] device hsr_slave_0 left promiscuous mode [ 190.102211] team0 (unregistering): Port device team_slave_1 removed [ 190.114496] team0 (unregistering): Port device team_slave_0 removed [ 190.125681] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 190.163091] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 190.239927] bond0 (unregistering): Released all slaves [ 190.370232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.381388] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.387803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.398979] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 190.407330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.415781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.424246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.434699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 190.442529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.450938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.468764] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 190.475543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.483721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.493698] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 190.504738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.515202] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 190.521947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.529531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.530177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.601718] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 190.614326] 8021q: adding VLAN 0 to HW filter on device batadv0 00:28:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000040)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 00:28:10 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @mcast2, @local, 0xcc, 0x6, 0x0, 0x0, 0x0, 0x2000050}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}}) r2 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r3) dup2(r0, r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) socket$inet6(0xa, 0x804, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 00:28:10 executing program 2: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @mcast2, @local, 0xcc, 0x6, 0x0, 0x0, 0x0, 0x2000050}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}}) r2 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r3) dup2(r0, r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) socket$inet6(0xa, 0x804, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 00:28:10 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x201, 0x0) ioctl$int_in(r0, 0xc0000840045010, &(0x7f0000000000)) write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0x18}, 0x18) close(r0) 00:28:10 executing program 0: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @mcast2, @local, 0xcc, 0x6, 0x0, 0x0, 0x0, 0x2000050}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}}) r2 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r3) dup2(r0, r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) socket$inet6(0xa, 0x804, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 00:28:10 executing program 1: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @mcast2, @local, 0xcc, 0x6, 0x0, 0x0, 0x0, 0x2000050}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}}) r2 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r3) dup2(r0, r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) socket$inet6(0xa, 0x804, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 00:28:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000040)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 00:28:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000040)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 00:28:10 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @mcast2, @local, 0xcc, 0x6, 0x0, 0x0, 0x0, 0x2000050}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}}) r2 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r3) dup2(r0, r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) socket$inet6(0xa, 0x804, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 00:28:10 executing program 0: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @mcast2, @local, 0xcc, 0x6, 0x0, 0x0, 0x0, 0x2000050}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}}) r2 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r3) dup2(r0, r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) socket$inet6(0xa, 0x804, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 00:28:10 executing program 2: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @mcast2, @local, 0xcc, 0x6, 0x0, 0x0, 0x0, 0x2000050}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}}) r2 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r3) dup2(r0, r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) socket$inet6(0xa, 0x804, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 00:28:10 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x201, 0x0) ioctl$int_in(r0, 0xc0000840045010, &(0x7f0000000000)) write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0x18}, 0x18) close(r0) 00:28:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000040)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 00:28:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '&:\x00'}, 0x8) read(0xffffffffffffffff, &(0x7f0000000440)=""/4096, 0x1000) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000040)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 00:28:11 executing program 3: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @mcast2, @local, 0xcc, 0x6, 0x0, 0x0, 0x0, 0x2000050}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}}) r2 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r3) dup2(r0, r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) socket$inet6(0xa, 0x804, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 00:28:11 executing program 2: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @mcast2, @local, 0xcc, 0x6, 0x0, 0x0, 0x0, 0x2000050}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}}) r2 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r3) dup2(r0, r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) socket$inet6(0xa, 0x804, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 00:28:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100000000011, r0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) [ 193.582049] IPVS: ftp: loaded support on port[0] = 21 [ 193.658996] chnl_net:caif_netlink_parms(): no params data found [ 193.691530] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.698079] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.705078] device bridge_slave_0 entered promiscuous mode [ 193.719051] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.725390] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.733037] device bridge_slave_1 entered promiscuous mode [ 193.751552] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 193.761305] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 193.774387] device bridge_slave_1 left promiscuous mode [ 193.781029] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.826693] device bridge_slave_0 left promiscuous mode [ 193.832150] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.992450] device hsr_slave_1 left promiscuous mode [ 194.039924] device hsr_slave_0 left promiscuous mode [ 194.092286] team0 (unregistering): Port device team_slave_1 removed [ 194.103234] team0 (unregistering): Port device team_slave_0 removed [ 194.115401] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 194.160205] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 194.238992] bond0 (unregistering): Released all slaves [ 194.346905] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 194.354308] team0: Port device team_slave_0 added [ 194.362324] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 194.369693] team0: Port device team_slave_1 added [ 194.374896] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 194.382663] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 194.439053] device hsr_slave_0 entered promiscuous mode [ 194.476287] device hsr_slave_1 entered promiscuous mode [ 194.516526] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 194.523513] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 194.540361] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.546726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.553305] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.559726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.602906] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 194.610061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.649584] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 194.657307] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.664109] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.673944] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 194.683961] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 194.696318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 194.703212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 194.733866] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 194.740135] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.754756] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 194.762128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 194.776863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 194.784512] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.790916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.807652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 194.822478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 194.831098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 194.845226] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.851637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.869498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 194.882932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.894631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 194.910731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.925122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 194.939245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 194.951896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 194.966049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 194.975508] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 194.989646] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 194.999809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.012493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 195.022964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 195.035231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 195.052773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 195.062170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 195.075607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 195.087813] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 195.093840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 195.123402] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 195.150835] 8021q: adding VLAN 0 to HW filter on device batadv0 00:28:14 executing program 1: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @mcast2, @local, 0xcc, 0x6, 0x0, 0x0, 0x0, 0x2000050}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}}) r2 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r3) dup2(r0, r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) socket$inet6(0xa, 0x804, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 00:28:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x2000000000000cd5, 0x20000000, 0x41, &(0x7f0000ff7000/0x9000)=nil}) writev(r0, &(0x7f0000000040), 0x146) 00:28:14 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x201, 0x0) ioctl$int_in(r0, 0xc0000840045010, &(0x7f0000000000)) write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0x18}, 0x18) close(r0) 00:28:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100000000011, r0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) 00:28:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TCFLSH(r0, 0x5411, 0x8120000) 00:28:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x3f) recvmsg(r1, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) sendmsg$unix(r0, &(0x7f00000015c0)={&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540), 0x0, &(0x7f0000001580)=[@rights={0x14, 0x1, 0x1, [r0, r1]}], 0x14}, 0x0) 00:28:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x2000000000000cd5, 0x20000000, 0x41, &(0x7f0000ff7000/0x9000)=nil}) writev(r0, &(0x7f0000000040), 0x146) 00:28:15 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x5) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f00000000c0)={0xfff, 0xa0f5, 0x2c18c55, 0x5, 0x80000001}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x2000000000) ptrace(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) r4 = open(0x0, 0x100, 0xc0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000000280)) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c41}) syz_open_pts(r3, 0x0) process_vm_readv(r2, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000780), 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) 00:28:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x3f) recvmsg(r1, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) sendmsg$unix(r0, &(0x7f00000015c0)={&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540), 0x0, &(0x7f0000001580)=[@rights={0x14, 0x1, 0x1, [r0, r1]}], 0x14}, 0x0) 00:28:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100000000011, r0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) 00:28:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x2000000000000cd5, 0x20000000, 0x41, &(0x7f0000ff7000/0x9000)=nil}) writev(r0, &(0x7f0000000040), 0x146) 00:28:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x3f) recvmsg(r1, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) sendmsg$unix(r0, &(0x7f00000015c0)={&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540), 0x0, &(0x7f0000001580)=[@rights={0x14, 0x1, 0x1, [r0, r1]}], 0x14}, 0x0) 00:28:15 executing program 1: ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@remote, @mcast2, @local, 0xcc, 0x6, 0x0, 0x0, 0x0, 0x2000050}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}}) r2 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0x70}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000034d000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) dup2(r2, r3) dup2(r0, r1) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0xffffffff}, &(0x7f0000000280)=0x10) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) socket$inet6(0xa, 0x804, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) 00:28:15 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, 0x2000000000000cd5, 0x20000000, 0x41, &(0x7f0000ff7000/0x9000)=nil}) writev(r0, &(0x7f0000000040), 0x146) 00:28:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100000000011, r0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) 00:28:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x3f) recvmsg(r1, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) sendmsg$unix(r0, &(0x7f00000015c0)={&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540), 0x0, &(0x7f0000001580)=[@rights={0x14, 0x1, 0x1, [r0, r1]}], 0x14}, 0x0) 00:28:15 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000200000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0) 00:28:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x3f) recvmsg(r1, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) sendmsg$unix(r0, &(0x7f00000015c0)={&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540), 0x0, &(0x7f0000001580)=[@rights={0x14, 0x1, 0x1, [r0, r1]}], 0x14}, 0x0) 00:28:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x8100000000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0x14}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 196.601476] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.975206] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:28:16 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x5) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f00000000c0)={0xfff, 0xa0f5, 0x2c18c55, 0x5, 0x80000001}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x2000000000) ptrace(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) r4 = open(0x0, 0x100, 0xc0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000000280)) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c41}) syz_open_pts(r3, 0x0) process_vm_readv(r2, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000780), 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) 00:28:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000200000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0) 00:28:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x3f) recvmsg(r1, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) sendmsg$unix(r0, &(0x7f00000015c0)={&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540), 0x0, &(0x7f0000001580)=[@rights={0x14, 0x1, 0x1, [r0, r1]}], 0x14}, 0x0) 00:28:16 executing program 2: getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x40000000000002bd, &(0x7f0000000080)=[&(0x7f0000ffc000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) 00:28:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000003700)=[{{&(0x7f0000003280)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000003f80)=[{0xc, 0x11, 0x67}], 0xc}}], 0x1, 0x0) 00:28:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x8100000000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0x14}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:28:16 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000003700)=[{{&(0x7f0000003280)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000003f80)=[{0xc, 0x11, 0x67}], 0xc}}], 0x1, 0x0) 00:28:16 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000200000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0) 00:28:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00005ebff8)=0x3f) recvmsg(r1, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x8, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000)}, 0x0) sendmsg$unix(r0, &(0x7f00000015c0)={&(0x7f0000001240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540), 0x0, &(0x7f0000001580)=[@rights={0x14, 0x1, 0x1, [r0, r1]}], 0x14}, 0x0) 00:28:16 executing program 2: getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x40000000000002bd, &(0x7f0000000080)=[&(0x7f0000ffc000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) [ 197.361543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:28:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000003700)=[{{&(0x7f0000003280)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000003f80)=[{0xc, 0x11, 0x67}], 0xc}}], 0x1, 0x0) 00:28:17 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000140000000000000000000000080012000000030000000000200000000600000000000000000000000000000000000000000000000000000000000000ff02000000000000000000000000000105000500000000000a0000000000000000000000000000000000ffffac141400000000000000000005000600000000000a00000000000000fe8000000000000000000000000000ff0000000000000000"], 0xa0}}, 0x0) 00:28:17 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x5) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f00000000c0)={0xfff, 0xa0f5, 0x2c18c55, 0x5, 0x80000001}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x2000000000) ptrace(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) r4 = open(0x0, 0x100, 0xc0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000000280)) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c41}) syz_open_pts(r3, 0x0) process_vm_readv(r2, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000780), 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) 00:28:17 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x5) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f00000000c0)={0xfff, 0xa0f5, 0x2c18c55, 0x5, 0x80000001}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x2000000000) ptrace(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) r4 = open(0x0, 0x100, 0xc0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000000280)) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c41}) syz_open_pts(r3, 0x0) process_vm_readv(r2, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000780), 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) 00:28:17 executing program 2: getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x40000000000002bd, &(0x7f0000000080)=[&(0x7f0000ffc000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) 00:28:17 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000003700)=[{{&(0x7f0000003280)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000003f80)=[{0xc, 0x11, 0x67}], 0xc}}], 0x1, 0x0) 00:28:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 00:28:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x8100000000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0x14}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:28:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0xfff}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="f5", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:28:17 executing program 2: getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x40000000000002bd, &(0x7f0000000080)=[&(0x7f0000ffc000/0x2000)=nil], 0x0, &(0x7f0000000000), 0x0) [ 198.440785] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:28:18 executing program 2: r0 = memfd_create(&(0x7f0000000100)='#e\xa7\x82w$\x00', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="320000000400000000000000000000b11ffe64e220cffcc2c2d08f7e474f77cfb10000000035cfd678c61246bf196b8d750bd8171d100a8520a420dc57f3004d8137b182"], 0x44) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 00:28:18 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0xfff}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="f5", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:28:18 executing program 2: r0 = memfd_create(&(0x7f0000000100)='#e\xa7\x82w$\x00', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="320000000400000000000000000000b11ffe64e220cffcc2c2d08f7e474f77cfb10000000035cfd678c61246bf196b8d750bd8171d100a8520a420dc57f3004d8137b182"], 0x44) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 00:28:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x8100000000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0x14}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 199.430512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:28:18 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x5) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f00000000c0)={0xfff, 0xa0f5, 0x2c18c55, 0x5, 0x80000001}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x2000000000) ptrace(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) r4 = open(0x0, 0x100, 0xc0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000000280)) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c41}) syz_open_pts(r3, 0x0) process_vm_readv(r2, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000780), 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) 00:28:19 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x5) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f00000000c0)={0xfff, 0xa0f5, 0x2c18c55, 0x5, 0x80000001}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x2000000000) ptrace(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) r4 = open(0x0, 0x100, 0xc0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000000280)) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c41}) syz_open_pts(r3, 0x0) process_vm_readv(r2, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000780), 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) 00:28:19 executing program 2: r0 = memfd_create(&(0x7f0000000100)='#e\xa7\x82w$\x00', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="320000000400000000000000000000b11ffe64e220cffcc2c2d08f7e474f77cfb10000000035cfd678c61246bf196b8d750bd8171d100a8520a420dc57f3004d8137b182"], 0x44) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 00:28:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0xfff}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="f5", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:28:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 00:28:19 executing program 2: r0 = memfd_create(&(0x7f0000000100)='#e\xa7\x82w$\x00', 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="320000000400000000000000000000b11ffe64e220cffcc2c2d08f7e474f77cfb10000000035cfd678c61246bf196b8d750bd8171d100a8520a420dc57f3004d8137b182"], 0x44) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 00:28:19 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0xfff}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="f5", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:28:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 00:28:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0xfff}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="f5", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:28:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0xfff}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="f5", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:28:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 00:28:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 00:28:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 00:28:20 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x5) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f00000000c0)={0xfff, 0xa0f5, 0x2c18c55, 0x5, 0x80000001}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x0, 0x0) unlinkat(r1, 0x0, 0x2000000000) ptrace(0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) r4 = open(0x0, 0x100, 0xc0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, 0x0, &(0x7f0000000280)) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c41}) syz_open_pts(r3, 0x0) process_vm_readv(r2, &(0x7f0000000440)=[{0x0}], 0x1, &(0x7f0000000780), 0x0, 0x0) setresgid(0x0, 0x0, 0x0) write(r3, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x9}) getpid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, 0x0) 00:28:20 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0xfff}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="f5", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:28:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 00:28:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 00:28:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 00:28:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 00:28:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 00:28:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 00:28:21 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r0, 0x200000000401000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x1f, 0x4) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:28:22 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r0, 0x200000000401000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x1f, 0x4) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:28:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 00:28:22 executing program 2: sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r0 = getpid() keyctl$assume_authority(0x10, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfff, 0x20600) rt_sigtimedwait(&(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x77359400}, 0x8) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000380)) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000009c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000a00)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a40)={0x0, @initdev, @multicast1}, &(0x7f0000000a80)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000ac0)={@remote, @broadcast}, &(0x7f0000000b00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000c40)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@loopback, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000dc0)={'team0\x00'}) accept4$packet(r1, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14, 0x80800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e80)={0x0, @initdev, @local}, &(0x7f0000000ec0)=0xc) getpeername$packet(r1, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001140)={0x0, @local, @initdev}, &(0x7f0000001180)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x810) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) rt_sigqueueinfo(0x0, 0x32, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000500)={0x2, 0x7, 0x6, 0x80000000, 0x8, 0xc6}) wait4(0x0, 0x0, 0x60000002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x1ff) 00:28:22 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000080)) 00:28:22 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000080)) 00:28:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) 00:28:22 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r0, 0x200000000401000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x1f, 0x4) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:28:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004080501ff0280fffdfffe2e0a0000000c00030021006a007d0a00010c000200170022ff02f1d271"], 0x2c}}, 0x0) 00:28:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) [ 203.430786] netlink: 'syz-executor1': attribute type 3 has an invalid length. [ 203.450387] netlink: 'syz-executor1': attribute type 2 has an invalid length. 00:28:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004080501ff0280fffdfffe2e0a0000000c00030021006a007d0a00010c000200170022ff02f1d271"], 0x2c}}, 0x0) 00:28:23 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000080)) 00:28:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) r1 = syz_open_dev$vcsn(0x0, 0x10000, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='.\x00'}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r1) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, &(0x7f00000001c0)) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='lp\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8) getsockname$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x440) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x7, 0x4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x81}, 0x8) write$nbd(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000000)="a1de4e7f9ff96d5cc734df127c0121f043c387fa7d90a31bc6a1ca460a0a81d964f7", 0x22) socket$inet6(0xa, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000540)=""/208, &(0x7f0000000680)=0xd0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000300)) ppoll(&(0x7f0000000180)=[{r0, 0x40}, {r3, 0x1}], 0x2, &(0x7f00000003c0), &(0x7f0000000400)={0xfffffffffffffe62}, 0x8) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00!\x00\x00\x00\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) [ 203.565081] netlink: 'syz-executor1': attribute type 3 has an invalid length. 00:28:23 executing program 2: sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r0 = getpid() keyctl$assume_authority(0x10, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfff, 0x20600) rt_sigtimedwait(&(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x77359400}, 0x8) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000380)) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000009c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000a00)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a40)={0x0, @initdev, @multicast1}, &(0x7f0000000a80)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000ac0)={@remote, @broadcast}, &(0x7f0000000b00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000c40)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@loopback, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000dc0)={'team0\x00'}) accept4$packet(r1, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14, 0x80800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e80)={0x0, @initdev, @local}, &(0x7f0000000ec0)=0xc) getpeername$packet(r1, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001140)={0x0, @local, @initdev}, &(0x7f0000001180)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x810) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) rt_sigqueueinfo(0x0, 0x32, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000500)={0x2, 0x7, 0x6, 0x80000000, 0x8, 0xc6}) wait4(0x0, 0x0, 0x60000002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x1ff) [ 203.642880] netlink: 'syz-executor1': attribute type 2 has an invalid length. 00:28:23 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) listen(r0, 0x200000000401000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x1f, 0x4) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 203.698535] bond0: Releasing backup interface bond_slave_1 00:28:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004080501ff0280fffdfffe2e0a0000000c00030021006a007d0a00010c000200170022ff02f1d271"], 0x2c}}, 0x0) 00:28:23 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000000080)) 00:28:23 executing program 2: sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r0 = getpid() keyctl$assume_authority(0x10, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfff, 0x20600) rt_sigtimedwait(&(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x77359400}, 0x8) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000380)) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000009c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000a00)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a40)={0x0, @initdev, @multicast1}, &(0x7f0000000a80)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000ac0)={@remote, @broadcast}, &(0x7f0000000b00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000c40)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@loopback, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000dc0)={'team0\x00'}) accept4$packet(r1, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14, 0x80800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e80)={0x0, @initdev, @local}, &(0x7f0000000ec0)=0xc) getpeername$packet(r1, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001140)={0x0, @local, @initdev}, &(0x7f0000001180)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x810) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) rt_sigqueueinfo(0x0, 0x32, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000500)={0x2, 0x7, 0x6, 0x80000000, 0x8, 0xc6}) wait4(0x0, 0x0, 0x60000002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x1ff) [ 203.916860] netlink: 'syz-executor1': attribute type 3 has an invalid length. 00:28:23 executing program 5: sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r0 = getpid() keyctl$assume_authority(0x10, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfff, 0x20600) rt_sigtimedwait(&(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x77359400}, 0x8) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000380)) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000009c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000a00)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a40)={0x0, @initdev, @multicast1}, &(0x7f0000000a80)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000ac0)={@remote, @broadcast}, &(0x7f0000000b00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000c40)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@loopback, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000dc0)={'team0\x00'}) accept4$packet(r1, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14, 0x80800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e80)={0x0, @initdev, @local}, &(0x7f0000000ec0)=0xc) getpeername$packet(r1, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001140)={0x0, @local, @initdev}, &(0x7f0000001180)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x810) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) rt_sigqueueinfo(0x0, 0x32, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000500)={0x2, 0x7, 0x6, 0x80000000, 0x8, 0xc6}) wait4(0x0, 0x0, 0x60000002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x1ff) 00:28:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) acct(0x0) syz_open_dev$sndseq(&(0x7f0000043ff3)='/dev/snd/seq\x00', 0x0, 0x100) r1 = creat(&(0x7f0000000300)='./file0\x00', 0xa2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)={0x1, 0x1, [@dev={[], 0x29}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xffffffff, 0x30, 0xff, 0x7}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf, 0x0, 0x101, r2}, &(0x7f00000001c0)=0xfffffffffffffea8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000440)={r3}, 0x8) unshare(0x7fffffe) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) r5 = gettid() getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000900)={@mcast2, 0x0}, &(0x7f0000000940)=0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000500)=@hci={0x1f, r6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x4040040) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, 0x0) timer_create(0x1, &(0x7f00000006c0)={0x0, 0xe, 0x0, @thr={&(0x7f0000000600)="a01a91dcf403b048c5589470fb928796959afa19c09406ca25ecc181e651dadb9f5995047dbdab27c0827befb819914851e01d3036aa9796c27c7b44df5a44f18b22c448eac3e6e3d08e57e7d44814ce363839540a45c7124fec87f00661a0a783d851e356f75a664e3141002c8f8f8162b9a4eeda6421c66cdc99265fcf72", 0x0}}, &(0x7f0000000700)=0x0) timer_settime(r7, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000040000)) tkill(r5, 0x0) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r8, 0xc004743e, &(0x7f0000000000)=""/246) dup2(0xffffffffffffffff, r8) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x23) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000002c0)={r10, 0xff, 0x3}, 0xc) prctl$PR_SET_THP_DISABLE(0x29, 0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) [ 203.995745] netlink: 'syz-executor1': attribute type 2 has an invalid length. 00:28:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004080501ff0280fffdfffe2e0a0000000c00030021006a007d0a00010c000200170022ff02f1d271"], 0x2c}}, 0x0) 00:28:23 executing program 4: sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r0 = getpid() keyctl$assume_authority(0x10, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfff, 0x20600) rt_sigtimedwait(&(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x77359400}, 0x8) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000380)) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000009c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000a00)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a40)={0x0, @initdev, @multicast1}, &(0x7f0000000a80)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000ac0)={@remote, @broadcast}, &(0x7f0000000b00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000c40)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@loopback, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000dc0)={'team0\x00'}) accept4$packet(r1, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14, 0x80800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e80)={0x0, @initdev, @local}, &(0x7f0000000ec0)=0xc) getpeername$packet(r1, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001140)={0x0, @local, @initdev}, &(0x7f0000001180)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x810) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) rt_sigqueueinfo(0x0, 0x32, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000500)={0x2, 0x7, 0x6, 0x80000000, 0x8, 0xc6}) wait4(0x0, 0x0, 0x60000002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x1ff) [ 204.210093] netlink: 'syz-executor1': attribute type 3 has an invalid length. [ 204.222115] netlink: 'syz-executor1': attribute type 2 has an invalid length. 00:28:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)='q', 0x1) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x700000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000340), 0x950}]) 00:28:23 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000003, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) [ 204.450902] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 204.468395] bond0: Releasing backup interface bond_slave_1 00:28:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) r1 = syz_open_dev$vcsn(0x0, 0x10000, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='.\x00'}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r1) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, &(0x7f00000001c0)) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='lp\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8) getsockname$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x440) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x7, 0x4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x81}, 0x8) write$nbd(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000000)="a1de4e7f9ff96d5cc734df127c0121f043c387fa7d90a31bc6a1ca460a0a81d964f7", 0x22) socket$inet6(0xa, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000540)=""/208, &(0x7f0000000680)=0xd0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000300)) ppoll(&(0x7f0000000180)=[{r0, 0x40}, {r3, 0x1}], 0x2, &(0x7f00000003c0), &(0x7f0000000400)={0xfffffffffffffe62}, 0x8) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00!\x00\x00\x00\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 00:28:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)='q', 0x1) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x700000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000340), 0x950}]) 00:28:24 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000003, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) 00:28:24 executing program 5: sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r0 = getpid() keyctl$assume_authority(0x10, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfff, 0x20600) rt_sigtimedwait(&(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x77359400}, 0x8) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000380)) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000009c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000a00)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a40)={0x0, @initdev, @multicast1}, &(0x7f0000000a80)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000ac0)={@remote, @broadcast}, &(0x7f0000000b00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000c40)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@loopback, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000dc0)={'team0\x00'}) accept4$packet(r1, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14, 0x80800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e80)={0x0, @initdev, @local}, &(0x7f0000000ec0)=0xc) getpeername$packet(r1, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001140)={0x0, @local, @initdev}, &(0x7f0000001180)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x810) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) rt_sigqueueinfo(0x0, 0x32, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000500)={0x2, 0x7, 0x6, 0x80000000, 0x8, 0xc6}) wait4(0x0, 0x0, 0x60000002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x1ff) 00:28:24 executing program 2: sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r0 = getpid() keyctl$assume_authority(0x10, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfff, 0x20600) rt_sigtimedwait(&(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x77359400}, 0x8) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000380)) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000009c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000a00)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a40)={0x0, @initdev, @multicast1}, &(0x7f0000000a80)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000ac0)={@remote, @broadcast}, &(0x7f0000000b00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000c40)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@loopback, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000dc0)={'team0\x00'}) accept4$packet(r1, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14, 0x80800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e80)={0x0, @initdev, @local}, &(0x7f0000000ec0)=0xc) getpeername$packet(r1, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001140)={0x0, @local, @initdev}, &(0x7f0000001180)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x810) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) rt_sigqueueinfo(0x0, 0x32, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000500)={0x2, 0x7, 0x6, 0x80000000, 0x8, 0xc6}) wait4(0x0, 0x0, 0x60000002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x1ff) 00:28:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)='q', 0x1) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x700000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000340), 0x950}]) 00:28:24 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000003, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) [ 204.866708] bond0: Enslaving bond_slave_1 as an active interface with an up link 00:28:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) r1 = syz_open_dev$vcsn(0x0, 0x10000, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='.\x00'}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r1) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, &(0x7f00000001c0)) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='lp\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8) getsockname$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x440) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x7, 0x4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x81}, 0x8) write$nbd(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000000)="a1de4e7f9ff96d5cc734df127c0121f043c387fa7d90a31bc6a1ca460a0a81d964f7", 0x22) socket$inet6(0xa, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000540)=""/208, &(0x7f0000000680)=0xd0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000300)) ppoll(&(0x7f0000000180)=[{r0, 0x40}, {r3, 0x1}], 0x2, &(0x7f00000003c0), &(0x7f0000000400)={0xfffffffffffffe62}, 0x8) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00!\x00\x00\x00\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 00:28:24 executing program 5: sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r0 = getpid() keyctl$assume_authority(0x10, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfff, 0x20600) rt_sigtimedwait(&(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x77359400}, 0x8) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000380)) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000009c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000a00)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a40)={0x0, @initdev, @multicast1}, &(0x7f0000000a80)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000ac0)={@remote, @broadcast}, &(0x7f0000000b00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000c40)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@loopback, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000dc0)={'team0\x00'}) accept4$packet(r1, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14, 0x80800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e80)={0x0, @initdev, @local}, &(0x7f0000000ec0)=0xc) getpeername$packet(r1, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001140)={0x0, @local, @initdev}, &(0x7f0000001180)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x810) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) rt_sigqueueinfo(0x0, 0x32, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000500)={0x2, 0x7, 0x6, 0x80000000, 0x8, 0xc6}) wait4(0x0, 0x0, 0x60000002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x1ff) [ 205.048261] bond0: Releasing backup interface bond_slave_1 00:28:24 executing program 4: sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r0 = getpid() keyctl$assume_authority(0x10, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfff, 0x20600) rt_sigtimedwait(&(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x77359400}, 0x8) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000380)) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000009c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000a00)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a40)={0x0, @initdev, @multicast1}, &(0x7f0000000a80)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000ac0)={@remote, @broadcast}, &(0x7f0000000b00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000c40)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@loopback, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000dc0)={'team0\x00'}) accept4$packet(r1, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14, 0x80800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e80)={0x0, @initdev, @local}, &(0x7f0000000ec0)=0xc) getpeername$packet(r1, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001140)={0x0, @local, @initdev}, &(0x7f0000001180)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x810) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) rt_sigqueueinfo(0x0, 0x32, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000500)={0x2, 0x7, 0x6, 0x80000000, 0x8, 0xc6}) wait4(0x0, 0x0, 0x60000002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x1ff) 00:28:24 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000003, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) 00:28:24 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)='q', 0x1) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x700000000000000, 0x0, 0x0, 0x0, r1, &(0x7f0000000340), 0x950}]) 00:28:24 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000003, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) 00:28:24 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000d00)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 00:28:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34}) 00:28:24 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000003, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) 00:28:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000d00)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 00:28:25 executing program 2: r0 = socket(0x1e, 0x5, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) [ 205.776940] bond0: Enslaving bond_slave_1 as an active interface with an up link 00:28:25 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000003, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x4d, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x4e20, 0x4d, 0x0, [], "e29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed0"}}}}}}, 0x0) shutdown(r0, 0x0) 00:28:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) r1 = syz_open_dev$vcsn(0x0, 0x10000, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='.\x00'}, 0x10) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r1) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, 0x0, &(0x7f00000001c0)) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='lp\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8) getsockname$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x440) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000000c0)=0x7, 0x4) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x81}, 0x8) write$nbd(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000000)="a1de4e7f9ff96d5cc734df127c0121f043c387fa7d90a31bc6a1ca460a0a81d964f7", 0x22) socket$inet6(0xa, 0x5, 0x0) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000540)=""/208, &(0x7f0000000680)=0xd0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000300)) ppoll(&(0x7f0000000180)=[{r0, 0x40}, {r3, 0x1}], 0x2, &(0x7f00000003c0), &(0x7f0000000400)={0xfffffffffffffe62}, 0x8) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00!\x00\x00\x00\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 00:28:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34}) 00:28:25 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') [ 206.011987] bond0: Releasing backup interface bond_slave_1 00:28:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34}) 00:28:25 executing program 2: r0 = socket(0x1e, 0x5, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 00:28:25 executing program 2: r0 = socket(0x1e, 0x5, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 00:28:25 executing program 4: sched_setaffinity(0x0, 0x3, &(0x7f0000000680)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) r0 = getpid() keyctl$assume_authority(0x10, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0xfff, 0x20600) rt_sigtimedwait(&(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x77359400}, 0x8) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, 0x0) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000380)) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000009c0)={0x0, @rand_addr, @multicast2}, &(0x7f0000000a00)=0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000a40)={0x0, @initdev, @multicast1}, &(0x7f0000000a80)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000ac0)={@remote, @broadcast}, &(0x7f0000000b00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000c40)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@loopback, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000dc0)={'team0\x00'}) accept4$packet(r1, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000e40)=0x14, 0x80800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000e80)={0x0, @initdev, @local}, &(0x7f0000000ec0)=0xc) getpeername$packet(r1, &(0x7f0000000fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001000)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001140)={0x0, @local, @initdev}, &(0x7f0000001180)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f00000018c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x810) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000440)) rt_sigqueueinfo(0x0, 0x32, 0x0) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, &(0x7f0000000500)={0x2, 0x7, 0x6, 0x80000000, 0x8, 0xc6}) wait4(0x0, 0x0, 0x60000002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x1ff) 00:28:25 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000d00)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 00:28:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0x34}) 00:28:25 executing program 2: r0 = socket(0x1e, 0x5, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 00:28:25 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0xc5ef6e60c400570e}) 00:28:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x9, 0x8, 0x10001) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x121402, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x200000000008) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x01\x00\x00\xff\xff\xff\xc3'}) rt_sigprocmask(0x2, &(0x7f0000000180)={0x7fffffff}, &(0x7f0000000300), 0x8) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) ioctl$VIDIOC_S_FMT(r2, 0xc0cc5605, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x0, 0x3ff, @mcast1}}}, 0x84) execve(&(0x7f0000000600)='./file0\x00', &(0x7f0000000740), &(0x7f0000000800)=[&(0x7f0000000780)='/dev/ptmx\x00', &(0x7f00000007c0)='bridge0\x00']) ioctl(r2, 0x9, &(0x7f0000000940)="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") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x1, 'syz0\x00', 0x4}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900), 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 206.678150] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 206.688793] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.698667] bridge0: port 1(bridge_slave_0) entered disabled state 00:28:26 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') 00:28:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x35}, 0xb) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), 0x0}}], 0x58}, 0x0) 00:28:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000d00)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) 00:28:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) 00:28:26 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') 00:28:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) 00:28:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x35}, 0xb) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), 0x0}}], 0x58}, 0x0) 00:28:26 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') 00:28:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) 00:28:26 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x8007a00, &(0x7f0000000480)=ANY=[]) r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x3002, 0x0) close(r0) [ 207.763114] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.769561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.776273] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.782633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.795597] device bridge0 entered promiscuous mode [ 207.818857] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:28:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0xc5ef6e60c400570e}) [ 207.864144] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.870667] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.886044] device bridge0 left promiscuous mode 00:28:27 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x9, 0x8, 0x10001) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x121402, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x200000000008) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x01\x00\x00\xff\xff\xff\xc3'}) rt_sigprocmask(0x2, &(0x7f0000000180)={0x7fffffff}, &(0x7f0000000300), 0x8) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) ioctl$VIDIOC_S_FMT(r2, 0xc0cc5605, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x0, 0x3ff, @mcast1}}}, 0x84) execve(&(0x7f0000000600)='./file0\x00', &(0x7f0000000740), &(0x7f0000000800)=[&(0x7f0000000780)='/dev/ptmx\x00', &(0x7f00000007c0)='bridge0\x00']) ioctl(r2, 0x9, &(0x7f0000000940)="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") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x1, 'syz0\x00', 0x4}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900), 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 00:28:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x35}, 0xb) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), 0x0}}], 0x58}, 0x0) 00:28:27 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x8007a00, &(0x7f0000000480)=ANY=[]) r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x3002, 0x0) close(r0) 00:28:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) 00:28:27 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) sync_file_range(r1, 0x1, 0x2, 0x5) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 208.086754] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.093190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.099929] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.106345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.114016] device bridge0 entered promiscuous mode 00:28:27 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0xc5ef6e60c400570e}) 00:28:27 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x8007a00, &(0x7f0000000480)=ANY=[]) r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x3002, 0x0) close(r0) [ 208.283932] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.291942] bridge0: port 1(bridge_slave_0) entered disabled state 00:28:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "521a9b83c08d88daf1994726aa929e09"}) 00:28:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x35}, 0xb) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x70}], 0x1, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), 0x0}}], 0x58}, 0x0) 00:28:27 executing program 5: open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x20000000, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x8007a00, &(0x7f0000000480)=ANY=[]) r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x3002, 0x0) close(r0) [ 208.484242] device bridge0 left promiscuous mode 00:28:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "521a9b83c08d88daf1994726aa929e09"}) 00:28:28 executing program 5: io_setup(0x7db, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0xfff, 0x1, &(0x7f0000000140)=[{}], 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x4}, 0x8}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000000)=0x9) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) clock_gettime(0x8, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000400)=[{{0x0, r3/1000+10000}, 0x0, 0x0, 0x5}], 0x18) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000300)=""/68) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000940000002248a54fed4ca7e8fb94c76ae471c9855c23185314747672b2d8c9ac76db8140346cd4581e4cc8cfcef20b33e657f1165f304d90e318ac7df493ef807a6b1c8ab5fe8a148afb72240f3f62b9e1aaa2241e79197d811c2aaae320ac49884c0d371f2c36b72a00000000000007ff03cc8d9ac981ad61068cd8e67008a0c4b5dbd9120c862717e8acd407a9fb33ee50f8bad53710fe7dd0c043"], 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000480)=0x5, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x40, 0x800}, 0x8) socket$inet(0x2, 0xb, 0x100) mlock2(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x400}, &(0x7f0000000280)=0x8) close(r2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) r7 = getegid() fchownat(r2, &(0x7f0000000580)='./file0\x00', r6, r7, 0x1500) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000000c0)={0x0, @aes128, 0x3, "5fdcbab998b18ae7"}) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000016c0)={{0x0, 0x2710}}, 0x0) [ 209.283663] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.290112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.296899] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.303272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.313393] device bridge0 entered promiscuous mode [ 209.330991] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:28:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "521a9b83c08d88daf1994726aa929e09"}) 00:28:28 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) sync_file_range(r1, 0x1, 0x2, 0x5) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:28:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x4e20, @loopback}, 0x10) 00:28:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x9, 0x8, 0x10001) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x121402, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x200000000008) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x01\x00\x00\xff\xff\xff\xc3'}) rt_sigprocmask(0x2, &(0x7f0000000180)={0x7fffffff}, &(0x7f0000000300), 0x8) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) ioctl$VIDIOC_S_FMT(r2, 0xc0cc5605, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x0, 0x3ff, @mcast1}}}, 0x84) execve(&(0x7f0000000600)='./file0\x00', &(0x7f0000000740), &(0x7f0000000800)=[&(0x7f0000000780)='/dev/ptmx\x00', &(0x7f00000007c0)='bridge0\x00']) ioctl(r2, 0x9, &(0x7f0000000940)="275152bbd32af79cf733bd79e2a2a2f200b5f4986513ef665fc73833730d5d93a6612f99de0ca93b8dfa50bfad4506697a3d4fffd6bc67ba0955e87885af1ae95d670705eb343d7b519ab3bc8e20733b45f20bf34e11d81395c89af5c61cbea83065e1c9ca6fc184abf5fccb779c426cd100aec3d5f88a0cbf726a08b545539b5d9347d145b8f5d6d159daf3d898054227a4c873615a88feecae40e6256012304076a45942ae434ed4cd3716c574c073aace06ba34b4e0aa02657aca2235e3eb3e603c83e518dabcd18fd7856bd13ac75a1bea0ea535080fcd6101565b6cda4d3c35342b49b17e3a5fdcc9524d5999c71c29848d2f18d82680205308006475320e11a32497e6fc2cf994a67dee6d02805e20f21fc3ead0961cae99bb0ceb81b7a478429d8357122fb2061dbfa11937383356cc199c8135d44b8393d4bebcf689f09c8aead74ab0c74a19294fdeb5286e344ae93228dca60c7beb0ac67449de73937fab1800a762ed71bc55c7b68248264b726eaea8186b158f3201ac752671d6eff3a6d3e4d40635b7acbd553c302257a64b339e5da81831aaa19fbaf41e9811959f773997e67c75144e9f46484218c904cdd9cf36c86385179a27e425f2ae35df0e06e9bf059a5d4926dd44095b8efab8fe1291329623d83a06e90104621a9305a462e60e7398fd56b82fd6c8bb6d3ab2281c24bae2dae7144d946b6298b2e9ba68fb34c73419b6d83abf0b8a72defdaf5711a6b3c50141a02c6f75b68b50437861766f94394f4d16cf214e5d7f219e772f31c291316981d8d33f6c7e9ec7e8b79363ac896d208066a72160c8fbbc51ee31484cd0470b90de129cb26aabd950bf8605bc5d20789d403964ec69173cde288817112bef0ec2b4aaefc9d51316ef877b0c4cba5154f810dff1aff27b90eb143ff37c8f4b8f0f8a9f244304561a7fbfae501ed39b236acb5d5e2edb6859de04a193c64b6ffa123dae44656306ea482fe596a33ff84c0e7b14669f80685e7f358ed1dbe24a1159d0b42f938a5cf6eb8d00d05749286df53214f9c19a09a44238ce18c340967285ab969f5536dbebaeb157815fd3fe31afb44b635ae0230c5db7c02330e9a7df1c1b5205e1416e5d1d5decdbf7bf8d81d3d077b2db47f053aa5f62701ba49c491daf17267dba38cc5dd3ac5b7b73106cc85da1268dc51866e4123c2193c56294a0a1b9b022c43e2dcb639256df33cc73052584908a1f6c2b3770b2a6c9a62eb7954cd9f470d7eacee1576a269b683e1ec0c8d26a91e30c4c4a455394a9cdf0269f7ca3b3b06be90480889e29cbc74013da29b4ee03f92dc54fcaa8e079fb7aa89f55d624d378b9dbed5dafb9936dae5c6cce9375fbe8ac2d36ba9d943ebcaa0ddc407dc1dbc6f13f4e73dc61b6b0e97fc8068d096bc3adb39d37c19f2e0061591797d2cfeedf321a3ae2af07afaabd0c86d44bdde7974fa4ef7b8a26b8273684494adc2f894c8e58ec6bbeaae23683052843f8970e3dd068151b6f7d0d8ee266bcdab979b63d6184594fc2487e8e3d999fd5dfeeef3828727f85f0d0165e4ef78116f10d89267801204c0e70e8c7df186cdb61c53a94a33bdd22743809a4350e143294fa461670b0a498e7213a03f57ccd646d2852f0f9894611882db7ccd2bff794083ee830aaf503dda9001e17ee718d479e037cac273af3b1d0ebf912d2d0f2ecc56658afd27d85d6d0643e997417e8d9b9c38deab498047575c0e5827b701116be5c4b0ffe9bb4b1c7e94f9010a31ebb322cb45656dd548e6658f1023ff90a672bd10ec2dd2d724b88e072c924cb2575f500aa5639111edc7576531fa4cf493418b041ee8297d4d5122e65b07445ff5db07cb0f2ab0e8e7a3d998c2c47ddd5dc728b226b34bcf516ebc7c636fbd898d0d47b14bfe2a4bc276885881400c24536753425ca23d723d70750a4148ffdabcc794cedac32d5b9e0703f5a90a6fb33bfe14207a8f1c099cafd6cf7972608de8ce4704136691a0f060803c6d74d122be48beae28abd565df26c04a1c7399b1c98ba950301968e073ffe3cc581ab8f1347f7c0c8badaf29d8608b01fc686d8f6767c5086c5da09ee387c990a6c500964c2cd2a9a78b996ef6f9b102924a13c39e3804f3f575b48e1084670b73fb6b020c26fe2979d5bd665f3b7312031151a22be562fca3c882df71b2c01dbed72c321fc9ac9786331266fce9608e3017c119eddaa1399ed1bb852716950ea10be50857c1f8c42a132fa816adcf34976ac10e363e5de4fcf1ed2f3b7b51ac82890126f6a9fc25b46da1d866c2f182f4520879690135ccc746f1252aefdbf78da98d84887fc03997c041e41778a5275dd96cf3e2c56f080d71107dc09470bfadafde2e398059aaea3bbc36ad14f87920371ece80bd37a220afd3cdc4ec38362f0bebab10ea543bb7c02b6db15b0e703a499176a740d31546bf6b71512be115555d49b0a8b71c367f6757fa2d659b69d00e91d6ed2ea201a9401ffa7789d52ddfbe398d14121697fea4c5e258a086587a5b144f7bfc6ec8ebed74f8836dfb144f3020706e824aede9db90d03c77f6a9b50055a9ddabf27b32dfb369ce48e7c8b5f718e275c3af5229789d069195bb8e1fbb4dc0cb8a8d3e3987f8788e8c3cdf5896fb6780f35f4a12dfd911d7b9728e3ecf4b588656a4a189558f8fafbe38237d4156abbaf41554b4e0c43e765dd636fec1f9836f903adf6458b92987e11177fbdba6babb1b8795bb493061dc8d00e41f5b295b3b713195a914778ead257d79c93c5b6235e3ff84446e12113e49e6797f1ee69872b5b93f0ee52bc964b540a77aa9fcdd74cb714da462c8f82137fb6a87b5eb327eefbb2fad1118585abd9208eea131502f9bcccabd7ea5ef2147c3e1a169600318bd7256a1579549e24c6cde63334c58bee7f8ea769b175d590e6ff78cbcbf97e8339aa74b9a6a8457f618ad7eb59691d6a0459a06dc3eba537f5b8a02d9cab71a8ac7a4c7edf6ad8b08a12f897abd49f7c9a40703f6ee57a401ae3ff0ba49274ce3eff30295af4ac4a7d731555b015b1222ee3ad4abcc7c69004c683b4e6b44865c3da4266065eb451b5c8732d3da5155585464f293f0dfd74715a8d2bcd9ecf918f07487a8787bed2e29836d10821ff53796e6034aecee41aeb871dbc1a5c4737ba0b6db45834d011a3174230ca36f1842ef410f40c9333219ecae80d79def92d3c37eceb4d0898ca1e7990a65e414b2d89a955b5947b56d4326b23ffd7fc20d674dfd7a813c7acb597de2fd8d1470fd7cf93a26dcc55694f0bca72804a9f399820d4fa9d20c78894a13b544d66d684ef47a0a1ea38497f9f36fe8bc009c83b088b1eeda26d6b63428ad3b384c56ded93122c6499dd05f4e01512b7aadba293656829fe478ef71b5af25ed60212ab7a997d1c9cea375dbc2cb518c31ab04def714ae210a98058ac550d8f26f5420e10825ae672cb367078100996c3270a495dbd2869deceb0c8f5c04267e4fde245ad05853035450ba40255fac6852b8791866a9d9103b92da8c9c79d225c3227d50b898c055979f74099ad74120461c8002ff53125399b87a41144381d87a279258fb2a697ec7ff26ad169d8606f423b11f85e47e33a9d2d7f4eaeaccffee9b6fa5a60ceb925b9ca27ab4b1d2ed01d4258726a6bbf82f42963a1be5a8374124d21ebf1acfa1b272da3da074a4ab6b2008ec57fa24171b26fbdf558c0c4e99ed50cc2f8d536f5d8005f7fdf81a4e94984f7f8c4b97c42deed7b2abaaefc45ec6f679113f41092b0bd648701596a2aa2fb912fb343f1d543937ddd1db68c031c83ceb8f4cbeb4fd4952690a20dadbcc2a0b4b6bdfca76451360e200222022e6ffca9c6f8fe99a84db32b0810a44272888f5613eb05b55a903ab8ef7fc80f1c354039b4b54d4bdcbf80f439ce8e21d742e6703ace64cf6c60d7ac914f75e8404107dd56b53b804e78a88519839fc649544049b61fbaef127306b03cb3020f3178643b6471cda817e96b12993935c98c1846fe31146b3c6d7eed9a394f625f5f9a5333dda15e7bb48e885d843f894290eef0474f282898e66830c66df881daf115f44bbb4e29f8f7052ec69228c4e3c4c09af6e236d7acdf09a0ad1416bdb07cbb9194cec8585bea0e3357cb3585207c908ba9ffb2e8efaeb37745f8293daeb7917880807654e5db0d8d121c141c424d0de4bed64313b88dbc3ff8691a75c131822f8d47c8e9614041572aef3614daad0a128f0f2f22fce13744cf85fb6f7a44853409ef9107a2a091eef6e5a4978b29cd8330aafe975df55d182d49465eb5161950f7f295b5d69ba2d04fbc9be638104a8b649b7f1e194ffe419e465beb84c32c9aed4e3c50ef351e1809063679873ab909eba50103d161449235da365c91fcb3ee5187bd1ac5b564be8747ae6166c1289b83290ec798163c339aa2bd5d10e40a1380f9f6c01518d8d2012f4558f01d2c26ecaa0331649525857d743ef7c3cd7abaf556b1f0fd65a9314cf931458dcebf1404fe3a88da501471d51525b8f933c9b2779aabac0316db56514c4274f461b81f3e0023b8c6984bcb836bdcd905e02319a6b7ac7909918d1bbed7ebbf5e0bb67a285200452b3f2ebd81e59e325ac71c71a3a3043fb5ad9e9cccd1df66991d401663bd3382dce5330ecb149c319ba8ad9b3b2575e9e7318a84a8cf57f41b77b7cd06b4ee3d1928d1b1f052df9e15a70cf4515c9918c76703294aaeea9d5e0d5282aed853f2aa7f6fd60789cf4695bd7af2bda1f24ddf91e238cb03695734d3e3232920ec8c87258d1150d6bc96a1a8c806f138648f1511bfc24c1d4284a7652454ca9fb3e6d2891f890fb531558a6882688b5d78ab494e01371eb7a90883dc1378eb0ac2ed5d7c53436b9b5b90a42821f3f1a65db53c69d872f5149e6749e82310029fc344936c47a1c34acd1d65095503db8c291bafcbc7115eab30c09dc67b19fcdd8e585813323b30d5959b3b1a9c4b49f0ab5b3039738588b76abfaeea52c571558cf3ed6825e394f60e8d1d2b96c097d912195eea73452bdf31de7ea88d6c727f382e76a47082edc24418269ea74515cf9e507d5a80fba12767b94b1fb99c03817f96f9ffacd2af451d65e2e3415c723fe0f5923b6d66bcac215a706240ab9dbc3950423da90f8212621e6e4d24da16bed5c2272af5dccdecbcf5a6ec332ca171577ede14525e08a709c747d3ff12a206efa31bf0a1288f462eb88f44726e0d8d61490c8ee0371255143a0437ca6500a92487a3c23ada8b19fdc251ccc3a51c006df5cc799c7214b372af4b54fba40af860d85c6c3e48d009a3be3b923041aedebe8eb1d55144859ca3f38e18807070adcd8cbe02447e34621a2369fb2ea149837886ac44ab489bad6f64f2789cca5f1d028f0ac9bf7730d76a02eed54ad4c0bb91d8b1a9b6f6b108b937bea2c234231ef841c004c02f5ad881a323dd18cf981515c98fac1701e03f59c18067915d3f07c03444979b78a38eabb78222faa41aa6c1bcdbc549397b58ddbc031dfe7cd013a62082ccc151deda067d96251b2b8f05fcefebf9dbe62fac8ad19cb2e085893b891fe6e13d9c0cf24567d49a56aeebf6f899238bc7a9b15e8cc4760a37300f00da41dbeec7ac3b7bad480ee85bf386ec36acad30d38bb147b09f6a19d2b5de818f82078b3be89057371a1470a8c643bede32617bf54efd025e2e26befabb9f268a07ddb30c6ffc2fa527cfa1916c7a329b2b081245af1a90f3bf4b8bee1f47a738b5ef84b7a05d3a") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x1, 'syz0\x00', 0x4}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900), 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 00:28:28 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0xc5ef6e60c400570e}) 00:28:28 executing program 5: io_setup(0x7db, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0xfff, 0x1, &(0x7f0000000140)=[{}], 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x4}, 0x8}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000000)=0x9) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) clock_gettime(0x8, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000400)=[{{0x0, r3/1000+10000}, 0x0, 0x0, 0x5}], 0x18) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000300)=""/68) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000940000002248a54fed4ca7e8fb94c76ae471c9855c23185314747672b2d8c9ac76db8140346cd4581e4cc8cfcef20b33e657f1165f304d90e318ac7df493ef807a6b1c8ab5fe8a148afb72240f3f62b9e1aaa2241e79197d811c2aaae320ac49884c0d371f2c36b72a00000000000007ff03cc8d9ac981ad61068cd8e67008a0c4b5dbd9120c862717e8acd407a9fb33ee50f8bad53710fe7dd0c043"], 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000480)=0x5, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x40, 0x800}, 0x8) socket$inet(0x2, 0xb, 0x100) mlock2(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x400}, &(0x7f0000000280)=0x8) close(r2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) r7 = getegid() fchownat(r2, &(0x7f0000000580)='./file0\x00', r6, r7, 0x1500) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000000c0)={0x0, @aes128, 0x3, "5fdcbab998b18ae7"}) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000016c0)={{0x0, 0x2710}}, 0x0) 00:28:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "521a9b83c08d88daf1994726aa929e09"}) 00:28:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="e054c4ad1f4f0249c5229a656302a0bcd343edc79a91c7fbf60ff87bdff39efc1515628e108ca8a51572ee9309e811a3d3553f8579a1d294efd49416c5cf607b809813375377395de149050ae1ce1b8aec5459e391a5872e8294a735130f042aa967b6866012532c3f3eecae0e2cfda430434da4fa7d8ea98b7602f66503fb", 0x7f}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) quotactl(0x0, 0x0, 0x0, &(0x7f0000000240)='m') [ 209.488184] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.498251] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.540853] device bridge0 left promiscuous mode 00:28:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x4e20, @loopback}, 0x10) 00:28:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x4e20, @loopback}, 0x10) 00:28:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="e054c4ad1f4f0249c5229a656302a0bcd343edc79a91c7fbf60ff87bdff39efc1515628e108ca8a51572ee9309e811a3d3553f8579a1d294efd49416c5cf607b809813375377395de149050ae1ce1b8aec5459e391a5872e8294a735130f042aa967b6866012532c3f3eecae0e2cfda430434da4fa7d8ea98b7602f66503fb", 0x7f}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) quotactl(0x0, 0x0, 0x0, &(0x7f0000000240)='m') 00:28:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x4e20, @loopback}, 0x10) 00:28:29 executing program 5: io_setup(0x7db, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0xfff, 0x1, &(0x7f0000000140)=[{}], 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x4}, 0x8}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000000)=0x9) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) clock_gettime(0x8, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000400)=[{{0x0, r3/1000+10000}, 0x0, 0x0, 0x5}], 0x18) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000300)=""/68) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000940000002248a54fed4ca7e8fb94c76ae471c9855c23185314747672b2d8c9ac76db8140346cd4581e4cc8cfcef20b33e657f1165f304d90e318ac7df493ef807a6b1c8ab5fe8a148afb72240f3f62b9e1aaa2241e79197d811c2aaae320ac49884c0d371f2c36b72a00000000000007ff03cc8d9ac981ad61068cd8e67008a0c4b5dbd9120c862717e8acd407a9fb33ee50f8bad53710fe7dd0c043"], 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000480)=0x5, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x40, 0x800}, 0x8) socket$inet(0x2, 0xb, 0x100) mlock2(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x400}, &(0x7f0000000280)=0x8) close(r2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) r7 = getegid() fchownat(r2, &(0x7f0000000580)='./file0\x00', r6, r7, 0x1500) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000000c0)={0x0, @aes128, 0x3, "5fdcbab998b18ae7"}) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000016c0)={{0x0, 0x2710}}, 0x0) 00:28:29 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) sync_file_range(r1, 0x1, 0x2, 0x5) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:28:29 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x4e20, @loopback}, 0x10) [ 210.772947] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.779400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.786160] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.792523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.806981] device bridge0 entered promiscuous mode 00:28:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x4e20, @loopback}, 0x10) 00:28:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="e054c4ad1f4f0249c5229a656302a0bcd343edc79a91c7fbf60ff87bdff39efc1515628e108ca8a51572ee9309e811a3d3553f8579a1d294efd49416c5cf607b809813375377395de149050ae1ce1b8aec5459e391a5872e8294a735130f042aa967b6866012532c3f3eecae0e2cfda430434da4fa7d8ea98b7602f66503fb", 0x7f}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) quotactl(0x0, 0x0, 0x0, &(0x7f0000000240)='m') 00:28:30 executing program 5: io_setup(0x7db, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0xfff, 0x1, &(0x7f0000000140)=[{}], 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x4}, 0x8}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000000)=0x9) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) clock_gettime(0x8, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r2, &(0x7f0000000400)=[{{0x0, r3/1000+10000}, 0x0, 0x0, 0x5}], 0x18) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, &(0x7f0000000300)=""/68) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000740)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000940000002248a54fed4ca7e8fb94c76ae471c9855c23185314747672b2d8c9ac76db8140346cd4581e4cc8cfcef20b33e657f1165f304d90e318ac7df493ef807a6b1c8ab5fe8a148afb72240f3f62b9e1aaa2241e79197d811c2aaae320ac49884c0d371f2c36b72a00000000000007ff03cc8d9ac981ad61068cd8e67008a0c4b5dbd9120c862717e8acd407a9fb33ee50f8bad53710fe7dd0c043"], 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000480)=0x5, 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x40, 0x800}, 0x8) socket$inet(0x2, 0xb, 0x100) mlock2(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x400}, &(0x7f0000000280)=0x8) close(r2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) r7 = getegid() fchownat(r2, &(0x7f0000000580)='./file0\x00', r6, r7, 0x1500) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000000c0)={0x0, @aes128, 0x3, "5fdcbab998b18ae7"}) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000016c0)={{0x0, 0x2710}}, 0x0) [ 210.819371] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:28:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x4e20, @loopback}, 0x10) 00:28:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x9, 0x8, 0x10001) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x121402, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x200000000008) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x01\x00\x00\xff\xff\xff\xc3'}) rt_sigprocmask(0x2, &(0x7f0000000180)={0x7fffffff}, &(0x7f0000000300), 0x8) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) ioctl$VIDIOC_S_FMT(r2, 0xc0cc5605, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x0, 0x3ff, @mcast1}}}, 0x84) execve(&(0x7f0000000600)='./file0\x00', &(0x7f0000000740), &(0x7f0000000800)=[&(0x7f0000000780)='/dev/ptmx\x00', &(0x7f00000007c0)='bridge0\x00']) ioctl(r2, 0x9, &(0x7f0000000940)="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") ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x1, 'syz0\x00', 0x4}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) pipe2(&(0x7f0000000900), 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 211.070481] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.079881] bridge0: port 1(bridge_slave_0) entered disabled state 00:28:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="e054c4ad1f4f0249c5229a656302a0bcd343edc79a91c7fbf60ff87bdff39efc1515628e108ca8a51572ee9309e811a3d3553f8579a1d294efd49416c5cf607b809813375377395de149050ae1ce1b8aec5459e391a5872e8294a735130f042aa967b6866012532c3f3eecae0e2cfda430434da4fa7d8ea98b7602f66503fb", 0x7f}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) quotactl(0x0, 0x0, 0x0, &(0x7f0000000240)='m') 00:28:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="e054c4ad1f4f0249c5229a656302a0bcd343edc79a91c7fbf60ff87bdff39efc1515628e108ca8a51572ee9309e811a3d3553f8579a1d294efd49416c5cf607b809813375377395de149050ae1ce1b8aec5459e391a5872e8294a735130f042aa967b6866012532c3f3eecae0e2cfda430434da4fa7d8ea98b7602f66503fb", 0x7f}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) quotactl(0x0, 0x0, 0x0, &(0x7f0000000240)='m') 00:28:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="e054c4ad1f4f0249c5229a656302a0bcd343edc79a91c7fbf60ff87bdff39efc1515628e108ca8a51572ee9309e811a3d3553f8579a1d294efd49416c5cf607b809813375377395de149050ae1ce1b8aec5459e391a5872e8294a735130f042aa967b6866012532c3f3eecae0e2cfda430434da4fa7d8ea98b7602f66503fb", 0x7f}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) quotactl(0x0, 0x0, 0x0, &(0x7f0000000240)='m') [ 211.260344] device bridge0 left promiscuous mode 00:28:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="e054c4ad1f4f0249c5229a656302a0bcd343edc79a91c7fbf60ff87bdff39efc1515628e108ca8a51572ee9309e811a3d3553f8579a1d294efd49416c5cf607b809813375377395de149050ae1ce1b8aec5459e391a5872e8294a735130f042aa967b6866012532c3f3eecae0e2cfda430434da4fa7d8ea98b7602f66503fb", 0x7f}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) quotactl(0x0, 0x0, 0x0, &(0x7f0000000240)='m') 00:28:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="e054c4ad1f4f0249c5229a656302a0bcd343edc79a91c7fbf60ff87bdff39efc1515628e108ca8a51572ee9309e811a3d3553f8579a1d294efd49416c5cf607b809813375377395de149050ae1ce1b8aec5459e391a5872e8294a735130f042aa967b6866012532c3f3eecae0e2cfda430434da4fa7d8ea98b7602f66503fb", 0x7f}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) quotactl(0x0, 0x0, 0x0, &(0x7f0000000240)='m') 00:28:31 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) sync_file_range(r1, 0x1, 0x2, 0x5) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 00:28:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="e054c4ad1f4f0249c5229a656302a0bcd343edc79a91c7fbf60ff87bdff39efc1515628e108ca8a51572ee9309e811a3d3553f8579a1d294efd49416c5cf607b809813375377395de149050ae1ce1b8aec5459e391a5872e8294a735130f042aa967b6866012532c3f3eecae0e2cfda430434da4fa7d8ea98b7602f66503fb", 0x7f}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) quotactl(0x0, 0x0, 0x0, &(0x7f0000000240)='m') 00:28:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="e054c4ad1f4f0249c5229a656302a0bcd343edc79a91c7fbf60ff87bdff39efc1515628e108ca8a51572ee9309e811a3d3553f8579a1d294efd49416c5cf607b809813375377395de149050ae1ce1b8aec5459e391a5872e8294a735130f042aa967b6866012532c3f3eecae0e2cfda430434da4fa7d8ea98b7602f66503fb", 0x7f}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) quotactl(0x0, 0x0, 0x0, &(0x7f0000000240)='m') 00:28:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x4e20, @loopback}, 0x10) 00:28:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="e054c4ad1f4f0249c5229a656302a0bcd343edc79a91c7fbf60ff87bdff39efc1515628e108ca8a51572ee9309e811a3d3553f8579a1d294efd49416c5cf607b809813375377395de149050ae1ce1b8aec5459e391a5872e8294a735130f042aa967b6866012532c3f3eecae0e2cfda430434da4fa7d8ea98b7602f66503fb", 0x7f}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) quotactl(0x0, 0x0, 0x0, &(0x7f0000000240)='m') 00:28:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="e054c4ad1f4f0249c5229a656302a0bcd343edc79a91c7fbf60ff87bdff39efc1515628e108ca8a51572ee9309e811a3d3553f8579a1d294efd49416c5cf607b809813375377395de149050ae1ce1b8aec5459e391a5872e8294a735130f042aa967b6866012532c3f3eecae0e2cfda430434da4fa7d8ea98b7602f66503fb", 0x7f}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) quotactl(0x0, 0x0, 0x0, &(0x7f0000000240)='m') [ 212.265303] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.271749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.278950] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.285318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.292788] device bridge0 entered promiscuous mode [ 212.304167] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:28:31 executing program 4: inotify_init1(0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000500)=0x1) clock_gettime(0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x3ff, &(0x7f00000001c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000008c0)={0xa, @raw_data="673d66d67358332e59422684d522586d8dc6bb8d9ab8cd491981e6110b569741f109dab727f76331c821ccdb172bd8246ec7d05596b6874baf2fac244074398a47b29ae8b79191cf6f1a9da708c7f8e173c8b9efe1267e76efd0a870fadbfb01905a41c4eb8d9b28c8e4c89e2e72447c0b835278f39fb58b7a32a62b20b6e49350002387cf137d57c058c13d1ad386ade3e29fe91a32ba98f473c6546970364609f5424c9b203d2dbd08187386523b8fba053c24ec7f2fcdf062588bcb457186c1bba36f43131ae4"}) read$FUSE(r3, &(0x7f00000050c0), 0x1000) read$FUSE(r3, &(0x7f00000040c0), 0x1000) write$FUSE_INTERRUPT(r3, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f00000004c0)={0x0, 0x57ea, 0x17}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:28:32 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df}) 00:28:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x4e20, @loopback}, 0x10) 00:28:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73d41196c3cdf8311cfc093a52a7d10000", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003b80)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="e054c4ad1f4f0249c5229a656302a0bcd343edc79a91c7fbf60ff87bdff39efc1515628e108ca8a51572ee9309e811a3d3553f8579a1d294efd49416c5cf607b809813375377395de149050ae1ce1b8aec5459e391a5872e8294a735130f042aa967b6866012532c3f3eecae0e2cfda430434da4fa7d8ea98b7602f66503fb", 0x7f}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x871, 0x0, &(0x7f00000001c0)={0x77359400}) quotactl(0x0, 0x0, 0x0, &(0x7f0000000240)='m') 00:28:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0086438, &(0x7f0000000380)) syz_open_dev$amidi(0x0, 0x0, 0x0) 00:28:32 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x1000000, 0x0, 0x0}) 00:28:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000180)="b800008ed866b8050000000f23c00f21f8663501000b000f23f8deac42000f228466b9ae01000066b8d700c0fe66ba000000000f30f0115a5cba4000ed2e3ed943d7f20f5e7951f30f01b90000", 0x4d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 212.795976] binder: 9377:9378 Acquire 1 refcount change on invalid ref 0 ret -22 [ 212.875300] binder: 9377:9378 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 212.882518] binder: 9377:9384 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 00:28:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00004e9f6d)='Z', 0x1, 0x0, &(0x7f0000187ff0)={0x2, 0x4e20, @loopback}, 0x10) 00:28:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0086438, &(0x7f0000000380)) syz_open_dev$amidi(0x0, 0x0, 0x0) 00:28:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0086438, &(0x7f0000000380)) syz_open_dev$amidi(0x0, 0x0, 0x0) [ 213.048887] binder: 9377:9384 ioctl c0306201 20008fd0 returned -14 [ 213.108880] binder: 9377:9378 Acquire 1 refcount change on invalid ref 0 ret -22 00:28:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000180)="b800008ed866b8050000000f23c00f21f8663501000b000f23f8deac42000f228466b9ae01000066b8d700c0fe66ba000000000f30f0115a5cba4000ed2e3ed943d7f20f5e7951f30f01b90000", 0x4d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 213.168160] binder: 9377:9378 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 00:28:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0086438, &(0x7f0000000380)) syz_open_dev$amidi(0x0, 0x0, 0x0) 00:28:33 executing program 4: inotify_init1(0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000500)=0x1) clock_gettime(0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x3ff, &(0x7f00000001c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000008c0)={0xa, @raw_data="673d66d67358332e59422684d522586d8dc6bb8d9ab8cd491981e6110b569741f109dab727f76331c821ccdb172bd8246ec7d05596b6874baf2fac244074398a47b29ae8b79191cf6f1a9da708c7f8e173c8b9efe1267e76efd0a870fadbfb01905a41c4eb8d9b28c8e4c89e2e72447c0b835278f39fb58b7a32a62b20b6e49350002387cf137d57c058c13d1ad386ade3e29fe91a32ba98f473c6546970364609f5424c9b203d2dbd08187386523b8fba053c24ec7f2fcdf062588bcb457186c1bba36f43131ae4"}) read$FUSE(r3, &(0x7f00000050c0), 0x1000) read$FUSE(r3, &(0x7f00000040c0), 0x1000) write$FUSE_INTERRUPT(r3, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f00000004c0)={0x0, 0x57ea, 0x17}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:28:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x1000000, 0x0, 0x0}) 00:28:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x8000000486]}) 00:28:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0086438, &(0x7f0000000380)) syz_open_dev$amidi(0x0, 0x0, 0x0) 00:28:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0086438, &(0x7f0000000380)) syz_open_dev$amidi(0x0, 0x0, 0x0) 00:28:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000180)="b800008ed866b8050000000f23c00f21f8663501000b000f23f8deac42000f228466b9ae01000066b8d700c0fe66ba000000000f30f0115a5cba4000ed2e3ed943d7f20f5e7951f30f01b90000", 0x4d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 213.637818] binder: 9412:9420 Acquire 1 refcount change on invalid ref 0 ret -22 [ 213.666388] binder: 9412:9420 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 00:28:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000400)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000000000013, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0086438, &(0x7f0000000380)) syz_open_dev$amidi(0x0, 0x0, 0x0) [ 213.698784] binder: 9412:9423 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 213.721857] binder: 9412:9423 ioctl c0306201 20008fd0 returned -14 00:28:33 executing program 2: inotify_init1(0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000500)=0x1) clock_gettime(0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x3ff, &(0x7f00000001c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000008c0)={0xa, @raw_data="673d66d67358332e59422684d522586d8dc6bb8d9ab8cd491981e6110b569741f109dab727f76331c821ccdb172bd8246ec7d05596b6874baf2fac244074398a47b29ae8b79191cf6f1a9da708c7f8e173c8b9efe1267e76efd0a870fadbfb01905a41c4eb8d9b28c8e4c89e2e72447c0b835278f39fb58b7a32a62b20b6e49350002387cf137d57c058c13d1ad386ade3e29fe91a32ba98f473c6546970364609f5424c9b203d2dbd08187386523b8fba053c24ec7f2fcdf062588bcb457186c1bba36f43131ae4"}) read$FUSE(r3, &(0x7f00000050c0), 0x1000) read$FUSE(r3, &(0x7f00000040c0), 0x1000) write$FUSE_INTERRUPT(r3, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f00000004c0)={0x0, 0x57ea, 0x17}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:28:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000180)="b800008ed866b8050000000f23c00f21f8663501000b000f23f8deac42000f228466b9ae01000066b8d700c0fe66ba000000000f30f0115a5cba4000ed2e3ed943d7f20f5e7951f30f01b90000", 0x4d}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:28:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x1000000, 0x0, 0x0}) 00:28:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x8000000486]}) 00:28:33 executing program 5: inotify_init1(0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000500)=0x1) clock_gettime(0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x3ff, &(0x7f00000001c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000008c0)={0xa, @raw_data="673d66d67358332e59422684d522586d8dc6bb8d9ab8cd491981e6110b569741f109dab727f76331c821ccdb172bd8246ec7d05596b6874baf2fac244074398a47b29ae8b79191cf6f1a9da708c7f8e173c8b9efe1267e76efd0a870fadbfb01905a41c4eb8d9b28c8e4c89e2e72447c0b835278f39fb58b7a32a62b20b6e49350002387cf137d57c058c13d1ad386ade3e29fe91a32ba98f473c6546970364609f5424c9b203d2dbd08187386523b8fba053c24ec7f2fcdf062588bcb457186c1bba36f43131ae4"}) read$FUSE(r3, &(0x7f00000050c0), 0x1000) read$FUSE(r3, &(0x7f00000040c0), 0x1000) write$FUSE_INTERRUPT(r3, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f00000004c0)={0x0, 0x57ea, 0x17}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 214.031923] binder: 9444:9445 Acquire 1 refcount change on invalid ref 0 ret -22 [ 214.073332] binder: 9444:9445 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 214.116629] binder: 9444:9450 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 214.218820] binder: 9444:9450 ioctl c0306201 20008fd0 returned -14 00:28:34 executing program 4: inotify_init1(0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000500)=0x1) clock_gettime(0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x3ff, &(0x7f00000001c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000008c0)={0xa, @raw_data="673d66d67358332e59422684d522586d8dc6bb8d9ab8cd491981e6110b569741f109dab727f76331c821ccdb172bd8246ec7d05596b6874baf2fac244074398a47b29ae8b79191cf6f1a9da708c7f8e173c8b9efe1267e76efd0a870fadbfb01905a41c4eb8d9b28c8e4c89e2e72447c0b835278f39fb58b7a32a62b20b6e49350002387cf137d57c058c13d1ad386ade3e29fe91a32ba98f473c6546970364609f5424c9b203d2dbd08187386523b8fba053c24ec7f2fcdf062588bcb457186c1bba36f43131ae4"}) read$FUSE(r3, &(0x7f00000050c0), 0x1000) read$FUSE(r3, &(0x7f00000040c0), 0x1000) write$FUSE_INTERRUPT(r3, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f00000004c0)={0x0, 0x57ea, 0x17}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:28:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcs\x00', 0x2a0202, 0x0) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x38, &(0x7f0000000680)=[@in6={0xa, 0x0, 0x8001, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x4, @remote, 0xe7f}]}, &(0x7f0000000700)=0xc) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000100), &(0x7f00000001c0)=0x40) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002d40)='/dev/cuse\x00', 0x82800, 0x0) io_setup(0x800, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000400)}]) r5 = socket$key(0xf, 0x3, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x4) r6 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) sendmmsg$inet_sctp(r0, &(0x7f0000002c80)=[{&(0x7f00000007c0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002940)=[{&(0x7f0000002900)="566e6f32661e7a07ba5cb97d4f5ef4765b8cae9cf055a0b21158fcadb6482390b36b1cbad89940afb8208c89b3", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, {&(0x7f0000002a00)=@in6={0xa, 0x4e21, 0xe0b2, @local, 0x401}, 0x1c, &(0x7f0000002bc0)=[{&(0x7f0000002b00)="c206ca062d66da65593939171181dd95d41e87036a1c06daf14cdeccae700ce1b4bfb7760ef7cde648bcab69ad76e95f5313970018dd2a934121411f5f4261ab9f14cf577ec1f0117cdf0e93ab1faf04bc1fd11674521bd7dcac6097ff45b4b751867813c0340717faf5df010b3a175878ef063ea590130634d796b9b1f16893f15a0ce8bd79a5982efe23b0e2069287de8dce89ce51641e150b", 0x9a}], 0x1, 0x0, 0x0, 0x20000004}], 0x2, 0x4004000) keyctl$instantiate_iov(0x14, r6, &(0x7f0000000400)=[{&(0x7f0000000380)="4470cdc05950f196821ef2ee2de35e0f4f9d865cebeda78489bdb669d648c9b4102cae6c08fa3ba0afe85ea7cabbe137120bb61327a2dca4d72e9c4833fa958d", 0x40}], 0x1, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="021000000a00000000000010e6e4b8c37c3b7edb7df0ad9ec2b1003b1594cb849af3b400020000000000000009050000fc0040005fffffa68a00200000000000000040020000"], 0x46}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x7ffffffffffff71, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000002d80)="c7197539399385546d1496f29461dfd10c2fab359f5a72a78c03a4da7a65b92f72682ad330e6900e9601dc37f2608a312e037533ede9cf462587d5fdc5111ec6c6cd2c084e5e7ec08144848f8c1a36c8380e873f0025f0c523d1ee51356072b6be16b61141a7ac02dea4aa22daade88068b3dacff27ebb1dd5e28091421a13950747bb126a4b231a195d0b1f1c8e56a7b2d56292106bc2d48ee50dff9fb1df20d4a9e7ce67843737f9fb3f9bdfc038325099bb7cbd1d3cf7f28723fb22bc495901c6ba3d041d765182dcd663a20096a27e843e98c1a91cdc66adb0a59d67ee1617b84a7fa3c0342136151846") 00:28:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x8000000486]}) 00:28:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000005fd4)=[@acquire, @acquire={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}], 0x1000000, 0x0, 0x0}) [ 214.717930] binder: 9458:9459 Acquire 1 refcount change on invalid ref 0 ret -22 [ 214.762601] binder: 9458:9465 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 214.787857] binder: 9458:9465 ioctl c0306201 20008fd0 returned -14 [ 214.801736] binder: 9458:9459 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 00:28:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000010000000000000000001000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x8000000486]}) 00:28:34 executing program 2: inotify_init1(0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000500)=0x1) clock_gettime(0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x3ff, &(0x7f00000001c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000008c0)={0xa, @raw_data="673d66d67358332e59422684d522586d8dc6bb8d9ab8cd491981e6110b569741f109dab727f76331c821ccdb172bd8246ec7d05596b6874baf2fac244074398a47b29ae8b79191cf6f1a9da708c7f8e173c8b9efe1267e76efd0a870fadbfb01905a41c4eb8d9b28c8e4c89e2e72447c0b835278f39fb58b7a32a62b20b6e49350002387cf137d57c058c13d1ad386ade3e29fe91a32ba98f473c6546970364609f5424c9b203d2dbd08187386523b8fba053c24ec7f2fcdf062588bcb457186c1bba36f43131ae4"}) read$FUSE(r3, &(0x7f00000050c0), 0x1000) read$FUSE(r3, &(0x7f00000040c0), 0x1000) write$FUSE_INTERRUPT(r3, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f00000004c0)={0x0, 0x57ea, 0x17}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:28:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x1ce, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:28:34 executing program 5: inotify_init1(0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000500)=0x1) clock_gettime(0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x3ff, &(0x7f00000001c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000008c0)={0xa, @raw_data="673d66d67358332e59422684d522586d8dc6bb8d9ab8cd491981e6110b569741f109dab727f76331c821ccdb172bd8246ec7d05596b6874baf2fac244074398a47b29ae8b79191cf6f1a9da708c7f8e173c8b9efe1267e76efd0a870fadbfb01905a41c4eb8d9b28c8e4c89e2e72447c0b835278f39fb58b7a32a62b20b6e49350002387cf137d57c058c13d1ad386ade3e29fe91a32ba98f473c6546970364609f5424c9b203d2dbd08187386523b8fba053c24ec7f2fcdf062588bcb457186c1bba36f43131ae4"}) read$FUSE(r3, &(0x7f00000050c0), 0x1000) read$FUSE(r3, &(0x7f00000040c0), 0x1000) write$FUSE_INTERRUPT(r3, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f00000004c0)={0x0, 0x57ea, 0x17}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:28:34 executing program 1: r0 = add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000180), 0x1a0, 0xfffffffffffffffd) keyctl$read(0x3, r0, &(0x7f0000000000)=""/207, 0xcf) 00:28:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcs\x00', 0x2a0202, 0x0) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x38, &(0x7f0000000680)=[@in6={0xa, 0x0, 0x8001, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x4, @remote, 0xe7f}]}, &(0x7f0000000700)=0xc) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000100), &(0x7f00000001c0)=0x40) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002d40)='/dev/cuse\x00', 0x82800, 0x0) io_setup(0x800, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000400)}]) r5 = socket$key(0xf, 0x3, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x4) r6 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) sendmmsg$inet_sctp(r0, &(0x7f0000002c80)=[{&(0x7f00000007c0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002940)=[{&(0x7f0000002900)="566e6f32661e7a07ba5cb97d4f5ef4765b8cae9cf055a0b21158fcadb6482390b36b1cbad89940afb8208c89b3", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, {&(0x7f0000002a00)=@in6={0xa, 0x4e21, 0xe0b2, @local, 0x401}, 0x1c, &(0x7f0000002bc0)=[{&(0x7f0000002b00)="c206ca062d66da65593939171181dd95d41e87036a1c06daf14cdeccae700ce1b4bfb7760ef7cde648bcab69ad76e95f5313970018dd2a934121411f5f4261ab9f14cf577ec1f0117cdf0e93ab1faf04bc1fd11674521bd7dcac6097ff45b4b751867813c0340717faf5df010b3a175878ef063ea590130634d796b9b1f16893f15a0ce8bd79a5982efe23b0e2069287de8dce89ce51641e150b", 0x9a}], 0x1, 0x0, 0x0, 0x20000004}], 0x2, 0x4004000) keyctl$instantiate_iov(0x14, r6, &(0x7f0000000400)=[{&(0x7f0000000380)="4470cdc05950f196821ef2ee2de35e0f4f9d865cebeda78489bdb669d648c9b4102cae6c08fa3ba0afe85ea7cabbe137120bb61327a2dca4d72e9c4833fa958d", 0x40}], 0x1, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="021000000a00000000000010e6e4b8c37c3b7edb7df0ad9ec2b1003b1594cb849af3b400020000000000000009050000fc0040005fffffa68a00200000000000000040020000"], 0x46}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x7ffffffffffff71, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000002d80)="c7197539399385546d1496f29461dfd10c2fab359f5a72a78c03a4da7a65b92f72682ad330e6900e9601dc37f2608a312e037533ede9cf462587d5fdc5111ec6c6cd2c084e5e7ec08144848f8c1a36c8380e873f0025f0c523d1ee51356072b6be16b61141a7ac02dea4aa22daade88068b3dacff27ebb1dd5e28091421a13950747bb126a4b231a195d0b1f1c8e56a7b2d56292106bc2d48ee50dff9fb1df20d4a9e7ce67843737f9fb3f9bdfc038325099bb7cbd1d3cf7f28723fb22bc495901c6ba3d041d765182dcd663a20096a27e843e98c1a91cdc66adb0a59d67ee1617b84a7fa3c0342136151846") [ 215.065991] protocol 88fb is buggy, dev hsr_slave_0 [ 215.071130] protocol 88fb is buggy, dev hsr_slave_1 [ 215.076304] protocol 88fb is buggy, dev hsr_slave_0 [ 215.081404] protocol 88fb is buggy, dev hsr_slave_1 00:28:34 executing program 1: r0 = add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000180), 0x1a0, 0xfffffffffffffffd) keyctl$read(0x3, r0, &(0x7f0000000000)=""/207, 0xcf) 00:28:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x1ce, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:28:35 executing program 4: inotify_init1(0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000500)=0x1) clock_gettime(0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x3ff, &(0x7f00000001c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000008c0)={0xa, @raw_data="673d66d67358332e59422684d522586d8dc6bb8d9ab8cd491981e6110b569741f109dab727f76331c821ccdb172bd8246ec7d05596b6874baf2fac244074398a47b29ae8b79191cf6f1a9da708c7f8e173c8b9efe1267e76efd0a870fadbfb01905a41c4eb8d9b28c8e4c89e2e72447c0b835278f39fb58b7a32a62b20b6e49350002387cf137d57c058c13d1ad386ade3e29fe91a32ba98f473c6546970364609f5424c9b203d2dbd08187386523b8fba053c24ec7f2fcdf062588bcb457186c1bba36f43131ae4"}) read$FUSE(r3, &(0x7f00000050c0), 0x1000) read$FUSE(r3, &(0x7f00000040c0), 0x1000) write$FUSE_INTERRUPT(r3, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f00000004c0)={0x0, 0x57ea, 0x17}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:28:35 executing program 1: r0 = add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000180), 0x1a0, 0xfffffffffffffffd) keyctl$read(0x3, r0, &(0x7f0000000000)=""/207, 0xcf) 00:28:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcs\x00', 0x2a0202, 0x0) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x38, &(0x7f0000000680)=[@in6={0xa, 0x0, 0x8001, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x4, @remote, 0xe7f}]}, &(0x7f0000000700)=0xc) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000100), &(0x7f00000001c0)=0x40) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002d40)='/dev/cuse\x00', 0x82800, 0x0) io_setup(0x800, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000400)}]) r5 = socket$key(0xf, 0x3, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x4) r6 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) sendmmsg$inet_sctp(r0, &(0x7f0000002c80)=[{&(0x7f00000007c0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002940)=[{&(0x7f0000002900)="566e6f32661e7a07ba5cb97d4f5ef4765b8cae9cf055a0b21158fcadb6482390b36b1cbad89940afb8208c89b3", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, {&(0x7f0000002a00)=@in6={0xa, 0x4e21, 0xe0b2, @local, 0x401}, 0x1c, &(0x7f0000002bc0)=[{&(0x7f0000002b00)="c206ca062d66da65593939171181dd95d41e87036a1c06daf14cdeccae700ce1b4bfb7760ef7cde648bcab69ad76e95f5313970018dd2a934121411f5f4261ab9f14cf577ec1f0117cdf0e93ab1faf04bc1fd11674521bd7dcac6097ff45b4b751867813c0340717faf5df010b3a175878ef063ea590130634d796b9b1f16893f15a0ce8bd79a5982efe23b0e2069287de8dce89ce51641e150b", 0x9a}], 0x1, 0x0, 0x0, 0x20000004}], 0x2, 0x4004000) keyctl$instantiate_iov(0x14, r6, &(0x7f0000000400)=[{&(0x7f0000000380)="4470cdc05950f196821ef2ee2de35e0f4f9d865cebeda78489bdb669d648c9b4102cae6c08fa3ba0afe85ea7cabbe137120bb61327a2dca4d72e9c4833fa958d", 0x40}], 0x1, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="021000000a00000000000010e6e4b8c37c3b7edb7df0ad9ec2b1003b1594cb849af3b400020000000000000009050000fc0040005fffffa68a00200000000000000040020000"], 0x46}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x7ffffffffffff71, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000002d80)="c7197539399385546d1496f29461dfd10c2fab359f5a72a78c03a4da7a65b92f72682ad330e6900e9601dc37f2608a312e037533ede9cf462587d5fdc5111ec6c6cd2c084e5e7ec08144848f8c1a36c8380e873f0025f0c523d1ee51356072b6be16b61141a7ac02dea4aa22daade88068b3dacff27ebb1dd5e28091421a13950747bb126a4b231a195d0b1f1c8e56a7b2d56292106bc2d48ee50dff9fb1df20d4a9e7ce67843737f9fb3f9bdfc038325099bb7cbd1d3cf7f28723fb22bc495901c6ba3d041d765182dcd663a20096a27e843e98c1a91cdc66adb0a59d67ee1617b84a7fa3c0342136151846") 00:28:35 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x1ce, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:28:35 executing program 1: r0 = add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000180), 0x1a0, 0xfffffffffffffffd) keyctl$read(0x3, r0, &(0x7f0000000000)=""/207, 0xcf) 00:28:35 executing program 2: inotify_init1(0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000500)=0x1) clock_gettime(0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x3ff, &(0x7f00000001c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000008c0)={0xa, @raw_data="673d66d67358332e59422684d522586d8dc6bb8d9ab8cd491981e6110b569741f109dab727f76331c821ccdb172bd8246ec7d05596b6874baf2fac244074398a47b29ae8b79191cf6f1a9da708c7f8e173c8b9efe1267e76efd0a870fadbfb01905a41c4eb8d9b28c8e4c89e2e72447c0b835278f39fb58b7a32a62b20b6e49350002387cf137d57c058c13d1ad386ade3e29fe91a32ba98f473c6546970364609f5424c9b203d2dbd08187386523b8fba053c24ec7f2fcdf062588bcb457186c1bba36f43131ae4"}) read$FUSE(r3, &(0x7f00000050c0), 0x1000) read$FUSE(r3, &(0x7f00000040c0), 0x1000) write$FUSE_INTERRUPT(r3, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f00000004c0)={0x0, 0x57ea, 0x17}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:28:35 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x1ce, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 00:28:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f000000a380)=[{&(0x7f0000008fc0)=""/200, 0xc8}, {&(0x7f0000000100)=""/83, 0x53}, {&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f00000091c0)=""/190, 0xbe}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000009340)=""/9, 0x9}, {&(0x7f0000009380)=""/4096, 0x1000}], 0x7}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1}, 0x0) 00:28:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcs\x00', 0x2a0202, 0x0) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x38, &(0x7f0000000680)=[@in6={0xa, 0x0, 0x8001, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x4, @remote, 0xe7f}]}, &(0x7f0000000700)=0xc) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000100), &(0x7f00000001c0)=0x40) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002d40)='/dev/cuse\x00', 0x82800, 0x0) io_setup(0x800, &(0x7f00000003c0)=0x0) io_submit(r4, 0x1, &(0x7f00000008c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000400)}]) r5 = socket$key(0xf, 0x3, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x4) r6 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) sendmmsg$inet_sctp(r0, &(0x7f0000002c80)=[{&(0x7f00000007c0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002940)=[{&(0x7f0000002900)="566e6f32661e7a07ba5cb97d4f5ef4765b8cae9cf055a0b21158fcadb6482390b36b1cbad89940afb8208c89b3", 0x2d}], 0x1, 0x0, 0x0, 0x4000}, {&(0x7f0000002a00)=@in6={0xa, 0x4e21, 0xe0b2, @local, 0x401}, 0x1c, &(0x7f0000002bc0)=[{&(0x7f0000002b00)="c206ca062d66da65593939171181dd95d41e87036a1c06daf14cdeccae700ce1b4bfb7760ef7cde648bcab69ad76e95f5313970018dd2a934121411f5f4261ab9f14cf577ec1f0117cdf0e93ab1faf04bc1fd11674521bd7dcac6097ff45b4b751867813c0340717faf5df010b3a175878ef063ea590130634d796b9b1f16893f15a0ce8bd79a5982efe23b0e2069287de8dce89ce51641e150b", 0x9a}], 0x1, 0x0, 0x0, 0x20000004}], 0x2, 0x4004000) keyctl$instantiate_iov(0x14, r6, &(0x7f0000000400)=[{&(0x7f0000000380)="4470cdc05950f196821ef2ee2de35e0f4f9d865cebeda78489bdb669d648c9b4102cae6c08fa3ba0afe85ea7cabbe137120bb61327a2dca4d72e9c4833fa958d", 0x40}], 0x1, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="021000000a00000000000010e6e4b8c37c3b7edb7df0ad9ec2b1003b1594cb849af3b400020000000000000009050000fc0040005fffffa68a00200000000000000040020000"], 0x46}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x7ffffffffffff71, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000002d80)="c7197539399385546d1496f29461dfd10c2fab359f5a72a78c03a4da7a65b92f72682ad330e6900e9601dc37f2608a312e037533ede9cf462587d5fdc5111ec6c6cd2c084e5e7ec08144848f8c1a36c8380e873f0025f0c523d1ee51356072b6be16b61141a7ac02dea4aa22daade88068b3dacff27ebb1dd5e28091421a13950747bb126a4b231a195d0b1f1c8e56a7b2d56292106bc2d48ee50dff9fb1df20d4a9e7ce67843737f9fb3f9bdfc038325099bb7cbd1d3cf7f28723fb22bc495901c6ba3d041d765182dcd663a20096a27e843e98c1a91cdc66adb0a59d67ee1617b84a7fa3c0342136151846") 00:28:35 executing program 5: inotify_init1(0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000500)=0x1) clock_gettime(0x0, 0x0) write(r2, &(0x7f0000000340), 0x41395527) openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000180)=0x3ff, &(0x7f00000001c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000008c0)={0xa, @raw_data="673d66d67358332e59422684d522586d8dc6bb8d9ab8cd491981e6110b569741f109dab727f76331c821ccdb172bd8246ec7d05596b6874baf2fac244074398a47b29ae8b79191cf6f1a9da708c7f8e173c8b9efe1267e76efd0a870fadbfb01905a41c4eb8d9b28c8e4c89e2e72447c0b835278f39fb58b7a32a62b20b6e49350002387cf137d57c058c13d1ad386ade3e29fe91a32ba98f473c6546970364609f5424c9b203d2dbd08187386523b8fba053c24ec7f2fcdf062588bcb457186c1bba36f43131ae4"}) read$FUSE(r3, &(0x7f00000050c0), 0x1000) read$FUSE(r3, &(0x7f00000040c0), 0x1000) write$FUSE_INTERRUPT(r3, &(0x7f00000000c0)={0x10, 0xfffffff5, 0x3}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000100)) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f00000004c0)={0x0, 0x57ea, 0x17}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mISDNtimer\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0), &(0x7f0000000340)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff00000000}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 00:28:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) open(0x0, 0x0, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7}, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) [ 216.255975] protocol 88fb is buggy, dev hsr_slave_0 [ 216.261221] protocol 88fb is buggy, dev hsr_slave_1 00:28:35 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/247, 0xf7}], 0x1, 0x0) 00:28:36 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0218d700100000000000000000000000030006000e2000000200006ae000000100000000010000000800120002000200000005000000000030000000020300000000000f00000000020000000000000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) 00:28:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) open(0x0, 0x0, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7}, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) 00:28:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) open(0x0, 0x0, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7}, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) 00:28:36 executing program 4: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) listen(r0, 0x5) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9, 0x2031, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1123) 00:28:36 executing program 4: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) listen(r0, 0x5) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9, 0x2031, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1123) 00:28:37 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0x0) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) creat(&(0x7f0000000240)='./file0\x00', 0x10) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0xfffffffffffffff8, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x8, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3, 0x1800000000000, 0x3a53, 0x0, 0x1, 0x7, 0x8, 0xf6, 0x0, 0x1ff, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x2300, 0x1000000000, 0x109, 0x4, 0x1, 0x8}, 0x0, 0xd, r1, 0x8) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f00000001c0), 0x2000000000) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7}, 0x7) sched_getscheduler(0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:28:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0218d700100000000000000000000000030006000e2000000200006ae000000100000000010000000800120002000200000005000000000030000000020300000000000f00000000020000000000000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) 00:28:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'sha512-avx\x00\x00\x00\x00\xc0\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}, &(0x7f0000000700)}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000500), &(0x7f0000000700)=0xc) 00:28:37 executing program 4: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) listen(r0, 0x5) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9, 0x2031, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1123) 00:28:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0218d700100000000000000000000000030006000e2000000200006ae000000100000000010000000800120002000200000005000000000030000000020300000000000f00000000020000000000000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) [ 217.826077] capability: warning: `syz-executor2' uses 32-bit capabilities (legacy support in use) 00:28:37 executing program 4: r0 = socket$nl_xfrm(0xa, 0x5, 0x84) listen(r0, 0x5) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x9, 0x2031, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1123) 00:28:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'sha512-avx\x00\x00\x00\x00\xc0\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}, &(0x7f0000000700)}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000500), &(0x7f0000000700)=0xc) 00:28:37 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x85\xc3p6\x00\x00\x00\xd9\x03X\xcc\xb1\xa0S\xffq\x814\xaf\xd5\xd7=\x05Lh\x03}\xe6\x93j\xd7\xf8\xed\x80\x00\x00\x00\x00\x00\x00\x00v\x89fD\xd1\x84G%\x18\x00\x00') exit(0x0) getdents(r0, 0x0, 0x0) 00:28:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) open(0x0, 0x0, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7}, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) 00:28:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) open(0x0, 0x0, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7}, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) 00:28:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0218d700100000000000000000000000030006000e2000000200006ae000000100000000010000000800120002000200000005000000000030000000020300000000000f00000000020000000000000092ab000000000001020014bb00200000ffffffde000000000300050000000000020000f3df0000210008000002000000"], 0x80}}, 0x0) 00:28:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'sha512-avx\x00\x00\x00\x00\xc0\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}, &(0x7f0000000700)}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000500), &(0x7f0000000700)=0xc) 00:28:38 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0x0) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) creat(&(0x7f0000000240)='./file0\x00', 0x10) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0xfffffffffffffff8, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x8, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3, 0x1800000000000, 0x3a53, 0x0, 0x1, 0x7, 0x8, 0xf6, 0x0, 0x1ff, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x2300, 0x1000000000, 0x109, 0x4, 0x1, 0x8}, 0x0, 0xd, r1, 0x8) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f00000001c0), 0x2000000000) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7}, 0x7) sched_getscheduler(0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:28:38 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0x0) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) creat(&(0x7f0000000240)='./file0\x00', 0x10) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0xfffffffffffffff8, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x8, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3, 0x1800000000000, 0x3a53, 0x0, 0x1, 0x7, 0x8, 0xf6, 0x0, 0x1ff, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x2300, 0x1000000000, 0x109, 0x4, 0x1, 0x8}, 0x0, 0xd, r1, 0x8) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f00000001c0), 0x2000000000) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7}, 0x7) sched_getscheduler(0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:28:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000600)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'sha512-avx\x00\x00\x00\x00\xc0\x00\x00\x00\x00\xff\xff\xff\x8d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\x00'}, &(0x7f0000000700)}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000500), &(0x7f0000000700)=0xc) 00:28:38 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 00:28:38 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0x0) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) creat(&(0x7f0000000240)='./file0\x00', 0x10) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0xfffffffffffffff8, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x8, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3, 0x1800000000000, 0x3a53, 0x0, 0x1, 0x7, 0x8, 0xf6, 0x0, 0x1ff, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x2300, 0x1000000000, 0x109, 0x4, 0x1, 0x8}, 0x0, 0xd, r1, 0x8) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f00000001c0), 0x2000000000) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7}, 0x7) sched_getscheduler(0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:28:38 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x85\xc3p6\x00\x00\x00\xd9\x03X\xcc\xb1\xa0S\xffq\x814\xaf\xd5\xd7=\x05Lh\x03}\xe6\x93j\xd7\xf8\xed\x80\x00\x00\x00\x00\x00\x00\x00v\x89fD\xd1\x84G%\x18\x00\x00') exit(0x0) getdents(r0, 0x0, 0x0) 00:28:38 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0x0) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) creat(&(0x7f0000000240)='./file0\x00', 0x10) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0xfffffffffffffff8, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x8, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3, 0x1800000000000, 0x3a53, 0x0, 0x1, 0x7, 0x8, 0xf6, 0x0, 0x1ff, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x2300, 0x1000000000, 0x109, 0x4, 0x1, 0x8}, 0x0, 0xd, r1, 0x8) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f00000001c0), 0x2000000000) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7}, 0x7) sched_getscheduler(0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:28:38 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0x0) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) creat(&(0x7f0000000240)='./file0\x00', 0x10) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0xfffffffffffffff8, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x8, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3, 0x1800000000000, 0x3a53, 0x0, 0x1, 0x7, 0x8, 0xf6, 0x0, 0x1ff, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x2300, 0x1000000000, 0x109, 0x4, 0x1, 0x8}, 0x0, 0xd, r1, 0x8) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f00000001c0), 0x2000000000) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7}, 0x7) sched_getscheduler(0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:28:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) open(0x0, 0x0, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7}, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) 00:28:39 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 00:28:39 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0x0) capget(&(0x7f0000000840)={0x19980330}, &(0x7f0000000880)) creat(&(0x7f0000000240)='./file0\x00', 0x10) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0xfffffffffffffff8, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x8, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3, 0x1800000000000, 0x3a53, 0x0, 0x1, 0x7, 0x8, 0xf6, 0x0, 0x1ff, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x2300, 0x1000000000, 0x109, 0x4, 0x1, 0x8}, 0x0, 0xd, r1, 0x8) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f00000001c0), 0x2000000000) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7}, 0x7) sched_getscheduler(0x0) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:28:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) open(0x0, 0x0, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7}, 0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) 00:28:39 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e6090000001c26b300000000000000", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005800)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="104a2d9e3da15b605e2e56c00c59cac366", 0x11}], 0x1, &(0x7f0000000280)}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000200)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/80, 0x50}], 0x1}}], 0x2, 0x0, 0x0) 00:28:39 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e6090000001c26b300000000000000", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005800)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="104a2d9e3da15b605e2e56c00c59cac366", 0x11}], 0x1, &(0x7f0000000280)}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000200)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/80, 0x50}], 0x1}}], 0x2, 0x0, 0x0) 00:28:39 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) futex(0x0, 0x0, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}, {}], 0x2, 0xd) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x215) fcntl$addseals(r0, 0x409, 0x8) timer_create(0x7, &(0x7f0000000880)={0x0, 0x2000030, 0x0, @thr={&(0x7f0000000180)="d40cbd7e0432f70a60c0390864147fac8ddd79b78c3887e995815689df7706f39ce9434fdf6c44b9", 0x0}}, 0x0) unshare(0x40000000) r3 = getpid() bind$bt_rfcomm(r1, 0x0, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x13, r1, 0x58) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x480, 0xcc, 0x0, 0x1c0, 0xcc, 0x0, 0x3ec, 0x3ec, 0x3ec, 0x3ec, 0x3ec, 0x5, &(0x7f0000000540), {[{{@uncond, 0x0, 0x98, 0xcc}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0xb, @multicast1, @multicast2, @port=0x4e20, @gre_key=0xffffffffffffff71}}}}, {{@uncond, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="c373c280f48d", 0x10001, 0x7, [0x2d, 0x32, 0x37, 0x40, 0x1e, 0x3b, 0x10, 0x2c, 0xf, 0x38, 0x3d, 0x1c, 0xa, 0x2e, 0xb, 0x3d], 0x0, 0x1ff}}}, {{@uncond, 0x0, 0xf0, 0x124, 0x0, {}, [@common=@ttl={0x24, 'ttl\x00', 0x0, {0x0, 0x6}}, @common=@unspec=@devgroup={0x34, 'devgroup\x00', 0x0, {0x1, 0x9, 0x8, 0x1, 0x4}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast2, @multicast1, @port=0x4e20, @gre_key=0x316}}}}, {{@uncond, 0x0, 0xe4, 0x108, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0xc, 0x401, 0x101}}, @common=@unspec=@pkttype={0x28, 'pkttype\x00', 0x0, {0x98, 0x100000001}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xfff}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x4dc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r1, 0x4) r4 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x3ff, 0x80000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={[], 0x4cc, 0x4, 0x3, 0x0, 0x7ff, r3}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000140)={0x2, &(0x7f0000000700)=[{}, {}]}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000200)={0x7}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x80000000082, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) write$P9_RCLUNK(r1, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x3ffd, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) recvmsg(r7, &(0x7f0000000000)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x2100) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) bind$xdp(r1, &(0x7f0000000280)={0x2c, 0x3, r2, 0x2a, r1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000100)=0x5) dup2(r0, r1) 00:28:39 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 00:28:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x85\xc3p6\x00\x00\x00\xd9\x03X\xcc\xb1\xa0S\xffq\x814\xaf\xd5\xd7=\x05Lh\x03}\xe6\x93j\xd7\xf8\xed\x80\x00\x00\x00\x00\x00\x00\x00v\x89fD\xd1\x84G%\x18\x00\x00') exit(0x0) getdents(r0, 0x0, 0x0) 00:28:39 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e6090000001c26b300000000000000", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005800)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="104a2d9e3da15b605e2e56c00c59cac366", 0x11}], 0x1, &(0x7f0000000280)}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000200)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/80, 0x50}], 0x1}}], 0x2, 0x0, 0x0) [ 219.994610] QAT: Invalid ioctl [ 220.007480] QAT: Invalid ioctl 00:28:39 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) 00:28:39 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e6090000001c26b300000000000000", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005800)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="104a2d9e3da15b605e2e56c00c59cac366", 0x11}], 0x1, &(0x7f0000000280)}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000200)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/80, 0x50}], 0x1}}], 0x2, 0x0, 0x0) [ 220.229110] IPVS: ftp: loaded support on port[0] = 21 00:28:39 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400040, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000003c0)={0x2, {0xffffffffffffff51, 0x8000, 0x80000001, 0x8}, {0x766, 0x2, 0x101, 0x6e1}, {0x8, 0x3}}) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000004c0)={0x4, [0x7, 0x91, 0x0, 0x0]}) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r7 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r5}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r6}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r7}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:28:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x00%k\b\x00', 0x4000}) write(0xffffffffffffffff, &(0x7f0000000100)="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", 0xfc) 00:28:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='stat\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/210, 0xd2}, 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000000ef, 0x0) 00:28:40 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) connect(r0, &(0x7f00000004c0)=@un=@abs, 0x80) [ 220.672708] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.683357] bridge0: port 1(bridge_slave_0) entered disabled state 00:28:40 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x85\xc3p6\x00\x00\x00\xd9\x03X\xcc\xb1\xa0S\xffq\x814\xaf\xd5\xd7=\x05Lh\x03}\xe6\x93j\xd7\xf8\xed\x80\x00\x00\x00\x00\x00\x00\x00v\x89fD\xd1\x84G%\x18\x00\x00') exit(0x0) getdents(r0, 0x0, 0x0) [ 220.779500] QAT: Invalid ioctl [ 220.797044] QAT: Invalid ioctl 00:28:40 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) connect(r0, &(0x7f00000004c0)=@un=@abs, 0x80) [ 220.936631] IPVS: ftp: loaded support on port[0] = 21 00:28:42 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400040, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000003c0)={0x2, {0xffffffffffffff51, 0x8000, 0x80000001, 0x8}, {0x766, 0x2, 0x101, 0x6e1}, {0x8, 0x3}}) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000004c0)={0x4, [0x7, 0x91, 0x0, 0x0]}) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r7 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r5}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r6}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r7}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:28:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='stat\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/210, 0xd2}, 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000000ef, 0x0) 00:28:42 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) connect(r0, &(0x7f00000004c0)=@un=@abs, 0x80) 00:28:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x00%k\b\x00', 0x4000}) write(0xffffffffffffffff, &(0x7f0000000100)="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", 0xfc) 00:28:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x00%k\b\x00', 0x4000}) write(0xffffffffffffffff, &(0x7f0000000100)="fc0000001a000700ab092500090007000aab80ff0100520200003693210002004e3d951e6a5914fe050055820000126a554901ba6da9edf27595057d0000030510fa2c1e998656aaab9bb94b46fe0000020704020800008c000081000000000000002e117ca9ebc27f21400000040000897f787467584034d07302ade01720d7d5bbc91ae1f0f156272f5baa000005defd5a32c6436c7fbf6a80fc83ab82f605f3560c3c7c51d39e5aa4bfd60c9ddef2fe018038f4a4e473fa0370e99c31e470f8b29d03ff463283170e5bbab2ccd243f295ec94e0ad91bd0741babc7c3f2eeb57d43dd16b17e583df05003b0000000046a6b567acb26ad4fa184a0b", 0xfc) 00:28:42 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) futex(0x0, 0x0, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}, {}], 0x2, 0xd) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x215) fcntl$addseals(r0, 0x409, 0x8) timer_create(0x7, &(0x7f0000000880)={0x0, 0x2000030, 0x0, @thr={&(0x7f0000000180)="d40cbd7e0432f70a60c0390864147fac8ddd79b78c3887e995815689df7706f39ce9434fdf6c44b9", 0x0}}, 0x0) unshare(0x40000000) r3 = getpid() bind$bt_rfcomm(r1, 0x0, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x13, r1, 0x58) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x480, 0xcc, 0x0, 0x1c0, 0xcc, 0x0, 0x3ec, 0x3ec, 0x3ec, 0x3ec, 0x3ec, 0x5, &(0x7f0000000540), {[{{@uncond, 0x0, 0x98, 0xcc}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0xb, @multicast1, @multicast2, @port=0x4e20, @gre_key=0xffffffffffffff71}}}}, {{@uncond, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="c373c280f48d", 0x10001, 0x7, [0x2d, 0x32, 0x37, 0x40, 0x1e, 0x3b, 0x10, 0x2c, 0xf, 0x38, 0x3d, 0x1c, 0xa, 0x2e, 0xb, 0x3d], 0x0, 0x1ff}}}, {{@uncond, 0x0, 0xf0, 0x124, 0x0, {}, [@common=@ttl={0x24, 'ttl\x00', 0x0, {0x0, 0x6}}, @common=@unspec=@devgroup={0x34, 'devgroup\x00', 0x0, {0x1, 0x9, 0x8, 0x1, 0x4}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast2, @multicast1, @port=0x4e20, @gre_key=0x316}}}}, {{@uncond, 0x0, 0xe4, 0x108, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0xc, 0x401, 0x101}}, @common=@unspec=@pkttype={0x28, 'pkttype\x00', 0x0, {0x98, 0x100000001}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xfff}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x4dc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r1, 0x4) r4 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x3ff, 0x80000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={[], 0x4cc, 0x4, 0x3, 0x0, 0x7ff, r3}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000140)={0x2, &(0x7f0000000700)=[{}, {}]}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000200)={0x7}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x80000000082, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) write$P9_RCLUNK(r1, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x3ffd, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) recvmsg(r7, &(0x7f0000000000)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x2100) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) bind$xdp(r1, &(0x7f0000000280)={0x2c, 0x3, r2, 0x2a, r1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000100)=0x5) dup2(r0, r1) [ 222.897577] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.907010] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.979003] device bridge0 left promiscuous mode 00:28:42 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) connect(r0, &(0x7f00000004c0)=@un=@abs, 0x80) [ 223.076557] QAT: Invalid ioctl [ 223.135975] QAT: Invalid ioctl 00:28:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='stat\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/210, 0xd2}, 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000000ef, 0x0) 00:28:42 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400040, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000003c0)={0x2, {0xffffffffffffff51, 0x8000, 0x80000001, 0x8}, {0x766, 0x2, 0x101, 0x6e1}, {0x8, 0x3}}) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000004c0)={0x4, [0x7, 0x91, 0x0, 0x0]}) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r7 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r5}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r6}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r7}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:28:42 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) futex(0x0, 0x0, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}, {}], 0x2, 0xd) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x215) fcntl$addseals(r0, 0x409, 0x8) timer_create(0x7, &(0x7f0000000880)={0x0, 0x2000030, 0x0, @thr={&(0x7f0000000180)="d40cbd7e0432f70a60c0390864147fac8ddd79b78c3887e995815689df7706f39ce9434fdf6c44b9", 0x0}}, 0x0) unshare(0x40000000) r3 = getpid() bind$bt_rfcomm(r1, 0x0, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x13, r1, 0x58) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x480, 0xcc, 0x0, 0x1c0, 0xcc, 0x0, 0x3ec, 0x3ec, 0x3ec, 0x3ec, 0x3ec, 0x5, &(0x7f0000000540), {[{{@uncond, 0x0, 0x98, 0xcc}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0xb, @multicast1, @multicast2, @port=0x4e20, @gre_key=0xffffffffffffff71}}}}, {{@uncond, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="c373c280f48d", 0x10001, 0x7, [0x2d, 0x32, 0x37, 0x40, 0x1e, 0x3b, 0x10, 0x2c, 0xf, 0x38, 0x3d, 0x1c, 0xa, 0x2e, 0xb, 0x3d], 0x0, 0x1ff}}}, {{@uncond, 0x0, 0xf0, 0x124, 0x0, {}, [@common=@ttl={0x24, 'ttl\x00', 0x0, {0x0, 0x6}}, @common=@unspec=@devgroup={0x34, 'devgroup\x00', 0x0, {0x1, 0x9, 0x8, 0x1, 0x4}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast2, @multicast1, @port=0x4e20, @gre_key=0x316}}}}, {{@uncond, 0x0, 0xe4, 0x108, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0xc, 0x401, 0x101}}, @common=@unspec=@pkttype={0x28, 'pkttype\x00', 0x0, {0x98, 0x100000001}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xfff}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x4dc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r1, 0x4) r4 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x3ff, 0x80000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={[], 0x4cc, 0x4, 0x3, 0x0, 0x7ff, r3}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000140)={0x2, &(0x7f0000000700)=[{}, {}]}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000200)={0x7}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x80000000082, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) write$P9_RCLUNK(r1, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x3ffd, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) recvmsg(r7, &(0x7f0000000000)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x2100) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) bind$xdp(r1, &(0x7f0000000280)={0x2c, 0x3, r2, 0x2a, r1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000100)=0x5) dup2(r0, r1) [ 223.428447] IPVS: ftp: loaded support on port[0] = 21 [ 223.550471] QAT: Invalid ioctl [ 223.614947] QAT: Invalid ioctl 00:28:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='stat\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/210, 0xd2}, 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000000ef, 0x0) [ 223.822145] IPVS: ftp: loaded support on port[0] = 21 00:28:43 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400040, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000003c0)={0x2, {0xffffffffffffff51, 0x8000, 0x80000001, 0x8}, {0x766, 0x2, 0x101, 0x6e1}, {0x8, 0x3}}) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000004c0)={0x4, [0x7, 0x91, 0x0, 0x0]}) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r7 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r5}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r6}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r7}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:28:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400040, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000003c0)={0x2, {0xffffffffffffff51, 0x8000, 0x80000001, 0x8}, {0x766, 0x2, 0x101, 0x6e1}, {0x8, 0x3}}) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000004c0)={0x4, [0x7, 0x91, 0x0, 0x0]}) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r7 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r5}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r6}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r7}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:28:43 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400040, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000003c0)={0x2, {0xffffffffffffff51, 0x8000, 0x80000001, 0x8}, {0x766, 0x2, 0x101, 0x6e1}, {0x8, 0x3}}) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000004c0)={0x4, [0x7, 0x91, 0x0, 0x0]}) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r7 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r5}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r6}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r7}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:28:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400040, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000003c0)={0x2, {0xffffffffffffff51, 0x8000, 0x80000001, 0x8}, {0x766, 0x2, 0x101, 0x6e1}, {0x8, 0x3}}) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000004c0)={0x4, [0x7, 0x91, 0x0, 0x0]}) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r7 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r5}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r6}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r7}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:28:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x00%k\b\x00', 0x4000}) write(0xffffffffffffffff, &(0x7f0000000100)="fc0000001a000700ab092500090007000aab80ff0100520200003693210002004e3d951e6a5914fe050055820000126a554901ba6da9edf27595057d0000030510fa2c1e998656aaab9bb94b46fe0000020704020800008c000081000000000000002e117ca9ebc27f21400000040000897f787467584034d07302ade01720d7d5bbc91ae1f0f156272f5baa000005defd5a32c6436c7fbf6a80fc83ab82f605f3560c3c7c51d39e5aa4bfd60c9ddef2fe018038f4a4e473fa0370e99c31e470f8b29d03ff463283170e5bbab2ccd243f295ec94e0ad91bd0741babc7c3f2eeb57d43dd16b17e583df05003b0000000046a6b567acb26ad4fa184a0b", 0xfc) 00:28:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x00%k\b\x00', 0x4000}) write(0xffffffffffffffff, &(0x7f0000000100)="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", 0xfc) 00:28:46 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) futex(0x0, 0x0, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}, {}], 0x2, 0xd) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x215) fcntl$addseals(r0, 0x409, 0x8) timer_create(0x7, &(0x7f0000000880)={0x0, 0x2000030, 0x0, @thr={&(0x7f0000000180)="d40cbd7e0432f70a60c0390864147fac8ddd79b78c3887e995815689df7706f39ce9434fdf6c44b9", 0x0}}, 0x0) unshare(0x40000000) r3 = getpid() bind$bt_rfcomm(r1, 0x0, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x13, r1, 0x58) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x480, 0xcc, 0x0, 0x1c0, 0xcc, 0x0, 0x3ec, 0x3ec, 0x3ec, 0x3ec, 0x3ec, 0x5, &(0x7f0000000540), {[{{@uncond, 0x0, 0x98, 0xcc}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0xb, @multicast1, @multicast2, @port=0x4e20, @gre_key=0xffffffffffffff71}}}}, {{@uncond, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="c373c280f48d", 0x10001, 0x7, [0x2d, 0x32, 0x37, 0x40, 0x1e, 0x3b, 0x10, 0x2c, 0xf, 0x38, 0x3d, 0x1c, 0xa, 0x2e, 0xb, 0x3d], 0x0, 0x1ff}}}, {{@uncond, 0x0, 0xf0, 0x124, 0x0, {}, [@common=@ttl={0x24, 'ttl\x00', 0x0, {0x0, 0x6}}, @common=@unspec=@devgroup={0x34, 'devgroup\x00', 0x0, {0x1, 0x9, 0x8, 0x1, 0x4}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast2, @multicast1, @port=0x4e20, @gre_key=0x316}}}}, {{@uncond, 0x0, 0xe4, 0x108, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0xc, 0x401, 0x101}}, @common=@unspec=@pkttype={0x28, 'pkttype\x00', 0x0, {0x98, 0x100000001}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xfff}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x4dc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r1, 0x4) r4 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x3ff, 0x80000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={[], 0x4cc, 0x4, 0x3, 0x0, 0x7ff, r3}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000140)={0x2, &(0x7f0000000700)=[{}, {}]}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000200)={0x7}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x80000000082, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) write$P9_RCLUNK(r1, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x3ffd, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) recvmsg(r7, &(0x7f0000000000)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x2100) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) bind$xdp(r1, &(0x7f0000000280)={0x2c, 0x3, r2, 0x2a, r1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000100)=0x5) dup2(r0, r1) 00:28:46 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400040, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000003c0)={0x2, {0xffffffffffffff51, 0x8000, 0x80000001, 0x8}, {0x766, 0x2, 0x101, 0x6e1}, {0x8, 0x3}}) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000004c0)={0x4, [0x7, 0x91, 0x0, 0x0]}) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r7 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r5}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r6}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r7}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:28:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x00%k\b\x00', 0x4000}) write(0xffffffffffffffff, &(0x7f0000000100)="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", 0xfc) 00:28:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400040, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000003c0)={0x2, {0xffffffffffffff51, 0x8000, 0x80000001, 0x8}, {0x766, 0x2, 0x101, 0x6e1}, {0x8, 0x3}}) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000004c0)={0x4, [0x7, 0x91, 0x0, 0x0]}) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r7 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r5}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r6}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r7}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:28:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\x00\x00%k\b\x00', 0x4000}) write(0xffffffffffffffff, &(0x7f0000000100)="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", 0xfc) 00:28:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) futex(0x0, 0x0, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}, {}], 0x2, 0xd) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x215) fcntl$addseals(r0, 0x409, 0x8) timer_create(0x7, &(0x7f0000000880)={0x0, 0x2000030, 0x0, @thr={&(0x7f0000000180)="d40cbd7e0432f70a60c0390864147fac8ddd79b78c3887e995815689df7706f39ce9434fdf6c44b9", 0x0}}, 0x0) unshare(0x40000000) r3 = getpid() bind$bt_rfcomm(r1, 0x0, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x13, r1, 0x58) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x480, 0xcc, 0x0, 0x1c0, 0xcc, 0x0, 0x3ec, 0x3ec, 0x3ec, 0x3ec, 0x3ec, 0x5, &(0x7f0000000540), {[{{@uncond, 0x0, 0x98, 0xcc}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0xb, @multicast1, @multicast2, @port=0x4e20, @gre_key=0xffffffffffffff71}}}}, {{@uncond, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="c373c280f48d", 0x10001, 0x7, [0x2d, 0x32, 0x37, 0x40, 0x1e, 0x3b, 0x10, 0x2c, 0xf, 0x38, 0x3d, 0x1c, 0xa, 0x2e, 0xb, 0x3d], 0x0, 0x1ff}}}, {{@uncond, 0x0, 0xf0, 0x124, 0x0, {}, [@common=@ttl={0x24, 'ttl\x00', 0x0, {0x0, 0x6}}, @common=@unspec=@devgroup={0x34, 'devgroup\x00', 0x0, {0x1, 0x9, 0x8, 0x1, 0x4}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast2, @multicast1, @port=0x4e20, @gre_key=0x316}}}}, {{@uncond, 0x0, 0xe4, 0x108, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0xc, 0x401, 0x101}}, @common=@unspec=@pkttype={0x28, 'pkttype\x00', 0x0, {0x98, 0x100000001}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xfff}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x4dc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r1, 0x4) r4 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x3ff, 0x80000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={[], 0x4cc, 0x4, 0x3, 0x0, 0x7ff, r3}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000140)={0x2, &(0x7f0000000700)=[{}, {}]}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000200)={0x7}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x80000000082, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) write$P9_RCLUNK(r1, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x3ffd, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) recvmsg(r7, &(0x7f0000000000)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x2100) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) bind$xdp(r1, &(0x7f0000000280)={0x2c, 0x3, r2, 0x2a, r1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000100)=0x5) dup2(r0, r1) [ 226.944524] QAT: Invalid ioctl 00:28:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xf0001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)) [ 227.011920] QAT: Invalid ioctl 00:28:46 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) io_setup(0xb, &(0x7f00000001c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0500000093c21faf16da39de706f64685e16ecfd2cfd09684d9c7afae3b51948037dc1250200009500dd1203ed5f1023fa813c000000010000", 0x39}]) [ 227.059716] QAT: Invalid ioctl [ 227.078334] QAT: Invalid ioctl [ 227.235659] IPVS: ftp: loaded support on port[0] = 21 [ 227.307658] IPVS: ftp: loaded support on port[0] = 21 00:28:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xf0001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)) 00:28:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xf0001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)) 00:28:46 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400040, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f00000003c0)={0x2, {0xffffffffffffff51, 0x8000, 0x80000001, 0x8}, {0x766, 0x2, 0x101, 0x6e1}, {0x8, 0x3}}) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x8000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000100)={'ah\x00'}, &(0x7f0000000180)=0x1e) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000004c0)={0x4, [0x7, 0x91, 0x0, 0x0]}) r4 = getpgid(0x0) syz_open_procfs(r4, &(0x7f00000007c0)='clear_refs\x00') write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) vmsplice(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000002400)}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xfffffffffffffeda) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@mcast1, @in=@remote}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000640)=0xe8) geteuid() getresuid(&(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)) getresuid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f0000000a00)) r7 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)={{}, {0x1, 0x5}, [{0x2, 0x0, r5}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x4, r6}, {0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x1, r7}, {0x8, 0x5}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380), 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x200, 0x4) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000a40)={0x1, 0x5, 0x0, 0x5ef8, 0x4, [{0x8, 0x80000001, 0xfe, 0x0, 0x0, 0x100}, {0xafbb, 0xffff, 0x7, 0x0, 0x0, 0x1}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x201}, {0x5, 0x80, 0x8, 0x0, 0x0, 0x1006}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:28:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xf0001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)) 00:28:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xf0001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)) 00:28:49 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x4, 0x4, 0x14000000}, 0x2c) 00:28:49 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) futex(0x0, 0x0, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}, {}], 0x2, 0xd) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x215) fcntl$addseals(r0, 0x409, 0x8) timer_create(0x7, &(0x7f0000000880)={0x0, 0x2000030, 0x0, @thr={&(0x7f0000000180)="d40cbd7e0432f70a60c0390864147fac8ddd79b78c3887e995815689df7706f39ce9434fdf6c44b9", 0x0}}, 0x0) unshare(0x40000000) r3 = getpid() bind$bt_rfcomm(r1, 0x0, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x13, r1, 0x58) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x480, 0xcc, 0x0, 0x1c0, 0xcc, 0x0, 0x3ec, 0x3ec, 0x3ec, 0x3ec, 0x3ec, 0x5, &(0x7f0000000540), {[{{@uncond, 0x0, 0x98, 0xcc}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0xb, @multicast1, @multicast2, @port=0x4e20, @gre_key=0xffffffffffffff71}}}}, {{@uncond, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="c373c280f48d", 0x10001, 0x7, [0x2d, 0x32, 0x37, 0x40, 0x1e, 0x3b, 0x10, 0x2c, 0xf, 0x38, 0x3d, 0x1c, 0xa, 0x2e, 0xb, 0x3d], 0x0, 0x1ff}}}, {{@uncond, 0x0, 0xf0, 0x124, 0x0, {}, [@common=@ttl={0x24, 'ttl\x00', 0x0, {0x0, 0x6}}, @common=@unspec=@devgroup={0x34, 'devgroup\x00', 0x0, {0x1, 0x9, 0x8, 0x1, 0x4}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast2, @multicast1, @port=0x4e20, @gre_key=0x316}}}}, {{@uncond, 0x0, 0xe4, 0x108, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0xc, 0x401, 0x101}}, @common=@unspec=@pkttype={0x28, 'pkttype\x00', 0x0, {0x98, 0x100000001}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xfff}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x4dc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r1, 0x4) r4 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x3ff, 0x80000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={[], 0x4cc, 0x4, 0x3, 0x0, 0x7ff, r3}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000140)={0x2, &(0x7f0000000700)=[{}, {}]}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000200)={0x7}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x80000000082, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) write$P9_RCLUNK(r1, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x3ffd, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) recvmsg(r7, &(0x7f0000000000)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x2100) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) bind$xdp(r1, &(0x7f0000000280)={0x2c, 0x3, r2, 0x2a, r1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000100)=0x5) dup2(r0, r1) 00:28:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xf0001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)) 00:28:49 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x4, 0x4, 0x14000000}, 0x2c) [ 229.843852] QAT: Invalid ioctl [ 229.857943] QAT: Invalid ioctl 00:28:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) futex(0x0, 0x0, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) epoll_wait(r1, &(0x7f0000000500)=[{}, {}], 0x2, 0xd) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x215) fcntl$addseals(r0, 0x409, 0x8) timer_create(0x7, &(0x7f0000000880)={0x0, 0x2000030, 0x0, @thr={&(0x7f0000000180)="d40cbd7e0432f70a60c0390864147fac8ddd79b78c3887e995815689df7706f39ce9434fdf6c44b9", 0x0}}, 0x0) unshare(0x40000000) r3 = getpid() bind$bt_rfcomm(r1, 0x0, 0x0) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x13, r1, 0x58) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x480, 0xcc, 0x0, 0x1c0, 0xcc, 0x0, 0x3ec, 0x3ec, 0x3ec, 0x3ec, 0x3ec, 0x5, &(0x7f0000000540), {[{{@uncond, 0x0, 0x98, 0xcc}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0xb, @multicast1, @multicast2, @port=0x4e20, @gre_key=0xffffffffffffff71}}}}, {{@uncond, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="c373c280f48d", 0x10001, 0x7, [0x2d, 0x32, 0x37, 0x40, 0x1e, 0x3b, 0x10, 0x2c, 0xf, 0x38, 0x3d, 0x1c, 0xa, 0x2e, 0xb, 0x3d], 0x0, 0x1ff}}}, {{@uncond, 0x0, 0xf0, 0x124, 0x0, {}, [@common=@ttl={0x24, 'ttl\x00', 0x0, {0x0, 0x6}}, @common=@unspec=@devgroup={0x34, 'devgroup\x00', 0x0, {0x1, 0x9, 0x8, 0x1, 0x4}}]}, @REDIRECT={0x34, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast2, @multicast1, @port=0x4e20, @gre_key=0x316}}}}, {{@uncond, 0x0, 0xe4, 0x108, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0xc, 0x401, 0x101}}, @common=@unspec=@pkttype={0x28, 'pkttype\x00', 0x0, {0x98, 0x100000001}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xfff}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x4dc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r1, 0x4) r4 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x3ff, 0x80000) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={[], 0x4cc, 0x4, 0x3, 0x0, 0x7ff, r3}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000140)={0x2, &(0x7f0000000700)=[{}, {}]}) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000200)={0x7}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x80000000082, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) write$P9_RCLUNK(r1, &(0x7f0000000240)={0x7, 0x79, 0x2}, 0x7) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vsock\x00', 0x3ffd, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) recvmsg(r7, &(0x7f0000000000)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000480)=""/2, 0x2}, 0x2100) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) bind$xdp(r1, &(0x7f0000000280)={0x2c, 0x3, r2, 0x2a, r1}, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000100)=0x5) dup2(r0, r1) 00:28:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000000)={0xf0001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000080)) [ 230.454626] QAT: Invalid ioctl [ 230.470213] QAT: Invalid ioctl [ 230.472779] IPVS: ftp: loaded support on port[0] = 21 [ 230.559632] IPVS: ftp: loaded support on port[0] = 21 00:28:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x120, 0x0, &(0x7f00000001c0)={0x77359400}) 00:28:53 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x4, 0x4, 0x14000000}, 0x2c) 00:28:53 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80}) 00:28:53 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, &(0x7f0000000240)=0x7ffd, r1, 0x0, 0x80003, 0x0) 00:28:53 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) rt_sigreturn() 00:28:53 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 00:28:53 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 00:28:53 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = getpid() setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x6, 0x4, 0x4, 0x14000000}, 0x2c) 00:28:53 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80}) 00:28:53 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, &(0x7f0000000240)=0x7ffd, r1, 0x0, 0x80003, 0x0) 00:28:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000a280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000071c0)=[{0xc, 0x1}], 0xc}}], 0x1, 0x4000000) 00:28:53 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 00:28:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x120, 0x0, &(0x7f00000001c0)={0x77359400}) 00:28:54 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80}) 00:28:54 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 00:28:54 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, &(0x7f0000000240)=0x7ffd, r1, 0x0, 0x80003, 0x0) 00:28:54 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) rt_sigreturn() 00:28:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000a280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000071c0)=[{0xc, 0x1}], 0xc}}], 0x1, 0x4000000) 00:28:54 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, &(0x7f0000000240)=0x7ffd, r1, 0x0, 0x80003, 0x0) 00:28:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x200000c, 0x80000044031, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 00:28:54 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x80}) 00:28:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000a280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000071c0)=[{0xc, 0x1}], 0xc}}], 0x1, 0x4000000) 00:28:54 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, &(0x7f0000000000)) 00:28:54 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 00:28:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x120, 0x0, &(0x7f00000001c0)={0x77359400}) 00:28:54 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, &(0x7f0000000000)) 00:28:54 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000a280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000071c0)=[{0xc, 0x1}], 0xc}}], 0x1, 0x4000000) 00:28:54 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 00:29:56 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) rt_sigreturn() 00:29:57 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, &(0x7f0000000000)) 00:29:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 00:29:57 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 00:29:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x200000c, 0x80000044031, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 00:29:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002480), 0x120, 0x0, &(0x7f00000001c0)={0x77359400}) 00:29:57 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, &(0x7f0000000000)) 00:29:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 00:29:57 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 00:29:57 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) 00:29:57 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc0485510, &(0x7f0000000200)={{0x0, 0x3, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:29:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x10, 0xf000000}, 0xc, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x14, 0x90b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x17}}]}, 0x2c}}, 0x0) [ 298.217128] device bridge_slave_1 left promiscuous mode [ 298.222831] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.308333] device bridge_slave_0 left promiscuous mode [ 298.313840] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.549956] device hsr_slave_1 left promiscuous mode [ 298.612002] device hsr_slave_0 left promiscuous mode [ 298.659785] team0 (unregistering): Port device team_slave_1 removed [ 298.673890] team0 (unregistering): Port device team_slave_0 removed [ 298.684790] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 298.749875] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 298.833439] bond0 (unregistering): Released all slaves [ 299.734280] IPVS: ftp: loaded support on port[0] = 21 [ 299.872830] chnl_net:caif_netlink_parms(): no params data found [ 299.947057] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.953501] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.968467] device bridge_slave_0 entered promiscuous mode [ 299.981924] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.989594] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.002442] device bridge_slave_1 entered promiscuous mode [ 300.028949] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 300.039046] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 300.062599] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 300.071082] team0: Port device team_slave_0 added [ 300.077139] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 300.084572] team0: Port device team_slave_1 added [ 300.090378] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 300.098312] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 300.167745] device hsr_slave_0 entered promiscuous mode [ 300.226240] device hsr_slave_1 entered promiscuous mode [ 300.296591] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 300.303629] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 300.322606] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 300.367048] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 300.373134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.382549] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 300.392491] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 300.400251] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 300.410815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.418303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.428189] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 300.434258] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.445698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 300.454332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.462930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.471725] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.478139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.488729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 300.496348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.503526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.511702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.519451] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.525774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.544543] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.552196] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.570332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.592730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 300.602877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.613622] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 300.620756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.629204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.643771] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 300.651086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.666782] 8021q: adding VLAN 0 to HW filter on device batadv0 00:31:00 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) rt_sigreturn() 00:31:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x10, 0xf000000}, 0xc, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x14, 0x90b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x17}}]}, 0x2c}}, 0x0) 00:31:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x200000c, 0x80000044031, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 00:31:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x19, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:31:00 executing program 2: socket$inet6(0xa, 0x3, 0x3c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, &(0x7f0000000040)) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x4480, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e06fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x100000003, 0x3a) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) 00:31:00 executing program 3: sysfs$1(0x1, &(0x7f0000000340)='bfs\x00') [ 360.953822] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 361.016772] netlink: 'syz-executor2': attribute type 29 has an invalid length. 00:31:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x19, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:31:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x10, 0xf000000}, 0xc, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x14, 0x90b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x17}}]}, 0x2c}}, 0x0) 00:31:00 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x3, 0x200000) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000000c0)={0x3, 0x7}) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x6, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000340)={0x1, 0x0, {0x3ff, 0x1, 0x7003, 0x4, 0x6, 0x3, 0x2, 0x7}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) listen(r2, 0x0) syncfs(r3) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000000100)={0x8000, 0x0, 0x10000, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0086438, &(0x7f0000000280)={0x1efee504, r4}) accept4(r2, &(0x7f0000b17000)=@generic, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0, r1}, 0x68) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = request_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='team_slave_0\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r5, r6) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1e0) [ 361.101223] netlink: 'syz-executor2': attribute type 29 has an invalid length. 00:31:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x19, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:31:00 executing program 2: socket$inet6(0xa, 0x3, 0x3c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, &(0x7f0000000040)) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x4480, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e06fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x100000003, 0x3a) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) 00:31:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x10, 0xf000000}, 0xc, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x14, 0x90b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x17}}]}, 0x2c}}, 0x0) [ 361.525428] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 361.641949] netlink: 'syz-executor2': attribute type 29 has an invalid length. [ 361.847053] device bridge_slave_1 left promiscuous mode [ 361.852630] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.907637] device bridge_slave_0 left promiscuous mode [ 361.913154] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.031712] device hsr_slave_1 left promiscuous mode [ 362.080652] device hsr_slave_0 left promiscuous mode [ 362.120333] team0 (unregistering): Port device team_slave_1 removed [ 362.131227] team0 (unregistering): Port device team_slave_0 removed [ 362.142789] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 362.182967] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 362.277367] bond0 (unregistering): Released all slaves [ 363.065155] IPVS: ftp: loaded support on port[0] = 21 [ 363.188939] chnl_net:caif_netlink_parms(): no params data found [ 363.242094] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.250413] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.258258] device bridge_slave_0 entered promiscuous mode [ 363.265797] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.272749] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.280467] device bridge_slave_1 entered promiscuous mode [ 363.304285] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 363.314944] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 363.338749] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 363.347076] team0: Port device team_slave_0 added [ 363.352678] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 363.360471] team0: Port device team_slave_1 added [ 363.366311] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 363.373751] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 363.445667] device hsr_slave_0 entered promiscuous mode [ 363.486236] device hsr_slave_1 entered promiscuous mode [ 363.536729] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 363.544003] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 363.573130] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.579548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.586256] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.592612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.645380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.655383] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 363.673391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 363.682423] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.690268] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.702306] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 363.708840] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.718253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 363.726309] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.732686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.743233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.751003] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.757392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.784348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.794568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.807146] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 363.815663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.824440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.833132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.841301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.856304] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 363.863053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 363.870688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 363.883096] 8021q: adding VLAN 0 to HW filter on device batadv0 00:31:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x200000c, 0x80000044031, 0xffffffffffffffff, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) 00:31:46 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x3, 0x200000) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000000c0)={0x3, 0x7}) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x6, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000340)={0x1, 0x0, {0x3ff, 0x1, 0x7003, 0x4, 0x6, 0x3, 0x2, 0x7}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) listen(r2, 0x0) syncfs(r3) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000000100)={0x8000, 0x0, 0x10000, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0086438, &(0x7f0000000280)={0x1efee504, r4}) accept4(r2, &(0x7f0000b17000)=@generic, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0, r1}, 0x68) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = request_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='team_slave_0\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r5, r6) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1e0) 00:31:46 executing program 4: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x19, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 00:31:46 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x3, 0x200000) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000000c0)={0x3, 0x7}) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x6, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000340)={0x1, 0x0, {0x3ff, 0x1, 0x7003, 0x4, 0x6, 0x3, 0x2, 0x7}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) listen(r2, 0x0) syncfs(r3) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000000100)={0x8000, 0x0, 0x10000, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0086438, &(0x7f0000000280)={0x1efee504, r4}) accept4(r2, &(0x7f0000b17000)=@generic, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0, r1}, 0x68) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = request_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='team_slave_0\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r5, r6) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1e0) 00:31:46 executing program 2: socket$inet6(0xa, 0x3, 0x3c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, &(0x7f0000000040)) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x4480, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e06fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x100000003, 0x3a) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) 00:31:46 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000080)='..', &(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='../file0\x00', 0x2) umount2(&(0x7f0000000580)='./file0\x00', 0x0) [ 407.507320] netlink: 'syz-executor2': attribute type 29 has an invalid length. 00:31:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000360000)="2400000052001f0014f9f407002c04091c00071008000100660000000900000000000000", 0x24) [ 407.564826] netlink: 'syz-executor2': attribute type 29 has an invalid length. 00:31:47 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000080)='..', &(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='../file0\x00', 0x2) umount2(&(0x7f0000000580)='./file0\x00', 0x0) 00:31:47 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000080)='..', &(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='../file0\x00', 0x2) umount2(&(0x7f0000000580)='./file0\x00', 0x0) 00:31:47 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000080)='..', &(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='../file0\x00', 0x2) umount2(&(0x7f0000000580)='./file0\x00', 0x0) 00:31:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x2f) 00:31:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, r1, 0x701, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 00:31:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x2f) [ 408.320122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 408.334449] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 408.344090] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 408.354464] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 00:31:47 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x3, 0x200000) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000000c0)={0x3, 0x7}) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x6, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000340)={0x1, 0x0, {0x3ff, 0x1, 0x7003, 0x4, 0x6, 0x3, 0x2, 0x7}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) listen(r2, 0x0) syncfs(r3) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000000100)={0x8000, 0x0, 0x10000, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0086438, &(0x7f0000000280)={0x1efee504, r4}) accept4(r2, &(0x7f0000b17000)=@generic, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0, r1}, 0x68) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = request_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='team_slave_0\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r5, r6) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1e0) 00:31:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, r1, 0x701, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) [ 408.371610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 00:31:47 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x3, 0x200000) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000000c0)={0x3, 0x7}) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x6, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000340)={0x1, 0x0, {0x3ff, 0x1, 0x7003, 0x4, 0x6, 0x3, 0x2, 0x7}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) listen(r2, 0x0) syncfs(r3) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000000100)={0x8000, 0x0, 0x10000, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0086438, &(0x7f0000000280)={0x1efee504, r4}) accept4(r2, &(0x7f0000b17000)=@generic, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0, r1}, 0x68) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = request_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='team_slave_0\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r5, r6) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1e0) 00:31:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x2f) 00:31:47 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000360000)="2400000052001f0014f9f407002c04091c00071008000100660000000900000000000000", 0x24) 00:31:47 executing program 2: socket$inet6(0xa, 0x3, 0x3c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, &(0x7f0000000040)) r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x4480, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e06fa078b5bdb4cb904e473730e55cff26d1b0e001d80020000005e510befccd7", 0x2e}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x100000003, 0x3a) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) [ 408.463628] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 00:31:47 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x2f) [ 408.542176] netlink: 'syz-executor2': attribute type 29 has an invalid length. 00:31:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, r1, 0x701, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 00:31:48 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000360000)="2400000052001f0014f9f407002c04091c00071008000100660000000900000000000000", 0x24) [ 408.594154] netlink: 'syz-executor2': attribute type 29 has an invalid length. 00:31:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xbd6c81f2c439e34f}) 00:31:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, r1, 0x701, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) 00:31:48 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), 0x0}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040), 0x87) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r4 = syz_open_dev$video(0x0, 0xffd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) [ 409.325381] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 409.367980] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready 00:31:48 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x3, 0x200000) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000000c0)={0x3, 0x7}) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x6, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000340)={0x1, 0x0, {0x3ff, 0x1, 0x7003, 0x4, 0x6, 0x3, 0x2, 0x7}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) listen(r2, 0x0) syncfs(r3) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000000100)={0x8000, 0x0, 0x10000, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0086438, &(0x7f0000000280)={0x1efee504, r4}) accept4(r2, &(0x7f0000b17000)=@generic, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0, r1}, 0x68) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = request_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='team_slave_0\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r5, r6) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1e0) 00:31:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xbd6c81f2c439e34f}) [ 409.520470] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 409.537390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 409.561532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 00:31:49 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x801, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r3 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x3, 0x200000) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000000c0)={0x3, 0x7}) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x6, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000340)={0x1, 0x0, {0x3ff, 0x1, 0x7003, 0x4, 0x6, 0x3, 0x2, 0x7}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) listen(r2, 0x0) syncfs(r3) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0106434, &(0x7f0000000100)={0x8000, 0x0, 0x10000, 0x1}) ioctl$DRM_IOCTL_SG_ALLOC(r3, 0xc0086438, &(0x7f0000000280)={0x1efee504, r4}) accept4(r2, &(0x7f0000b17000)=@generic, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x8000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000100), 0x0, r1}, 0x68) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', 0x200008000005}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = request_key(&(0x7f0000000480)='pkcs7_test\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='team_slave_0\x00', 0xfffffffffffffffb) keyctl$get_persistent(0x16, r5, r6) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x1e0) 00:31:49 executing program 2: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xe2f, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 00:31:49 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), 0x0}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040), 0x87) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r4 = syz_open_dev$video(0x0, 0xffd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) 00:31:49 executing program 4: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000360000)="2400000052001f0014f9f407002c04091c00071008000100660000000900000000000000", 0x24) 00:31:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xbd6c81f2c439e34f}) [ 409.703969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 00:31:49 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), 0x0}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040), 0x87) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r4 = syz_open_dev$video(0x0, 0xffd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) 00:31:49 executing program 2: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xe2f, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 00:31:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x1}]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xbd6c81f2c439e34f}) 00:31:49 executing program 2: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xe2f, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 00:31:49 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x7, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 00:31:49 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) clock_gettime(0x8, 0x0) dup(0xffffffffffffffff) socket$unix(0x1, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x20, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x0) bind$can_raw(r2, 0x0, 0x0) setsockopt(r2, 0x0, 0x1, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x4, &(0x7f0000000100)=0x2, 0x4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) close(r2) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) unshare(0x40000000) memfd_create(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 00:31:49 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x7, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 00:31:50 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), 0x0}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040), 0x87) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r4 = syz_open_dev$video(0x0, 0xffd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) 00:31:50 executing program 2: unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xe2f, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 00:31:50 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x7, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 00:31:50 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), 0x0}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040), 0x87) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r4 = syz_open_dev$video(0x0, 0xffd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) 00:31:50 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000700)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x2, 0x4, [0x0]}) [ 411.089254] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 411.097638] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 411.102483] IPVS: ftp: loaded support on port[0] = 21 00:31:50 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000000), 0x7, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) 00:31:50 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000700)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x2, 0x4, [0x0]}) 00:31:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7a, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000240)=""/195}, 0x48) [ 411.543213] IPVS: ftp: loaded support on port[0] = 21 00:31:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)) futimesat(r0, 0x0, 0x0) 00:31:51 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000700)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x2, 0x4, [0x0]}) 00:31:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:31:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)) futimesat(r0, 0x0, 0x0) 00:31:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7a, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000240)=""/195}, 0x48) 00:31:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000700)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x2, 0x4, [0x0]}) 00:31:53 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), 0x0}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040), 0x87) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r4 = syz_open_dev$video(0x0, 0xffd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) 00:31:53 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), 0x0}}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040), 0x87) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r4 = syz_open_dev$video(0x0, 0xffd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) 00:31:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)) futimesat(r0, 0x0, 0x0) 00:31:53 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 00:31:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7a, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000240)=""/195}, 0x48) 00:31:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:31:53 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000100)) futimesat(r0, 0x0, 0x0) 00:31:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7a, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0xc3, &(0x7f0000000240)=""/195}, 0x48) 00:31:54 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 00:31:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:31:54 executing program 3: r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf}, &(0x7f0000000400)=0x10) bind(0xffffffffffffffff, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @link_local}, 0x80) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00007dc000)=0x1, 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 00:31:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"e565e4b191aa19fe9aa124e7474ef0e56ffe80df718bac6f042b9abf3919696dfaa8752951679f712f1429d0b50e92e0072f413b82c91a462a5aabbca8ed2fef63a4cc85ed748f6346b4d410a596e689a5ce2312640c3588cee4fe62f18bec05c4c773d526c86599cca2a57301741b0bde2628ceb5a5524a2fd8e00d1eef609fa3e1421218497a31d7a8bcae16afc1e1609fabe20030261ab559986d05041375d7693f6e7dfbda20d0b62ab6ce5ed96359f4cbfe83119279073f068c22725f0655adca73fe8b6c64da74208b00d2ab68e7d10040f169424c4a57160ba7d1f77c4ff857bf0859b2833a2ea9ec5df3b8866e3337b155d92df1d85745591ab5e3d0ebc96922e2d4b659c17cf2495397d6574e89739d83ab36bfd15f271644c4be6cb78e079ebf1604a0339d9e8b4f85ae90727bf30996be87546e3d0042c60f1cf57de1eccc5efd44e0359f86c6b8d693d92b0dee16347c0cceba7238f4dfbf9f865101047101aca70bd88f3886d653c7746f0bb627a0498f909f2e36937c1d9232a5c32053023aeff7ca23ace8ca7c2b9bd2aa31cb3a657627b33e98dbdebb4dd04b3ee60ffae2b3bdb05af152935dc521c77056520162918d8ace5e48b74548807471b2f3f13cf76ff63766e6412a357fcac10fd81bc0cde0e561f23b42323b1d1b920a1c1f943076061ea24efa51f72c4d5f0677f562c7fafc5f8bd4b114781e55bb92c6c3fb16ed25e861c0949c750a19cfb2ebd14c097b6071a68e7e5d157ae5c3117a60797f32f8e8a54b9ff39d506949089e814041c5c584d0d2a127a3bef454b3f298f16e20ce68626e20ebcd86e1c052a9c73efeb57af48d3992e097793e0fbf80c04d7aa66fde597f43cfa40e84d1e075fcad1cab44734f72a040c0c21ce434088e95bbbea4c9ffeba20efe9962e7ffa21d1d811a5276fb55d6fa6b8f409e2f1f3fcac8bcdb884f3e71c444f29e6f514b1c306a81a1afbce2de80628ae83a467c1b66fc5e2f2f4260bdd35127a79c3f6799439f2648bf4585d6a1cad9600dd4282196f2a589a20f09eb04149cbdc6740b4c46afe5d09f8ca8530ec6ce968dce8472d08298b1261559338a78d21220b915d756751e2c2b748333f4a2c9b7e442b0773db0e4ef80fca66029c6fd4be50302e4a3c5c98a0ff44d1d976fec49c00910f733c47cb36f702ec65aad12f12b0508cbc6e2477714c27c2404bcb8504be2347e7d98df326c3ee1d16838e502b1ad422bf60c4c0697f49d44023c5c9d8b709f8b014e5049e2fe9ff84fd0323e0feecbc616ea2afba40cc64000047b7a4eb35da061fdb7b9d93d982b69d3979c2eb5649b4b98822f137d2ffe114b95f4a3e052f7c43b4311d9359335a5f4d2969f61e7c6aaf69c8d66c3be7d4f05f6ebc7f042a2883b6a49f5bf1001023d9c8492d80f8d98bea6e4217deec439d55f"}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000070]}) 00:31:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x14) 00:31:54 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 00:31:54 executing program 3: r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf}, &(0x7f0000000400)=0x10) bind(0xffffffffffffffff, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @link_local}, 0x80) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00007dc000)=0x1, 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 00:31:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000070]}) 00:31:54 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf}, &(0x7f0000000400)=0x10) bind(0xffffffffffffffff, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @link_local}, 0x80) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00007dc000)=0x1, 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 00:31:54 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x33524742}}) 00:31:54 executing program 3: r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf}, &(0x7f0000000400)=0x10) bind(0xffffffffffffffff, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @link_local}, 0x80) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00007dc000)=0x1, 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 00:31:54 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 00:31:54 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf}, &(0x7f0000000400)=0x10) bind(0xffffffffffffffff, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @link_local}, 0x80) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00007dc000)=0x1, 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 00:31:54 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 00:31:54 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x33524742}}) 00:31:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000070]}) 00:31:55 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 00:31:55 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf}, &(0x7f0000000400)=0x10) bind(0xffffffffffffffff, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @link_local}, 0x80) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00007dc000)=0x1, 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 00:31:55 executing program 3: r0 = socket$inet(0x2, 0x100000000805, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0xf}, &(0x7f0000000400)=0x10) bind(0xffffffffffffffff, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @link_local}, 0x80) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000200)=""/244, 0xfffffff8, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00007dc000)=0x1, 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @dev}]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 00:31:55 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x33524742}}) 00:31:55 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000f00)={'syz0\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'sy\xff\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x15\x00'}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x829, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 00:31:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x0, [0x40000070]}) 00:31:55 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 00:31:55 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x33524742}}) 00:31:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0) 00:31:55 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x9}, 0x1c) [ 415.858030] input: syz0 as /devices/virtual/input/input5 [ 415.933778] Unknown ioctl 19305 [ 415.982352] Unknown ioctl 19305 00:31:55 executing program 0: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 00:31:55 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000f00)={'syz0\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'sy\xff\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x15\x00'}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x829, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 00:31:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, [], {@arp={0x806, @ether_ipv4={0x1, 0x500, 0x6, 0x4, 0x0, @random="f8bf88df5b1b", @remote, @dev}}}}, &(0x7f0000000100)) 00:31:55 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x12, 0x0, 0x0) 00:31:55 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x9}, 0x1c) 00:31:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0) 00:31:55 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x9}, 0x1c) 00:31:55 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x200940000) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) 00:31:55 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x12, 0x0, 0x0) 00:31:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, [], {@arp={0x806, @ether_ipv4={0x1, 0x500, 0x6, 0x4, 0x0, @random="f8bf88df5b1b", @remote, @dev}}}}, &(0x7f0000000100)) [ 416.237901] input: syz0 as /devices/virtual/input/input7 [ 416.355490] Unknown ioctl 19305 00:31:55 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000f00)={'syz0\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'sy\xff\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x15\x00'}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x829, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 00:31:55 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x12, 0x0, 0x0) 00:31:55 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x9}, 0x1c) 00:31:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, [], {@arp={0x806, @ether_ipv4={0x1, 0x500, 0x6, 0x4, 0x0, @random="f8bf88df5b1b", @remote, @dev}}}}, &(0x7f0000000100)) [ 416.488469] loop: Write error at byte offset 0, length 4096. [ 416.494343] loop: Write error at byte offset 4096, length 4096. [ 416.500575] print_req_error: I/O error, dev loop0, sector 0 flags 1 [ 416.507096] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 416.514821] loop: Write error at byte offset 8192, length 4096. [ 416.520980] loop: Write error at byte offset 12288, length 4096. [ 416.529468] input: syz0 as /devices/virtual/input/input8 00:31:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0) [ 416.574163] print_req_error: I/O error, dev loop0, sector 8 flags 1 [ 416.580669] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 416.588386] print_req_error: I/O error, dev loop0, sector 16 flags 1 [ 416.594899] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 416.602620] print_req_error: I/O error, dev loop0, sector 24 flags 1 [ 416.609159] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 416.619484] loop: Write error at byte offset 16384, length 4096. [ 416.625670] loop: Write error at byte offset 20480, length 4096. [ 416.631917] loop: Write error at byte offset 24576, length 4096. [ 416.638189] loop: Write error at byte offset 28672, length 4096. [ 416.692231] Unknown ioctl 19305 [ 416.706394] print_req_error: I/O error, dev loop0, sector 32 flags 1 [ 416.713010] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 416.721540] print_req_error: I/O error, dev loop0, sector 40 flags 1 [ 416.728084] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 416.735746] print_req_error: I/O error, dev loop0, sector 48 flags 1 00:31:56 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x12, 0x0, 0x0) [ 416.742327] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 416.750027] print_req_error: I/O error, dev loop0, sector 56 flags 1 [ 416.756604] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 416.771483] loop: Write error at byte offset 32768, length 4096. [ 416.777715] loop: Write error at byte offset 36864, length 4096. 00:31:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x200000006) ioctl$TCSETA(r0, 0x8924, 0x0) 00:31:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x6}, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) syslog(0xa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x100000003000000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) msync(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1) [ 416.844512] print_req_error: I/O error, dev loop0, sector 64 flags 1 [ 416.851106] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 416.858818] print_req_error: I/O error, dev loop0, sector 72 flags 1 [ 416.865329] Buffer I/O error on dev loop0, logical block 9, lost async page write 00:31:56 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0) 00:31:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, [], {@arp={0x806, @ether_ipv4={0x1, 0x500, 0x6, 0x4, 0x0, @random="f8bf88df5b1b", @remote, @dev}}}}, &(0x7f0000000100)) 00:31:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000f00)={'syz0\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'sy\xff\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x15\x00'}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x829, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 00:31:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x200000006) ioctl$TCSETA(r0, 0x8924, 0x0) 00:31:56 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x200940000) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) 00:31:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x200000006) ioctl$TCSETA(r0, 0x8924, 0x0) 00:31:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x200940000) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) 00:31:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x200000006) ioctl$TCSETA(r0, 0x8924, 0x0) 00:31:57 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x100000000000000b, &(0x7f0000000000)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) recvmsg(r0, &(0x7f0000000740)={&(0x7f00000000c0)=@nl=@unspec, 0x80, 0x0}, 0x40012021) 00:31:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x200000006) ioctl$TCSETA(r0, 0x8924, 0x0) 00:31:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x6}, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) syslog(0xa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x100000003000000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) msync(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1) 00:31:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x200940000) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) 00:31:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x200000006) ioctl$TCSETA(r0, 0x8924, 0x0) 00:31:57 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x100000000000000b, &(0x7f0000000000)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) recvmsg(r0, &(0x7f0000000740)={&(0x7f00000000c0)=@nl=@unspec, 0x80, 0x0}, 0x40012021) 00:31:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x6}, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) syslog(0xa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x100000003000000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) msync(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1) 00:31:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x200000006) ioctl$TCSETA(r0, 0x8924, 0x0) 00:31:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x200940000) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) 00:31:58 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x100000000000000b, &(0x7f0000000000)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) recvmsg(r0, &(0x7f0000000740)={&(0x7f00000000c0)=@nl=@unspec, 0x80, 0x0}, 0x40012021) 00:31:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x200940000) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) 00:31:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x6}, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) syslog(0xa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x100000003000000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) msync(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1) 00:31:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x6}, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) syslog(0xa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x100000003000000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) msync(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1) 00:31:58 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000000000000000000000000000000030000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:31:58 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x100000000000000b, &(0x7f0000000000)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x2, 0x4e24, @local}, 0x10) recvmsg(r0, &(0x7f0000000740)={&(0x7f00000000c0)=@nl=@unspec, 0x80, 0x0}, 0x40012021) 00:31:58 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x1000085) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)='\'', 0x1}], 0x1, 0x1081806) fcntl$addseals(r1, 0x409, 0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x200940000) sync() pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)='-', 0x1}], 0x1, 0x0) 00:31:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000203, 0x8000000) 00:31:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000203, 0x8000000) 00:31:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000203, 0x8000000) 00:31:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x6}, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) syslog(0xa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x100000003000000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) msync(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1) 00:31:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_cache\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000203, 0x8000000) 00:31:59 executing program 0: pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="91"], 0x1) close(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) 00:31:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x6}, 0x0) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) syslog(0xa, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x100000003000000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, 0x0, 0x0) msync(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1) 00:31:59 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000000000000000000000000000000030000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:31:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xf}]}}}]}, 0x3c}}, 0x0) 00:31:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDSIGACCEPT(r1, 0x5393, 0x80001010824ffe1) 00:31:59 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDSIGACCEPT(r1, 0x5393, 0x80001010824ffe1) 00:32:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xf}]}}}]}, 0x3c}}, 0x0) 00:32:00 executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, @perf_config_ext, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0xfb) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) fgetxattr(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726874796e2d002eb3ae160eaae95d41769667ef55fe8d55537f6665bc2af84a0c213fcab95d93cb04da01007fe270ac1ecdec0e"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r3, 0x541d) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1) ioctl$int_in(r4, 0x800000c0045005, &(0x7f00000004c0)) r5 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(r6, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x3, 0x100000000, 0x0, 0x5, 0x0, 0xb7, 0x1]}) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) dup(r7) socketpair$unix(0x1, 0x2000000000000003, 0x0, &(0x7f0000000000)) 00:32:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDSIGACCEPT(r1, 0x5393, 0x80001010824ffe1) 00:32:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KDSIGACCEPT(r1, 0x5393, 0x80001010824ffe1) [ 420.840651] Unknown ioctl 21533 00:32:00 executing program 0: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x400020015) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x98, &(0x7f0000000280), &(0x7f0000000340)=""/152, 0x8}, 0x28) clone(0x3ffd, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000440)) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000200)={0x0, 0x1, 0x6, @broadcast}, 0x10) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0xffffffffffffffff, 0xedc000000000}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000080)={0x3ff}) socket$can_raw(0x1d, 0x3, 0x1) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) exit(0x0) prlimit64(0x0, 0x5, &(0x7f0000000040), &(0x7f0000000240)) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000580)) shutdown(0xffffffffffffffff, 0x2) sendfile(r0, r1, &(0x7f00000001c0), 0x1) 00:32:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, &(0x7f0000000ec0)}}], 0x58}, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000200), 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}}) socketpair(0x11, 0x0, 0x10000, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:32:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xf}]}}}]}, 0x3c}}, 0x0) 00:32:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') preadv(r1, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/233, 0xe9}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r2}, 0x8) restart_syscall() ioctl$TCSBRK(r0, 0x5409, 0x200) 00:32:00 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000000000000000000000000000000030000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:32:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, &(0x7f0000000ec0)}}], 0x58}, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000200), 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}}) socketpair(0x11, 0x0, 0x10000, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:32:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') preadv(r1, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/233, 0xe9}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r2}, 0x8) restart_syscall() ioctl$TCSBRK(r0, 0x5409, 0x200) [ 421.479271] Unknown ioctl 21533 00:32:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, &(0x7f0000000ec0)}}], 0x58}, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000200), 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}}) socketpair(0x11, 0x0, 0x10000, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:32:01 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') preadv(r1, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/233, 0xe9}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r2}, 0x8) restart_syscall() ioctl$TCSBRK(r0, 0x5409, 0x200) [ 423.556639] 8021q: adding VLAN 0 to HW filter on device bond0 00:32:03 executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, @perf_config_ext, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0xfb) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) fgetxattr(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726874796e2d002eb3ae160eaae95d41769667ef55fe8d55537f6665bc2af84a0c213fcab95d93cb04da01007fe270ac1ecdec0e"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r3, 0x541d) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1) ioctl$int_in(r4, 0x800000c0045005, &(0x7f00000004c0)) r5 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(r6, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x3, 0x100000000, 0x0, 0x5, 0x0, 0xb7, 0x1]}) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) dup(r7) socketpair$unix(0x1, 0x2000000000000003, 0x0, &(0x7f0000000000)) 00:32:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, &(0x7f0000000ec0)}}], 0x58}, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000200), 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}}) socketpair(0x11, 0x0, 0x10000, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:32:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x20000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') preadv(r1, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/233, 0xe9}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r2}, 0x8) restart_syscall() ioctl$TCSBRK(r0, 0x5409, 0x200) 00:32:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, &(0x7f0000000ec0)}}], 0x58}, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000200), 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}}) socketpair(0x11, 0x0, 0x10000, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:32:03 executing program 5: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3400000000000500000000000000"], 0xe) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="2c00000004000000000000000000000003000000000000000000000000000000030000000000000000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) 00:32:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0xf}]}}}]}, 0x3c}}, 0x0) [ 423.791065] 8021q: adding VLAN 0 to HW filter on device bond0 00:32:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, &(0x7f0000000ec0)}}], 0x58}, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000200), 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}}) socketpair(0x11, 0x0, 0x10000, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:32:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000001540)=[{&(0x7f00000011c0)=""/133, 0x85}], 0x1) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x45c) 00:32:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) r2 = socket$inet(0x2b, 0x1, 0x0) sendfile(r2, r1, 0x0, 0x6ad0) 00:32:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, &(0x7f0000000ec0)}}], 0x58}, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f0000000200), 0x4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @local}}) socketpair(0x11, 0x0, 0x10000, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 424.068848] Unknown ioctl 21533 [ 424.112769] input: syz1 as /devices/virtual/input/input9 00:32:03 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) r2 = socket$inet(0x2b, 0x1, 0x0) sendfile(r2, r1, 0x0, 0x6ad0) 00:32:03 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x80287010, &(0x7f0000000080)) 00:32:05 executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, @perf_config_ext, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0xfb) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) fgetxattr(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726874796e2d002eb3ae160eaae95d41769667ef55fe8d55537f6665bc2af84a0c213fcab95d93cb04da01007fe270ac1ecdec0e"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r3, 0x541d) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1) ioctl$int_in(r4, 0x800000c0045005, &(0x7f00000004c0)) r5 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(r6, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x3, 0x100000000, 0x0, 0x5, 0x0, 0xb7, 0x1]}) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) dup(r7) socketpair$unix(0x1, 0x2000000000000003, 0x0, &(0x7f0000000000)) 00:32:05 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) r2 = socket$inet(0x2b, 0x1, 0x0) sendfile(r2, r1, 0x0, 0x6ad0) 00:32:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003e00)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000009c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="020400000300600000000000fff55b4202938207d9fb3780398d5375000006007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b542914c5e61eaa96fa9a1e8d1843e770afd6e9ef5", 0x54, 0x0, 0x0, 0x0) 00:32:05 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 00:32:05 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x40000000000013, 0x10, 0x8}, 0x1c) dup2(r0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe574b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0xffffffffffff, 0x1) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x2, 0x2) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) listen(r9, 0xffffffffffffff00) 00:32:05 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x2, 0x6e, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f00000000c0)="15bf6234488dd25d726070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x8000, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000340)={0x1, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xaf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\x06\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00') r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setfsgid(0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) [ 426.437519] 8021q: adding VLAN 0 to HW filter on device bond0 00:32:06 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) r2 = socket$inet(0x2b, 0x1, 0x0) sendfile(r2, r1, 0x0, 0x6ad0) [ 426.524806] bridge0: port 3(gretap0) entered blocking state [ 426.544471] bridge0: port 3(gretap0) entered disabled state [ 426.555647] Unknown ioctl 21533 00:32:06 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x8000000000005, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x16, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x31, 0x4, 0x7a, 0x0, 0x479a6396, 0x18, 0x1, 0x100000000, 0x0, 0x12c, 0x7, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x401, 0x10000, 0x0, 0x6, 0x2008000000000000, 0x9, 0x7, 0x4, 0x8, 0x0, 0x7, 0x2, 0xe0df, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7f, 0x7, 0x1, 0x0, 0x1a41dd8a, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0xf8, 0x401, 0x9, 0x4, 0x1f, 0xfffffffffffffc01}, r3, 0x1, r1, 0xa) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r5, 0x801c7011, &(0x7f0000000700)) ioprio_get$pid(0x3, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x3}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000007c0)={r7, 0xb9, "c1483f256a4d2f265c1643ef3400ddc686fe87238ddac82e14c993ec972c747d23cad60f3cf9a780a5cb2e5709bcaa8e02b4c8ee49495a4fbc81ac324b8e59141422b334575ca8ea9b7b130a6264b294a226b5d5b1799b051ca2f0bae4060258009c6aeba9fffc9df8aa7adb8ad397d744fe0e009887632578b1887ed39add02c5ff35e59031a630eed6e5df49927c361daca55a325cc564bb12513e54e616684e22f59b3319c93d5b6fd3e2527ec79beba6318c83799bab2d"}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80000000000000, 0x0) write$FUSE_STATFS(r6, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, 0x1, {{0x4, 0x4, 0x10000, 0x221, 0x5, 0x2, 0x6, 0xd1b7}}}, 0x60) r8 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) r9 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x136, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r10}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000900)) fcntl$notify(r2, 0x402, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) [ 426.661263] device gretap0 entered promiscuous mode 00:32:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4068aea3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x800}) [ 426.706387] bridge0: port 3(gretap0) entered blocking state [ 426.712652] bridge0: port 3(gretap0) entered forwarding state 00:32:06 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl(r0, 0x800000000000937e, &(0x7f0000000180)="01000000000000001800") 00:32:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delroute={0x30, 0x19, 0xc05, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14}]}, 0x30}}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 426.922293] binder: 10734:10737 ERROR: BC_REGISTER_LOOPER called without request [ 426.951501] binder: 10734:10737 unknown command 155925413 [ 426.958591] binder: 10734:10737 ioctl c0306201 20000140 returned -22 00:32:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x40000000000013, 0x10, 0x8}, 0x1c) dup2(r0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe574b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0xffffffffffff, 0x1) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x2, 0x2) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) listen(r9, 0xffffffffffffff00) [ 426.968542] binder: 10734:10737 got reply transaction with no transaction stack [ 426.978164] binder: 10734:10737 transaction failed 29201/-71, size 80-8 line 2801 [ 427.028687] binder_alloc: binder_alloc_mmap_handler: 10734 20001000-20004000 already mapped failed -16 [ 427.096516] binder: BINDER_SET_CONTEXT_MGR already set [ 427.102569] binder: 10734:10737 ioctl 40046207 0 returned -16 [ 427.142754] binder: 10734:10756 ERROR: BC_REGISTER_LOOPER called without request [ 427.173341] binder_alloc: 10734: binder_alloc_buf, no vma [ 427.193450] binder: 10734:10756 unknown command 155925413 [ 427.203204] binder: 10734:10756 ioctl c0306201 20000140 returned -22 [ 427.210198] binder: 10734:10741 got reply transaction with no transaction stack [ 427.221669] binder: 10734:10741 transaction failed 29201/-71, size 80-8 line 2801 [ 427.242761] binder: release 10734:10737 transaction 2 out, still active [ 427.251879] binder: 10734:10737 transaction failed 29189/-3, size 0-0 line 3035 [ 427.259662] binder: undelivered TRANSACTION_COMPLETE [ 427.265286] binder: undelivered TRANSACTION_ERROR: 29201 [ 427.276746] binder: send failed reply for transaction 2, target dead [ 427.293401] binder: undelivered TRANSACTION_ERROR: 29201 [ 427.305769] binder: undelivered TRANSACTION_ERROR: 29189 00:32:08 executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, @perf_config_ext, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0xfb) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) fgetxattr(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="73656375726874796e2d002eb3ae160eaae95d41769667ef55fe8d55537f6665bc2af84a0c213fcab95d93cb04da01007fe270ac1ecdec0e"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r3, 0x541d) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x1) ioctl$int_in(r4, 0x800000c0045005, &(0x7f00000004c0)) r5 = perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(r6, 0xc028564e, &(0x7f0000000040)={0x3, 0x1, [0x3, 0x3, 0x100000000, 0x0, 0x5, 0x0, 0xb7, 0x1]}) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video35\x00', 0x2, 0x0) dup(r7) socketpair$unix(0x1, 0x2000000000000003, 0x0, &(0x7f0000000000)) 00:32:08 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl(r0, 0x800000000000937e, &(0x7f0000000180)="01000000000000001800") 00:32:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x40000000000013, 0x10, 0x8}, 0x1c) dup2(r0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe574b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0xffffffffffff, 0x1) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x2, 0x2) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) listen(r9, 0xffffffffffffff00) 00:32:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4068aea3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x800}) 00:32:08 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x8000000000005, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x16, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x31, 0x4, 0x7a, 0x0, 0x479a6396, 0x18, 0x1, 0x100000000, 0x0, 0x12c, 0x7, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x401, 0x10000, 0x0, 0x6, 0x2008000000000000, 0x9, 0x7, 0x4, 0x8, 0x0, 0x7, 0x2, 0xe0df, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7f, 0x7, 0x1, 0x0, 0x1a41dd8a, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0xf8, 0x401, 0x9, 0x4, 0x1f, 0xfffffffffffffc01}, r3, 0x1, r1, 0xa) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r5, 0x801c7011, &(0x7f0000000700)) ioprio_get$pid(0x3, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x3}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000007c0)={r7, 0xb9, "c1483f256a4d2f265c1643ef3400ddc686fe87238ddac82e14c993ec972c747d23cad60f3cf9a780a5cb2e5709bcaa8e02b4c8ee49495a4fbc81ac324b8e59141422b334575ca8ea9b7b130a6264b294a226b5d5b1799b051ca2f0bae4060258009c6aeba9fffc9df8aa7adb8ad397d744fe0e009887632578b1887ed39add02c5ff35e59031a630eed6e5df49927c361daca55a325cc564bb12513e54e616684e22f59b3319c93d5b6fd3e2527ec79beba6318c83799bab2d"}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80000000000000, 0x0) write$FUSE_STATFS(r6, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, 0x1, {{0x4, 0x4, 0x10000, 0x221, 0x5, 0x2, 0x6, 0xd1b7}}}, 0x60) r8 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) r9 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x136, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r10}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000900)) fcntl$notify(r2, 0x402, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) 00:32:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x40000000000013, 0x10, 0x8}, 0x1c) dup2(r0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe574b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0xffffffffffff, 0x1) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x2, 0x2) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) listen(r9, 0xffffffffffffff00) [ 429.284556] 8021q: adding VLAN 0 to HW filter on device bond0 00:32:08 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl(r0, 0x800000000000937e, &(0x7f0000000180)="01000000000000001800") [ 429.452643] Unknown ioctl 21533 00:32:09 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x40000000000013, 0x10, 0x8}, 0x1c) dup2(r0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe574b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0xffffffffffff, 0x1) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x2, 0x2) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) listen(r9, 0xffffffffffffff00) 00:32:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4068aea3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x800}) 00:32:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x40000000000013, 0x10, 0x8}, 0x1c) dup2(r0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe574b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0xffffffffffff, 0x1) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x2, 0x2) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) listen(r9, 0xffffffffffffff00) [ 429.582860] binder: 10768:10778 ERROR: BC_REGISTER_LOOPER called without request [ 429.596279] binder: 10768:10778 unknown command 155925413 00:32:09 executing program 5: creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000000)) ioctl(r0, 0x800000000000937e, &(0x7f0000000180)="01000000000000001800") [ 429.647278] binder: 10768:10778 ioctl c0306201 20000140 returned -22 [ 429.725642] binder: 10768:10792 ioctl c0306201 200002c0 returned -14 00:32:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4068aea3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x800}) [ 429.927544] binder: release 10768:10778 transaction 7 out, still active [ 429.934397] binder: undelivered TRANSACTION_COMPLETE [ 429.970011] binder: send failed reply for transaction 7, target dead 00:32:11 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x8000000000005, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x16, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x31, 0x4, 0x7a, 0x0, 0x479a6396, 0x18, 0x1, 0x100000000, 0x0, 0x12c, 0x7, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x401, 0x10000, 0x0, 0x6, 0x2008000000000000, 0x9, 0x7, 0x4, 0x8, 0x0, 0x7, 0x2, 0xe0df, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7f, 0x7, 0x1, 0x0, 0x1a41dd8a, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0xf8, 0x401, 0x9, 0x4, 0x1f, 0xfffffffffffffc01}, r3, 0x1, r1, 0xa) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r5, 0x801c7011, &(0x7f0000000700)) ioprio_get$pid(0x3, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x3}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000007c0)={r7, 0xb9, "c1483f256a4d2f265c1643ef3400ddc686fe87238ddac82e14c993ec972c747d23cad60f3cf9a780a5cb2e5709bcaa8e02b4c8ee49495a4fbc81ac324b8e59141422b334575ca8ea9b7b130a6264b294a226b5d5b1799b051ca2f0bae4060258009c6aeba9fffc9df8aa7adb8ad397d744fe0e009887632578b1887ed39add02c5ff35e59031a630eed6e5df49927c361daca55a325cc564bb12513e54e616684e22f59b3319c93d5b6fd3e2527ec79beba6318c83799bab2d"}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80000000000000, 0x0) write$FUSE_STATFS(r6, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, 0x1, {{0x4, 0x4, 0x10000, 0x221, 0x5, 0x2, 0x6, 0xd1b7}}}, 0x60) r8 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) r9 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x136, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r10}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000900)) fcntl$notify(r2, 0x402, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) 00:32:11 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x40000000000013, 0x10, 0x8}, 0x1c) dup2(r0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe574b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0xffffffffffff, 0x1) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f00000002c0)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) close(r3) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r6, 0x2) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, &(0x7f0000000180), 0x400000000000117, 0x0) r9 = syz_open_dev$radio(&(0x7f0000000380)='/dev/radio#\x00', 0x2, 0x2) futimesat(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) listen(r9, 0xffffffffffffff00) 00:32:11 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x8000000000005, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x16, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x31, 0x4, 0x7a, 0x0, 0x479a6396, 0x18, 0x1, 0x100000000, 0x0, 0x12c, 0x7, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x401, 0x10000, 0x0, 0x6, 0x2008000000000000, 0x9, 0x7, 0x4, 0x8, 0x0, 0x7, 0x2, 0xe0df, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7f, 0x7, 0x1, 0x0, 0x1a41dd8a, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0xf8, 0x401, 0x9, 0x4, 0x1f, 0xfffffffffffffc01}, r3, 0x1, r1, 0xa) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r5, 0x801c7011, &(0x7f0000000700)) ioprio_get$pid(0x3, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x3}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000007c0)={r7, 0xb9, "c1483f256a4d2f265c1643ef3400ddc686fe87238ddac82e14c993ec972c747d23cad60f3cf9a780a5cb2e5709bcaa8e02b4c8ee49495a4fbc81ac324b8e59141422b334575ca8ea9b7b130a6264b294a226b5d5b1799b051ca2f0bae4060258009c6aeba9fffc9df8aa7adb8ad397d744fe0e009887632578b1887ed39add02c5ff35e59031a630eed6e5df49927c361daca55a325cc564bb12513e54e616684e22f59b3319c93d5b6fd3e2527ec79beba6318c83799bab2d"}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80000000000000, 0x0) write$FUSE_STATFS(r6, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, 0x1, {{0x4, 0x4, 0x10000, 0x221, 0x5, 0x2, 0x6, 0xd1b7}}}, 0x60) r8 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) r9 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x136, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r10}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000900)) fcntl$notify(r2, 0x402, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) 00:32:11 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x8000000000005, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x16, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x31, 0x4, 0x7a, 0x0, 0x479a6396, 0x18, 0x1, 0x100000000, 0x0, 0x12c, 0x7, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x401, 0x10000, 0x0, 0x6, 0x2008000000000000, 0x9, 0x7, 0x4, 0x8, 0x0, 0x7, 0x2, 0xe0df, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7f, 0x7, 0x1, 0x0, 0x1a41dd8a, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0xf8, 0x401, 0x9, 0x4, 0x1f, 0xfffffffffffffc01}, r3, 0x1, r1, 0xa) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r5, 0x801c7011, &(0x7f0000000700)) ioprio_get$pid(0x3, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x3}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000007c0)={r7, 0xb9, "c1483f256a4d2f265c1643ef3400ddc686fe87238ddac82e14c993ec972c747d23cad60f3cf9a780a5cb2e5709bcaa8e02b4c8ee49495a4fbc81ac324b8e59141422b334575ca8ea9b7b130a6264b294a226b5d5b1799b051ca2f0bae4060258009c6aeba9fffc9df8aa7adb8ad397d744fe0e009887632578b1887ed39add02c5ff35e59031a630eed6e5df49927c361daca55a325cc564bb12513e54e616684e22f59b3319c93d5b6fd3e2527ec79beba6318c83799bab2d"}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80000000000000, 0x0) write$FUSE_STATFS(r6, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, 0x1, {{0x4, 0x4, 0x10000, 0x221, 0x5, 0x2, 0x6, 0xd1b7}}}, 0x60) r8 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) r9 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x136, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r10}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000900)) fcntl$notify(r2, 0x402, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) 00:32:11 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x8000000000005, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x16, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x31, 0x4, 0x7a, 0x0, 0x479a6396, 0x18, 0x1, 0x100000000, 0x0, 0x12c, 0x7, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x401, 0x10000, 0x0, 0x6, 0x2008000000000000, 0x9, 0x7, 0x4, 0x8, 0x0, 0x7, 0x2, 0xe0df, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7f, 0x7, 0x1, 0x0, 0x1a41dd8a, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0xf8, 0x401, 0x9, 0x4, 0x1f, 0xfffffffffffffc01}, r3, 0x1, r1, 0xa) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r5, 0x801c7011, &(0x7f0000000700)) ioprio_get$pid(0x3, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x3}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000007c0)={r7, 0xb9, "c1483f256a4d2f265c1643ef3400ddc686fe87238ddac82e14c993ec972c747d23cad60f3cf9a780a5cb2e5709bcaa8e02b4c8ee49495a4fbc81ac324b8e59141422b334575ca8ea9b7b130a6264b294a226b5d5b1799b051ca2f0bae4060258009c6aeba9fffc9df8aa7adb8ad397d744fe0e009887632578b1887ed39add02c5ff35e59031a630eed6e5df49927c361daca55a325cc564bb12513e54e616684e22f59b3319c93d5b6fd3e2527ec79beba6318c83799bab2d"}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80000000000000, 0x0) write$FUSE_STATFS(r6, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, 0x1, {{0x4, 0x4, 0x10000, 0x221, 0x5, 0x2, 0x6, 0xd1b7}}}, 0x60) r8 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) r9 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x136, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r10}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000900)) fcntl$notify(r2, 0x402, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) [ 432.057692] 8021q: adding VLAN 0 to HW filter on device bond0 00:32:11 executing program 3: r0 = eventfd2(0x25, 0x800) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0xe7}], 0x2) 00:32:11 executing program 3: r0 = eventfd2(0x25, 0x800) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0xe7}], 0x2) [ 432.304205] binder: BINDER_SET_CONTEXT_MGR already set 00:32:11 executing program 2: r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000200)) r2 = dup(r1) ioctl$RTC_VL_CLR(r2, 0x7014) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x80, 0x0) io_cancel(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000480)="c154fd51bd4506c3fd45475297725d7f5ba7726ab5375f", 0x17, 0x0, 0x0, 0x2, r3}, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000100)={0x0, 0x8}, 0x2) keyctl$join(0x1, &(0x7f0000000000)={'syz'}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000240)=0x1) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x20040) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r6 = dup3(r1, 0xffffffffffffffff, 0x0) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f00000001c0)={{0x3ac, 0x1}}, 0x10) [ 432.326454] binder: 10823:10824 ioctl 40046207 0 returned -16 [ 432.330114] binder: BINDER_SET_CONTEXT_MGR already set [ 432.350566] binder: 10815:10822 ioctl 40046207 0 returned -16 [ 432.358390] binder: BINDER_SET_CONTEXT_MGR already set [ 432.366542] binder: 10814:10830 ERROR: BC_REGISTER_LOOPER called without request [ 432.379859] binder: 10820:10828 ioctl 40046207 0 returned -16 [ 432.380740] binder: 10815:10829 ERROR: BC_REGISTER_LOOPER called without request [ 432.390006] binder: 10814:10830 unknown command 155925413 [ 432.399154] binder: 10823:10824 ERROR: BC_REGISTER_LOOPER called without request [ 432.413321] binder: 10814:10818 got reply transaction with no transaction stack 00:32:11 executing program 3: r0 = eventfd2(0x25, 0x800) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0xe7}], 0x2) [ 432.435394] binder: 10823:10824 unknown command 155925413 [ 432.442527] binder: 10814:10818 transaction failed 29201/-71, size 80-8 line 2801 [ 432.453800] binder: 10823:10824 ioctl c0306201 20000140 returned -22 [ 432.453925] binder: 10823:10836 got reply transaction with no transaction stack [ 432.461912] binder: 10820:10821 ERROR: BC_REGISTER_LOOPER called without request [ 432.476084] binder: 10820:10821 unknown command 155925413 [ 432.476622] binder: 10815:10829 unknown command 155925413 [ 432.508480] binder: 10814:10830 ioctl c0306201 20000140 returned -22 [ 432.511083] binder: 10815:10829 ioctl c0306201 20000140 returned -22 [ 432.515124] binder: 10820:10821 ioctl c0306201 20000140 returned -22 [ 432.544096] binder: 10823:10836 transaction failed 29201/-71, size 80-8 line 2801 [ 432.555738] binder: 10815:10822 got reply transaction with no transaction stack [ 432.598382] binder: 10815:10822 transaction failed 29201/-71, size 80-8 line 2801 00:32:12 executing program 3: r0 = eventfd2(0x25, 0x800) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0xe7}], 0x2) 00:32:12 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x8000000000005, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x16, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x31, 0x4, 0x7a, 0x0, 0x479a6396, 0x18, 0x1, 0x100000000, 0x0, 0x12c, 0x7, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x401, 0x10000, 0x0, 0x6, 0x2008000000000000, 0x9, 0x7, 0x4, 0x8, 0x0, 0x7, 0x2, 0xe0df, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7f, 0x7, 0x1, 0x0, 0x1a41dd8a, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0xf8, 0x401, 0x9, 0x4, 0x1f, 0xfffffffffffffc01}, r3, 0x1, r1, 0xa) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r5, 0x801c7011, &(0x7f0000000700)) ioprio_get$pid(0x3, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x3}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000007c0)={r7, 0xb9, "c1483f256a4d2f265c1643ef3400ddc686fe87238ddac82e14c993ec972c747d23cad60f3cf9a780a5cb2e5709bcaa8e02b4c8ee49495a4fbc81ac324b8e59141422b334575ca8ea9b7b130a6264b294a226b5d5b1799b051ca2f0bae4060258009c6aeba9fffc9df8aa7adb8ad397d744fe0e009887632578b1887ed39add02c5ff35e59031a630eed6e5df49927c361daca55a325cc564bb12513e54e616684e22f59b3319c93d5b6fd3e2527ec79beba6318c83799bab2d"}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80000000000000, 0x0) write$FUSE_STATFS(r6, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, 0x1, {{0x4, 0x4, 0x10000, 0x221, 0x5, 0x2, 0x6, 0xd1b7}}}, 0x60) r8 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) r9 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x136, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b630000a53b4b0990e347252778687c14be3d663fdf1c78679b28fff04f00000900000000000000d6797d5cf445ce1888f5e0a91de97af5fe8dd262594f0d6d9441ccd7013ead5b31eb4752369806a2c32a3433f71e1984d5d7f6b549a88453bf0e069cc17a4a2bacbded2e158ec53b1af4553e0ec2753aeea7d056df1e002701d434d104cae0f754e4fffa8c291f6f14db9bdadaf396926c98891dad73f70fccd27e49d83fc39bf6f8f2548c20300fadd099fc0cedaaa99a70c8a9fcda0da1ec507b96baecc3d3ce4e8fdfbc79fe77c8d717a2d0442591f1c76d16ce7562844691ba5b205c3a0d5663e8ea5ba2537dad8db06ed1e98cda9ebbb8ace1b2ca21c4a4b6def0de340fdd3ee75ce25454e8cb539cc38cd30a7e943ac54883339fe74b52d300091e7e6c2d5ea3cb7ca10f9409cf6b0d9cf9"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r10}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000900)) fcntl$notify(r2, 0x402, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) [ 432.638844] binder: release 10814:10818 transaction 9 out, still active [ 432.645717] binder: undelivered TRANSACTION_COMPLETE [ 432.678771] binder: undelivered TRANSACTION_ERROR: 29201 [ 432.705111] binder: 10820:10821 got reply transaction with no transaction stack [ 432.714952] binder: send failed reply for transaction 9, target dead [ 432.739796] binder: send failed reply for transaction 10 to 10815:10829 00:32:12 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x8000000000005, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x16, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x31, 0x4, 0x7a, 0x0, 0x479a6396, 0x18, 0x1, 0x100000000, 0x0, 0x12c, 0x7, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x401, 0x10000, 0x0, 0x6, 0x2008000000000000, 0x9, 0x7, 0x4, 0x8, 0x0, 0x7, 0x2, 0xe0df, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7f, 0x7, 0x1, 0x0, 0x1a41dd8a, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0xf8, 0x401, 0x9, 0x4, 0x1f, 0xfffffffffffffc01}, r3, 0x1, r1, 0xa) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r5, 0x801c7011, &(0x7f0000000700)) ioprio_get$pid(0x3, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x3}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000007c0)={r7, 0xb9, "c1483f256a4d2f265c1643ef3400ddc686fe87238ddac82e14c993ec972c747d23cad60f3cf9a780a5cb2e5709bcaa8e02b4c8ee49495a4fbc81ac324b8e59141422b334575ca8ea9b7b130a6264b294a226b5d5b1799b051ca2f0bae4060258009c6aeba9fffc9df8aa7adb8ad397d744fe0e009887632578b1887ed39add02c5ff35e59031a630eed6e5df49927c361daca55a325cc564bb12513e54e616684e22f59b3319c93d5b6fd3e2527ec79beba6318c83799bab2d"}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80000000000000, 0x0) write$FUSE_STATFS(r6, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, 0x1, {{0x4, 0x4, 0x10000, 0x221, 0x5, 0x2, 0x6, 0xd1b7}}}, 0x60) r8 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) r9 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x136, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b630000a53b4b0990e347252778687c14be3d663fdf1c78679b28fff04f00000900000000000000d6797d5cf445ce1888f5e0a91de97af5fe8dd262594f0d6d9441ccd7013ead5b31eb4752369806a2c32a3433f71e1984d5d7f6b549a88453bf0e069cc17a4a2bacbded2e158ec53b1af4553e0ec2753aeea7d056df1e002701d434d104cae0f754e4fffa8c291f6f14db9bdadaf396926c98891dad73f70fccd27e49d83fc39bf6f8f2548c20300fadd099fc0cedaaa99a70c8a9fcda0da1ec507b96baecc3d3ce4e8fdfbc79fe77c8d717a2d0442591f1c76d16ce7562844691ba5b205c3a0d5663e8ea5ba2537dad8db06ed1e98cda9ebbb8ace1b2ca21c4a4b6def0de340fdd3ee75ce25454e8cb539cc38cd30a7e943ac54883339fe74b52d300091e7e6c2d5ea3cb7ca10f9409cf6b0d9cf9"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r10}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000900)) fcntl$notify(r2, 0x402, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) [ 432.766251] binder: send failed reply for transaction 11 to 10823:10824 [ 432.778178] binder: 10820:10821 transaction failed 29201/-71, size 80-8 line 2801 [ 432.786757] binder: send failed reply for transaction 13 to 10820:10821 [ 432.842036] binder: undelivered TRANSACTION_ERROR: 29201 00:32:12 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x8000000000005, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x16, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x31, 0x4, 0x7a, 0x0, 0x479a6396, 0x18, 0x1, 0x100000000, 0x0, 0x12c, 0x7, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x401, 0x10000, 0x0, 0x6, 0x2008000000000000, 0x9, 0x7, 0x4, 0x8, 0x0, 0x7, 0x2, 0xe0df, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7f, 0x7, 0x1, 0x0, 0x1a41dd8a, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0xf8, 0x401, 0x9, 0x4, 0x1f, 0xfffffffffffffc01}, r3, 0x1, r1, 0xa) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r5, 0x801c7011, &(0x7f0000000700)) ioprio_get$pid(0x3, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x3}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000007c0)={r7, 0xb9, "c1483f256a4d2f265c1643ef3400ddc686fe87238ddac82e14c993ec972c747d23cad60f3cf9a780a5cb2e5709bcaa8e02b4c8ee49495a4fbc81ac324b8e59141422b334575ca8ea9b7b130a6264b294a226b5d5b1799b051ca2f0bae4060258009c6aeba9fffc9df8aa7adb8ad397d744fe0e009887632578b1887ed39add02c5ff35e59031a630eed6e5df49927c361daca55a325cc564bb12513e54e616684e22f59b3319c93d5b6fd3e2527ec79beba6318c83799bab2d"}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80000000000000, 0x0) write$FUSE_STATFS(r6, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, 0x1, {{0x4, 0x4, 0x10000, 0x221, 0x5, 0x2, 0x6, 0xd1b7}}}, 0x60) r8 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) r9 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x136, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r10}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000900)) fcntl$notify(r2, 0x402, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) 00:32:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xd6bd) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1494}], 0x20000000000001c2) 00:32:12 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x8000000000005, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x16, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x31, 0x4, 0x7a, 0x0, 0x479a6396, 0x18, 0x1, 0x100000000, 0x0, 0x12c, 0x7, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x401, 0x10000, 0x0, 0x6, 0x2008000000000000, 0x9, 0x7, 0x4, 0x8, 0x0, 0x7, 0x2, 0xe0df, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7f, 0x7, 0x1, 0x0, 0x1a41dd8a, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0xf8, 0x401, 0x9, 0x4, 0x1f, 0xfffffffffffffc01}, r3, 0x1, r1, 0xa) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r5, 0x801c7011, &(0x7f0000000700)) ioprio_get$pid(0x3, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x3}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000007c0)={r7, 0xb9, "c1483f256a4d2f265c1643ef3400ddc686fe87238ddac82e14c993ec972c747d23cad60f3cf9a780a5cb2e5709bcaa8e02b4c8ee49495a4fbc81ac324b8e59141422b334575ca8ea9b7b130a6264b294a226b5d5b1799b051ca2f0bae4060258009c6aeba9fffc9df8aa7adb8ad397d744fe0e009887632578b1887ed39add02c5ff35e59031a630eed6e5df49927c361daca55a325cc564bb12513e54e616684e22f59b3319c93d5b6fd3e2527ec79beba6318c83799bab2d"}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80000000000000, 0x0) write$FUSE_STATFS(r6, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, 0x1, {{0x4, 0x4, 0x10000, 0x221, 0x5, 0x2, 0x6, 0xd1b7}}}, 0x60) r8 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) r9 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x136, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b630000a53b4b0990e347252778687c14be3d663fdf1c78679b28fff04f00000900000000000000d6797d5cf445ce1888f5e0a91de97af5fe8dd262594f0d6d9441ccd7013ead5b31eb4752369806a2c32a3433f71e1984d5d7f6b549a88453bf0e069cc17a4a2bacbded2e158ec53b1af4553e0ec2753aeea7d056df1e002701d434d104cae0f754e4fffa8c291f6f14db9bdadaf396926c98891dad73f70fccd27e49d83fc39bf6f8f2548c20300fadd099fc0cedaaa99a70c8a9fcda0da1ec507b96baecc3d3ce4e8fdfbc79fe77c8d717a2d0442591f1c76d16ce7562844691ba5b205c3a0d5663e8ea5ba2537dad8db06ed1e98cda9ebbb8ace1b2ca21c4a4b6def0de340fdd3ee75ce25454e8cb539cc38cd30a7e943ac54883339fe74b52d300091e7e6c2d5ea3cb7ca10f9409cf6b0d9cf9"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r10}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000900)) fcntl$notify(r2, 0x402, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) [ 432.886061] binder: undelivered TRANSACTION_COMPLETE [ 432.904806] binder: undelivered TRANSACTION_ERROR: 29189 [ 432.921079] binder: 10844:10845 ERROR: BC_REGISTER_LOOPER called without request [ 432.925636] binder: undelivered TRANSACTION_ERROR: 29201 [ 432.979317] binder: 10844:10854 got reply transaction with no transaction stack [ 432.979358] binder: 10844:10845 unknown command 155925413 [ 432.996253] binder: undelivered TRANSACTION_ERROR: 29201 [ 433.036052] binder: undelivered TRANSACTION_COMPLETE [ 433.041249] binder: undelivered TRANSACTION_ERROR: 29189 [ 433.056618] binder: 10844:10854 transaction failed 29201/-71, size 80-8 line 2801 [ 433.080364] binder: 10844:10845 ioctl c0306201 20000140 returned -22 [ 433.087834] binder: undelivered TRANSACTION_COMPLETE [ 433.108304] binder: BINDER_SET_CONTEXT_MGR already set [ 433.113967] binder: undelivered TRANSACTION_ERROR: 29189 [ 433.123858] binder: 10849:10850 ioctl 40046207 0 returned -16 00:32:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xd6bd) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1494}], 0x20000000000001c2) [ 433.174508] binder: 10849:10850 ERROR: BC_REGISTER_LOOPER called without request [ 433.192169] binder: BINDER_SET_CONTEXT_MGR already set [ 433.212065] binder: 10849:10850 unknown command 155925413 [ 433.230198] binder: 10855:10863 ioctl 40046207 0 returned -16 [ 433.237996] binder: 10849:10850 ioctl c0306201 20000140 returned -22 [ 433.261666] binder: 10849:10865 got reply transaction with no transaction stack [ 433.290800] binder: BINDER_SET_CONTEXT_MGR already set [ 433.306519] binder: 10859:10860 ioctl 40046207 0 returned -16 [ 433.317582] binder: 10849:10865 transaction failed 29201/-71, size 80-8 line 2801 00:32:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xd6bd) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1494}], 0x20000000000001c2) [ 433.368139] binder: 10855:10857 ERROR: BC_REGISTER_LOOPER called without request [ 433.399927] binder: 10855:10857 unknown command 155925413 [ 433.400967] binder: 10859:10860 ERROR: BC_REGISTER_LOOPER called without request 00:32:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x247}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={r1, 0x1}, 0x8) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) [ 433.431264] binder: 10855:10863 got reply transaction with no transaction stack [ 433.450676] binder: release 10849:10850 transaction 20 out, still active [ 433.458116] binder: undelivered TRANSACTION_COMPLETE [ 433.473038] binder: 10855:10857 ioctl c0306201 20000140 returned -22 [ 433.485612] binder: undelivered TRANSACTION_ERROR: 29201 00:32:12 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xd6bd) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1494}], 0x20000000000001c2) [ 433.506002] binder: 10855:10863 transaction failed 29201/-71, size 80-8 line 2801 [ 433.506957] binder: 10859:10860 unknown command 155925413 [ 433.554449] binder: release 10844:10845 transaction 18 out, still active [ 433.572373] binder: undelivered TRANSACTION_COMPLETE [ 433.580806] binder: 10859:10871 got reply transaction with no transaction stack [ 433.594681] binder: undelivered TRANSACTION_ERROR: 29201 [ 433.621264] binder: send failed reply for transaction 18, target dead [ 433.631343] binder: 10859:10860 ioctl c0306201 20000140 returned -22 [ 433.656266] binder: send failed reply for transaction 20, target dead [ 433.692750] binder: 10859:10871 transaction failed 29201/-71, size 80-8 line 2801 [ 433.700785] binder: send failed reply for transaction 22 to 10855:10857 [ 433.724982] binder: send failed reply for transaction 23 to 10859:10860 [ 433.766576] binder: undelivered TRANSACTION_ERROR: 29201 [ 433.797395] binder: undelivered TRANSACTION_COMPLETE [ 433.848260] binder: undelivered TRANSACTION_COMPLETE 00:32:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) accept4$packet(0xffffffffffffff9c, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14, 0x80000) prctl$PR_GET_FPEMU(0x9, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1a7) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) set_mempolicy(0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x121002) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0205710, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) 00:32:13 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x8000000000005, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x16, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x31, 0x4, 0x7a, 0x0, 0x479a6396, 0x18, 0x1, 0x100000000, 0x0, 0x12c, 0x7, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x401, 0x10000, 0x0, 0x6, 0x2008000000000000, 0x9, 0x7, 0x4, 0x8, 0x0, 0x7, 0x2, 0xe0df, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7f, 0x7, 0x1, 0x0, 0x1a41dd8a, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0xf8, 0x401, 0x9, 0x4, 0x1f, 0xfffffffffffffc01}, r3, 0x1, r1, 0xa) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r5, 0x801c7011, &(0x7f0000000700)) ioprio_get$pid(0x3, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x3}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000007c0)={r7, 0xb9, "c1483f256a4d2f265c1643ef3400ddc686fe87238ddac82e14c993ec972c747d23cad60f3cf9a780a5cb2e5709bcaa8e02b4c8ee49495a4fbc81ac324b8e59141422b334575ca8ea9b7b130a6264b294a226b5d5b1799b051ca2f0bae4060258009c6aeba9fffc9df8aa7adb8ad397d744fe0e009887632578b1887ed39add02c5ff35e59031a630eed6e5df49927c361daca55a325cc564bb12513e54e616684e22f59b3319c93d5b6fd3e2527ec79beba6318c83799bab2d"}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80000000000000, 0x0) write$FUSE_STATFS(r6, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, 0x1, {{0x4, 0x4, 0x10000, 0x221, 0x5, 0x2, 0x6, 0xd1b7}}}, 0x60) r8 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) r9 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x136, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r10}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000900)) fcntl$notify(r2, 0x402, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) 00:32:13 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 00:32:13 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x8000000000005, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x16, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x31, 0x4, 0x7a, 0x0, 0x479a6396, 0x18, 0x1, 0x100000000, 0x0, 0x12c, 0x7, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x401, 0x10000, 0x0, 0x6, 0x2008000000000000, 0x9, 0x7, 0x4, 0x8, 0x0, 0x7, 0x2, 0xe0df, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7f, 0x7, 0x1, 0x0, 0x1a41dd8a, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0xf8, 0x401, 0x9, 0x4, 0x1f, 0xfffffffffffffc01}, r3, 0x1, r1, 0xa) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r5, 0x801c7011, &(0x7f0000000700)) ioprio_get$pid(0x3, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x3}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000007c0)={r7, 0xb9, "c1483f256a4d2f265c1643ef3400ddc686fe87238ddac82e14c993ec972c747d23cad60f3cf9a780a5cb2e5709bcaa8e02b4c8ee49495a4fbc81ac324b8e59141422b334575ca8ea9b7b130a6264b294a226b5d5b1799b051ca2f0bae4060258009c6aeba9fffc9df8aa7adb8ad397d744fe0e009887632578b1887ed39add02c5ff35e59031a630eed6e5df49927c361daca55a325cc564bb12513e54e616684e22f59b3319c93d5b6fd3e2527ec79beba6318c83799bab2d"}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80000000000000, 0x0) write$FUSE_STATFS(r6, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, 0x1, {{0x4, 0x4, 0x10000, 0x221, 0x5, 0x2, 0x6, 0xd1b7}}}, 0x60) r8 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) r9 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x136, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r10}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000900)) fcntl$notify(r2, 0x402, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) 00:32:13 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x8000000000005, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r1, 0x0, 0x16, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x1, 0x31, 0x4, 0x7a, 0x0, 0x479a6396, 0x18, 0x1, 0x100000000, 0x0, 0x12c, 0x7, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x401, 0x10000, 0x0, 0x6, 0x2008000000000000, 0x9, 0x7, 0x4, 0x8, 0x0, 0x7, 0x2, 0xe0df, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x7f, 0x7, 0x1, 0x0, 0x1a41dd8a, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0xf8, 0x401, 0x9, 0x4, 0x1f, 0xfffffffffffffc01}, r3, 0x1, r1, 0xa) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$RTC_PLL_GET(r5, 0x801c7011, &(0x7f0000000700)) ioprio_get$pid(0x3, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x3}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000007c0)={r7, 0xb9, "c1483f256a4d2f265c1643ef3400ddc686fe87238ddac82e14c993ec972c747d23cad60f3cf9a780a5cb2e5709bcaa8e02b4c8ee49495a4fbc81ac324b8e59141422b334575ca8ea9b7b130a6264b294a226b5d5b1799b051ca2f0bae4060258009c6aeba9fffc9df8aa7adb8ad397d744fe0e009887632578b1887ed39add02c5ff35e59031a630eed6e5df49927c361daca55a325cc564bb12513e54e616684e22f59b3319c93d5b6fd3e2527ec79beba6318c83799bab2d"}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80000000000000, 0x0) write$FUSE_STATFS(r6, &(0x7f0000000480)={0x60, 0xfffffffffffffffe, 0x1, {{0x4, 0x4, 0x10000, 0x221, 0x5, 0x2, 0x6, 0xd1b7}}}, 0x60) r8 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) r9 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1012, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0x136, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000080)=[@fda, @fd, @flat={0x73622a85, 0x0, r10}], &(0x7f0000000240)=[0x38]}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000900)) fcntl$notify(r2, 0x402, 0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) 00:32:13 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) [ 434.229798] snd_dummy snd_dummy.0: control 120:0:0:Î:0 is already present [ 434.241723] binder: 10895:10896 ERROR: BC_REGISTER_LOOPER called without request [ 434.273843] binder: BINDER_SET_CONTEXT_MGR already set [ 434.281010] binder: 10895:10896 unknown command 155925413 [ 434.292712] binder: 10895:10896 ioctl c0306201 20000140 returned -22 [ 434.311205] binder: 10892:10893 ioctl 40046207 0 returned -16 [ 434.311259] binder: BINDER_SET_CONTEXT_MGR already set [ 434.326073] snd_dummy snd_dummy.0: control 120:0:0:Î:0 is already present [ 434.331016] binder: 10895:10903 got reply transaction with no transaction stack [ 434.338017] binder: 10894:10898 ioctl 40046207 0 returned -16 [ 434.361502] binder: 10892:10893 ERROR: BC_REGISTER_LOOPER called without request 00:32:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x247}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={r1, 0x1}, 0x8) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) [ 434.374976] binder: 10895:10903 transaction failed 29201/-71, size 80-8 line 2801 [ 434.383837] binder: 10892:10893 unknown command 155925413 [ 434.404950] binder: 10892:10893 ioctl c0306201 20000140 returned -22 00:32:13 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) [ 434.421168] binder: 10892:10906 got reply transaction with no transaction stack 00:32:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) accept4$packet(0xffffffffffffff9c, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14, 0x80000) prctl$PR_GET_FPEMU(0x9, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1a7) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) set_mempolicy(0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x121002) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0205710, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) [ 434.451244] binder: 10892:10906 transaction failed 29201/-71, size 80-8 line 2801 [ 434.485512] binder: 10894:10898 unknown command 155925413 [ 434.526700] binder: 10894:10898 ioctl c0306201 20000140 returned -22 00:32:14 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) 00:32:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) accept4$packet(0xffffffffffffff9c, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14, 0x80000) prctl$PR_GET_FPEMU(0x9, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1a7) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) set_mempolicy(0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x121002) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0205710, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) [ 434.573589] snd_dummy snd_dummy.0: control 120:0:0:Î:0 is already present [ 434.604272] binder: release 10895:10896 transaction 27 out, still active [ 434.618515] binder: undelivered TRANSACTION_COMPLETE [ 434.646334] binder: send failed reply for transaction 27, target dead [ 434.680102] binder: send failed reply for transaction 29 to 10892:10893 00:32:14 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='nfs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000380)=""/206) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x7fffffff, 0x0, 0x4}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@local, @in6}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x100) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000e72000000000000000"], 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000640)={0x1000, &(0x7f0000000b80)=""/4096}) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x20000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind(r2, &(0x7f0000000ac0)=@nfc={0x27, 0x1, 0x2, 0x7}, 0x80) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000340), 0x4) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x800, 0xaf87, {"ad1fc9e8beaa401e177f5769edf738ce"}, 0x5828, 0x8, 0x2}, @ib={0x1b, 0x8, 0x6f47, {"4b5a8a7ab7122b0ada16f470b8c7b430"}, 0xfffffffffffffffb, 0x7fff, 0x3ba7}}}, 0x118) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r3, &(0x7f0000000680)='attr/exec\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:32:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) accept4$packet(0xffffffffffffff9c, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14, 0x80000) prctl$PR_GET_FPEMU(0x9, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1a7) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) set_mempolicy(0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x121002) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0205710, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) [ 434.722438] binder: send failed reply for transaction 31 to 10894:10898 [ 434.724556] snd_dummy snd_dummy.0: control 120:0:0:Î:0 is already present [ 434.751430] binder: undelivered TRANSACTION_COMPLETE 00:32:14 executing program 0: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback, 0x800, 0x0, 0x2000ff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x800, 0x0, 0xff, 0x0, 0x0, 0x80}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100), &(0x7f0000000140)=0x8) epoll_create1(0x0) 00:32:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000080)={0x81, 0x8, 0x3, 0xfff, [], [], [], 0x100000001, 0x7, 0x51d, 0x10000, "bd97c0bf1abc2ce8c5f32a3bf1502f28"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x0, 0x500}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:32:14 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='nfs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000380)=""/206) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x7fffffff, 0x0, 0x4}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@local, @in6}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x100) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000e72000000000000000"], 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000640)={0x1000, &(0x7f0000000b80)=""/4096}) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x20000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind(r2, &(0x7f0000000ac0)=@nfc={0x27, 0x1, 0x2, 0x7}, 0x80) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000340), 0x4) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x800, 0xaf87, {"ad1fc9e8beaa401e177f5769edf738ce"}, 0x5828, 0x8, 0x2}, @ib={0x1b, 0x8, 0x6f47, {"4b5a8a7ab7122b0ada16f470b8c7b430"}, 0xfffffffffffffffb, 0x7fff, 0x3ba7}}}, 0x118) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r3, &(0x7f0000000680)='attr/exec\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:32:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x247}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={r1, 0x1}, 0x8) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 00:32:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) accept4$packet(0xffffffffffffff9c, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14, 0x80000) prctl$PR_GET_FPEMU(0x9, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1a7) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) set_mempolicy(0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x121002) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0205710, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) 00:32:14 executing program 0: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback, 0x800, 0x0, 0x2000ff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x800, 0x0, 0xff, 0x0, 0x0, 0x80}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100), &(0x7f0000000140)=0x8) epoll_create1(0x0) 00:32:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) accept4$packet(0xffffffffffffff9c, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14, 0x80000) prctl$PR_GET_FPEMU(0x9, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1a7) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) set_mempolicy(0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x121002) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0205710, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) [ 435.175325] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:32:14 executing program 0: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback, 0x800, 0x0, 0x2000ff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x800, 0x0, 0xff, 0x0, 0x0, 0x80}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100), &(0x7f0000000140)=0x8) epoll_create1(0x0) 00:32:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) accept4$packet(0xffffffffffffff9c, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14, 0x80000) prctl$PR_GET_FPEMU(0x9, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1a7) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) set_mempolicy(0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x7, 0x121002) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0205710, 0x0) syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) 00:32:14 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='nfs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000380)=""/206) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x7fffffff, 0x0, 0x4}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@local, @in6}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x100) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000e72000000000000000"], 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000640)={0x1000, &(0x7f0000000b80)=""/4096}) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x20000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind(r2, &(0x7f0000000ac0)=@nfc={0x27, 0x1, 0x2, 0x7}, 0x80) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000340), 0x4) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x800, 0xaf87, {"ad1fc9e8beaa401e177f5769edf738ce"}, 0x5828, 0x8, 0x2}, @ib={0x1b, 0x8, 0x6f47, {"4b5a8a7ab7122b0ada16f470b8c7b430"}, 0xfffffffffffffffb, 0x7fff, 0x3ba7}}}, 0x118) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r3, &(0x7f0000000680)='attr/exec\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:32:14 executing program 0: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x10) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback, 0x800, 0x0, 0x2000ff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback, 0x800, 0x0, 0xff, 0x0, 0x0, 0x80}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100), &(0x7f0000000140)=0x8) epoll_create1(0x0) 00:32:15 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='nfs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000380)=""/206) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x7fffffff, 0x0, 0x4}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@local, @in6}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x100) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000e72000000000000000"], 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000640)={0x1000, &(0x7f0000000b80)=""/4096}) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x20000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind(r2, &(0x7f0000000ac0)=@nfc={0x27, 0x1, 0x2, 0x7}, 0x80) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000340), 0x4) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x800, 0xaf87, {"ad1fc9e8beaa401e177f5769edf738ce"}, 0x5828, 0x8, 0x2}, @ib={0x1b, 0x8, 0x6f47, {"4b5a8a7ab7122b0ada16f470b8c7b430"}, 0xfffffffffffffffb, 0x7fff, 0x3ba7}}}, 0x118) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r3, &(0x7f0000000680)='attr/exec\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) [ 435.663771] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:32:15 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x48, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x7}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x48}}, 0x0) 00:32:15 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='nfs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000380)=""/206) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x7fffffff, 0x0, 0x4}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@local, @in6}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x100) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000e72000000000000000"], 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000640)={0x1000, &(0x7f0000000b80)=""/4096}) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x20000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind(r2, &(0x7f0000000ac0)=@nfc={0x27, 0x1, 0x2, 0x7}, 0x80) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000340), 0x4) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x800, 0xaf87, {"ad1fc9e8beaa401e177f5769edf738ce"}, 0x5828, 0x8, 0x2}, @ib={0x1b, 0x8, 0x6f47, {"4b5a8a7ab7122b0ada16f470b8c7b430"}, 0xfffffffffffffffb, 0x7fff, 0x3ba7}}}, 0x118) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r3, &(0x7f0000000680)='attr/exec\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:32:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000080)={0x81, 0x8, 0x3, 0xfff, [], [], [], 0x100000001, 0x7, 0x51d, 0x10000, "bd97c0bf1abc2ce8c5f32a3bf1502f28"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x0, 0x500}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:32:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x247}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000003c0)={r1, 0x1}, 0x8) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) close(r2) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x0) 00:32:15 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x48, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x7}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x48}}, 0x0) 00:32:15 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='nfs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000380)=""/206) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x7fffffff, 0x0, 0x4}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@local, @in6}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x100) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000e72000000000000000"], 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000640)={0x1000, &(0x7f0000000b80)=""/4096}) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x20000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind(r2, &(0x7f0000000ac0)=@nfc={0x27, 0x1, 0x2, 0x7}, 0x80) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000340), 0x4) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x800, 0xaf87, {"ad1fc9e8beaa401e177f5769edf738ce"}, 0x5828, 0x8, 0x2}, @ib={0x1b, 0x8, 0x6f47, {"4b5a8a7ab7122b0ada16f470b8c7b430"}, 0xfffffffffffffffb, 0x7fff, 0x3ba7}}}, 0x118) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r3, &(0x7f0000000680)='attr/exec\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:32:15 executing program 4: r0 = memfd_create(&(0x7f00000000c0)='nfs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000380)=""/206) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x7fffffff, 0x0, 0x4}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@local, @in6}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x100) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000e72000000000000000"], 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000640)={0x1000, &(0x7f0000000b80)=""/4096}) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x20000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind(r2, &(0x7f0000000ac0)=@nfc={0x27, 0x1, 0x2, 0x7}, 0x80) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000340), 0x4) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x800, 0xaf87, {"ad1fc9e8beaa401e177f5769edf738ce"}, 0x5828, 0x8, 0x2}, @ib={0x1b, 0x8, 0x6f47, {"4b5a8a7ab7122b0ada16f470b8c7b430"}, 0xfffffffffffffffb, 0x7fff, 0x3ba7}}}, 0x118) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r3, &(0x7f0000000680)='attr/exec\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:32:15 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='nfs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000380)=""/206) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x7fffffff, 0x0, 0x4}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@local, @in6}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x100) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000e72000000000000000"], 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000640)={0x1000, &(0x7f0000000b80)=""/4096}) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x20000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind(r2, &(0x7f0000000ac0)=@nfc={0x27, 0x1, 0x2, 0x7}, 0x80) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000340), 0x4) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x800, 0xaf87, {"ad1fc9e8beaa401e177f5769edf738ce"}, 0x5828, 0x8, 0x2}, @ib={0x1b, 0x8, 0x6f47, {"4b5a8a7ab7122b0ada16f470b8c7b430"}, 0xfffffffffffffffb, 0x7fff, 0x3ba7}}}, 0x118) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r3, &(0x7f0000000680)='attr/exec\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:32:15 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='nfs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000380)=""/206) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x7fffffff, 0x0, 0x4}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@local, @in6}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x100) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000e72000000000000000"], 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000640)={0x1000, &(0x7f0000000b80)=""/4096}) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x20000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind(r2, &(0x7f0000000ac0)=@nfc={0x27, 0x1, 0x2, 0x7}, 0x80) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000340), 0x4) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x800, 0xaf87, {"ad1fc9e8beaa401e177f5769edf738ce"}, 0x5828, 0x8, 0x2}, @ib={0x1b, 0x8, 0x6f47, {"4b5a8a7ab7122b0ada16f470b8c7b430"}, 0xfffffffffffffffb, 0x7fff, 0x3ba7}}}, 0x118) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r3, &(0x7f0000000680)='attr/exec\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) [ 436.158400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:32:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x9) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000100)=""/9, &(0x7f0000000180)=0x9) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/224, 0xe0) r2 = socket$inet6(0xa, 0x6, 0x0) removexattr(0x0, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x400000031, &(0x7f0000000040)=0x1000002000020, 0xfffffffffffffedc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x17, &(0x7f0000000040), 0x4) socket$pptp(0x18, 0x1, 0x2) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f00000000c0)=0x9) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0xc0ffffff00000000, {0x0, 0x6000}, 0x80ffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x101}) [ 436.439435] FS-Cache: Duplicate cookie detected [ 436.444239] FS-Cache: O-cookie c=000000003dbb0429 [p=00000000f349fde4 fl=222 nc=0 na=1] [ 436.452679] FS-Cache: O-cookie d=00000000db2d00fe n=00000000c53b5c26 [ 436.459218] FS-Cache: O-key=[10] '02000200000002000000' [ 436.464617] FS-Cache: N-cookie c=00000000a42f3b9f [p=00000000f349fde4 fl=2 nc=0 na=1] [ 436.472621] FS-Cache: N-cookie d=00000000db2d00fe n=00000000ddf876a3 [ 436.479142] FS-Cache: N-key=[10] '02000200000002000000' [ 436.484716] FS-Cache: Duplicate cookie detected [ 436.490137] FS-Cache: O-cookie c=000000003dbb0429 [p=00000000f349fde4 fl=222 nc=0 na=1] [ 436.505186] FS-Cache: O-cookie d=00000000db2d00fe n=00000000c53b5c26 [ 436.511899] FS-Cache: O-key=[10] '02000200000002000000' [ 436.517829] FS-Cache: N-cookie c=0000000026fa7f3f [p=00000000f349fde4 fl=2 nc=0 na=1] [ 436.525964] FS-Cache: N-cookie d=00000000db2d00fe n=000000009db4c7f2 [ 436.532529] FS-Cache: N-key=[10] '02000200000002000000' 00:32:16 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x75) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) 00:32:16 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x48, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x7}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x48}}, 0x0) 00:32:16 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x75) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) 00:32:16 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='nfs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000380)=""/206) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x7fffffff, 0x0, 0x4}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@local, @in6}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x100) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000e72000000000000000"], 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000640)={0x1000, &(0x7f0000000b80)=""/4096}) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x20000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bind(r2, &(0x7f0000000ac0)=@nfc={0x27, 0x1, 0x2, 0x7}, 0x80) setsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f0000000340), 0x4) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000007c0)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x800, 0xaf87, {"ad1fc9e8beaa401e177f5769edf738ce"}, 0x5828, 0x8, 0x2}, @ib={0x1b, 0x8, 0x6f47, {"4b5a8a7ab7122b0ada16f470b8c7b430"}, 0xfffffffffffffffb, 0x7fff, 0x3ba7}}}, 0x118) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r3, &(0x7f0000000680)='attr/exec\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:32:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000080)={0x81, 0x8, 0x3, 0xfff, [], [], [], 0x100000001, 0x7, 0x51d, 0x10000, "bd97c0bf1abc2ce8c5f32a3bf1502f28"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x0, 0x500}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:32:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000980)='/dev/snd/pcmC#D#c\x00', 0x61, 0x2) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x2, 0x4, 0x100, 0x8, "6de47c9517da5699552b850b5cb122daf9c75e181054e913d4e4294a270b434028762990f835ef72ea6706c7f35eb9820202723c59a189e2cc160f26dd0e6f", 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x7f, 0x6209, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0x9) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000b00)=@routing={0x0, 0xa, 0x0, 0x0, 0x0, [@mcast2, @loopback, @mcast2, @local, @empty]}, 0x58) connect$inet6(r3, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={r3, r4}) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="6ed312fd87bb8c249e4e9d00eefeb9da7f3d1958a931b7e21411ab63c880b59c3698adb40554be7e1dec0688edd652b068746ce23cf0f29587d114b108241079ae3ddc4ccbf883107d9c8203754a9effa8d0b1993aa71915460c5cd11fc319c50572569fdedde20577f7860329f56a9424", 0x71}], 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) fstat(r3, &(0x7f0000000440)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) sendmmsg(r3, &(0x7f0000007e00), 0x4000000000000f4, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) 00:32:16 executing program 0: r0 = socket(0x10, 0x802, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@setlink={0x48, 0x13, 0x501, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x7}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x48}}, 0x0) 00:32:16 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) r1 = dup(r0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0xc0285628, &(0x7f0000000080)) 00:32:16 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x75) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) [ 437.356924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:32:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x9) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000100)=""/9, &(0x7f0000000180)=0x9) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/224, 0xe0) r2 = socket$inet6(0xa, 0x6, 0x0) removexattr(0x0, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x400000031, &(0x7f0000000040)=0x1000002000020, 0xfffffffffffffedc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x17, &(0x7f0000000040), 0x4) socket$pptp(0x18, 0x1, 0x2) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f00000000c0)=0x9) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0xc0ffffff00000000, {0x0, 0x6000}, 0x80ffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x101}) 00:32:16 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) r1 = dup(r0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0xc0285628, &(0x7f0000000080)) 00:32:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x9) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000100)=""/9, &(0x7f0000000180)=0x9) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/224, 0xe0) r2 = socket$inet6(0xa, 0x6, 0x0) removexattr(0x0, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x400000031, &(0x7f0000000040)=0x1000002000020, 0xfffffffffffffedc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x17, &(0x7f0000000040), 0x4) socket$pptp(0x18, 0x1, 0x2) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f00000000c0)=0x9) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0xc0ffffff00000000, {0x0, 0x6000}, 0x80ffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x101}) 00:32:17 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) r1 = dup(r0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0xc0285628, &(0x7f0000000080)) 00:32:17 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x75) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) 00:32:17 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) r1 = dup(r0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0xc0285628, &(0x7f0000000080)) 00:32:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000080)={0x81, 0x8, 0x3, 0xfff, [], [], [], 0x100000001, 0x7, 0x51d, 0x10000, "bd97c0bf1abc2ce8c5f32a3bf1502f28"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000000)={0x10, 0x9effffff, 0x0, 0x500}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 00:32:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x9) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000100)=""/9, &(0x7f0000000180)=0x9) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/224, 0xe0) r2 = socket$inet6(0xa, 0x6, 0x0) removexattr(0x0, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x400000031, &(0x7f0000000040)=0x1000002000020, 0xfffffffffffffedc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x17, &(0x7f0000000040), 0x4) socket$pptp(0x18, 0x1, 0x2) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f00000000c0)=0x9) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0xc0ffffff00000000, {0x0, 0x6000}, 0x80ffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x101}) 00:32:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000980)='/dev/snd/pcmC#D#c\x00', 0x61, 0x2) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x2, 0x4, 0x100, 0x8, "6de47c9517da5699552b850b5cb122daf9c75e181054e913d4e4294a270b434028762990f835ef72ea6706c7f35eb9820202723c59a189e2cc160f26dd0e6f", 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x7f, 0x6209, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0x9) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000b00)=@routing={0x0, 0xa, 0x0, 0x0, 0x0, [@mcast2, @loopback, @mcast2, @local, @empty]}, 0x58) connect$inet6(r3, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={r3, r4}) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="6ed312fd87bb8c249e4e9d00eefeb9da7f3d1958a931b7e21411ab63c880b59c3698adb40554be7e1dec0688edd652b068746ce23cf0f29587d114b108241079ae3ddc4ccbf883107d9c8203754a9effa8d0b1993aa71915460c5cd11fc319c50572569fdedde20577f7860329f56a9424", 0x71}], 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) fstat(r3, &(0x7f0000000440)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) sendmmsg(r3, &(0x7f0000007e00), 0x4000000000000f4, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) 00:32:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000980)='/dev/snd/pcmC#D#c\x00', 0x61, 0x2) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x2, 0x4, 0x100, 0x8, "6de47c9517da5699552b850b5cb122daf9c75e181054e913d4e4294a270b434028762990f835ef72ea6706c7f35eb9820202723c59a189e2cc160f26dd0e6f", 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x7f, 0x6209, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0x9) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000b00)=@routing={0x0, 0xa, 0x0, 0x0, 0x0, [@mcast2, @loopback, @mcast2, @local, @empty]}, 0x58) connect$inet6(r3, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={r3, r4}) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="6ed312fd87bb8c249e4e9d00eefeb9da7f3d1958a931b7e21411ab63c880b59c3698adb40554be7e1dec0688edd652b068746ce23cf0f29587d114b108241079ae3ddc4ccbf883107d9c8203754a9effa8d0b1993aa71915460c5cd11fc319c50572569fdedde20577f7860329f56a9424", 0x71}], 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) fstat(r3, &(0x7f0000000440)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) sendmmsg(r3, &(0x7f0000007e00), 0x4000000000000f4, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) [ 438.623996] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:32:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x9) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000100)=""/9, &(0x7f0000000180)=0x9) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/224, 0xe0) r2 = socket$inet6(0xa, 0x6, 0x0) removexattr(0x0, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x400000031, &(0x7f0000000040)=0x1000002000020, 0xfffffffffffffedc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x17, &(0x7f0000000040), 0x4) socket$pptp(0x18, 0x1, 0x2) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f00000000c0)=0x9) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0xc0ffffff00000000, {0x0, 0x6000}, 0x80ffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x101}) 00:32:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x9) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000100)=""/9, &(0x7f0000000180)=0x9) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/224, 0xe0) r2 = socket$inet6(0xa, 0x6, 0x0) removexattr(0x0, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x400000031, &(0x7f0000000040)=0x1000002000020, 0xfffffffffffffedc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x17, &(0x7f0000000040), 0x4) socket$pptp(0x18, 0x1, 0x2) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f00000000c0)=0x9) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0xc0ffffff00000000, {0x0, 0x6000}, 0x80ffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x101}) 00:32:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x9) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000100)=""/9, &(0x7f0000000180)=0x9) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/224, 0xe0) r2 = socket$inet6(0xa, 0x6, 0x0) removexattr(0x0, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x400000031, &(0x7f0000000040)=0x1000002000020, 0xfffffffffffffedc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x17, &(0x7f0000000040), 0x4) socket$pptp(0x18, 0x1, 0x2) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f00000000c0)=0x9) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0xc0ffffff00000000, {0x0, 0x6000}, 0x80ffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x101}) 00:32:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)) 00:32:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)) 00:32:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000980)='/dev/snd/pcmC#D#c\x00', 0x61, 0x2) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x2, 0x4, 0x100, 0x8, "6de47c9517da5699552b850b5cb122daf9c75e181054e913d4e4294a270b434028762990f835ef72ea6706c7f35eb9820202723c59a189e2cc160f26dd0e6f", 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x7f, 0x6209, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0x9) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000b00)=@routing={0x0, 0xa, 0x0, 0x0, 0x0, [@mcast2, @loopback, @mcast2, @local, @empty]}, 0x58) connect$inet6(r3, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={r3, r4}) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="6ed312fd87bb8c249e4e9d00eefeb9da7f3d1958a931b7e21411ab63c880b59c3698adb40554be7e1dec0688edd652b068746ce23cf0f29587d114b108241079ae3ddc4ccbf883107d9c8203754a9effa8d0b1993aa71915460c5cd11fc319c50572569fdedde20577f7860329f56a9424", 0x71}], 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) fstat(r3, &(0x7f0000000440)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) sendmmsg(r3, &(0x7f0000007e00), 0x4000000000000f4, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) 00:32:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000980)='/dev/snd/pcmC#D#c\x00', 0x61, 0x2) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x2, 0x4, 0x100, 0x8, "6de47c9517da5699552b850b5cb122daf9c75e181054e913d4e4294a270b434028762990f835ef72ea6706c7f35eb9820202723c59a189e2cc160f26dd0e6f", 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x7f, 0x6209, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0x9) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000b00)=@routing={0x0, 0xa, 0x0, 0x0, 0x0, [@mcast2, @loopback, @mcast2, @local, @empty]}, 0x58) connect$inet6(r3, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={r3, r4}) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="6ed312fd87bb8c249e4e9d00eefeb9da7f3d1958a931b7e21411ab63c880b59c3698adb40554be7e1dec0688edd652b068746ce23cf0f29587d114b108241079ae3ddc4ccbf883107d9c8203754a9effa8d0b1993aa71915460c5cd11fc319c50572569fdedde20577f7860329f56a9424", 0x71}], 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) fstat(r3, &(0x7f0000000440)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) sendmmsg(r3, &(0x7f0000007e00), 0x4000000000000f4, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) 00:32:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)) 00:32:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x9) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000100)=""/9, &(0x7f0000000180)=0x9) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/224, 0xe0) r2 = socket$inet6(0xa, 0x6, 0x0) removexattr(0x0, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x400000031, &(0x7f0000000040)=0x1000002000020, 0xfffffffffffffedc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x17, &(0x7f0000000040), 0x4) socket$pptp(0x18, 0x1, 0x2) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f00000000c0)=0x9) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0xc0ffffff00000000, {0x0, 0x6000}, 0x80ffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x101}) 00:32:19 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)) 00:32:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x9) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000100)=""/9, &(0x7f0000000180)=0x9) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/224, 0xe0) r2 = socket$inet6(0xa, 0x6, 0x0) removexattr(0x0, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x400000031, &(0x7f0000000040)=0x1000002000020, 0xfffffffffffffedc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x17, &(0x7f0000000040), 0x4) socket$pptp(0x18, 0x1, 0x2) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f00000000c0)=0x9) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0xc0ffffff00000000, {0x0, 0x6000}, 0x80ffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x101}) 00:32:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'hsr0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x9) getsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f0000000100)=""/9, &(0x7f0000000180)=0x9) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/224, 0xe0) r2 = socket$inet6(0xa, 0x6, 0x0) removexattr(0x0, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x400000031, &(0x7f0000000040)=0x1000002000020, 0xfffffffffffffedc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x17, &(0x7f0000000040), 0x4) socket$pptp(0x18, 0x1, 0x2) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f00000000c0)=0x9) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0xc0ffffff00000000, {0x0, 0x6000}, 0x80ffffff00000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800001, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x101}) 00:32:19 executing program 3: connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:32:20 executing program 3: connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:32:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000980)='/dev/snd/pcmC#D#c\x00', 0x61, 0x2) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x2, 0x4, 0x100, 0x8, "6de47c9517da5699552b850b5cb122daf9c75e181054e913d4e4294a270b434028762990f835ef72ea6706c7f35eb9820202723c59a189e2cc160f26dd0e6f", 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x7f, 0x6209, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0x9) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000b00)=@routing={0x0, 0xa, 0x0, 0x0, 0x0, [@mcast2, @loopback, @mcast2, @local, @empty]}, 0x58) connect$inet6(r3, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={r3, r4}) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="6ed312fd87bb8c249e4e9d00eefeb9da7f3d1958a931b7e21411ab63c880b59c3698adb40554be7e1dec0688edd652b068746ce23cf0f29587d114b108241079ae3ddc4ccbf883107d9c8203754a9effa8d0b1993aa71915460c5cd11fc319c50572569fdedde20577f7860329f56a9424", 0x71}], 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) fstat(r3, &(0x7f0000000440)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) sendmmsg(r3, &(0x7f0000007e00), 0x4000000000000f4, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) 00:32:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000980)='/dev/snd/pcmC#D#c\x00', 0x61, 0x2) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000140)=@nfc_llcp={0x27, 0x0, 0x2, 0x4, 0x100, 0x8, "6de47c9517da5699552b850b5cb122daf9c75e181054e913d4e4294a270b434028762990f835ef72ea6706c7f35eb9820202723c59a189e2cc160f26dd0e6f", 0x6}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x7f, 0x6209, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0x9) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000b00)=@routing={0x0, 0xa, 0x0, 0x0, 0x0, [@mcast2, @loopback, @mcast2, @local, @empty]}, 0x58) connect$inet6(r3, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) r4 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)={r3, r4}) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="6ed312fd87bb8c249e4e9d00eefeb9da7f3d1958a931b7e21411ab63c880b59c3698adb40554be7e1dec0688edd652b068746ce23cf0f29587d114b108241079ae3ddc4ccbf883107d9c8203754a9effa8d0b1993aa71915460c5cd11fc319c50572569fdedde20577f7860329f56a9424", 0x71}], 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)) fstat(r3, &(0x7f0000000440)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) stat(0x0, 0x0) sendmmsg(r3, &(0x7f0000007e00), 0x4000000000000f4, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfb, &(0x7f0000000380)=""/251}, 0x48) 00:32:20 executing program 0: r0 = socket$inet(0x2, 0x200080003, 0xa) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6=@loopback}}, 0xe8) 00:32:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs], 0x0, 0x0, 0x0}) [ 441.777341] binder: 11186:11187 DecRefs 0 refcount change on invalid ref 0 ret -22 00:32:21 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/244, 0xf4}}, {{&(0x7f00000009c0)=@llc, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)=""/182, 0xb6}}], 0x2, 0x0, &(0x7f0000002ec0)) connect$pppoe(r0, &(0x7f0000000980)={0x18, 0x0, {0x2, @local, 'bond_slave_0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000003100)=[{{&(0x7f0000000780)=@can, 0x10, &(0x7f00000008c0), 0x0, &(0x7f0000000900)}}, {{&(0x7f0000000c40)=@can, 0x10, &(0x7f0000001e00), 0x367, &(0x7f0000001e40)}, 0x8}], 0x2, 0x0) 00:32:21 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x17, &(0x7f00000002c0)='trusted.overlay.opaque\x00', 0xffffffffffffffff}, 0x30) getpgid(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000640)=ANY=[], 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x4}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) epoll_create1(0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e24}}, 0x5, 0x0, 0x5, "1e92caf261673c67250b5ebaf9a998952b815f6ce8960eb87bb830f5692b2ec51493c0d2cd15a33c96d6694ab628beafef3566a169d7d884bacfc563f4f7816d69e7824aea89f9d8a6e0f34380da4a5d"}, 0xd8) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) gettid() getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@local, @multicast2, @dev}, 0xfffffffffffffe6d) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x2040, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000440)={{0xaf, @local, 0x4e24, 0x2, 'wrr\x00', 0x32, 0x2100000, 0x49}, {@local, 0x4e20, 0x10002, 0xfffffffffffffff7, 0x800, 0x3}}, 0x44) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x10013c93a) ioctl$EVIOCGREP(r1, 0x40047451, &(0x7f0000000000)=""/174) r3 = perf_event_open(&(0x7f0000000040)={0x40000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x252, 0x82) r5 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) splice(r4, &(0x7f0000000540), r3, &(0x7f0000000580), 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f00000005c0)={{0x3, 0x80}, {0x1ff, 0x101}, 0x8001, 0x5, 0x8}) sendmsg(r5, &(0x7f0000000dc0)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x3, @local, 'yam0\x00'}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)="f24aa4ece1a1c2deaa4e35ab241a7c0d9f9a53bed0ee3ff5dfbf23479f3e6c62ee7185234edb5124290be13fde222b4902a1818088a36eca73aaf80ac8daf8e72628d46ccaba5e354b4bd04a2e4687f454b1f84978a48fa21038587053d2e7845402592f86d0b67ff709b7611384d3b0dfc9ef98d2c81d93c3084fdcbb52b6512af881105ef1caabfb45e18b05996a1281a57708430e746e030e64e112a5f8e11aacf8c78425752f17b5534eb3c6f8d433b774ffc0", 0xb5}], 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) [ 441.888566] binder: 11186:11189 DecRefs 0 refcount change on invalid ref 0 ret -22 00:32:21 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/244, 0xf4}}, {{&(0x7f00000009c0)=@llc, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)=""/182, 0xb6}}], 0x2, 0x0, &(0x7f0000002ec0)) connect$pppoe(r0, &(0x7f0000000980)={0x18, 0x0, {0x2, @local, 'bond_slave_0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000003100)=[{{&(0x7f0000000780)=@can, 0x10, &(0x7f00000008c0), 0x0, &(0x7f0000000900)}}, {{&(0x7f0000000c40)=@can, 0x10, &(0x7f0000001e00), 0x367, &(0x7f0000001e40)}, 0x8}], 0x2, 0x0) 00:32:21 executing program 3: connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 00:32:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) 00:32:21 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/244, 0xf4}}, {{&(0x7f00000009c0)=@llc, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)=""/182, 0xb6}}], 0x2, 0x0, &(0x7f0000002ec0)) connect$pppoe(r0, &(0x7f0000000980)={0x18, 0x0, {0x2, @local, 'bond_slave_0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000003100)=[{{&(0x7f0000000780)=@can, 0x10, &(0x7f00000008c0), 0x0, &(0x7f0000000900)}}, {{&(0x7f0000000c40)=@can, 0x10, &(0x7f0000001e00), 0x367, &(0x7f0000001e40)}, 0x8}], 0x2, 0x0) [ 442.364574] IPVS: ftp: loaded support on port[0] = 21 00:32:21 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f00000004c0)=""/244, 0xf4}}, {{&(0x7f00000009c0)=@llc, 0x80, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)=""/182, 0xb6}}], 0x2, 0x0, &(0x7f0000002ec0)) connect$pppoe(r0, &(0x7f0000000980)={0x18, 0x0, {0x2, @local, 'bond_slave_0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000003100)=[{{&(0x7f0000000780)=@can, 0x10, &(0x7f00000008c0), 0x0, &(0x7f0000000900)}}, {{&(0x7f0000000c40)=@can, 0x10, &(0x7f0000001e00), 0x367, &(0x7f0000001e40)}, 0x8}], 0x2, 0x0) 00:32:21 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) 00:32:22 executing program 2: mkdir(&(0x7f00000003c0)='./control\x00', 0x0) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) rename(&(0x7f0000000000)='./control/file0\x00', &(0x7f00000002c0)='./control\x00') 00:32:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) 00:32:22 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005e0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 00:32:22 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_gstrings}) 00:32:22 executing program 3: connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 442.853282] IPVS: ftp: loaded support on port[0] = 21 00:32:23 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) 00:32:23 executing program 2: mkdir(&(0x7f00000003c0)='./control\x00', 0x0) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) rename(&(0x7f0000000000)='./control/file0\x00', &(0x7f00000002c0)='./control\x00') 00:32:23 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_gstrings}) 00:32:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0xfffffffffffffffd, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@llc={0x1a, 0x303, 0x1, 0x4, 0x5, 0x9, @dev={[], 0x14}}, 0x42) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) 00:32:23 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x17, &(0x7f00000002c0)='trusted.overlay.opaque\x00', 0xffffffffffffffff}, 0x30) getpgid(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000640)=ANY=[], 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x4}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) epoll_create1(0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e24}}, 0x5, 0x0, 0x5, "1e92caf261673c67250b5ebaf9a998952b815f6ce8960eb87bb830f5692b2ec51493c0d2cd15a33c96d6694ab628beafef3566a169d7d884bacfc563f4f7816d69e7824aea89f9d8a6e0f34380da4a5d"}, 0xd8) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) gettid() getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@local, @multicast2, @dev}, 0xfffffffffffffe6d) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x2040, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000440)={{0xaf, @local, 0x4e24, 0x2, 'wrr\x00', 0x32, 0x2100000, 0x49}, {@local, 0x4e20, 0x10002, 0xfffffffffffffff7, 0x800, 0x3}}, 0x44) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x10013c93a) ioctl$EVIOCGREP(r1, 0x40047451, &(0x7f0000000000)=""/174) r3 = perf_event_open(&(0x7f0000000040)={0x40000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x252, 0x82) r5 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) splice(r4, &(0x7f0000000540), r3, &(0x7f0000000580), 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f00000005c0)={{0x3, 0x80}, {0x1ff, 0x101}, 0x8001, 0x5, 0x8}) sendmsg(r5, &(0x7f0000000dc0)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x3, @local, 'yam0\x00'}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)="f24aa4ece1a1c2deaa4e35ab241a7c0d9f9a53bed0ee3ff5dfbf23479f3e6c62ee7185234edb5124290be13fde222b4902a1818088a36eca73aaf80ac8daf8e72628d46ccaba5e354b4bd04a2e4687f454b1f84978a48fa21038587053d2e7845402592f86d0b67ff709b7611384d3b0dfc9ef98d2c81d93c3084fdcbb52b6512af881105ef1caabfb45e18b05996a1281a57708430e746e030e64e112a5f8e11aacf8c78425752f17b5534eb3c6f8d433b774ffc0", 0xb5}], 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) 00:32:23 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_gstrings}) 00:32:23 executing program 2: mkdir(&(0x7f00000003c0)='./control\x00', 0x0) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) rename(&(0x7f0000000000)='./control/file0\x00', &(0x7f00000002c0)='./control\x00') 00:32:23 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x17, &(0x7f00000002c0)='trusted.overlay.opaque\x00', 0xffffffffffffffff}, 0x30) getpgid(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000640)=ANY=[], 0x0, &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x4}) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) epoll_create1(0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e24}}, 0x5, 0x0, 0x5, "1e92caf261673c67250b5ebaf9a998952b815f6ce8960eb87bb830f5692b2ec51493c0d2cd15a33c96d6694ab628beafef3566a169d7d884bacfc563f4f7816d69e7824aea89f9d8a6e0f34380da4a5d"}, 0xd8) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) gettid() getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@local, @multicast2, @dev}, 0xfffffffffffffe6d) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x2040, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000440)={{0xaf, @local, 0x4e24, 0x2, 'wrr\x00', 0x32, 0x2100000, 0x49}, {@local, 0x4e20, 0x10002, 0xfffffffffffffff7, 0x800, 0x3}}, 0x44) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x10013c93a) ioctl$EVIOCGREP(r1, 0x40047451, &(0x7f0000000000)=""/174) r3 = perf_event_open(&(0x7f0000000040)={0x40000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x252, 0x82) r5 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) splice(r4, &(0x7f0000000540), r3, &(0x7f0000000580), 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f00000005c0)={{0x3, 0x80}, {0x1ff, 0x101}, 0x8001, 0x5, 0x8}) sendmsg(r5, &(0x7f0000000dc0)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x3, @local, 'yam0\x00'}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)="f24aa4ece1a1c2deaa4e35ab241a7c0d9f9a53bed0ee3ff5dfbf23479f3e6c62ee7185234edb5124290be13fde222b4902a1818088a36eca73aaf80ac8daf8e72628d46ccaba5e354b4bd04a2e4687f454b1f84978a48fa21038587053d2e7845402592f86d0b67ff709b7611384d3b0dfc9ef98d2c81d93c3084fdcbb52b6512af881105ef1caabfb45e18b05996a1281a57708430e746e030e64e112a5f8e11aacf8c78425752f17b5534eb3c6f8d433b774ffc0", 0xb5}], 0x1, 0x0, 0x0, 0x840}, 0x80) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) 00:32:23 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x4, 0x2b4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000640], 0x0, 0x0, &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x15, 0x4, 0x884c, 'veth1\x00', 'syzkaller0\x00', 'lo\x00', 'nr0\x00', @local, [0xff, 0x0, 0x0, 0xff, 0xe0437b1f0e4e756a, 0xff], @dev={[], 0xc}, [0x0, 0x0, 0x0, 0xff], 0xf4, 0x144, 0x18c, [@nfacct={'nfacct\x00', 0x24, {{'syz1\x00', 0xf63b}}}, @limit={'limit\x00', 0x18, {{0x7, 0x7, 0x8, 0x7891, 0x2, 0x5}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x4, {{0x3}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4, {{0x73}}}]}, @common=@LED={'LED\x00', 0x24, {{'syz1\x00', 0x1, 0xfffffffffffffffb, 0xd3b}}}}]}, {0x0, '\x00', 0x2, 0x0, 0x1, [{{{0x11, 0x0, 0x88bf, 'lo\x00', 'veth1_to_bridge\x00', 'syzkaller0\x00', 'bridge0\x00', @local, [], @local, [], 0x70, 0x70, 0x98}}, @common=@redirect={'redirect\x00', 0x4}}]}, {0x0, '\x00', 0x4}]}, 0x304) 00:32:23 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_gstrings}) 00:32:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0xfffffffffffffffd, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@llc={0x1a, 0x303, 0x1, 0x4, 0x5, 0x9, @dev={[], 0x14}}, 0x42) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) 00:32:23 executing program 1: recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/icmp\x00') socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x6, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3ba, 0x0) [ 444.116697] kernel msg: ebtables bug: please report to author: bad policy 00:32:23 executing program 2: mkdir(&(0x7f00000003c0)='./control\x00', 0x0) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) rename(&(0x7f0000000000)='./control/file0\x00', &(0x7f00000002c0)='./control\x00') [ 444.260929] IPVS: ftp: loaded support on port[0] = 21 00:32:23 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="cf0100ff4401000096020000ff7f0000020000001ace44010000000000000000d90440c63346088f4fe1f44a07000000a2eb8b7f56153214b0cbea6b01f9064c227d7545a4a1c96d5cf38560028768fa"], 0x50) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x5101, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) write$P9_RGETATTR(r0, &(0x7f00000001c0)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xa0) tkill(r1, 0x1000000000013) [ 444.343042] IPVS: ftp: loaded support on port[0] = 21 00:32:23 executing program 2: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x2, 0x6, 0x7f, 0x69, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)={r0, 0x0, 0x7f}, 0x8) sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x20000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) io_setup(0x0, 0x0) connect$inet(r1, &(0x7f0000000100), 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') openat$rfkill(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rfkill\x00', 0x8000, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000001400)={'broute\x00', 0x0, 0x4, 0x1000, [], 0x0, 0x0, &(0x7f0000000400)=""/4096}, 0x0) sendfile(r1, r2, 0x0, 0xffffffffffffff9e) 00:32:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0xfffffffffffffffd, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f00000000c0)=@llc={0x1a, 0x303, 0x1, 0x4, 0x5, 0x9, @dev={[], 0x14}}, 0x42) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) [ 445.069756] ================================================================== [ 445.075841] kasan: CONFIG_KASAN_INLINE enabled [ 445.079446] BUG: KASAN: stack-out-of-bounds in rb_erase+0x18d0/0x3550 [ 445.084013] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 445.090577] Read of size 8 at addr ffff8880a941f470 by task kworker/u4:4/501 [ 445.097916] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 445.105076] [ 445.111295] CPU: 1 PID: 64 Comm: ksoftirqĽ1 Not tainted 5.0.0-rc1+ #24 [ 445.112903] CPU: 0 PID: 501 Comm: kworker/u4:4 Not tainted 5.0.0-rc1+ #24 [ 445.119634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.126545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.135963] RIP: 0010:account_system_index_time+0xe8/0x5f0 [ 445.145230] Workqueue: bat_events batadv_nc_worker [ 445.151019] Code: 04 00 00 49 8b 84 24 00 07 00 00 48 ba 00 00 00 00 00 fc ff df 48 8d b8 40 01 00 00 48 8d 88 28 01 00 00 48 89 fe 48 c1 ee 03 <0f> b6 14 16 48 89 fe 83 e6 07 40 38 f2 7f 08 84 d2 0f 85 93 03 00 [ 445.155923] Call Trace: [ 445.174819] RSP: 0018:ffff8880ae707a80 EFLAGS: 00010002 [ 445.177389] [ 445.182737] RAX: 00000000a94c9240 RBX: 1ffff11015ce0f54 RCX: 00000000a94c9368 [ 445.184878] dump_stack+0x1db/0x2d0 [ 445.192120] RDX: dffffc0000000000 RSI: 0000000015299270 RDI: 00000000a94c9380 [ 445.195758] ? dump_stack_print_info.cold+0x20/0x20 [ 445.202998] RBP: ffff8880ae707b48 R08: ffff8880ae71f5f0 R09: ffffffff8a9a905d [ 445.208001] ? rb_erase+0x18d0/0x3550 [ 445.215242] R10: ffffffff8a9a9050 R11: 0000000000000001 R12: ffff8880a94ca440 [ 445.219034] print_address_description.cold+0x7c/0x20d [ 445.226271] R13: 000000000098266f R14: 0000000000000003 R15: ffff8880ae707b20 [ 445.231705] ? rb_erase+0x18d0/0x3550 [ 445.238968] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 445.242759] ? rb_erase+0x18d0/0x3550 [ 445.250980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.254764] kasan_report.cold+0x1b/0x40 [ 445.260616] CR2: 0000000000000068 CR3: 0000000090098000 CR4: 00000000001426e0 [ 445.264663] ? rb_erase+0x18d0/0x3550 [ 445.271908] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 445.275696] __asan_report_load8_noabort+0x14/0x20 [ 445.282950] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 445.287873] rb_erase+0x18d0/0x3550 [ 445.295120] Call Trace: [ 445.298738] ? __rb_erase_color+0x2780/0x2780 [ 445.301294] [ 445.305782] ? print_usage_bug+0xd0/0xd0 [ 445.307916] ? account_guest_time+0x400/0x400 [ 445.311964] ? add_lock_to_list.isra.0+0x450/0x450 [ 445.316444] ? pvclock_read_flags+0x160/0x160 [ 445.321367] ? update_curr+0x323/0xbc0 [ 445.325843] ? trace_hardirqs_on_caller+0x310/0x310 [ 445.329704] ? put_prev_task_fair+0x80/0x80 [ 445.334705] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.339006] ? __lock_acquire+0x572/0x4a30 [ 445.344527] ? check_preemption_disabled+0x48/0x290 [ 445.348733] ? __lock_is_held+0xb6/0x140 [ 445.353736] irqtime_account_process_tick.isra.0+0x3a2/0x490 [ 445.357775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.363552] account_process_tick+0x27f/0x350 [ 445.369065] ? check_preemption_disabled+0x48/0x290 [ 445.373549] ? ktime_get_raw_ts64+0x4b0/0x4b0 [ 445.378539] ? print_usage_bug+0xd0/0xd0 [ 445.383015] ? kasan_check_read+0x11/0x20 [ 445.387055] ? mark_held_locks+0x100/0x100 [ 445.391187] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.395401] ? __lock_acquire+0x572/0x4a30 [ 445.400923] update_process_times+0x25/0x80 [ 445.405141] ? add_lock_to_list.isra.0+0x450/0x450 [ 445.409441] tick_sched_handle+0xa2/0x190 [ 445.414349] ? mark_held_locks+0x100/0x100 [ 445.418478] tick_sched_timer+0x47/0x130 [ 445.422700] ? debug_object_deactivate+0x1d7/0x4b0 [ 445.426742] __hrtimer_run_queues+0x3a7/0x1050 [ 445.431651] ? find_held_lock+0x35/0x120 [ 445.436213] ? tick_sched_do_timer+0x1b0/0x1b0 [ 445.440279] ? debug_object_deactivate+0x1d7/0x4b0 [ 445.444838] ? hrtimer_start_range_ns+0xda0/0xda0 [ 445.449745] ? lock_acquire+0x1db/0x570 [ 445.454583] ? kvm_clock_read+0x18/0x30 [ 445.458538] ? trace_hardirqs_off+0xb8/0x310 [ 445.462493] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 445.466894] ? kasan_check_read+0x11/0x20 [ 445.471884] ? ktime_get_update_offsets_now+0x3d5/0x5e0 [ 445.476014] ? do_raw_spin_unlock+0xa0/0x330 [ 445.481370] ? do_timer+0x50/0x50 [ 445.485774] ? trace_hardirqs_on_caller+0x310/0x310 [ 445.489208] ? rcu_softirq_qs+0x20/0x20 [ 445.494206] ? do_raw_spin_trylock+0x270/0x270 [ 445.498158] hrtimer_interrupt+0x314/0x770 [ 445.502719] ? add_lock_to_list.isra.0+0x450/0x450 [ 445.506941] smp_apic_timer_interrupt+0x18d/0x760 [ 445.511854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.516693] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.522226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.527044] ? smp_call_function_single_interrupt+0x640/0x640 [ 445.532567] ? check_preemption_disabled+0x48/0x290 [ 445.538422] ? trace_hardirqs_off+0x310/0x310 [ 445.543422] timerqueue_del+0x86/0x150 [ 445.547894] ? task_prio+0x50/0x50 [ 445.551776] __remove_hrtimer+0xa8/0x1c0 [ 445.555296] ? check_preemption_disabled+0x48/0x290 [ 445.559338] __hrtimer_run_queues+0x311/0x1050 [ 445.564334] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.568894] ? clock_was_set_work+0x30/0x30 [ 445.573727] apic_timer_interrupt+0xf/0x20 [ 445.578016] ? hrtimer_start_range_ns+0xda0/0xda0 [ 445.582228] [ 445.587061] ? kvm_clock_read+0x18/0x30 [ 445.589268] Modules linked in: [ 445.593236] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 445.596402] [ 445.596408] ====================================================== [ 445.596413] WARNING: possible circular locking dependency detected [ 445.596416] 5.0.0-rc1+ #24 Not tainted [ 445.596421] ------------------------------------------------------ [ 445.596425] kworker/u4:4/501 is trying to acquire lock: [ 445.596428] 0000000038cad6fc ((console_sem).lock){-.-.}, at: down_trylock+0x13/0x70 [ 445.596441] [ 445.596445] but task is already holding lock: [ 445.596448] 00000000bfe049d6 (report_lock){-...}, at: kasan_report+0xb1/0x15e [ 445.596460] [ 445.596465] which lock already depends on the new lock. [ 445.596467] [ 445.596469] [ 445.596474] the existing dependency chain (in reverse order) is: [ 445.596476] [ 445.596478] -> #5 (report_lock){-...}: [ 445.596491] _raw_spin_lock_irqsave+0x95/0xcd [ 445.596494] kasan_report+0xb1/0x15e [ 445.596498] __asan_report_load8_noabort+0x14/0x20 [ 445.596502] rb_erase+0x18d0/0x3550 [ 445.596505] timerqueue_del+0x86/0x150 [ 445.596509] __remove_hrtimer+0xa8/0x1c0 [ 445.596513] __hrtimer_run_queues+0x311/0x1050 [ 445.596516] hrtimer_interrupt+0x314/0x770 [ 445.596520] smp_apic_timer_interrupt+0x18d/0x760 [ 445.596524] apic_timer_interrupt+0xf/0x20 [ 445.596528] debug_smp_processor_id+0x0/0x20 [ 445.596532] rcu_is_watching+0x10/0x30 [ 445.596535] batadv_nc_worker+0x5f6/0x920 [ 445.596539] process_one_work+0xd0c/0x1ce0 [ 445.596543] worker_thread+0x143/0x14a0 [ 445.596546] kthread+0x357/0x430 [ 445.596550] ret_from_fork+0x3a/0x50 [ 445.596552] [ 445.596554] -> #4 (hrtimer_bases.lock){-.-.}: [ 445.596567] _raw_spin_lock_irqsave+0x95/0xcd [ 445.596571] lock_hrtimer_base.isra.0+0x75/0x130 [ 445.596575] hrtimer_start_range_ns+0x120/0xda0 [ 445.596579] enqueue_task_rt+0x95b/0x1010 [ 445.596582] enqueue_task+0xb9/0x380 [ 445.596587] __sched_setscheduler+0xe32/0x1fe0 [ 445.596590] _sched_setscheduler+0x218/0x340 [ 445.596594] sched_setscheduler+0xe/0x10 [ 445.596598] watchdog_dev_init+0x109/0x1db [ 445.596601] watchdog_init+0x81/0x294 [ 445.596605] do_one_initcall+0x129/0x937 [ 445.596609] kernel_init_freeable+0x4d5/0x5c4 [ 445.596612] kernel_init+0x12/0x1c5 [ 445.596615] ret_from_fork+0x3a/0x50 [ 445.596618] [ 445.596620] -> #3 (&rt_b->rt_runtime_lock){-.-.}: [ 445.596632] _raw_spin_lock+0x2f/0x40 [ 445.596636] rq_online_rt+0xb4/0x390 [ 445.596640] set_rq_online.part.0+0xe7/0x140 [ 445.596643] sched_cpu_activate+0x29e/0x430 [ 445.596647] cpuhp_invoke_callback+0x2f6/0x2110 [ 445.596651] cpuhp_thread_fun+0x496/0x8a0 [ 445.596655] smpboot_thread_fn+0x6ab/0xa10 [ 445.596658] kthread+0x357/0x430 [ 445.596661] ret_from_fork+0x3a/0x50 [ 445.596663] [ 445.596665] -> #2 (&rq->lock){-.-.}: [ 445.596677] _raw_spin_lock+0x2f/0x40 [ 445.596681] task_fork_fair+0xb5/0x7a0 [ 445.596685] sched_fork+0x437/0xb90 [ 445.596688] copy_process+0x1f95/0x8710 [ 445.596691] _do_fork+0x1a9/0x1170 [ 445.596695] kernel_thread+0x34/0x40 [ 445.596698] rest_init+0x28/0x37b [ 445.596702] arch_call_rest_init+0xe/0x1b [ 445.596705] start_kernel+0x87c/0x8b7 [ 445.596709] x86_64_start_reservations+0x29/0x2b [ 445.596713] x86_64_start_kernel+0x77/0x7b [ 445.596722] secondary_startup_64+0xa4/0xb0 [ 445.596724] [ 445.596726] -> #1 (&p->pi_lock){-.-.}: [ 445.596739] _raw_spin_lock_irqsave+0x95/0xcd [ 445.596742] try_to_wake_up+0xb9/0x1480 [ 445.596746] wake_up_process+0x10/0x20 [ 445.596749] __up.isra.0+0x1c0/0x2a0 [ 445.596752] up+0x13e/0x1c0 [ 445.596756] __up_console_sem+0xb7/0x1c0 [ 445.596760] console_unlock+0x778/0x11e0 [ 445.596763] vprintk_emit+0x370/0x960 [ 445.596767] vprintk_default+0x28/0x30 [ 445.596771] vprintk_func+0x7e/0x189 [ 445.596774] printk+0xba/0xed [ 445.596777] do_exit.cold+0x57/0x16a [ 445.596781] do_group_exit+0x177/0x430 [ 445.596785] __x64_sys_exit_group+0x44/0x50 [ 445.596788] do_syscall_64+0x1a3/0x800 [ 445.596793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.596795] [ 445.596797] -> #0 ((console_sem).lock){-.-.}: [ 445.596810] lock_acquire+0x1db/0x570 [ 445.596814] _raw_spin_lock_irqsave+0x95/0xcd [ 445.596818] down_trylock+0x13/0x70 [ 445.596822] __down_trylock_console_sem+0xa8/0x210 [ 445.596826] console_trylock+0x15/0xa0 [ 445.596829] vprintk_emit+0x351/0x960 [ 445.596833] vprintk_default+0x28/0x30 [ 445.596836] vprintk_func+0x7e/0x189 [ 445.596839] printk+0xba/0xed [ 445.596843] kasan_report+0xc1/0x15e [ 445.596847] __asan_report_load8_noabort+0x14/0x20 [ 445.596851] rb_erase+0x18d0/0x3550 [ 445.596855] timerqueue_del+0x86/0x150 [ 445.596858] __remove_hrtimer+0xa8/0x1c0 [ 445.596862] __hrtimer_run_queues+0x311/0x1050 [ 445.596866] hrtimer_interrupt+0x314/0x770 [ 445.596870] smp_apic_timer_interrupt+0x18d/0x760 [ 445.596874] apic_timer_interrupt+0xf/0x20 [ 445.596877] debug_smp_processor_id+0x0/0x20 [ 445.596881] rcu_is_watching+0x10/0x30 [ 445.596885] batadv_nc_worker+0x5f6/0x920 [ 445.596888] process_one_work+0xd0c/0x1ce0 [ 445.596892] worker_thread+0x143/0x14a0 [ 445.596895] kthread+0x357/0x430 [ 445.596899] ret_from_fork+0x3a/0x50 [ 445.596901] [ 445.596905] other info that might help us debug this: [ 445.596907] [ 445.596910] Chain exists of: [ 445.596912] (console_sem).lock --> hrtimer_bases.lock --> report_lock [ 445.596928] [ 445.596931] Possible unsafe locking scenario: [ 445.596933] [ 445.596937] CPU0 CPU1 [ 445.596941] ---- ---- [ 445.596951] lock(report_lock); [ 445.596959] lock(hrtimer_bases.lock); [ 445.596968] lock(report_lock); [ 445.596975] lock((console_sem).lock); [ 445.596982] [ 445.596984] *** DEADLOCK *** [ 445.596987] [ 445.596990] 5 locks held by kworker/u4:4/501: [ 445.596992] #0: 000000000eba5317 ((wq_completion)"%s""bat_events"){+.+.}, at: process_one_work+0xbc7/0x1ce0 [ 445.597008] #1: 00000000e7577dae ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}, at: process_one_work+0xc1d/0x1ce0 [ 445.597025] #2: 000000006793258a (rcu_read_lock){....}, at: batadv_nc_worker+0x167/0x920 [ 445.597039] #3: 0000000083f5b3b1 (hrtimer_bases.lock){-.-.}, at: __hrtimer_run_queues+0x40f/0x1050 [ 445.597055] #4: 00000000bfe049d6 (report_lock){-...}, at: kasan_report+0xb1/0x15e [ 445.597069] [ 445.597072] stack backtrace: [ 445.597077] CPU: 0 PID: 501 Comm: kworker/u4:4 Not tainted 5.0.0-rc1+ #24 [ 445.597083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.597087] Workqueue: bat_events batadv_nc_worker [ 445.597092] Call Trace: [ 445.597095] [ 445.597098] dump_stack+0x1db/0x2d0 [ 445.597103] ? dump_stack_print_info.cold+0x20/0x20 [ 445.597106] ? print_stack_trace+0x77/0xb0 [ 445.597110] ? vprintk_func+0x86/0x189 [ 445.597114] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 445.597118] __lock_acquire+0x3014/0x4a30 [ 445.597122] ? mark_held_locks+0x100/0x100 [ 445.597126] ? __save_stack_trace+0x7a/0xf0 [ 445.597130] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 445.597134] ? add_lock_to_list.isra.0+0x450/0x450 [ 445.597138] ? pvclock_read_flags+0x160/0x160 [ 445.597141] lock_acquire+0x1db/0x570 [ 445.597145] ? down_trylock+0x13/0x70 [ 445.597149] ? lock_release+0xc40/0xc40 [ 445.597153] ? trace_hardirqs_on_caller+0x310/0x310 [ 445.597157] ? trace_hardirqs_off+0xb8/0x310 [ 445.597161] _raw_spin_lock_irqsave+0x95/0xcd [ 445.597164] ? down_trylock+0x13/0x70 [ 445.597168] ? vprintk_emit+0x351/0x960 [ 445.597172] down_trylock+0x13/0x70 [ 445.597175] ? vprintk_emit+0x351/0x960 [ 445.597179] __down_trylock_console_sem+0xa8/0x210 [ 445.597183] console_trylock+0x15/0xa0 [ 445.597186] vprintk_emit+0x351/0x960 [ 445.597190] ? wake_up_klogd+0x180/0x180 [ 445.597195] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.597199] ? attach_entity_load_avg+0x810/0x810 [ 445.597203] ? rb_insert_color+0x12e0/0x12e0 [ 445.597206] vprintk_default+0x28/0x30 [ 445.597210] vprintk_func+0x7e/0x189 [ 445.597213] printk+0xba/0xed [ 445.597216] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 445.597220] ? rb_erase+0x18d0/0x3550 [ 445.597223] ? rb_erase+0x18d0/0x3550 [ 445.597227] kasan_report+0xc1/0x15e [ 445.597230] ? rb_erase+0x18d0/0x3550 [ 445.597234] __asan_report_load8_noabort+0x14/0x20 [ 445.597238] rb_erase+0x18d0/0x3550 [ 445.597241] ? __rb_erase_color+0x2780/0x2780 [ 445.597245] ? print_usage_bug+0xd0/0xd0 [ 445.597249] ? add_lock_to_list.isra.0+0x450/0x450 [ 445.597253] ? update_curr+0x323/0xbc0 [ 445.597257] ? put_prev_task_fair+0x80/0x80 [ 445.597260] ? __lock_acquire+0x572/0x4a30 [ 445.597264] ? __lock_is_held+0xb6/0x140 [ 445.597268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.597272] ? check_preemption_disabled+0x48/0x290 [ 445.597276] ? print_usage_bug+0xd0/0xd0 [ 445.597280] ? mark_held_locks+0x100/0x100 [ 445.597283] ? __lock_acquire+0x572/0x4a30 [ 445.597288] ? add_lock_to_list.isra.0+0x450/0x450 [ 445.597291] ? mark_held_locks+0x100/0x100 [ 445.597295] ? debug_object_deactivate+0x1d7/0x4b0 [ 445.597299] ? find_held_lock+0x35/0x120 [ 445.597303] ? debug_object_deactivate+0x1d7/0x4b0 [ 445.597306] ? lock_acquire+0x1db/0x570 [ 445.597310] ? trace_hardirqs_off+0xb8/0x310 [ 445.597314] ? kasan_check_read+0x11/0x20 [ 445.597318] ? do_raw_spin_unlock+0xa0/0x330 [ 445.597322] ? trace_hardirqs_on_caller+0x310/0x310 [ 445.597326] ? do_raw_spin_trylock+0x270/0x270 [ 445.597330] ? add_lock_to_list.isra.0+0x450/0x450 [ 445.597334] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.597338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.597343] ? check_preemption_disabled+0x48/0x290 [ 445.597346] timerqueue_del+0x86/0x150 [ 445.597350] __remove_hrtimer+0xa8/0x1c0 [ 445.597354] __hrtimer_run_queues+0x311/0x1050 [ 445.597357] ? clock_was_set_work+0x30/0x30 [ 445.597361] ? hrtimer_start_range_ns+0xda0/0xda0 [ 445.597365] ? kvm_clock_read+0x18/0x30 [ 445.597369] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 445.597373] ? ktime_get_update_offsets_now+0x3d5/0x5e0 [ 445.597377] ? do_timer+0x50/0x50 [ 445.597381] ? add_lock_to_list.isra.0+0x450/0x450 [ 445.597384] ? rcu_softirq_qs+0x20/0x20 [ 445.597388] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.597392] hrtimer_interrupt+0x314/0x770 [ 445.597396] smp_apic_timer_interrupt+0x18d/0x760 [ 445.597400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.597405] ? smp_call_function_single_interrupt+0x640/0x640 [ 445.597409] ? trace_hardirqs_off+0x310/0x310 [ 445.597412] ? task_prio+0x50/0x50 [ 445.597415] ? check_pre [ 445.597421] Lost 55 message(s)! [ 445.597433] ---[ end trace 1299d80dc535a701 ]--- [ 445.601403] ? ktime_get_update_offsets_now+0x3d5/0x5e0 [ 445.603020] RIP: 0010:account_system_index_time+0xe8/0x5f0 [ 445.609312] ? do_timer+0x50/0x50 [ 445.615623] Code: 04 00 00 49 8b 84 24 00 07 00 00 48 ba 00 00 00 00 00 fc ff df 48 8d b8 40 01 00 00 48 8d 88 28 01 00 00 48 89 fe 48 c1 ee 03 <0f> b6 14 16 48 89 fe 83 e6 07 40 38 f2 7f 08 84 d2 0f 85 93 03 00 [ 445.619490] ? add_lock_to_list.isra.0+0x450/0x450 [ 445.625775] RSP: 0018:ffff8880ae707a80 EFLAGS: 00010002 [ 445.631138] ? rcu_softirq_qs+0x20/0x20 [ 445.638905] RAX: 00000000a94c9240 RBX: 1ffff11015ce0f54 RCX: 00000000a94c9368 [ 445.640524] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.645007] RDX: dffffc0000000000 RSI: 0000000015299270 RDI: 00000000a94c9380 [ 445.652284] hrtimer_interrupt+0x314/0x770 [ 445.653886] RBP: ffff8880ae707b48 R08: ffff8880ae71f5f0 R09: ffffffff8a9a905d [ 445.653896] R10: ffffffff8a9a9050 R11: 0000000000000001 R12: ffff8880a94ca440 [ 445.659255] smp_apic_timer_interrupt+0x18d/0x760 [ 445.660847] R13: 000000000098266f R14: 0000000000000003 R15: ffff8880ae707b20 [ 445.662463] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.668584] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 445.670195] ? smp_call_function_single_interrupt+0x640/0x640 [ 445.674052] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.674063] CR2: 0000000000000068 CR3: 0000000090098000 CR4: 00000000001426e0 [ 445.679066] ? trace_hardirqs_off+0x310/0x310 [ 445.683272] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 445.688713] ? task_prio+0x50/0x50 [ 445.692833] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 445.697235] ? check_preemption_disabled+0x48/0x290 [ 445.701778] Kernel panic - not syncing: Fatal exception in interrupt [ 445.706873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.814199] apic_timer_interrupt+0xf/0x20 [ 446.818426] [ 446.820662] RIP: 0010:debug_smp_processor_id+0x0/0x20 [ 446.825853] Code: a6 4c 89 c7 e8 51 fc 34 fe e9 a8 fe ff ff 4c 89 45 d0 e8 43 fc 34 fe 4c 8b 45 d0 e9 74 fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 <55> 48 89 e5 e8 87 10 f1 fd 48 c7 c6 20 b0 81 88 48 c7 c7 60 b0 81 [ 446.844768] RSP: 0018:ffff8880a8bcf808 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 446.852479] RAX: 0000000000000000 RBX: 1ffff11015179f03 RCX: ffffffff87d31b67 [ 446.859745] RDX: 0000000000000000 RSI: ffffffff87d31e61 RDI: 0000000000000001 [ 446.867013] RBP: ffff8880a8bcf898 R08: ffff8880a8a4c280 R09: ffffed1015cc5b90 [ 446.873462] Shutting down cpus with NMI