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"], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) keyctl$session_to_parent(0x12) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000340)='\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33\a\x11\xeb\xd8F`2&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') sendfile(r2, r4, 0x0, 0xffffffffffffff9e) 10:02:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) sendto(r0, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000080)=@in={0x2, 0x4e23, @loopback}, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000003040)=""/4096, 0x1000}], 0x1, &(0x7f0000001f80)=""/65, 0x41}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=[{0x10, 0x1c00}], 0x10}}], 0x2, 0x8000) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1ff, 0x8000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000340)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000300)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x10) 10:02:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0x7fffffff, 0x1f}, 0x1, 0x1, 0x8, {0x683e, 0x7}, 0x5, 0x7fff}) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r2, 0x80044584, &(0x7f0000000040)) 10:02:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x8000000000000, 0xfffffffffffffffc) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x3, 0x8012, r1, 0x0) [ 213.121112] input: syz1 as /devices/virtual/input/input7 [ 213.199558] input: syz1 as /devices/virtual/input/input8 10:02:31 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000240)=0x80, 0x4) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@dstopts, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x200}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) write$binfmt_misc(r0, &(0x7f0000000280)={'syz0'}, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x267}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={r2, 0x20}, 0x8) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8001) 10:02:31 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2e661815fdbe2b290932e578a3dd0d98"], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xac03, &(0x7f000000a000)) 10:02:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000002c0)="f20f38f066072ef2170fc72d660f511cf00fc709bad004ed2e65640fc72c6766c7442400000000006766c74424028000c0fe6766c744240600000000670f011c24f3dd3b0f1d22", 0x47}], 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x260440) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="5500000050f03d3c6adc2feeb6d4e2429836af38d73b88d7d2427df6b19d6b00d7617685fa107370c98750fed67f3a4c87e8ce8e63b5faeed34d58301cc37e23a23c285a053bd3ce1e8a01c5c257c76a6f7677eb1e06a60c177508c45164"], &(0x7f0000000080)=0x5d) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x400, @empty, 0x7}}}, &(0x7f0000000180)=0x84) 10:02:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$inet6(0xa, 0x550a1d034f65e894, 0x100000001) close(r0) [ 213.395618] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:02:31 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0xc8) r0 = syz_open_dev$swradio(&(0x7f00000003c0)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x6}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000480)={0x1, 0xdc50270870683901, 0x800000008000, 0x100, r1}, 0x10) r2 = open(&(0x7f0000000300)='./file0\x00', 0x8000, 0x0) r3 = gettid() r4 = getuid() r5 = getegid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000009c0)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000a40)=0xc) r8 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) getresuid(&(0x7f0000000b00)=0x0, &(0x7f0000000b40), &(0x7f0000000b80)) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) r12 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000d80)=0xe8) r14 = getgid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000dc0)=0x0) r16 = geteuid() getgroups(0x2, &(0x7f0000000e00)=[0xee01, 0xee00]) sendmmsg$unix(r2, &(0x7f0000000ec0)=[{&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000540)="977100d53934b40acb275a5e1356dc03e3850d194a1c0f77dee570299c41c8d9a0d56e1a53f2e1ee32972466768366b021d41ad2fb08152b874a47675973804ca6c6c8be46cf1bfc8b7f75a1296d4ef9420012484cd4ac87b4d188c76035af600a0974df5de1bc3756109f2358148d73d453ab67cf82843e94f5bef5a3d41dd543891847e56e9dbb18d1e41b34a5a0799c", 0x91}, {&(0x7f0000000600)="d25df1a98099023279c760b19c6bc405bfdba7182e246f118c94783c25a4019285ae9485a445b7cde882ba62c2521433e2cfdf440e50a470953a88283b0439f2ce0c239ea1a35d88a92bd16d6431d84f3b07b03e462bf635b6ff4fd18afe87a35fb9197595cc9233bfa058039d987babb8d95c6cf715cc6fcbb102fcf06703e7deb406e7f044ca376baca30503", 0x8d}, {&(0x7f00000006c0)="cebe76ba1a84b16e1c310e2e4f6b7e0c094c6096b61ddb690cdf174d661fde5b914d9bb00f49ef8cbcac583f053061dc1b1bdcaa9f7c3143660718d9814d13f0640d5cfe34efc826fc4d1d91d1209b6d43cd7f50d73ea75b9900caf70af53b36c83f9e7d9913bb321dc87d84cf11f57deda2ca877f7e7a8f7bb4d903a922c58a6b2e9edecaa9a60655c80dac704cf1f7521779a65663838f60040369fae49b52b72e637b37821e83d1d9df53c128242c5bcb56f4c2ecca2e0c61acf9152a53d8d7d61763c0feaa0d1853a0ea4e77f81fc8344cae2596a0ae4824dd6d639d11f1e5fce622d23e52a0cb7b", 0xea}, {&(0x7f00000007c0)="b55f954ef60bdd6053270b77026ecf3909fa8af5e664c477ebc36b742db965e1ea18e78e5aba0109ce3c344bdd18370c8bef427ef56b88e336b78af82ea08163f982bafad11a4aca595cdd9e143df0b106059a10d026a7d1fada449a420bfb5e8f675d0c73843ae4a5196468c526bd66403aee5f24bcb1e8fca41dde00b1eccb25c7373edd6b26c7e07a15a69d14234b98d03c4c089e5607f41fa4fccaad1c03bb6a115f18b553b05371063b052817b5e42b4ed9", 0xb4}, {&(0x7f0000000880)="b6f686dca4ee78d7bca64b6ad53c6df870f578c158efaf22ddda6f0a9bf8866ec6a707fed4adda489876b72636c87f98fdc23024d479043c55127cb8fa6f4c7ad394a82d43c1600212652f969f7a828a688a0b3a2286ded475c9e841642d3a1a2d04c4bd45ff2baad472fbc89718850567d4746c97459b1e97b93954ef3f98002c0004f3339aaea236942e4ffb986b0055756a772b51323d19dea43b93573d126096c9278ea1112e58b5ede34f17b716eb9b3146f13e480e66877a351b822e9ebf9513359677f37628e54c433bc0ba73", 0xd0}], 0x5, &(0x7f0000000e40)=[@cred={0x18, 0x1, 0x2, r3, r4, r5}, @cred={0x18, 0x1, 0x2, r6, r7, r8}, @cred={0x18, 0x1, 0x2, r9, r10, r11}, @cred={0x18, 0x1, 0x2, r12, r13, r14}, @cred={0x18, 0x1, 0x2, r15, r16, r17}], 0x78, 0x800}], 0x1, 0x4000000) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000cd2ff8)='./file0\x00') symlink(&(0x7f0000000080)='..', &(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='../file0\x00', 0x2) r18 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x14) r19 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r19, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x5, 0x20, 0x240000000000000, 0x2}, &(0x7f0000000280)=0x18) setsockopt$inet_sctp6_SCTP_MAX_BURST(r19, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r20, 0x8}, 0x8) fanotify_mark(r18, 0x1, 0xfffffffffffcfffc, r19, &(0x7f00000001c0)='./file0\x00') getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r19, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) umount2(&(0x7f0000000180)='./file0\x00', 0x2) 10:02:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000080)="1eb63c7aa0baeccb7ba8134b16b8a1b1d7a00102fffa3fa707d1396cc24430f67b668a288f179571283fb3a6e313fba7db85ac6f8fb4764b6650d360888d841435abc8ef82838a8151dbaf0c0f36a229131dae8483e6b60179bb3b10d9ee12c4ecdc86a24a2c75f9ab63e08c6f36582836e4ecda2ea983dc96d2958add082fa7282e377807a33c50bc7f7136ce52deeac9d95ec44c82c5c5403c6968e07efcf2b52d8694cd0e19648788e59aa5804dfed2dc5f235cb9b7312a165d2a580a08c90fd5e52420128a073a69ab4f") sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c00e01eea280500ff0208000000000000000c000200ada3cdd302f146dcf378893f28b1070e00000000000000c2f2a62385448c15af9123bfeca14a5d4abb765bccbd3352538cbd8508ef40a148d64789f65aa9bc10c07e472a036193007b08eaf99c94661813c3a33de8da00c23e51b2"], 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') shutdown(r0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x10c, r2, 0xf0b, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100000001}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x10}}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hwsim0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40050}, 0x40000) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000200)=""/198) 10:02:32 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r0, &(0x7f0000002680)="e8", 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r0, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendto(r2, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) 10:02:32 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000340)={{0x1}}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) accept4$tipc(r1, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10, 0x80800) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000001c0)={0xffffffffffffffff, 0x4d0}) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000140)=']$&proc-keyringppp1[prockeyring\x00', &(0x7f0000000180)='/dev/mixer\x00', &(0x7f0000000240)='/dev/snd/timer\x00', &(0x7f0000000280)='/dev/snd/timer\x00', &(0x7f00000002c0)='/dev/snd/timer\x00', &(0x7f0000000300)='/dev/snd/timer\x00', &(0x7f0000000380)='/dev/snd/timer\x00'], &(0x7f0000000480)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='userGPLsystem:posix_acl_access.(\x00'], 0x0) 10:02:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0xc) r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14, 0x80800) connect(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b00)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r1 = getpgid(0xffffffffffffffff) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)) waitid(0x2, r1, &(0x7f0000000380), 0x80000008, &(0x7f00000003c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000240), 0x800) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x601, 0xf0ffffff, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 10:02:32 executing program 5: r0 = gettid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000140)) rt_sigprocmask(0x0, &(0x7f0000000080)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000180)={0x6}, 0x0, 0x0, 0x8) rt_sigqueueinfo(r0, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x79, 0x0, 0x5}}, 0x14) 10:02:32 executing program 4: r0 = dup(0xffffffffffffff9c) ioctl$KVM_SMI(r0, 0xaeb7) unshare(0x400) getpid() r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, 0x0) getsockname$packet(r0, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001a00)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001a40)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001ac0)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000001bc0)=0xe8) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000001c00)={@remote, @broadcast, 0x0}, &(0x7f0000001c40)=0xc) getpeername$packet(r2, &(0x7f0000001c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001cc0)=0x14) sendmsg$nl_route(r0, &(0x7f0000001dc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)=@mpls_getnetconf={0x54, 0x52, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r3}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_IFINDEX={0x8, 0x1, r6}, @NETCONFA_IFINDEX={0x8, 0x1, r7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x2715bdff}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfff}, @NETCONFA_IFINDEX={0x8, 0x1, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000100)={[0x40000000], 0x0, 0x81, 0xb, 0x3, 0x200}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 10:02:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x4, 0x300) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r2 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x204000, 0x10) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x82d7, 0x3}) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 10:02:32 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r0, &(0x7f0000002680)="e8", 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r0, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) sendto(r2, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) 10:02:32 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x80, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f00000000c0)=0x8) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x1) syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x1, 0x101, 0x0, 0xf0, 0x0, 0x0, 0x3}) 10:02:32 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=""/77, 0x4d}}, 0x10) rt_sigprocmask(0x3, &(0x7f0000000000)={0x3ff}, &(0x7f0000000140), 0x8) mknod$loop(&(0x7f0000000040)='./file1\x00', 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1003080, 0x0) quotactl(0x20800001ff, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 10:02:32 executing program 5: mount(&(0x7f0000000040)=@md0='/dev/md0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='minix\x00', 0xd4000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x3080, 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, 0x0) 10:02:32 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x800, 0x0) sendfile(r1, r2, 0x0, 0x80000002) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000200)=0x239) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x775, 0x0, 0x2, 0x7, 0x0, 0x2, 0x40, 0x2, 0x1f, 0xb5, 0x4, 0x9, 0xff, 0x6, 0x1f, 0x6, 0x66, 0x9, 0x1000, 0x7, 0x6, 0x9, 0x81, 0x1, 0x1, 0x0, 0x10000, 0x80000000, 0x100, 0x7, 0x20, 0x6, 0x200, 0x10000, 0x0, 0xfffffffffffff801, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x100, 0x80000001, 0xd, 0x10000, 0x3, 0x3}, r3, 0x6, r0, 0x1) 10:02:32 executing program 1: mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x2000000, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400000, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000140)={0x1, 0x10000, 0x3, 0x6, 0x1b, 0x7, 0x4, 0x9, 0x36ccea11, 0xecd, 0xaf2b, 0xfff}) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000025000000000005007c00000000000000200000000000"], 0x1c) sendfile(r1, r1, &(0x7f00000000c0), 0x200ffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f000002eff0)={0x196, &(0x7f0000000000)=[{}]}, 0x10) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0) getsockname$tipc(r0, &(0x7f00000001c0)=@name, &(0x7f0000000200)=0x10) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)) sched_getaffinity(0x0, 0x8, &(0x7f0000000180)) 10:02:32 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:32 executing program 1: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x15, r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @broadcast}, &(0x7f00000000c0)=0xc) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) 10:02:32 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/audio\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000800)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r1}, 0x2c) r3 = syz_open_dev$dspn(&(0x7f0000000740)='/dev/dsp#\x00', 0x8, 0x100) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000080)=0x80008) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), 0x0}, 0x20) openat$audio(0xffffffffffffff9c, &(0x7f0000000640)='/dev/audio\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r4 = getpid() r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x80000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x4000, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000140), 0x4) setpriority(0x2, r4, 0x9) 10:02:32 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x800, 0x0) sendfile(r1, r2, 0x0, 0x80000002) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000200)=0x239) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x775, 0x0, 0x2, 0x7, 0x0, 0x2, 0x40, 0x2, 0x1f, 0xb5, 0x4, 0x9, 0xff, 0x6, 0x1f, 0x6, 0x66, 0x9, 0x1000, 0x7, 0x6, 0x9, 0x81, 0x1, 0x1, 0x0, 0x10000, 0x80000000, 0x100, 0x7, 0x20, 0x6, 0x200, 0x10000, 0x0, 0xfffffffffffff801, 0x0, 0x101, 0x4, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x100, 0x80000001, 0xd, 0x10000, 0x3, 0x3}, r3, 0x6, r0, 0x1) 10:02:32 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2081, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000080)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) read$eventfd(r1, &(0x7f0000000040), 0x8) close(r1) r3 = eventfd(0x7) splice(r3, 0x0, r2, 0x0, 0x4000000000200, 0x0) 10:02:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) rt_sigprocmask(0x2, &(0x7f00000000c0)={0x1d}, 0x0, 0xfffffffffffffd89) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00WJ\x00\x00\x00']], 0x1, 0x1400000000000000, &(0x7f0000000480)="e9"}) sendfile(r0, r0, &(0x7f0000000000), 0x3ff) 10:02:33 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:33 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = dup2(r0, r0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000000c0)={0x3f, 0x4, 0x4c9}) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000000)={'filter\x00\x00\x00\x00o\xe3\x0f22{J\x97\x00'}, &(0x7f0000000080)=0x99) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000100)={0x7}, 0x1) [ 215.008538] binder: 8853:8856 got transaction with invalid offset (319287197696, min 0 max 24) or object. 10:02:33 executing program 3: perf_event_open(&(0x7f0000000140)={0x100000000000002, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000640)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100, 0x90000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000000c0)={0x3, r1}) r2 = eventfd2(0x0, 0x0) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000040)=""/121, 0x79}], 0x1) r3 = fcntl$dupfd(r2, 0x0, r0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz0\x00'}, 0x45c) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x5) 10:02:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x4004556d, 0x931c) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x400) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x6, 0x4) [ 215.088445] binder: 8853:8856 transaction failed 29201/-22, size 24-8 line 3097 [ 215.142544] binder: 8853:8856 ioctl c0306201 20000440 returned -14 [ 215.151601] IPVS: ftp: loaded support on port[0] = 21 10:02:33 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000280)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x120, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}}, 0x840) 10:02:33 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) [ 215.191807] binder_alloc: binder_alloc_mmap_handler: 8853 20001000-20004000 already mapped failed -16 [ 215.218192] binder: BINDER_SET_CONTEXT_MGR already set [ 215.248100] binder_alloc: 8853: binder_alloc_buf, no vma [ 215.264445] binder: 8853:8856 ioctl 40046207 0 returned -16 [ 215.278757] binder: 8853:8864 transaction failed 29189/-3, size 24-8 line 3035 10:02:33 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x6, 0x10000) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)={'mangle\x00'}, &(0x7f0000000100)=0x54) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000400)=@buf={0x27, &(0x7f00000003c0)="1028a9e850642606d39adce47bbfdfb5b999b1d77aedb1a270cb1d1053b40532c859735bda9050"}) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x13f, 0xb}}, 0x20) 10:02:33 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) [ 215.329199] binder: 8853:8864 ioctl c0306201 20000440 returned -14 10:02:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x0, &(0x7f0000000040)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000005ed0050bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000012d400500000000005504000001ed00001d040000000000002c460000000000006b0a00fe000000008500000007000000b7000000000000009500000000000000"], 0x0}, 0x48) r3 = dup3(r1, r0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, &(0x7f0000001080)=""/4096) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @local, {[@lsrr={0x83, 0x3}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f00000000c0)={0x0, 0x6, 0x10000}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000001c0)=0x20}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000003c0)={0x0, 0x4}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x0, 0x18}, 0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x101}, &(0x7f0000000240)=0x8) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000100)=0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000280)={r4, 0x5}, &(0x7f0000000300)=0x8) close(r2) exit(0x4000000) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x4, 0x0) ioctl$TIOCSCTTY(r3, 0x540e, 0x1) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)=0x7, 0x4) 10:02:33 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='vboxnet0system^&vboxnet0vmnet0\x00', 0x6) r1 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x7a) fcntl$setstatus(r0, 0x4, 0x4800) write$sndseq(r0, &(0x7f0000000000), 0xc3f4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) close(r1) sendfile(r1, r0, &(0x7f0000000040)=0x500, 0x800) 10:02:33 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x4, 0x1, {"b606c47485fb1248d371d4b6c05240fa"}, 0x8fa, 0x6, 0x5}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f00000000c0), r2}}, 0x18) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0x6a0}, 0x2) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x4, {0xa, 0x4e21, 0x80000001, @empty, 0x4}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0x6}, 0xffffffffffffff13) 10:02:33 executing program 5: r0 = socket(0x15, 0x80005, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x8, 0x0, 0x3, 0x7fffffff, 0x13, 0x2, 0xcf5a, 0xbe, 0x400, 0x1, 0xffffffffffffff00, 0x4}) getsockopt(r0, 0x5, 0x5bf, &(0x7f0000000100)=""/185, &(0x7f00000001c0)=0xb9) getsockopt(r0, 0x200000000114, 0x271a, &(0x7f00000000c0)=""/1, &(0x7f0000000080)) [ 215.613694] misc userio: Invalid payload size [ 215.622671] misc userio: Invalid payload size [ 215.642260] misc userio: Invalid payload size 10:02:33 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x6, 0x10000) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)={'mangle\x00'}, &(0x7f0000000100)=0x54) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000400)=@buf={0x27, &(0x7f00000003c0)="1028a9e850642606d39adce47bbfdfb5b999b1d77aedb1a270cb1d1053b40532c859735bda9050"}) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a0676ffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x13f, 0xb}}, 0x20) 10:02:34 executing program 1: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@loopback, @in=@empty}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) r0 = socket(0x11, 0x5, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6, @in6=@dev}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000680)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@mcast1}}, {{@in6=@ipv4={[], [], @dev}}}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000540)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) quotactl(0x8, 0x0, r1, 0x0) 10:02:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x101440, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f0000000340)={0xffffffffffffffff}, 0x0, {0xa, 0x4e20, 0x80000000, @mcast2, 0x7f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000003c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280), r2}}, 0x18) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000540)={r4, @multicast2, @local}, 0xc) fcntl$getownex(r0, 0x10, &(0x7f00000006c0)={0x0, 0x0}) ptrace$getsig(0x4202, r5, 0x5, &(0x7f0000000700)) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x145000, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000180)={0x2, 0x3000000000000000}) accept4(0xffffffffffffffff, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x0, 0x801) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r6}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="01200000", @ANYRES32=0x0, @ANYRES32=0x0], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000004c0)={r8, 0x1000}, 0x8) io_setup(0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video1\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='ip6_vti0\x00', 0x10) r9 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r10 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r10, &(0x7f0000f50f90), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, 0xffffffffffffffff) sendfile(r3, r9, &(0x7f00000ddff8), 0x102000002) 10:02:34 executing program 5: socket$inet(0x2c, 0x2, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001100)={0x0, @in6={{0xa, 0x4e22, 0x0, @loopback}}, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x2}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001200)={r0, 0xf}, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000180)) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000000)={0x53, 0xffffffffffffffff, 0x0, 0x0, @buffer={0x209, 0xb8, &(0x7f00000001c0)=""/184}, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000010c0)=0x0) mq_notify(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x10, 0x2, @tid=r2}) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000280)=0x54) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x7}, 0x2) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f00000002c0)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x1, 0xb, 0x4}) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000001240)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) 10:02:34 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x0, 0x0, 0x1}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x406200, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000100)) 10:02:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x0) sendmsg$alg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ca61600062836e334462e42b77bed8c8712c06419dbd8d2ae25f22d26fba435a1cb10c152ffdda009b912502c8c06cec92c8202f5616b28ac9d35e9d74063b67ac5e1b1817dbf68f89817775ac522c17c1837e00b6e7b0283188a57b4a250312fc78762ebcfd27d314cf66c9613db9522e5fad4740157779d22608a8aaf7efb7ab739c85ba07a9e8ca1e22e6f339d83ecd", 0x91}, {&(0x7f0000000000)="5d62b43fc4d56029890ebc3ba9f69c7eace6ba2c881f7a00a75dc7d3b43314943e64731281de4483457d", 0x2a}, {&(0x7f00000003c0)="7d6850ab1e4ac78d4e9238b4c69e5347ff10fda6e4f2980b3aecb50e1a7aa1dbd7cbdd023f552ab29c4e60dc0ec4591cb9dccbd5813bb0ac64704cc47251dbc46742e79e1ec184c668a76da412482788e6ddd05738fa701259c1c1f7b57a7cc27a30c289537b1cb26641984c8fb014a3d553bc90c29069c900f84e4e9684b6069d27dee93be42eb63ae41752b9d8dcbf1ef8d53b21f6d4de1f15fec30be2cdd85f9414b30ee62949c9a2d117ef52d999a896abff0a4d01e056912077388807ecc4d40c85763daf0bf84ad1202718f732949ccca109d149219e62130d9a6538cb91ff382471ba5b03fee42891becdb0", 0xef}, {&(0x7f0000000040)="7f159c", 0x3}, {&(0x7f00000004c0)="091a7008d773f26da56cec59cc2ebb00c6821b3505928a6f4c4d4fb33945122c557fd09238b92a2905224b29b6d08c8526ee65df495fb3ae905b48ed467641915fdd7965e1c6b6b8b115235dfae7b4516365cb3a9f9e4416cce0bc90f99ac5099b2e339b2002a877a148bbe8cec746ca7be0937db70019e2f03d7c994e158b3053e5eeb2c24ecee1db8e87acc7a401cb1afdb03bda40b1b7434ebbd37bab60a0887efbb03f4ba33e", 0xa8}], 0x5, &(0x7f0000000580)=[@iv={0x64, 0x117, 0x2, 0x54, "3b37c24b8dbd9cd453f9dea131d14038c9896b9b118c5b496f8ba5bdc5a8da0ae892065959e1e4251acf0cf42b22380006836a96bed85c8fc5564dadb4a898995bcb99140e6539b127bc4992b51fd599ece4a87a"}], 0x64, 0x40004}, 0x4000) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="f95f874fb17b96eb0734133051114495828c3a432aa25c281465fae51a42c1dc278df3422f", 0x25}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000006880)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1}}], 0x1, 0x0, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000640)=0x8, 0x3, 0x0) 10:02:34 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:34 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x89) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000040)=0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000440)=0x949, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0xffffffd7) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) ioctl$TIOCCONS(r3, 0x541d) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x176) pause() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000180)=0x6, 0x4) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x7fffffff) gettid() ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)=0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) eventfd(0xd7d) ftruncate(r5, 0x7fff) sendmsg$nl_netfilter(r5, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x2d8, 0x3, 0x5, 0x200, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0x5}, [@typed={0x8, 0x33, @str='\x00'}, @nested={0x230, 0x4c, [@generic="05b5746593ae048f9da65d31a16e4293cfec07a9c849e724cc1321970dbbdf473220ec4cef5db77e20cada0d9b868e1fea123fd14985ab3975b7eb8ef326adb2dbea7be3ed398bbc8ebf905510e8ea15ede839b199d7ea35680292bb99b54faff2e4ea645a9ccd51f06b2b01c94ce53d924092", @typed={0x8, 0x84, @pid=r4}, @typed={0xc, 0x0, @u64=0x40}, @generic="e61eb3645dc20fee3d7afba220ad9aa2dfb32dff32d36796e62d73c9e1f4d0a946c7f441be79911ba2ca3da3dd994d588efcfd28713c09e4ffafa2420f7d38c58ef2e3e062493a66fe00d2e03c0a5ead3acda8828c8d0aee7ae76c1987b61d1308c2d40eccc63e1f4f57169cf52d621c04ccc1f0917141df63df3ac9303e059508461fee50b558afba66ef5c7447917c64", @generic="fe9ba28d2d50ad7fee8d19418627f3a0d6005dd698a6e7b7ae1206a7fd45d6a3ab995e5285a253725e64254ef389f5b80747fe04bdd470eeae6b7b90c84fffa0be0b814cf7ec3bfd1354b558ecacb29b36100353e1154d9a3befeae40e8648e4c007d3576f3ea83a01db9016d4e98f4c1ead0b8ccdf363e4645b83e1c1bb0f62dc48f0425ecca81499f80493f73ba6eb5fc87298e487b6e03aa72fa73264edb9403f03ad4ccd05c1e68de186e9f9ed37422efb9676c7231a0bda8292f598112ef05c9a25e2d0f94b6b94", @generic="24abf40c616a16ab0eb9eb1d809e4e0aaa8a249096b32503e5bf5319c4bb8181bb13f82c9c", @typed={0x10, 0xd, @str='/dev/full\x00'}, @typed={0xc, 0x79, @u64=0x2}, @generic="0c97930a211c"]}, @typed={0x8c, 0x27, @binary="e246b1c85ec00e1d99c23d08bae19087b3e298714aa8600ec3e634a7e31004c157f062cb8987f34ea8cd07bb94bac18d139e832e46d2def7ce3b55a3ba1edd2fc3f4733ad186494fd49d67c1870ff2db78d73533fac0ab82b644a9ca65c8c16ce627bcd4a43906e6bd26a4dd994c66ed3e7b770abf55c033559cfb99f9040524055c4320e47ea0"}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x40}, 0x4008814) sendfile(r3, r5, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000001c0)) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') 10:02:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) io_setup(0x3, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000391000)="83", 0x1}]) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000), 0x4) 10:02:34 executing program 5: ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0001401000000000000000000000000000000000000000000000000000024004e465155455545000000000000000000000000000000000000000000000009000000ac14141d7f000001ffffffffffffffff3ade215828c5000000000000000000000000000000000000ff00ffff00ff00000000000000000000000000000000000000000000000000000000000000000000ff0000ff0000000000000000000000000008000005eb100003ff00056e72300000000000000000000000000073797a6b616c6c65723100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000100000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff000000000f00000001000000ac1414aaac1414aaff000000ffffffff000000000000000000000000000000000000000000000000ffff000000ff00000000000000000000000000000000000000000000000000000000000000000000ff00ffffff00000000000000000000000000800100810006000e077b76657468315f746f5f626f6e6400000076657468305f746f5f7465616d00000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000180c200000e0000000000000000000000000000000000000000000000000000ffffffffe000000202000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e4000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000380)={0x3, 0x2, 0x2}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x400880, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1400) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8008743f, &(0x7f0000000980)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0x1}}}, 0xfff1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) r3 = dup(r2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f0000000200)=0x54) write$binfmt_misc(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="947930f9123c2796257741bd84e9cb7a318db5a3bce7a7ffe1412e5858f4876950b68bd7329c93bad1c385db30bb1af7a2b5daf30f8954b1f745df9d4ea236f64c2644f729ec3ade88000800"], 0x4c) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000000)=""/14) 10:02:34 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000000)) ioctl$TIOCEXCL(r1, 0x540c) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000f4100000060000000000000006000000000000000800000000000000030000000000000009000000000000000000008000000000000000000000000000000000000000000011000000000000000000000000000002000000000000001f0000000000000005000000000000000000000000000000000000000000000080100000000000000000000000000700000000000000f7ffffffffffffff09000000000000000000000000000000000000000000000000080000000000000000000000000000080000000000000002000000000000000700000000000000000000000000000000000000000000008020000000000000000000000000000006000000000000000400000000000000080000000000000000000000000000000000000000000000001000000000000000000000000000004b57b3110000000009000000000000000000000000000000000000000000000000000000000000000623f90000000000000000000000000002000000000000000800000000000000090000000000000000000000000000000000000000000000040000000000000000000000000000000400000000000000090000000000000010ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000"]) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) fcntl$dupfd(r0, 0x0, r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 216.393314] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:02:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x101440, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f0000000340)={0xffffffffffffffff}, 0x0, {0xa, 0x4e20, 0x80000000, @mcast2, 0x7f}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000003c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280), r2}}, 0x18) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000540)={r4, @multicast2, @local}, 0xc) fcntl$getownex(r0, 0x10, &(0x7f00000006c0)={0x0, 0x0}) ptrace$getsig(0x4202, r5, 0x5, &(0x7f0000000700)) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x145000, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000180)={0x2, 0x3000000000000000}) accept4(0xffffffffffffffff, &(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x0, 0x801) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r6}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="01200000", @ANYRES32=0x0, @ANYRES32=0x0], 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000004c0)={r8, 0x1000}, 0x8) io_setup(0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video1\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000002c0)='ip6_vti0\x00', 0x10) r9 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r10 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r10, &(0x7f0000f50f90), 0x0, 0x81003) ioctl$LOOP_CHANGE_FD(r9, 0x4c00, 0xffffffffffffffff) sendfile(r3, r9, &(0x7f00000ddff8), 0x102000002) 10:02:34 executing program 0: r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x807fe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0xc8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0xc0080, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xf000, 0x2000, &(0x7f0000ff7000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e22, @broadcast}], 0x10) ioctl$KVM_NMI(r3, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x2000000002, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000002c0)={0x0, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000280)=0x60) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:02:34 executing program 5: ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm_plock\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0001401000000000000000000000000000000000000000000000000000024004e465155455545000000000000000000000000000000000000000000000009000000ac14141d7f000001ffffffffffffffff3ade215828c5000000000000000000000000000000000000ff00ffff00ff00000000000000000000000000000000000000000000000000000000000000000000ff0000ff0000000000000000000000000008000005eb100003ff00056e72300000000000000000000000000073797a6b616c6c65723100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000100000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff000000000f00000001000000ac1414aaac1414aaff000000ffffffff000000000000000000000000000000000000000000000000ffff000000ff00000000000000000000000000000000000000000000000000000000000000000000ff00ffffff00000000000000000000000000800100810006000e077b76657468315f746f5f626f6e6400000076657468305f746f5f7465616d00000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000180c200000e0000000000000000000000000000000000000000000000000000ffffffffe000000202000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e4000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000380)={0x3, 0x2, 0x2}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x400880, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r1, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1400) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8008743f, &(0x7f0000000980)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0x1}}}, 0xfff1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) r3 = dup(r2) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000140)={'raw\x00'}, &(0x7f0000000200)=0x54) write$binfmt_misc(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="947930f9123c2796257741bd84e9cb7a318db5a3bce7a7ffe1412e5858f4876950b68bd7329c93bad1c385db30bb1af7a2b5daf30f8954b1f745df9d4ea236f64c2644f729ec3ade88000800"], 0x4c) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f0000000000)=""/14) 10:02:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) r2 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x3) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00'}) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000b1b000/0x2000)=nil, 0x2000, 0x2000010, 0x1013, r4, 0xfffffffffffffffc) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600202, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) finit_module(r3, &(0x7f0000000440)='/dev/snapshot\x00', 0x1) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) pipe2(0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 10:02:34 executing program 3: listen(0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0x8}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e24, 0x100000000, @mcast2}}, 0x6, 0x6}, &(0x7f0000000380)=0x88) ppoll(&(0x7f0000000100)=[{}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc) 10:02:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000380)=ANY=[]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt6_stats\x00') accept4$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000100)={0x6, "1ad13b41435a8ad2c951f8bd981729dc90aab62d7ca5efb9b0a3564369891dd1", 0x1, 0x112, 0x8, 0xcda, 0x4, 0x2, 0x5, 0x7}) 10:02:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000500)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:02:35 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:35 executing program 1: pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) getsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) vmsplice(r1, &(0x7f0000001780)=[{&(0x7f0000002e40)='\a', 0x1}], 0x1, 0x0) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) recvmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/29, 0x1d}], 0x1}, 0x0) 10:02:35 executing program 3: r0 = socket$inet6(0x10, 0x80002, 0x800000000) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="5500000018007f7000fe01b2a4a280930a60000000a84302910000003900090023000c00020000000d000500fe8000000000c78b80082314e9030b9d566885b16732009b1100b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0) 10:02:35 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x0, 0x521000) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000240)=0xb) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r2, 0x0) 10:02:35 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000500)=0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0x200000, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x4, 0x8000, 0x9, 0xed5, 0x0, 0x9, 0x4000, 0xa, 0xffffffff00000001, 0x0, 0x2, 0x8, 0x8, 0x1, 0x3396, 0x4, 0x4, 0x1, 0x9, 0x6, 0x4, 0x4, 0x1, 0x122b, 0x60000000, 0x2, 0x3, 0x7e000000000000, 0x0, 0x1, 0x6, 0x0, 0xffffffffffff8000, 0x1f, 0x7fffffff, 0x40, 0x0, 0x43a5, 0x4, @perf_bp={&(0x7f00000001c0), 0xa}, 0x12850, 0x8a, 0x9, 0x5, 0x5, 0x7, 0x3}, r0, 0xa, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x1f, 0x1, 0xfffffffffffffffe) poll(&(0x7f0000000000)=[{r2, 0x4000}, {r2, 0x2}, {r2}, {r2}, {r2}], 0x5, 0x4) sendmsg(r2, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000001000000052ce431ab8ee00008e02"], 0x14}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0) ioprio_set$uid(0x3, r3, 0x2e0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000487623e2caec077000000000000000000000000000000000000000000000000000090004000000000000000000000000000000000000000000000000000000000000000000000000"]) close(r2) 10:02:35 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105518, &(0x7f0000001000)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), 0x0}}, 0x0) sendto$inet(r0, &(0x7f0000001080)="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", 0xc00, 0x4, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xfffffffffffffffe}, 0xfffffffffffffd5b) gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000005c0), &(0x7f0000000080)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f0000000040)={0x0, 0x3f, 0x0, 0x80f}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000001c0)={0x8, 0x103, 0x2, {0x4, 0x4bf, 0xfff, 0x7}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x20180, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000280)=0xfffffffffffffffb, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x338d, 0x2, 0x0, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000140)={r4, 0x0, &(0x7f0000000040)}, 0x18) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, {0x2, 0x4e22, @rand_addr=0x6}, {0x2, 0x4e24, @multicast2}, 0x14c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)='bond0\x00', 0x100000000, 0x100, 0xa14f}) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0xfffffffffffffebf, &(0x7f0000000400), 0x0, &(0x7f00000000c0)=""/87, 0xfffffffffffffdeb}, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000380)) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000340)) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 10:02:35 executing program 0: unshare(0x400) chroot(&(0x7f0000000000)='./file0\x00') r0 = getpid() r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000001c0)) umount2(0x0, 0x6) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000100)={[0x40000000, 0x40000000], 0x0, 0x81, 0xb, 0x3, 0x0, r0}) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x80) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000002c0)) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x4000, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000240)=0x6, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000180)=0x9) 10:02:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000340)=""/175) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) r2 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x3, 0x3) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00'}) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000b1b000/0x2000)=nil, 0x2000, 0x2000010, 0x1013, r4, 0xfffffffffffffffc) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x600202, 0x0) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x6, 0x0) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x802, 0x0) finit_module(r3, &(0x7f0000000440)='/dev/snapshot\x00', 0x1) ioctl$BLKZEROOUT(r5, 0x127f, &(0x7f0000000280)={0x0, 0x80000}) pipe2(0x0, 0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 10:02:35 executing program 5: r0 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001740)="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", 0xfffffffffffffdb4}], 0x1}}], 0x1, 0x0) 10:02:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x84001, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) 10:02:36 executing program 5: socketpair$unix(0x1, 0x8000100000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\xdf\xdd\x94D\x8f\x15\xcf!\x00', 0xec38ed91f1c74952}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000002c0)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000080)={'eql\x00\x00\xa1\xa9[\x00\x00\x00\x00\x00\x03\xca\x00', @ifru_mtu=0x1}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x5) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0xffffffffffffff0a) 10:02:36 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9201, 0x0) 10:02:37 executing program 4: unshare(0x400) chroot(&(0x7f0000000000)='./file0\x00') r0 = getpid() r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000001c0)) umount2(0x0, 0x6) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000100)={[0x40000000, 0x40000000], 0x0, 0x81, 0xb, 0x3, 0x0, r0}) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x80) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000002c0)) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x4000, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000240)=0x6, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000180)=0x9) 10:02:37 executing program 0: unshare(0x400) chroot(&(0x7f0000000000)='./file0\x00') r0 = getpid() r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000001c0)) umount2(0x0, 0x6) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000100)={[0x40000000, 0x40000000], 0x0, 0x81, 0xb, 0x3, 0x0, r0}) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x80) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000002c0)) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x4000, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000240)=0x6, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000180)=0x9) 10:02:37 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x0, 0x521000) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000240)=0xb) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000000c0)={0x0, @reserved}) dup2(r2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(r2, 0x0) 10:02:37 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:37 executing program 5: perf_event_open(&(0x7f0000000140)={0x100000000000002, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x3, 0xfffffffffffffe00, 0x2, 0x7, 0x9, 0x6, 0x0, 0x2, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={r1, 0x6, 0xfffffffffffffffc}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x117}}, 0x20) getsockname(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000000)=0x80) 10:02:37 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000001edaaea25b8ab856e52adfe344022e1ede4bc4263561792b2fecfffffffffffffc89"]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24048080) 10:02:37 executing program 0: unshare(0x400) chroot(&(0x7f0000000000)='./file0\x00') r0 = getpid() r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000001c0)) umount2(0x0, 0x6) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000100)={[0x40000000, 0x40000000], 0x0, 0x81, 0xb, 0x3, 0x0, r0}) r2 = syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x7, 0x80) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000002c0)) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x4000, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0xb, &(0x7f0000000240)=0x6, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000180)=0x9) 10:02:37 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000480)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x2, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000005c0)=0x0) getpgid(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1_to_bond\x00', 0x2}, 0x18) ioctl(r3, 0x800000000008982, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="290000000600000000000000000000000400000000000000030000000000000000000000000000000069127fbcdab56d0f1f4cb25800000000000021b0c9e06ea050325f77726e71bff4c99eef500ade32c424020f322903f5bad93a"], 0x5c) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee9d8df70f2c6849d443d5bc274a1f1576385a885b764dc4babfdf01646fa6053ebc9"], 0x0, &(0x7f0000000200)='cgrQup2\x00', 0x2, 0x0) ioctl$TIOCNXCL(r4, 0x540d) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0), 0x8) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) r7 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x0) syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0x0, 0x400880) r8 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r9, 0x20000000000000c7, &(0x7f00000000c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x80000000000, r8, &(0x7f0000001000), 0xffffffffffffffe1, 0x9, 0x0, 0x0, 0xffffffffffffff9c}]) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0)={0xfffd, 0x5, 0xc65b, 0x9, 0x80, 0x5, 0x1ff, 0x4, 0x20, 0x5, 0x7}, 0xb) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="6e99aac1fcb92a86443c9ac8a128312951e1ef31ff74c3bf3fe47c32ce8ff427a24de5ef6ed803ab4f3fa5fa33e99294ede042f8e23e3d49521843860d995640e9eb69f5470976ae7686af464c45393e9dad11bd5c1ef49c86edea691e65aa957f2a70497f6adef05b1ac296023144a106186640e8769e022b0fc876", 0x7c}], 0x1}, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) memfd_create(&(0x7f0000000640)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xe4\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dsp\x00', 0x88400, 0x0) sendfile(r6, r6, &(0x7f0000000000), 0x2000005) 10:02:37 executing program 5: rt_sigprocmask(0x2, &(0x7f0000000000)={0xff}, 0x0, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x5, 0x4) setrlimit(0x1, &(0x7f0000011000)) r0 = memfd_create(&(0x7f00000002c0)=',mime_typebdev(\x00\xbaX\xea\xdb\a\xdd\xca\xea\xbb\"qi\xcfX]<\xab\xa5n\xd4E\xd8\bw\xca\x91\x02\aMXeZ\x9buef\t\xd3\xcb\xd0\x12\xe3\xb0\x98\xb3\x19\xfe\x19\x86\x9f\fF\xefc\xd9\x948\xfagM\x18\x9b\xd1\xfa\x884\x7f\x99\n\x02\xd3A\xa4\x86\xfb\x9c\xf0J\xff\x9a\x16\xd1]\xa1\xcd\x87\x1aH\x8d\x8e\\\xf2\x96O\xec v\xf4I\x8e\x17\xc1\xda:\x91M2\x14\xcd&\x1cs\v\xff\x9a\xeeK\xa5\x90\xa7l\x06\xda\x136\x17\x01|\xce\bK^\xac\x9aU A\x01\xc1\xb0\xca\xd6su\xcd\x17~\x18\x13\xdd\x93fDmm,n~\xc6#\xe4\x96Z6\x01\xa1\x9e|\xbe3\x85\xd1\x87\x94F', 0x20000000007) ftruncate(r0, 0xffff) 10:02:37 executing program 1: r0 = socket(0x10, 0x802, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x80000001, 0x4) write(r0, &(0x7f0000000180)="240000001a00bbe94072a320fdd7211525d904de511c3ee0a3080ebc642fdc4c3ea0934f4e2de2746c241ee9d59147371ef481f43ccd1c6f29dfb6ef8357fa40f7b5eae81311d1e31fe87b841e6f991699d9beaed8de941efd0759981b288b04c8f7b6", 0x284) 10:02:37 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'bcsf0\x00\x00\x00\x00\x00\x00\x00\x00\x00@\r', {0x2, 0x4e20, @rand_addr=0x50}}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000080)=@generic={0x0, 0x4, 0x191}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000440)={0x4, 0x1, {0x56, 0x8, 0x4, {0x2}, {0x7, 0x401}, @period={0x5b, 0x7356, 0x4, 0x5, 0x1f, {}, 0x0, &(0x7f0000000280)}}, {0x0, 0x0, 0x0, {}, {}, @ramp={0x7, 0x4, {0xb30, 0x2, 0x4}}}}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000380)=""/148) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x4, 0x4011, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) capset(&(0x7f0000000200)={0x0, r2}, &(0x7f0000000240)={0x0, 0x81, 0xfff, 0xfffffffffffffffe, 0xeaf, 0x1}) ftruncate(r4, 0x7fff) fcntl$getflags(r3, 0x40b) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) socketpair$unix(0x1, 0x100000000000005, 0x0, &(0x7f0000000180)) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f00000002c0)={0x1ff, 0x3, 0x6f, 0x2, 0xffff, 0x3}) 10:02:37 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x20800, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x800}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x1, 0x3, 0x205, 0x7, 0x8000, 0x4, 0x2, 0x0, 0x0}, &(0x7f0000000380)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000003c0)={r4, 0x5, 0x1, 0x2, 0x1c0000000, 0x2b5, 0x2, 0x4, {r5, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x8, 0xee, 0x6e2d7203, 0x2755}}, &(0x7f0000000480)=0xb0) write(r0, &(0x7f00000001c0)="362b6cb5ff9fa4b62f9854f91790ebe7", 0xffffffffffffff67) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mISDNtimer\x00', 0x1, 0x0) ioctl$NBD_DISCONNECT(r3, 0xab08) clock_gettime(0x6, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac9b}], 0x1, 0x0) [ 219.913262] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:02:38 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3f, 0x400200) ioctl$RTC_PIE_ON(r1, 0x7005) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000419000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 10:02:38 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4) sendmmsg$unix(r1, &(0x7f0000000b80), 0x49249f8, 0x0) 10:02:38 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000480)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x2, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000005c0)=0x0) getpgid(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1_to_bond\x00', 0x2}, 0x18) ioctl(r3, 0x800000000008982, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="290000000600000000000000000000000400000000000000030000000000000000000000000000000069127fbcdab56d0f1f4cb25800000000000021b0c9e06ea050325f77726e71bff4c99eef500ade32c424020f322903f5bad93a"], 0x5c) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee9d8df70f2c6849d443d5bc274a1f1576385a885b764dc4babfdf01646fa6053ebc9"], 0x0, &(0x7f0000000200)='cgrQup2\x00', 0x2, 0x0) ioctl$TIOCNXCL(r4, 0x540d) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0), 0x8) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) r7 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x0) syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0x0, 0x400880) r8 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r9, 0x20000000000000c7, &(0x7f00000000c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x80000000000, r8, &(0x7f0000001000), 0xffffffffffffffe1, 0x9, 0x0, 0x0, 0xffffffffffffff9c}]) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0)={0xfffd, 0x5, 0xc65b, 0x9, 0x80, 0x5, 0x1ff, 0x4, 0x20, 0x5, 0x7}, 0xb) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="6e99aac1fcb92a86443c9ac8a128312951e1ef31ff74c3bf3fe47c32ce8ff427a24de5ef6ed803ab4f3fa5fa33e99294ede042f8e23e3d49521843860d995640e9eb69f5470976ae7686af464c45393e9dad11bd5c1ef49c86edea691e65aa957f2a70497f6adef05b1ac296023144a106186640e8769e022b0fc876", 0x7c}], 0x1}, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) memfd_create(&(0x7f0000000640)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xe4\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dsp\x00', 0x88400, 0x0) sendfile(r6, r6, &(0x7f0000000000), 0x2000005) 10:02:38 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:38 executing program 3: io_setup(0x2, &(0x7f0000000180)=0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x327}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 10:02:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, &(0x7f0000000100)=0x0) close(r0) socket(0x40000000015, 0x805, 0x3) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000140), 0x700000000000}]) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000080)={0x10000005}) 10:02:38 executing program 5: accept4(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000080)=0x80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/185, &(0x7f00000001c0)=0xb9) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) ftruncate(0xffffffffffffffff, 0x1000000) sendfile(r1, 0xffffffffffffffff, &(0x7f00000000c0)=0xf10001, 0xeffffdef) uselib(&(0x7f0000000200)='./file0\x00') syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x100000007fffffff, 0x0) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8000, 0x2000000000000002, {0x1}}) 10:02:38 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000480)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x2, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000005c0)=0x0) getpgid(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1_to_bond\x00', 0x2}, 0x18) ioctl(r3, 0x800000000008982, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="290000000600000000000000000000000400000000000000030000000000000000000000000000000069127fbcdab56d0f1f4cb25800000000000021b0c9e06ea050325f77726e71bff4c99eef500ade32c424020f322903f5bad93a"], 0x5c) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee9d8df70f2c6849d443d5bc274a1f1576385a885b764dc4babfdf01646fa6053ebc9"], 0x0, &(0x7f0000000200)='cgrQup2\x00', 0x2, 0x0) ioctl$TIOCNXCL(r4, 0x540d) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0), 0x8) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) r7 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x0) syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0x0, 0x400880) r8 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r9, 0x20000000000000c7, &(0x7f00000000c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x80000000000, r8, &(0x7f0000001000), 0xffffffffffffffe1, 0x9, 0x0, 0x0, 0xffffffffffffff9c}]) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0)={0xfffd, 0x5, 0xc65b, 0x9, 0x80, 0x5, 0x1ff, 0x4, 0x20, 0x5, 0x7}, 0xb) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="6e99aac1fcb92a86443c9ac8a128312951e1ef31ff74c3bf3fe47c32ce8ff427a24de5ef6ed803ab4f3fa5fa33e99294ede042f8e23e3d49521843860d995640e9eb69f5470976ae7686af464c45393e9dad11bd5c1ef49c86edea691e65aa957f2a70497f6adef05b1ac296023144a106186640e8769e022b0fc876", 0x7c}], 0x1}, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) memfd_create(&(0x7f0000000640)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xe4\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dsp\x00', 0x88400, 0x0) sendfile(r6, r6, &(0x7f0000000000), 0x2000005) 10:02:38 executing program 5: r0 = socket(0x2000000000000021, 0x2, 0x2) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xb}], 0x10}}], 0x1, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) 10:02:38 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40200, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x12400, 0x0) r1 = memfd_create(&(0x7f00000000c0)='nfs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000380)=""/206) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={r1, 0x0, 0x7fffffff, 0x0, 0x4}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100001100000000040000000000000010000000000000e72000000000000000"], 0x1, 0x0) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xff57, &(0x7f0000000480)}, 0xf) r3 = getpgrp(0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000500)={0x5, 0x2, r3, 0x0, r4, 0x0, 0x7f, 0x7}) clone(0x802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r5, &(0x7f0000000680)='attr/exec\x00') 10:02:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup2(r1, r1) vmsplice(r1, &(0x7f0000000280)=[{&(0x7f0000000180)="202c07bceaa42f7f609aea38dfa53e42f7113703f5716cf2bd2401f2dbb0c6ebca1db7e048b77f9e35d894d7af1c3454ddc9239200274b0fc28b166274e8cdef9e0a0015895a9a587cf18c6300fa6dfcd7340aa45a3c8964fd96ef6b82c7d58fe74ae8e767952577dc72dc2e1473dc4d185adfee43ad2b17d0eb200654b01409f550899dd370ec05a78c2793b0f6af517984092234169b3421913a45023b8514fbbe975ebf", 0xa5}, {&(0x7f0000000240)}], 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a45352, &(0x7f00000000c0)={{0x3, 0xffff}, 'port1\x00', 0x64, 0x101028, 0x1ff, 0x7, 0x9, 0x9, 0x8, 0x0, 0x1, 0x9}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x0, 0x7fffffff, 0xfc, 0x2}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000e0ebff6c02000000200070fc"]) 10:02:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="23000100004ce6feee00000000000000"]}) 10:02:38 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000540)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x3, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f00001a9000/0x400000)=nil, 0x400000, &(0x7f0000002080)=""/4096) getpeername$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x82) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) r3 = getpgid(r2) ioctl$BLKTRACESETUP(r1, 0x1274, &(0x7f0000000040)={[], 0x8, 0x2, 0x5, 0x8, 0x9, r3}) write$P9_RSETATTR(r0, &(0x7f00000003c0)={0x48, 0x1b, 0xfffffffffffbffff}, 0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x1000000, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./control\x00', 0x8000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000bf7000/0x1000)=nil, 0x1000}, 0x1}) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000080)}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x4000ff, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r5, 0xc008ae05, &(0x7f0000000040)) userfaultfd(0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000480)={0xffffffffffffffff}, 0x113, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {&(0x7f0000000300), r6, r4}}, 0x5) 10:02:38 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000480)) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x2, 0x0) pipe2(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000005c0)=0x0) getpgid(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'veth1_to_bond\x00', 0x2}, 0x18) ioctl(r3, 0x800000000008982, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="290000000600000000000000000000000400000000000000030000000000000000000000000000000069127fbcdab56d0f1f4cb25800000000000021b0c9e06ea050325f77726e71bff4c99eef500ade32c424020f322903f5bad93a"], 0x5c) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee9d8df70f2c6849d443d5bc274a1f1576385a885b764dc4babfdf01646fa6053ebc9"], 0x0, &(0x7f0000000200)='cgrQup2\x00', 0x2, 0x0) ioctl$TIOCNXCL(r4, 0x540d) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0), 0x8) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x2) r7 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x0) syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0x0, 0x400880) r8 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r9, 0x20000000000000c7, &(0x7f00000000c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x80000000000, r8, &(0x7f0000001000), 0xffffffffffffffe1, 0x9, 0x0, 0x0, 0xffffffffffffff9c}]) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000001c0)={0xfffd, 0x5, 0xc65b, 0x9, 0x80, 0x5, 0x1ff, 0x4, 0x20, 0x5, 0x7}, 0xb) pwritev(r7, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)="6e99aac1fcb92a86443c9ac8a128312951e1ef31ff74c3bf3fe47c32ce8ff427a24de5ef6ed803ab4f3fa5fa33e99294ede042f8e23e3d49521843860d995640e9eb69f5470976ae7686af464c45393e9dad11bd5c1ef49c86edea691e65aa957f2a70497f6adef05b1ac296023144a106186640e8769e022b0fc876", 0x7c}], 0x1}, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) memfd_create(&(0x7f0000000640)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xe4\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dsp\x00', 0x88400, 0x0) sendfile(r6, r6, &(0x7f0000000000), 0x2000005) 10:02:38 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0xffff8000, 0x2f}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xc4\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) 10:02:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sendto$packet(r0, &(0x7f0000000600)="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", 0x1000, 0x4000014, &(0x7f0000000000)={0x11, 0xff, r1, 0x1, 0x3, 0x6, @broadcast}, 0x14) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x200, 0xffffffff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r3, 0x7fff}, 0x8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000005c0)={r1, 0x1, 0x6}, 0x10) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x6, 0x420000) 10:02:39 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) [ 220.989679] device syz_tun entered promiscuous mode 10:02:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x801) io_setup(0xc01, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000280)={0x837801007a000000, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0, 0x4}]) 10:02:39 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x280000, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000180)=0x5, 0x4) fcntl$getownex(r3, 0x10, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000200)={r1}) shutdown(r1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x3000400}, 0xc, &(0x7f0000002980)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="09412367af8e63b64835e468e63f8332adffad8244e1d6118deb54179e81e780d8ffbcc219dbed9050e86ce2b6be545c2e3e6fa5b2fae2b4d8d8c0d2dd97bcdefa172096fcffffff4c2e8c54bc35a5ee96e79292ed302e0a56240669ef23c00f6bc399b71d6fb0d6d62c87d760ff019f78dd5b90f5fbee4d3844986c354ff4cc01bfe3d2fd77cc3f3201b354aff12c486f217fbf45a39ea1050f5b24a244a7c00b029906f7600558ed610402b19aa1790a716fbffe980083"], 0x1}], 0x1}, 0x20000080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) write$binfmt_misc(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="52797a715f8bfb1a4753f7c82a7b07bf496d8f906b2ee1a69185294774ec680ffb0f3086d5b1d4b3d057f087102ed9509823595249aa244503bc90ebb2ebe3f0723d7f4f810cab8372ddc3a1c682be97608baaf39b2a8b541ea10d745b77080b760f8a6d4861149b102ab47b292a87eb713d0c02bb7067b76f169e41c43f6c183ea4ac17242ee8301e3bb90776d2923aa3e17f4a81a8"], 0x1d) io_setup(0x1c5, &(0x7f0000000480)=0x0) fcntl$setstatus(r1, 0x4, 0x800) io_submit(r5, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffce4}]) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffdd9) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000004c0)={'ipvs\x00'}, &(0x7f0000000500)=0x1e) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000100)) sendto$inet(r0, &(0x7f0000000200), 0x0, 0x20008011, 0x0, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f) [ 221.013750] protocol 88fb is buggy, dev hsr_slave_0 [ 221.018907] protocol 88fb is buggy, dev hsr_slave_1 [ 221.043736] device syz_tun left promiscuous mode [ 221.090487] device syz_tun entered promiscuous mode [ 221.103724] protocol 88fb is buggy, dev hsr_slave_0 [ 221.108864] protocol 88fb is buggy, dev hsr_slave_1 [ 221.110202] device syz_tun left promiscuous mode 10:02:39 executing program 5: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x80000000, 0x101, 0x4, 0xdd2, 0x0, 0x0, 0x80, 0x3, 0x6, 0x0, 0x3, 0x7f, 0x8, 0xffffffffffffff55]}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x8000101842, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000300)=0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_smack_entry(0x0, &(0x7f0000000480)='security.SMACK64IPOUT\x00', &(0x7f00000004c0)='/dev/full\x00', 0xa, 0x1) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) add_key$keyring(0x0, &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x4) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) listxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000000140)) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0x42, 0x0, 0x6, 0x4, 0x0, "2e306d1bffdcdaf56a08a5fe927bace7e06e70f862249657ad6f05f1a6393727e2dc4a6aab66e9c61b5d01373a47d211b94e5d6c1fc5f92b692c0c4e697694bb", "adf73e88d659ae68f6d846d0a5a416b8b9144b3d743a50f1e38840270f09ae2fd25b5318fa61d7627f150d97c1586bc8d51bb0419cd45c487fb00323a933e0ba", "2184b56773d7ab29e0fbb0e7634906af0bdaee6064ce04bc9491256429bbeebc", [0x100000000, 0x8]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)) close(r1) openat$pfkey(0xffffffffffffff9c, 0x0, 0x3ffc, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000540), 0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000800)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x3, @remote, 0x3}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0x7, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, @in6={0xa, 0x4e22, 0x4, @empty, 0xc1}], 0xc4) 10:02:39 executing program 3: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfa\xff\xff\xff\x00\x00\x00\x00\x06\x00\x00\x00\x06\x00'}) timer_create(0x0, 0x0, &(0x7f0000000240)) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4004240b, &(0x7f0000000100)={0x5, 0x70, 0x8, 0xfffffffffffffffa, 0x6, 0x20, 0x0, 0x2, 0x2, 0x3, 0x8001, 0x7fff, 0x5, 0x10001, 0x400, 0x8, 0x1, 0x3, 0x8, 0x8, 0x9, 0x6, 0x40, 0x7, 0x93, 0x40, 0x71d9, 0x6337, 0x7, 0x80000001, 0x2, 0x8, 0x4, 0x40d9, 0x40, 0x7, 0x7, 0x9, 0x0, 0x54, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x90, 0x7, 0x2, 0xf, 0x7fff, 0x4, 0x45}) write$sndseq(r0, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 10:02:39 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:39 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0xa00000) sendfile(r0, r0, &(0x7f00000000c0), 0xff8) mknodat(0xffffffffffffffff, &(0x7f0000000000)='./control\x00', 0x0, 0x0) 10:02:39 executing program 0: syz_emit_ethernet(0x230, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaacf2bb43c40b80800450000280000000000069078ac14ffaae000000100000000", @ANYRES32=0x42424242, @ANYRES32=0x42424242, @ANYBLOB="e4c48d13e648bc487d4a1af39d34be9c073143af0324ea9b58f9788322ee1e1dbe67826e08ec4731fade4276d9cd0c845331653e4698b0152ad38d2b20d568021f747e86e416da6a15f5179df7f70ab291e77681fe15e52533d251c8fa31e02c4962a089350f278aa93c469d755c9e92e7ab676b0c39e5f3f960b43bfbe9a915d7a0fbbed1b3f3a8453274568b"], 0x0) 10:02:39 executing program 1: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x8, 0x101002) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x4000001ec, 0x1fbffffffa}) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x3) 10:02:39 executing program 0: mq_open(0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000300)=""/4096}, {&(0x7f0000000040)=""/59}, {&(0x7f0000000080)=""/8}, {&(0x7f0000001300)=""/232}, {&(0x7f0000001400)=""/237}], 0x1fffffffffffff30) syz_open_pts(r0, 0x109581) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x2) r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x7fffffff, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000180)) dup3(r1, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc004240a, 0x0) delete_module(&(0x7f00000000c0)='/dev/ptmx\x00', 0x0) 10:02:39 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) socketpair(0xa, 0x800, 0xffff, &(0x7f0000000000)) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000000c0)=""/24, 0x18) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000160a43ba5d806055b6fdd80b40000000200001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 10:02:39 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:39 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x12d) prctl$PR_SVE_SET_VL(0x32, 0x28aaf) sync() write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000003c0)=[{}], r1, 0x1, 0x1, 0x400000}}, 0x20) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) mkdirat$cgroup(r2, &(0x7f0000000140)='syz1\x00', 0x1ff) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000100)=0x7) write$P9_RREADDIR(r2, &(0x7f0000000180)={0xa6, 0x29, 0x2, {0xfffffffffffffff8, [{{0x4, 0x0, 0x2}, 0x39371a20, 0x80, 0x7, './file0'}, {{0x40, 0x3, 0x6}, 0x8, 0x5, 0x7, './file0'}, {{0x4, 0x2, 0x2}, 0x7, 0x0, 0x7, './file0'}, {{0x68, 0x4, 0x5}, 0x80000000, 0x3, 0x7, './file0'}, {{0x11, 0x4, 0x1}, 0x2, 0x200, 0x7, './file0'}]}}, 0xa6) 10:02:39 executing program 1: socket$inet6(0xa, 0x1000000000002, 0x0) [ 221.538053] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 10:02:39 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:39 executing program 5: socketpair$unix(0x1, 0x9, 0x0, &(0x7f00001caff8)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x3b, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4) 10:02:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000200)=@delqdisc={0x34, 0x25, 0x3, 0x0, 0x0, {0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x4}}]}, 0x34}}, 0x0) getpeername$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) 10:02:39 executing program 0: mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file1/file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file1\x00') ustat(0x3f2c08b5, 0x0) fchdir(r0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x1) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x6102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigaction(0x2f, &(0x7f0000000140)={0x0, {}, 0x0, 0x0}, &(0x7f0000000280)={0x0, {}, 0x0, &(0x7f0000000200)="c4c3b95c9d000001008fc4c27dbc8d590800008fc96895240f6466f3ab36f30fbd66b8660f5b126664670f92cf660f3a0c09cfc4c26d990c53c4c2459b98fa910efc"}, 0x8, &(0x7f00000002c0)) gettid() execve(&(0x7f00000003c0)='./file1/file0\x00', 0x0, 0x0) 10:02:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)='\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f0000000240), 0x4000) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x0, 0x8, &(0x7f0000000100)='!wlan1]\x00'}, 0x30) gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) syz_open_procfs(r2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x1}) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000000c0)={0xfffffffffffffffc}) 10:02:39 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0xc0104307, &(0x7f00000000c0)) r1 = openat(0xffffffffffffffff, &(0x7f0000003ac0)='./file0\x00', 0x101000, 0x4) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000003b00)={@loopback, @loopback, @dev}, &(0x7f0000003b40)=0xc) 10:02:39 executing program 4: sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000140), 0x4) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00003f5000/0xf000)=nil, 0xf000, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000e79000), 0x0, 0x0) getsockopt(r1, 0x40, 0x80000001, &(0x7f0000000340)=""/108, &(0x7f0000000000)=0x6c) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x1, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, r3}}, 0x120) fadvise64(r1, 0x0, 0x2, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x88, 0x0, 0x80000000, 0x4, 0x1000, 0xdb9, 0x0, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:02:39 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x8, 0x0) 10:02:39 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:40 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0xa06, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XT\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') poll(&(0x7f0000000280)=[{r0}], 0x1, 0x40) write$nbd(r0, &(0x7f00000000c0)={0x67446698, 0x0, 0x3, 0x2, 0x3, "4271826128f25090a23fbdf9ef23d4a0f10655b18e822a0feb1579be2fbd886da7e466bf35aeefb46f8cdf49cc1203bf0a4e745d7682d65631573df61c4c88aedc6585ed89a5e2935fbc823bf8ac3dd315be460bbd293b039ec45c60b41bdded59e77bf6f2ea577c660c0c1e682781d3"}, 0x80) sendfile(r0, r1, &(0x7f0000000000), 0x2b428a52) 10:02:40 executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x800, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000340)=0xfffffe8c) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0xfb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x204000, 0x0) ioctl$VIDIOC_G_AUDIO(r4, 0x80345621, &(0x7f0000000140)) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r5, 0x541d) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000500)=ANY=[], 0x0) ioctl$int_in(r6, 0x0, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x9, 0x1146c920dd46c442) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000300)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r7, 0xc018620b, &(0x7f0000000380)={r8}) r9 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000000500)={{0x0, 0x0, 0xc29, 0x7de64ffc, 'syz0\x00'}, 0x1, [0x6, 0x7, 0x0, 0x3, 0x3, 0x1, 0x1, 0x3, 0xc3f5, 0x5, 0x3f, 0x0, 0x8, 0x3ec, 0x0, 0x5, 0x1, 0x1800000, 0x5, 0xffffffffffffffff, 0x9, 0x0, 0x1200000, 0x5, 0x6, 0x47d90f0e, 0x101, 0x4, 0x28c0000000000000, 0x9, 0xc2, 0x8, 0x57, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, 0x0, 0x80000000, 0x886, 0xfff, 0x80, 0x3ff, 0x2, 0x9, 0xd75, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x20, 0x4f31, 0x405, 0x0, 0x9, 0x6, 0x100, 0x8, 0x9, 0x5, 0x1, 0x101, 0x0, 0x0, 0x8, 0x0, 0x2ee7, 0x401, 0x2, 0x6000000000000000, 0x3f, 0x400, 0x4, 0x6, 0x9, 0x80, 0x3, 0x1, 0x0, 0xec, 0x8, 0x5, 0x3, 0x10001, 0x6, 0x0, 0xdc75, 0x8, 0xfffffffffffffffe, 0x9f, 0x0, 0x6, 0x101, 0x0, 0xf6a5, 0xf049, 0x0, 0x5, 0xea32, 0x6e6a, 0x1, 0xff, 0x0, 0x20, 0x0, 0x0, 0x6, 0x80000000, 0x3ff, 0x7057f9d, 0x4, 0x0, 0x0, 0x4, 0xcd6, 0x0, 0x6, 0x6, 0x5], {0x0, 0x989680}}) fcntl$dupfd(r9, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000480), &(0x7f0000000440)=0xffffffffffffff8f) clone(0x200000, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2000000000000003, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000280)={0x1b7}, &(0x7f0000000200)={0x0, 0x989680}, 0x0) 10:02:40 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x800, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000080)=0x5) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) [ 222.170318] Unknown ioctl 21533 [ 222.221024] Unknown ioctl -1072143861 10:02:40 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x180) ioctl$KDDELIO(r1, 0x4b35, 0x6) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x7) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write(r2, &(0x7f0000000100), 0x34000) poll(&(0x7f0000000180)=[{r2}], 0x1, 0x0) 10:02:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001e00010000000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0400000066e81b962589ba239a47a45a8d8ea10fd2965afc8b07040d7b7a5b9a7831f176945e9158336c51f5081eee0405280258d803af619327cac92781cd6c0cb06a37bc976b9474e22abf04f4de890d74d243cca2577127170c0ae32a50ad1e26407e953c4a039682973b19a7841b750e44ce8fccb6171b47ce6fa128b89ba0d66bddfb50fb1e5dc6c0ca10aaa88ab047331a76b472b2"], 0x20}}, 0x0) [ 222.919847] Unknown ioctl 21533 [ 222.927024] Unknown ioctl -1072143861 [ 224.972344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.295801] 8021q: adding VLAN 0 to HW filter on device bond0 10:02:44 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') lseek(r0, 0x0, 0xfffffffffffffffc) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x3b) 10:02:44 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:44 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @link_local, 'ip6gre0\x00'}}, 0x1e) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 10:02:44 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0x7) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) 10:02:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0x0, 0x603, 0x65a, 0x0}) 10:02:44 executing program 3: mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) r0 = socket$inet6(0xa, 0x20800a2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\xfe', 0x1ff) io_setup(0x5, &(0x7f0000000380)=0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$inet_buf(r2, 0x0, 0x3f, &(0x7f0000000ac0)="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", 0x1000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0xfffffffffffffd50) sendto$inet(r3, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r3, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000100)=0x0) clock_gettime(0x5, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000440)={{}, {r5, r6+10000000}}, 0x0) io_destroy(r1) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x800, 0x4000) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x2, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x80, 0x0, 0x7, 0x0, 0x4, 0x7f, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x0, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x8) ioctl(r2, 0x8912, &(0x7f00000000c0)) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:02:44 executing program 1: pipe(&(0x7f0000eb0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r0, r3, 0x8000, 0x0) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) creat(&(0x7f0000b9a000)='./file0/bus\x00', 0x0) r4 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) write$capi20(r2, &(0x7f0000000080)={0x10, 0x23, 0x87, 0x83, 0x9, 0x8}, 0x9) r5 = dup(r4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2011, r5, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) writev(r1, &(0x7f000078a000)=[{&(0x7f0000000000)='\f', 0x1}], 0x1) close(r1) 10:02:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='ecryptfs\x00', 0x0, &(0x7f0000000180)='\x00\x00\x00') ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000240)=@security={'security\x00', 0xe, 0x4, 0x440, 0x0, 0x114, 0x114, 0x114, 0x0, 0x374, 0x374, 0x374, 0x374, 0x374, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0xf0, 0x114, 0x0, {}, [@common=@unspec=@addrtype1={0x28, 'addrtype\x00', 0x1, {0x8, 0x1, 0x4}}]}, @common=@inet=@SYNPROXY={0x24, 'SYNPROXY\x00', 0x0, {0xa, 0x0, 0x6}}}, {{@uncond, 0x0, 0xc8, 0x124}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x20}, [0xff, 0xff, 0xffffff00, 0xffffffff], 0x4e20, 0x4e24, 0x4e24, 0x4e23, 0x2, 0x0, 0x101, 0xffffffff, 0xffff}}}, {{@uncond, 0x0, 0x118, 0x13c, 0x0, {}, [@common=@ipv6header={0x24, 'ipv6header\x00', 0x0, {0x2, 0x8}}, @common=@srh={0x2c, 'srh\x00', 0x0, {0xbf, 0xfffffffffffffff9, 0x8, 0xe79, 0x40, 0x20, 0x40}}]}, @common=@unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x1f}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24}}}}, 0x49c) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) 10:02:44 executing program 0: prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) 10:02:44 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x6) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) [ 226.638795] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 226.655547] Error parsing options; rc = [-22] [ 226.695627] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README 10:02:44 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x4000000007f, 0x10001) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x5, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "f11c83", 0x14, 0x0, 0x0, @mcast2, @dev, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000040)) 10:02:44 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) [ 226.777919] Error parsing options; rc = [-22] 10:02:44 executing program 5: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x18}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000040)="17f6f8ae5e9f9cca", &(0x7f0000000100)=""/117}, 0x18) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') preadv(r0, &(0x7f0000001780), 0x25da, 0x1) read(r1, &(0x7f0000000200)=""/254, 0xfe) write$cgroup_pid(r1, 0x0, 0xffffffffffffff58) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 10:02:44 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007de000/0x3000)=nil, 0x3000, 0x2000000001, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @my}, 0x10) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB="ae0000008dfe5db7c8be7bd27b8478098a625119ecae2ea01cc16114b227eed40af106bfa9565f359b97858c85ac9a557fb1f8bc5ae0b60ea4aa68eece01d3a481b3ad67893eb37dd6cff36b934c5272a756bbb2d346e83df6c98c9f24afcf1e010128afe550d2abbc1fb400548ccde2b0e044977ee62e9696cc881a387b30ef5092c6d5d49e84af514a5a0420949565c4d9017807228100d30c8d83964f8acbcd6ac4d662d3b987dc6af630"]) 10:02:45 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='/dev/input/event#\x00', 0xffffffffffffff9c}, 0x10) write$FUSE_WRITE(r2, &(0x7f0000000140)={0x18, 0x0, 0x1, {0x3}}, 0x18) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=""/126, 0x7e}) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000040)=0xeaf1, &(0x7f0000000200)=0x4) fstat(r1, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000006c0), &(0x7f0000000700)=0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) fstat(r1, &(0x7f0000000480)) getuid() getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000900)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)) flistxattr(r0, &(0x7f0000000500)=""/255, 0xff) writev(r3, &(0x7f0000000080), 0x1a6) sendmsg$can_raw(r3, &(0x7f0000000680)={&(0x7f0000000240)={0x1d, r4}, 0x10, &(0x7f0000000640)={&(0x7f0000000600)=@can={{0x3, 0x4, 0xede, 0x20}, 0x2, 0x1, 0x0, 0x0, "802cd35bf0d533b0"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 10:02:45 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f00000001c0)=""/35) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000, 0x0, 0x801000cf00000000, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) creat(&(0x7f0000000080)='./bus\x00', 0x0) gettid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) 10:02:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000480)=0x10, 0x260) close(r0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x20001005) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4c0, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x4, 0xffffffffffffffff, [{0x8327, 0x0, 0xaed1}, {0x2, 0x0, 0x8}, {0x80000000, 0x0, 0x81}, {0x200, 0x0, 0x5}]}) 10:02:45 executing program 3: r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f00000001c0)={'syz'}, &(0x7f0000001040)="ed", 0x1, 0xffffffffffffffff) keyctl$revoke(0x2, r0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0xc344, 0x30901) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="8c020000", @ANYRES16=r2, @ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0xd4}, 0x80c1) [ 227.152970] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 10:02:45 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) 10:02:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r2 = socket$inet(0x10, 0x3, 0x4) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x202, 0x0) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000040)=""/7, &(0x7f0000000080)=0x7) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000004e22000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) 10:02:45 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$video(0x0, 0x0, 0x80) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x9d0000, 0x1, 0x0, [], &(0x7f0000000000)={0xf0f041, 0x0, [], @p_u16=0x0}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000280)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x5, @loopback, 0x3ff}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e23, 0x0, @loopback, 0x6}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e21, 0x3, @local, 0x9a}], 0x94) preadv(r0, &(0x7f0000001500)=[{&(0x7f0000000180)=""/250, 0xfa}], 0x1, 0x0) recvmsg(r0, &(0x7f00000008c0)={&(0x7f0000000980)=@ax25={{0x3, @null}, [@remote, @netrom, @default, @remote, @netrom, @default, @default]}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000680)=""/71, 0x47}, {&(0x7f0000000700)=""/66, 0x42}, {&(0x7f0000000780)=""/154, 0x9a}], 0x3, &(0x7f0000000880)=""/48, 0x30}, 0x40010103) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {r2, 0x86, "50de32", "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"}}, 0x110) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) sendto$inet6(r0, &(0x7f0000000040)="ee98213cff5162649b57a493a55ba5aa319c10b0673c165099161baa980694c9dabe85f6718ded77abbd6128e288a7a817cf16e23e", 0x35, 0x20000801, &(0x7f0000000080)={0xa, 0x100000001, 0x5, @empty, 0xfe}, 0x1c) prctl$PR_SET_ENDIAN(0x14, 0x1) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000500)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'ip6gretap0\x00', 0x5802}) 10:02:45 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000480)={0x4, @raw_data="fd9a221e70ca3d0f986e5e985d0fe66ac52516fc9d77939c86bd17a38d4ffc124fca011ac1365a5ee6f9850b9ca335f928c798282c515c44f524d94c1b14da9a1c134403b60ea1f626bfcd6631074a33faa8c04636dc125e02e8d5da82f2040168f0d33483d3c72354b77db34b0190bceb5e2db4ab43e41533131e0112b2dbfcd4de6aafed818954827618b1803c79388549f72b85db837b5880fc62479ebbd587d30fd17ba06db32598b0e03d838e10d2efc6507503dd379471ebc2445105875ca833bf4a68bcb3"}) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000200)={0x0, 0x80, 0x1, {0xc, @vbi={0xffffffffffffff7f, 0xfff, 0x77, 0x7d334f5f, [0x2], [0x9, 0x5], 0x1}}}) getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0xfffffffffffffd9e) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0xf, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x4f}, @jmp={0x5, 0x5, 0xd, 0x7, 0x8, 0x4, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x13}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9fc}, @alu={0x4, 0x7, 0xf, 0xa, 0x7, 0xffffffffffffffd0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x4e}, @exit, @map={0x18, 0x7, 0x1, 0x0, r0}]}, &(0x7f0000000580)='Y\x90\x93\xd5(M+6\xce\x1c\xcc\xbd,X\xce oD!\x8aB\x98\xe9\x10r<\xcd[u>2J83\x113\x14a\x92;_\xfb\xe7\x82\x9f\xe4OA\xd9%P\x91\xc1#\xbd\x90\xbe\xae\'J\xf1\xaf\x1c\xa3p\x1c\"mf\xd1W\x96Oy.\xde\x04\x8a\x88\xe1\xed\x8b\xc9\xc1\x16m\xf5\xaa\xb1\xbda0\x92)\x0eg\xa8\xe8\x05e%\xe8\xbf[ST\xc1\'=\xa1\x1cI\x83\xc7\xc9b\\\x03dD\xd2\xe8(\vq\xcb\xc8F\xcb\x93D\xd3o\xaf\x9f\xbaO\xad_v-\xed\xd4vX\xc1\x8c\xdf7\xbf?4e\x8b!Q\xa7\x15.Kw&Z\xafp\xac,q:\x99bZ\x80ti\xe6\xa8\xa9T\xf6VAr}M\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x5d, &(0x7f0000000300)=""/93, 0x41100, 0x10001, [], r1, 0x7}, 0x48) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 10:02:45 executing program 3: r0 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000280)="ff7c63624b463ccfdd3450852f784af7ba622c035487a328fa64e0037df53c4dc15dab9380ab0df7a5c8edf6d2cf35a90ee95829a79a7772e9ad6c12b70693b6ca42b967b1ef3d02a521ba8de49a2270f035d838d25c604ab695c3f02e69a61d1dfde365d539f4318b4e209b5dcd106967e325fe106ec95b08b96e65dc8ef54db307a33378bcb548c6585fe51f72cc2c1def994c4a38791c4e1a09afeb4d820e6be02e228c615362c0a5fa82dc2ce578e40a5d71f8236f0be1b61b799d4af61844ff77bcba5d1e", 0xc7, 0xffffffffffffffff) r1 = accept4(0xffffffffffffff9c, &(0x7f00000000c0)=@nfc, &(0x7f0000000180)=0x80, 0x800) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) keyctl$revoke(0x3, r0) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x2000, 0x20) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3}) 10:02:45 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/18, 0x12}], 0x1) r1 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r2, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7732ad3b}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x200000001}) 10:02:45 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000180)="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", 0x24}], 0x200000000000006b}, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000080), 0x4) lseek(r0, 0x0, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) 10:02:45 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x6) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:02:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x100000000, 0x80000) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000740)={0x1, @pix={0x0, 0x0, 0x52424752}}) 10:02:45 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200482, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x40, 0x4, 0x3}, 0x1ff}}, 0x18) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002480)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="9c", 0x1}], 0x1}], 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000380)=""/242, 0xf2}], 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000300)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x180, r2, 0x622, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x14}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ifb0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @ipv4={[], [], @loopback}}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8001, @ipv4={[], [], @rand_addr=0x5}, 0xb12a}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80000001, @local, 0x7ff}}}}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x40040}, 0x800) 10:02:45 executing program 1: r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4}, 0x80, 0x0}, 0x24000001) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0xa0000, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) sendmsg$kcm(r0, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev, 0xc}, 0x80, 0x0}, 0x20004040) 10:02:45 executing program 3: r0 = socket(0x11, 0x2, 0x140009) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0xffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000000)={0x4, {{0x2, 0x0, @multicast2}}}, 0x104) fcntl$setstatus(r0, 0x4, 0x2000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000003c0)=[0x400]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)=ANY=[@ANYBLOB="c9000000b7e83ea758d897b4a64e84dd17309de547eeef589b298ee0609915a18d2fff66d3b3049050cc675c5bc11d937931e80871caaea66e7df63729a4493ff412cafd48e5af9838eef7eee56ce5241275edea99b70b3785b187faadbc22d0f048e2350ea8ceefab94705ae1d37a5ae21053f0deab696326f9cf921ad843e02b342c571fd8fce68bafa21aac666be2139f0aca723dfd3543f568ea5725952b4c42e52219eba17cdb6d10735210518eeae6d96274c3b4c6bf61047feec2203d8db8df1a59ace691b9941777cb547fa1e62a16"], 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000180)={0x0, {0x476d, 0x1}}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x7}}}, &(0x7f0000000380)=0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000080)={0x18}, 0x1ca) close(r4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) modify_ldt$write(0x1, &(0x7f0000000140)={0x2, 0xffffffffffffffff, 0x1000, 0xfed, 0x9, 0x2, 0x6, 0xa9, 0x3, 0x7}, 0x10) 10:02:46 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:46 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 10:02:46 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) 10:02:46 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40046432, &(0x7f0000000200)=0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000000c0)={r2, 0x3}) r4 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x3, 0x422000) ioctl$DRM_IOCTL_INFO_BUFS(r4, 0xc0106418, &(0x7f0000000080)={0xfffffffffffffffd}) r5 = socket$inet(0x2, 0xa, 0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000001640)={'ip_vti0\x00', 0x7f}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)=0x0) write$FUSE_LK(r1, &(0x7f00000001c0)={0x28, 0x0, 0x3, {{0x7fffffff, 0x800, 0x2, r7}}}, 0x28) 10:02:46 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x6) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) [ 228.158742] syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) 10:02:46 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000180)) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x11, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x31, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000140)) fstat(r1, &(0x7f00000021c0)) 10:02:46 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x1, 0xb316, 0xdc00000000000000, 0x94bd, 0x96a, 0x1ff, 0x4, 0x5, 0x3, 0x9, 0x3, 0x0, 0x2, 0x101, 0x800]}, &(0x7f0000000380)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={r1, @in6={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xddf}}, 0x7, 0x4, 0x26130000, 0x80000001, 0x10}, 0x98) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x3, 0x0, @dev}}}, 0x84) r2 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) r4 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$get_persistent(0x16, r3, r4) setpriority(0x2, r2, 0x2) 10:02:46 executing program 5: pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x4000) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) write$evdev(r0, &(0x7f00000004c0)=[{{0x0, 0x7530}, 0x11, 0x5, 0x4}, {{0x0, 0x2710}, 0x12, 0xff, 0x6}, {{}, 0x15, 0x5, 0x1}, {{0x77359400}, 0x1f, 0x1c600000000000, 0x1}, {{r1, r2/1000+30000}, 0x15, 0x0, 0x1f}, {{0x77359400}, 0x5, 0x4, 0x9}], 0x60) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000280)) ioctl$RTC_PIE_ON(r3, 0x7005) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x48, r6, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2568000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x59a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}]}, 0x48}}, 0xc0) rt_sigprocmask(0x2, &(0x7f0000000540)={0x4}, &(0x7f0000000580), 0x8) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r3, &(0x7f0000000080)=[{{r4, r5/1000+30000}, 0x17, 0x3f, 0x3f}, {{r7, r8/1000+30000}, 0x0, 0x1, 0x80}, {{0x77359400}, 0x15, 0x200000000000, 0x20000000000}], 0x30) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/156, 0x9c}], 0x1, &(0x7f00000003c0)=""/63, 0x3f}, 0x10000) 10:02:46 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r1 = dup(r0) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000007c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x40000003, 0x0, &(0x7f0000000c80)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e21, 0x8, @remote}}, [0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x8765]}, &(0x7f0000000a00)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000a40)={0x0, 0xfffffffffffffffe, 0x4000007}, 0x8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000d80)={0x0, @loopback}, &(0x7f0000000dc0)=0xc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ff1000/0xf000)=nil, 0xf000}, &(0x7f00000003c0)=0xc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f00000000c0)={0x0, 0x3, 0x2}) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000080)=0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000800)={0x0, 0x0, 0x0, 'queue0\x00'}) truncate(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8)=0x54, 0x87ff7) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x5, 0x80805, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) sendto$isdn(r4, &(0x7f0000000100)={0x5, 0xffffffff, "91202e1db7feba7b320e8c03cc217033525e0d85a54e2a3085b5acbbe99614c1763ce21afc1a9948f7584a52ccd09015d7723eae371e8320ff193d91145a6416ce"}, 0x49, 0x41, &(0x7f0000000080)={0x22, 0x7, 0xecbf}, 0x6) r5 = dup(r3) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000040)={0x8, 0x2000000005}) 10:02:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xcf4b, 0x101000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0186416, &(0x7f0000000000)={0x43b2, 0x8000, 0x1a8, 0x3f, 0x6, 0x716}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) 10:02:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x40040) getpeername$tipc(r2, &(0x7f0000000300), &(0x7f0000000340)=0x10) close(r1) getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendto$packet(r2, &(0x7f0000000040)="c9d718cc72ae1190878e5c7eaddab62457084ffae23cbdb59cb22fb7f57617d47e8bb69662887d0fc8ac27d2ee26d538f3e306cd607dc0d3a3d8c6aa609c796d", 0x40, 0x40000, &(0x7f0000000100)={0x11, 0x1f, r3, 0x1, 0x80000000, 0x6, @local}, 0x14) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801) io_setup(0xc01, &(0x7f0000000480)=0x0) pwrite64(r0, &(0x7f0000000140)="451ea37b07dae795b71bf32505e6f92b64f0520514708ce10f04b14c60a6d340b3370883", 0x24, 0x0) io_submit(r4, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2}]) 10:02:47 executing program 3: r0 = socket(0x11, 0x2, 0x140009) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0xffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2, @loopback}, 0xc) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000000)={0x4, {{0x2, 0x0, @multicast2}}}, 0x104) fcntl$setstatus(r0, 0x4, 0x2000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000003c0)=[0x400]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)=ANY=[@ANYBLOB="c9000000b7e83ea758d897b4a64e84dd17309de547eeef589b298ee0609915a18d2fff66d3b3049050cc675c5bc11d937931e80871caaea66e7df63729a4493ff412cafd48e5af9838eef7eee56ce5241275edea99b70b3785b187faadbc22d0f048e2350ea8ceefab94705ae1d37a5ae21053f0deab696326f9cf921ad843e02b342c571fd8fce68bafa21aac666be2139f0aca723dfd3543f568ea5725952b4c42e52219eba17cdb6d10735210518eeae6d96274c3b4c6bf61047feec2203d8db8df1a59ace691b9941777cb547fa1e62a16"], 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000180)={0x0, {0x476d, 0x1}}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x7}}}, &(0x7f0000000380)=0x84) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind(r0, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r4, &(0x7f0000000080)={0x18}, 0x1ca) close(r4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) modify_ldt$write(0x1, &(0x7f0000000140)={0x2, 0xffffffffffffffff, 0x1000, 0xfed, 0x9, 0x2, 0x6, 0xa9, 0x3, 0x7}, 0x10) 10:02:47 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x6) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:02:47 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:47 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x0, 0xfffffffffffffffb, 0x37, 0x4, @buffer={0x0, 0x99, &(0x7f0000000080)=""/153}, &(0x7f0000000140)="fee05e2ad6fa17b40548982e061a223b1466e639a252bb32c5c65fff95618109d12fb4e570c61d1b678931a6bf72a9a7594ce0ea9e601a", &(0x7f0000000180)=""/12, 0x6, 0x4, 0x1, &(0x7f00000001c0)}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000005904000000"]) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x193280, 0x0) 10:02:47 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2040, 0x110) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f0000000200), r2, 0x3}}, 0x18) 10:02:47 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x5, 0x0, "913fa7c292d3d3841feaa73b24735180b4fadafbd0ae8fdf06dc1c0fffaedf7b3cf0239733e29abbc5d501554cc12846eb3ebd34bab758954fc222777a53c4c0a8e473b6e9bb9bd5b5f2ee63c9774539"}, 0xd8) r1 = dup(r0) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000007c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x40000003, 0x0, &(0x7f0000000c80)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e21, 0x8, @remote}}, [0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x8765]}, &(0x7f0000000a00)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000a40)={0x0, 0xfffffffffffffffe, 0x4000007}, 0x8) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000d80)={0x0, @loopback}, &(0x7f0000000dc0)=0xc) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ff1000/0xf000)=nil, 0xf000}, &(0x7f00000003c0)=0xc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f00000000c0)={0x0, 0x3, 0x2}) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000080)=0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000800)={0x0, 0x0, 0x0, 'queue0\x00'}) truncate(&(0x7f0000000400)='./bus\x00', 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, &(0x7f0000d83ff8)=0x54, 0x87ff7) r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) socketpair(0x5, 0x80805, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) sendto$isdn(r4, &(0x7f0000000100)={0x5, 0xffffffff, "91202e1db7feba7b320e8c03cc217033525e0d85a54e2a3085b5acbbe99614c1763ce21afc1a9948f7584a52ccd09015d7723eae371e8320ff193d91145a6416ce"}, 0x49, 0x41, &(0x7f0000000080)={0x22, 0x7, 0xecbf}, 0x6) r5 = dup(r3) ioctl$KVM_GET_ONE_REG(r5, 0x4010aeab, &(0x7f0000000040)={0x8, 0x2000000005}) 10:02:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8400000000000006, 0x10, r0, 0x4) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x16) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0) 10:02:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x5) r1 = accept4(r0, 0x0, &(0x7f0000001580), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000580), 0x237, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f00000000c0)='./file0\x00', r4, r5, 0x1000) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000300)={r1, r3}) connect$bt_rfcomm(r1, &(0x7f0000000340)={0x1f, {0x4, 0x3f, 0x2dd, 0x1, 0x9, 0x34}, 0x8}, 0xa) prctl$PR_GET_KEEPCAPS(0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000005040)={'bridge_slave_1\x00'}) close(r1) 10:02:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f00000013c0), 0x4) bind$inet(r0, &(0x7f0000001280)={0x2, 0x10000004e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f00000020c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f00000010c0)=""/164, 0xa4}}, {{&(0x7f0000002240)=@can, 0x80, &(0x7f0000002580), 0x0, &(0x7f0000001180)=""/246, 0xf6}, 0x54f}], 0x2, 0x40000002, 0x0) sendto$inet(r0, &(0x7f0000c95ffd), 0x49b8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 10:02:47 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r2 = syz_open_pts(r0, 0x8a200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0xffffffffffffffe0, @mcast2, 0x80000001}, @in6={0xa, 0x4e22, 0x2cb4, @dev={0xfe, 0x80, [], 0x23}, 0x9}, @in6={0xa, 0x4e23, 0x8, @ipv4={[], [], @loopback}, 0x3}], 0x74) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x10000000}) 10:02:47 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x210680, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000000)=0x100) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0046d00, &(0x7f0000b18000)={{}, {0xffffffc0}}) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0xd46c, @loopback, 0x2}}}, 0x84) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'nr0\x00', {0x2, 0x4e24, @broadcast}}) 10:02:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x10000402, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000fc8)={&(0x7f0000238ff8)=@abs, 0x8, &(0x7f0000bd9000), 0x0, &(0x7f00006f3fe8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040), 0x7e9ec197280f8a11}, 0x0) [ 229.664157] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:02:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x1) r1 = socket(0x0, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000000080)=ANY=[@ANYBLOB="200400000000010600000000000000080700000056f4320d3624e39eaff71fce986f1a7f07826a0dde164a135bdb371497d709d95df855436147e19f511527399c5fb8ca54913588cdda3c5d0f29a41ddc0750cf6bec57feb8266f", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) acct(&(0x7f0000000100)='./file0\x00') 10:02:47 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)=0x6) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:02:48 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:48 executing program 5: openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x202, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20140, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffcea, &(0x7f0000000a80)={&(0x7f0000000040)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0) 10:02:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000640)=ANY=[@ANYBLOB="8a7fd089f5b6f620bb9493f9de287e93e3eeecc3ee43fef6f8764fead021baf685f9d227fdb4951529fe7e0f23702c00ab7b5d5aabf8ffffff9fed9034aab11a8c90836bb4829b3b648fa620e8095266c8bc4604705c7afb79707c9e3f855663f113d506d14fdb24b11f5112515d3ab1f7cefaaa5945f88c9d7a997e7dbe8a1b6d9521230858c7f51258ad0fd6be32bae638a5"]) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x12, 0x7, 0x1, {0x9, './cgroup\x00'}}, 0x12) unshare(0x40000000) ioctl$KDMKTONE(r2, 0x4b30, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001300)) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x26, &(0x7f0000000200)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x1) listen(0xffffffffffffffff, 0x40003) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6, 0x4000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc9c6, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x66c, 0x3, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) gettid() r4 = syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={0x0, 0xffffffffffffffe1, 0x0, 0x5, 0x6}, &(0x7f0000000200)=0x14) mkdirat(r2, &(0x7f0000000080)='./bus/file0\x00', 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000240)={r5, 0xcb, "dee6ca030aed1d6cd601f14a681f41ba41cc3632f6b60653ec804573242c2555d3432f7d5d938fc31097f1f6a7c210d9c84602291c23ea2f95d6a047c7bbdfc787f38efd4cb770b4d446499e413e6ddd4ef23939e4fb00b662789b951bb4ae257b9cf37b2ac6d56e9105d4a24954c8ab0d1f5a8895ee8884c62a63af637c26d9e00cd94e447b0bfd8e0dd2ca2611c7315012945427d08d35af05f28abe9c94da6243c58029e372ae5543ababfd0d4f243b1707ad0d6d58eecff13c75ca2d7ce86c0c12d3db2e2dc9e788cd"}, &(0x7f0000000140)=0xd3) r6 = creat(&(0x7f00000008c0)='./bus\x00', 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@local, @multicast2, @dev}, 0xfffffffffffffe6d) sendfile(r6, r4, &(0x7f0000000180), 0x10013c93a) write$evdev(r2, &(0x7f0000000440)=[{{}, 0x15, 0x8, 0x80}], 0x10) 10:02:48 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40000, 0xa1) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f00000000c0)) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000080)) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x29, 0x3, 0x0, {0x0, 0xa000000}}, 0x29) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x20080, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000180)) 10:02:48 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:02:48 executing program 3: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x10000, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='cgroup2\x00', 0x3, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x2) getdents(r0, &(0x7f0000001780)=""/4096, 0x491) [ 230.272523] IPVS: ftp: loaded support on port[0] = 21 10:02:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x93c7, 0x208200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') timer_create(0x3, &(0x7f00000002c0)={0x0, 0x39, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000340)=0x0) timer_settime(r2, 0x1, &(0x7f0000000380), &(0x7f0000000400)) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="27701a366316a439ab61dbad6851ffff661b19f89e70662a06338ea67ac48dc946423b35b33fb6734324"], &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x201000, &(0x7f00000002c0)) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f00000003c0)='./file0\x00') getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0xfffffffffffffff9}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r3, 0x1}, 0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000480)={0x0, 0x0, 0x80}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000500)={r4, 0x80000, r1}) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x0, 0x211f, r0, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xe2, 0x0) syncfs(r5) [ 230.507565] IPVS: ftp: loaded support on port[0] = 21 10:02:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x1000010400) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x40007}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e22, 0x9, @mcast1, 0x59}}}, 0x84) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002380)='/dev/vga_arbiter\x00', 0x4, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1c, &(0x7f00000023c0)="dcacc1df81e2f7053f1e9681c028cc1b8daaccb2c64f49c9c7e26c10f2853a6ac4a9a358457e3ed42471cf9b5c00f295c4de96f6764f586d49a67e8c47acec9d688a20581a4ecaa2e79438524ede5f01eec4d510043af9eb4bc9ddc6bcc6909a5b745d6165a738ff7f966ea263063497d3d65c5314a9ece18e350cff29c99be53c6cc3721b27df02451af4e46c5f11fcbd39d89b66f2ddccef0b317640e2f06e34098312498ba7db32826af555da4695a55b4e238669f9e8cd4cb1d02b6321738fb696014c4f194e2b7a8c1ce82b902b", 0xd0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000200)="fe2ba2a9e5fc32b84b6f9ae544166393e887f0035e1b03acf66c534491abcb16b3125513", 0x24) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x28000, 0x0) 10:02:48 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) unshare(0x8020000) r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, &(0x7f00000006c0)={{0x6}, 'port1\x00', 0x8, 0x44, 0x0, 0x0, 0x6, 0xbb6, 0x0, 0x0, 0x7, 0x1}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000a00)) perf_event_open(&(0x7f000001d000)={0x1, 0x416, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000380), 0x0}, 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000180)}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x185387, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x70000, &(0x7f0000ffc000/0x2000)=nil, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000500)) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000070bce308c31da2922a9bcce5192f15ec91d374acb0a92645733561a994fe9e00d900000900ef1887b30e97addbab2a8c15df1e812de4ec2264b2da4e6ccb7d148c91033d617db13543c041ea1aaad38231f5697d1bbe5dc1d07a08a6435e4a05c4cd7e58531b625984956f"], 0x0, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000840)) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') setns(r2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000100)={0x0, 0x8449, 0x317, &(0x7f00000000c0)=0x8001}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={0x0, 0x0, 0x10, 0x0, 0x38000000000}, &(0x7f0000000680)=0x18) clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000004c0)) 10:02:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000640)=ANY=[@ANYBLOB="8a7fd089f5b6f620bb9493f9de287e93e3eeecc3ee43fef6f8764fead021baf685f9d227fdb4951529fe7e0f23702c00ab7b5d5aabf8ffffff9fed9034aab11a8c90836bb4829b3b648fa620e8095266c8bc4604705c7afb79707c9e3f855663f113d506d14fdb24b11f5112515d3ab1f7cefaaa5945f88c9d7a997e7dbe8a1b6d9521230858c7f51258ad0fd6be32bae638a5"]) write$P9_RLERROR(r1, &(0x7f00000000c0)={0x12, 0x7, 0x1, {0x9, './cgroup\x00'}}, 0x12) unshare(0x40000000) ioctl$KDMKTONE(r2, 0x4b30, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001300)) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x26, &(0x7f0000000200)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x1) listen(0xffffffffffffffff, 0x40003) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x400, 0x0, 0x0, 0x0, 0x6, 0x4000, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc9c6, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x66c, 0x3, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4) gettid() r4 = syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={0x0, 0xffffffffffffffe1, 0x0, 0x5, 0x6}, &(0x7f0000000200)=0x14) mkdirat(r2, &(0x7f0000000080)='./bus/file0\x00', 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000240)={r5, 0xcb, "dee6ca030aed1d6cd601f14a681f41ba41cc3632f6b60653ec804573242c2555d3432f7d5d938fc31097f1f6a7c210d9c84602291c23ea2f95d6a047c7bbdfc787f38efd4cb770b4d446499e413e6ddd4ef23939e4fb00b662789b951bb4ae257b9cf37b2ac6d56e9105d4a24954c8ab0d1f5a8895ee8884c62a63af637c26d9e00cd94e447b0bfd8e0dd2ca2611c7315012945427d08d35af05f28abe9c94da6243c58029e372ae5543ababfd0d4f243b1707ad0d6d58eecff13c75ca2d7ce86c0c12d3db2e2dc9e788cd"}, &(0x7f0000000140)=0xd3) r6 = creat(&(0x7f00000008c0)='./bus\x00', 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@local, @multicast2, @dev}, 0xfffffffffffffe6d) sendfile(r6, r4, &(0x7f0000000180), 0x10013c93a) write$evdev(r2, &(0x7f0000000440)=[{{}, 0x15, 0x8, 0x80}], 0x10) 10:02:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x93c7, 0x208200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') timer_create(0x3, &(0x7f00000002c0)={0x0, 0x39, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000340)=0x0) timer_settime(r2, 0x1, &(0x7f0000000380), &(0x7f0000000400)) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="27701a366316a439ab61dbad6851ffff661b19f89e70662a06338ea67ac48dc946423b35b33fb6734324"], &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x201000, &(0x7f00000002c0)) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f00000003c0)='./file0\x00') getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0xfffffffffffffff9}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r3, 0x1}, 0x8) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000480)={0x0, 0x0, 0x80}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000500)={r4, 0x80000, r1}) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x0, 0x211f, r0, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xe2, 0x0) syncfs(r5) 10:02:48 executing program 3: r0 = add_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000340)={'syz'}, &(0x7f0000000d00)="94", 0x1, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)='trusted\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1a, 0x4, "2bd62bfd7523e398d6740cddc6a78ca8e89795b0189252c605c52e2f001cd72253786e5fdcc1df52335cad228ebbed4c1a87aadc1daa10ae9dff351b3be12b4f", "16158951139aced2e76a77eed04038212810f570647abb94bed5c668bd530985", [0x5, 0xee2]}) 10:02:49 executing program 4: creat(&(0x7f0000000200)='./file0\x00', 0x0) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) [ 231.024997] IPVS: ftp: loaded support on port[0] = 21 10:02:49 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x1) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0x45) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000440)={0x8, 0x3, 0x3, 0x0, 0x8000, 0x7, 0x0, 0x7ff, 0x0}, &(0x7f0000000480)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r5, 0x1, 0x101}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000140)={r4, 0x4a, "59e309bccfb104e5647eb43ca7e4e364ccc0778d1cc93bc87a19ff055e8c916e25aad8303de3051ccfb82afa30410717fadefaffac885189cccf7a64aa19ddf071288d2404592334b932"}, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f00000002c0)) r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffff9c, &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./file0\x00', 0x8, 0x3) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000000c0)={r6, 0xa7aa}, 0x8) ioctl$KVM_SET_PIT(r7, 0x4030ae7b, &(0x7f00000001c0)={[{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x24013, r3, 0x0) 10:02:49 executing program 5: io_setup(0x800, &(0x7f0000000040)=0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) fchdir(r1) io_pgetevents(r0, 0xfffffffffffffeff, 0x7, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={0x5}, 0x8}) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080), 0x171}]) 10:02:49 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) sendto(r2, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) 10:02:49 executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) unshare(0x8020000) r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a45352, &(0x7f00000006c0)={{0x6}, 'port1\x00', 0x8, 0x44, 0x0, 0x0, 0x6, 0xbb6, 0x0, 0x0, 0x7, 0x1}) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000a00)) perf_event_open(&(0x7f000001d000)={0x1, 0x416, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000380), 0x0}, 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000180)}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x185387, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x70000, &(0x7f0000ffc000/0x2000)=nil, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000500)) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000070bce308c31da2922a9bcce5192f15ec91d374acb0a92645733561a994fe9e00d900000900ef1887b30e97addbab2a8c15df1e812de4ec2264b2da4e6ccb7d148c91033d617db13543c041ea1aaad38231f5697d1bbe5dc1d07a08a6435e4a05c4cd7e58531b625984956f"], 0x0, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000840)) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000009c0)='ns/mnt\x00') setns(r2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000100)={0x0, 0x8449, 0x317, &(0x7f00000000c0)=0x8001}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={0x0, 0x0, 0x10, 0x0, 0x38000000000}, &(0x7f0000000680)=0x18) clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000004c0)) 10:02:49 executing program 4: write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:02:49 executing program 5: r0 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r1 = geteuid() r2 = getegid() fchown(r0, r1, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/route\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x121cc0) 10:02:49 executing program 4: r0 = creat(0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:02:49 executing program 3: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="570000007d0200000050000300000000004303000000030000000000000000002018020000000002000009000000000000000f006e667300eff16117129ed0598aa8d400010a00707070302177"], 0x4d) prctl$PR_GET_SECCOMP(0x15) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000100)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @local, 0xf3}, 0x1c) ftruncate(0xffffffffffffffff, 0x208200) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) getpgrp(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@multicast2, @in=@empty}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000cc0)) getgroups(0x7, &(0x7f0000000e40)=[0x0, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000fc0)) getpgrp(0x0) getegid() ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200), 0x10) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:02:49 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x200000, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100)=0x9, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(r2, &(0x7f0000000140), 0x0, 0x0) 10:02:49 executing program 0: r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f000069b000/0x1000)=nil, 0x1000}) socket$bt_bnep(0x1f, 0x3, 0x4) 10:02:49 executing program 4: creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:02:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000d772e57080311c400000fd853e4ecaa62ff4e5ef9380000000c37a84000000000000000009001609a52e7ffc7a4217db7874800000000018694759adbfb2d49eae13558b75fb73c29ec62798ad94f6bb77"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x8000) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x100}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000005c0)=0x3f) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000200)={{0x5, @name="a7a7889162b1b9b40f0efe0a1dbe0e184368af98b8adb572786f4d9d5eb82a6d"}, "4f97926fb6c58cf4d617999918e4af47e62bd075934ddcf21e0a13e4e1fac58f", 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r3 = perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8010, r3, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={r4, r5, r6}, 0xc) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00'}) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000140)={0x18, 0x0, {0x3, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) connect$tipc(r2, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x2}}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8937, &(0x7f0000000080)={'bond0\x00', r9}) 10:02:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4000, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000000c0)) 10:02:50 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) sendto(r2, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) 10:02:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0x10000}, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x14) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x115001, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x4e95) write$binfmt_misc(r1, &(0x7f0000000280)={'syz1', "b4ef8f0107d43d89d69505097dcf64"}, 0x13) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x3}, 0x1c) listen(r1, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r3 = socket$inet6(0xa, 0x5, 0x0) fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f00000002c0)=""/207, 0x1014000, 0x800, 0x6}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x6) 10:02:50 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, 0x0, 0x0) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:02:50 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a45322, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000080)={0x6, 0x3}) sendmsg$nl_generic(r1, &(0x7f000001dfc8)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000100029080000000000000001030000006e0013a9b8c800f6fb0200000000d48eaec06e61b29627000001"], 0x2c}}, 0x0) fgetxattr(r0, 0xffffffffffffffff, &(0x7f0000000200)=""/239, 0xef) [ 232.489493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor1'. 10:02:50 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:02:50 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0xffffffffffffffe5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x4000800) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/mcfilter\x00') ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000440)=ANY=[@ANYBLOB="0700000005000000050000000000000000000000000000008d980000000000003f0000000000000020000000000000000200000000000000000000010000000000000002000000000000000400000000000000050000000000000007000000000000000700000000000000ff030000000000000000000000"]) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) fstat(0xffffffffffffffff, 0x0) r5 = socket$inet(0xa, 0x801, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, 0x0) pipe2(&(0x7f0000000000), 0x4000) fchmod(r5, 0x20) accept4(r5, 0x0, &(0x7f0000000040), 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video35\x00', 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) [ 232.557055] netlink: 24 bytes leftover after parsing attributes in process `syz-executor1'. 10:02:50 executing program 3: ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="570000007d0200000050000300000000004303000000030000000000000000002018020000000002000009000000000000000f006e667300eff16117129ed0598aa8d400010a00707070302177"], 0x4d) prctl$PR_GET_SECCOMP(0x15) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000100)) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @local, 0xf3}, 0x1c) ftruncate(0xffffffffffffffff, 0x208200) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) getpgrp(0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@multicast2, @in=@empty}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000cc0)) getgroups(0x7, &(0x7f0000000e40)=[0x0, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000fc0)) getpgrp(0x0) getegid() ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000001c0)) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200), 0x10) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:02:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) fstat(0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x6, @dev={[], 0x1c}, 'bridge0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x280000, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000100)={0x0, 0x6d}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000080)) 10:02:50 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000d772e57080311c400000fd853e4ecaa62ff4e5ef9380000000c37a84000000000000000009001609a52e7ffc7a4217db7874800000000018694759adbfb2d49eae13558b75fb73c29ec62798ad94f6bb77"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x8000) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x100}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000005c0)=0x3f) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000200)={{0x5, @name="a7a7889162b1b9b40f0efe0a1dbe0e184368af98b8adb572786f4d9d5eb82a6d"}, "4f97926fb6c58cf4d617999918e4af47e62bd075934ddcf21e0a13e4e1fac58f", 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r3 = perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8010, r3, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={r4, r5, r6}, 0xc) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00'}) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000140)={0x18, 0x0, {0x3, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) connect$tipc(r2, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x2}}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8937, &(0x7f0000000080)={'bond0\x00', r9}) 10:02:51 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) sendto(r2, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) 10:02:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000d772e57080311c400000fd853e4ecaa62ff4e5ef9380000000c37a84000000000000000009001609a52e7ffc7a4217db7874800000000018694759adbfb2d49eae13558b75fb73c29ec62798ad94f6bb77"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x8000) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x100}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000005c0)=0x3f) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000200)={{0x5, @name="a7a7889162b1b9b40f0efe0a1dbe0e184368af98b8adb572786f4d9d5eb82a6d"}, "4f97926fb6c58cf4d617999918e4af47e62bd075934ddcf21e0a13e4e1fac58f", 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r3 = perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8010, r3, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={r4, r5, r6}, 0xc) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00'}) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000140)={0x18, 0x0, {0x3, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) connect$tipc(r2, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x2}}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8937, &(0x7f0000000080)={'bond0\x00', r9}) 10:02:51 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:02:51 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) process_vm_readv(0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/157, 0x9d}, {0x0}], 0x2, &(0x7f00000009c0)=[{&(0x7f0000000900)=""/56, 0x38}], 0x1, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000080)=0x80, 0x80800) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1f9d3a526c4af649dc67a8f4dc8fab573e444e50b0030152caef7edd65f9f836b1e64bf26e28455115e309fc48af4f05e3dee420abe64436bf6ad4ff2596a8c21f0814af080a24ccfbe724177e36dc107b1e82b0ada6bee2d0bca0fa3c577fd2ab982fd49a5fd386a14ad68a0638cb079712a3bc46e77c3319d6bea406f6b018728b8d8d9b87b3869c87dad38a4ad0616b27278be6e22d3c8e233a0265cb1c9aaede1c96dd31fc546168e52dc01f7fba002b52dd76e6dcf5b65aff4a041c9aef04d86d71fb8738126739512d503"], 0x58) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x8, 0x0, "1740c1b284ac99c475b83472ea42bc38206b8d61e33cccdc7687eaea3af1457c481e79f3ae5a6e44dd2dd76943f83dd9db9475bf6a5abea74f718dc7260fbd66ad05ffc6ddf15277f8d82aae9dd7eec6"}, 0xd8) socket(0x13, 0x7, 0x551) 10:02:51 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/\xb3\xc1\x17\xe5$1\xb2\x9f\x17ipv4/vs/c', 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\\xec ::\n'], 0x1e6) openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) 10:02:51 executing program 1: r0 = socket(0x20000000000000a, 0x1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080)=0x1, &(0x7f00000000c0)=0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x8}, 0x1c) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x4000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r2, 0x2}}, 0x18) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000e530e9)=""/16, &(0x7f0000000040)=0x10) [ 233.755953] kauditd_printk_skb: 3 callbacks suppressed [ 233.755966] audit: type=1400 audit(1547114571.847:31): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9782 comm="syz-executor5" 10:02:51 executing program 5: r0 = memfd_create(&(0x7f0000000380)='\xf8 \xf4.\xcc\xd1h\xb9\x16\x00\xae\xe9\x12\xcaFw\x84\x91\x89lbiyY\xdbw\xb3\x95t\x1c\xd2\x13\xfc5*+\xb1\xea\x06yo\t\xa7\x10\x1fH\xdf\x96\x9d\xa3\xa3\xc5\x1b/W\xd8\xca\xb7V\x0f\xe1\xcb-}\x06J\xaf\xedR\xd7\xb3\v\x1f\xe6\xc7-\t\xf7\x06\xe7\'\" \x7f\xa8\'0\xa0\'\xfaG\x82\x1b\xf5\xf8\x05\x03\v+\xca^\xe2\xd8K\xe2w\x01z\x15\"$D\xe6\x98\xe5\xd7\a.\xd7\xa4', 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x100) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8001, 0x0) dup2(r1, r0) write$sndseq(r0, &(0x7f0000000280)=[{0x83, 0x4, 0x0, 0x0, @time={0x77359400}, {}, {}, @raw8={"22fc734d0ec48a728269d8d0"}}], 0x30) 10:02:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x4049, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x2, 0x4fb) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x3, 0x2) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) 10:02:52 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000480)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000580)='\x00\xe6\x81\xc9\xc11\xa1\xdd\xf9\xfc\x1f\xc9\x9e`\x99\xe0\v\xbb\tN4\xcfC\x94\xc0\x95\xe9\x05e\xf4\a\xb2\xbe\x9a\xe6?\xfe[\xc0\xba\xad\'`c\xf0\xc3kXP\xbb\xbaf\x8aI\xb6\xe0\xa8\v.=\xc9>\xcdZ{\x91\x87fh\xe0\x9f\x97z\xc9\xfd\xc2\xb2\x19\xfcyG\xab0\xe3\f\xd9\xd4\xdb\x9b{R\xe8\xcb\xc2\xce\xbc\xb6\x13t\xe5\xfe\xe0p\x05\"d\xc1h\xb8\xb5\x9d\xd2\x12IC\xd4\xbcR\x9deS>1\xdf\xc5\x9c&\xaeC\xa6\x02\xe1\xb0\xb7m\xfd\xe9A\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f*Cl\xe6\xd7{\x13\xd2?\xb2\x97D\xdcy^\xe5;k.\fu\xa3\xe5\xa8\x16\x8b\xd9\xe8\xdf\xf0t\nD\x98U\xa7\xd1>\xfd\\&F\xf7Y\xf0:\x1e\x04\'-\xba\xd0\xa9\x03se\xff\xf0\xac\x82\x8c\x8d\xc8h\xc8\xe2\xb9\xea\xd5\x17+\x01\x94\x97\xa4\xae\x01\xbb\x8c\a}v\xd6~\xd3\xfb\xe7\xd46\x1e\xbci]\x8fC\x113Q\x98q\xff\xd9:\xe0\x18\xa2B\x85\x13\xe1\x8a\xac<2\x1c\xc6\x18+\x13l(U\xfa\xb7\x03\xef\xd7\x1e\x86(%h\x85\xf2y\xb9\x8c\b\xfe Qt\x7f\xbe\xa2\xd6\xdb\xbdI\xe0\x949\xd0\x86\x9bZ\xe3\xe5\xa0\xd6\xc8\xc5pj0(\xa6\x96\xf2\xdc\xacX', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1081806) r2 = dup(r1) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0xf1, @local, 0x4e24, 0x3, 'lblcr\x00', 0x18, 0x69451862, 0x17}, 0x2c) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) read(r0, &(0x7f00000004c0)=""/78, 0x4e) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x7ff, 0x81}, &(0x7f00000001c0)=0x8) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000001a00)=""/151) sendmsg$tipc(r3, &(0x7f0000000440)={&(0x7f0000000240)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x2}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="4a09f4db9d00c303bb1c99d0de7f7f19608f6b825675f87e5240957eb9144e7fb48e289ea6c8cd3efae98f394fc65b6f34e26cb771a9e7d261865ef508b766e2753d4b2615f60eb0a393a657f04cd626dc75a37e14d1d09d4bf761f093aa3e4a9422b11d16a1782c80fdc501", 0x6c}, {&(0x7f0000000700)="0d9c194c2908b04ad90aefb21501dc9b822145c96aa8eea93856407dbfc77a1e4f7a4ab2f7abdb69257f5a0b244c10cffb1c6dbc37ea7053e482ac594a488ea3e0ccaa7e9df8d828485f28a0e073f140adab3e377f30bb6334459d76ea310c18ac606308ccc3e51a707022e862e88a68ba018c2d4e8d7c220b5fd5c256dc62adb7be191c9c6257151be7a66e8d517c5f3af9d475a466c7ac7a10f58dc90fe957912279003f9e97966e9393e0e8131453e2394f21ec3fe432e2526b01e4e1a20a8ac90e1d52bf2ed1f6cccdb0c340e8f50e304cc891e82448ff100df7972e5028d2af438d46f4c80a04b67b769d32d10809977d5e45215861f94e26b73893ff73ce8e4a2e25682620352cb3531369c0450f628a0e73c4c89d92d758a573ef62b1b643f830483347a6a19421a4f63db362542533266ccbf02e30d05126bc9bd4c2d954c5407f723f73f4d4a8232b317995de5da1d12735bb742866e2070f4c0d4c0efd4e3419bdc609b807bd99239029c0f83116fa133544854a96138161d1c33842e8e13d77c9e579246c58cca6746b2dc0c45d5505b481b07010c0312d0ec232582607c3ad1a074b0df2adbfd1a66e882c712dd7f5e6dfbdc1b722c817cdf5bba708dde11051bfba9995f458d490928ce51d8fdb6f5e5e46130fb1563c95a95d440cefbbe9484d5b835c0afeb383dabd73dca41f2a46b7ccc621504b551db1ea699902ffb5bb19d6b43ae4a5704ce27e275cb6e9d5ed36651b1ebbeda3dac4307af1cf417f1cac9afe19354dad2a554426f38f1f453f41f749353b78944313da3fc9c8b13b3e9b8e79283242ba66da1f57fb05e25621ea6cf3f299aa0497e58632f7a9cbd9d880957e1719f809ece78f6e54c7b9dc0766fe5ff9857d619daf783a43e30ea5ef9f6a04a4a137ce72a0bf54b0a51928e81dcafcd1c5a21434174cfa6b42fa4dddddca0f99b1a0a41e4f70de975e86f3687d3c90ab6897f0ddbe1be89079f99bda00502ee4a084b0a236b0bd33352c6f8d74ca1a6f574a35363e4a4afe3a2b3ec673792eba7e3fa7b9f4e45618819422b1f4c86b78e9d40e9cdb6bdfecdce3bec2dd255f5902395e6a709324b9baef3e9aedfc28203bc88613566c47367a09a903be2c32e9cf7e2d8bcfd360c6b9602aa365acab0c10cc7cfe5327f46980d5130e4946aec4abd9aa654c1d72bc280ed293a095dd9fdf6ad6b9d9a8aea22a2b4b7d422099a745ac14c5dcf4e8bd061c90a275136cd7bc8ce76b9d9ed367840fed23ad0893809d7cba1500039d6d6a50d9961dcf3b56ca5dd3a33479131af0258b685c119ea4f4f1d48ecaf6a99b3d6a3009520530f2a1c0edb26a5e6e2ccb7743b97135434e448b27199eb74dff8a8c2fe0604ae64266015674da78989e70adf654079836723cfdbea164ff0ea8543fe0bf76e389eeebab4e6aeb4d0b5ddc2eae29fc01ba1837bb7b7d2507dd0dc4d2ca9d7f9fdd822119065325179c029bcb40fe5487911d780f5919a03c8ad712e967074ad23ce43f0b13d7e814df5081a3a977fee809b60bc44f56bbc6049889ab1ccbda0f67fe1000f65c50b6b675bcddc9ec6955cfc14450b7b8370105658bff1881e25d3e5494e886d8f556e5b8ff85393d3d742ca1256ab73dafc3916286c94f2e1bf73dcef932c0cef03fcd661fa58f752496f86d9884c3adc38c7419fd474676d54f03374ef988b914fdee53671743b09ed11d4aebaaacd541d9b235e5a87faab8d12fc9cba528d691d8fa310e2f7bce4a65ef87793573f6332f293eb79996131e036afc155132d6ed5e6a51a2a21cbd89867d3a8e90c99ddacae469e4cf972b658dad23b0279939990d9756075faccaedae837d06d2bb3c04e24ad22f0a58b4c96ef7e967ae469763ea3bc40250afdb80788cba23e7c508bb3f2d60e5a3549d406a61f28a19602bc29bb2e07c476df9f13a6969376e6a67f0756f7064fa77b7e892750b89cb640e257f387f6e3502d7ae15470dd2c17456ac561d9e1929289fe9e8803c6da2680a65a42d12389ad89875cabbe9a7a4970ceb62fcf574f2382f0b0135d8d86f3e9d55712e9e4448c488966ef649e463be65adfdbaf46ff7b9b8c30aa9dad6d2154a7314403645d2cc2cb24b51cd4686bb29da2e466481e8c5999e85bbbae54dd8a870464919634201f225bda85eede9dffccc97faa8bcd2ab6ec3ba781efb7b4234fb49f6b0e128890961a9dbf1aed84137f1e60d22e3363f0d15d4f0e97e5d4696b59d81bb7f255f604d00e133e62650aa9671929003e20f26bf0a6678667251b155c79d098f93cd509ffb8299ae069785339fa876b346e5ed99cebc8a833ec2907f8c780a3ba5f9cc3f7aafee1ae2e4044baf564a69d63c4da9eaf98619e6985d6a8ca69f41c2a12788f29f8c00bdf924d0693cb6be5466b3a8dcc8cce99e00e8c2a2d7b8d23ddfa284dbc37a289027759f5bd6ba9e5cc9a6e6d4c28b326b3bb3bc92b5b979a935f72cefacce458e10c40d0577c6009401e723f0194aff0654ab68a7946509105eea2f97f2543fa8fb9c34e55f4660aab9d64229f4f75875a2f3f9bbea61bfff83493fe10463c8a850840dad7edc5860d341da9073a797d7afd210eb171b515f058972055b6a1ef25379c5dfdb385416387e63b7fcf68419fc3e0801c335321fa098ac3c45f5082f102c7b3a3082d826bf33dd4c1e33c148403093caf6afd66011d39b1c4cc35d3f7bc773c95ea7159459c23b3663179c617a47ef8673589a19b1bdc536a51d6edfee549d97ec8c42955fe191e9e52aa561e8bbbf834ab8fe2b4e57ed1146003a5405f05d32133cb349f4c735fae64c468d9e4cf4d7da45efa13477bb2de2954ca7c1e809d931cee3a2481ee0ad2c1a71ad9875693b17af61d82d77b1dfd9c1ee9612400e659c0958424069ec656fcbc37d46510d6384a48e25334f443973d95a16da4ff1b4af5a5979b84654e8bbdb36ddf2c4994de4c4af248d858c2b5db92e520089015650980317f8a40e2ebf40b7f79ac4c00ef93f7b55085e3b0b16e9e06415c9d502a97f08dd8e6352255a40714b630c7572eb12aa622f20dcb93dcc0b027f3116a1ecd9e6156d27a78c06cb20a3d53164f485decc74f4a7c21c6a4a3ded0b10b98216763ba93f70c82cae0b8fbf90441b3aa17c1f10e6fedc138394303de71b5b67fafdffe418e726a99cca3ffde5847dd53d4fe1ac163342e5e8002f2b91e9fb4b22431b2ceede62b5b4fc7be5042c74b078739084c9d1117f392dd76ad269dfa5f2d504c78bd6537aacc35fef7ed5e3e51d6f4637e5c544afe0985bebf3e5ace41e220058cb1a2406c4a54496ca97e2a66e29038e70e43601b7006947a2ffc91014e459b10cb176a6765dbf82fe693196bc59a96202273c0183fee9b393cfa920555aea342c4b8730026f5e82580f85bf64687e8b27ce45578922e8c2cf70b9f44e43727ea309b15061d5a4bad5901c2dbc3e39ec9ee02c03f625bd741d9b10402dd9f505f2585fbe13ef633a2b14117cb74896db42ecad0d22b73ba0ec0b7f4cbd7aa2df43c44afa4744dc706d7ae65117d05d10b7b404726df909bac4594edb7c52e43a6f516aa6fc8462a972816f6ea3bc5dcdeab41408d222db6a39a1c4613cbb09ef655abbf7a9df8ec02591ed295ef001531f79e89a7be71865dfdc07f721d1b83bff1abf2afc2625f937e7bd86290dc335cf8747079c104d067ed370147551cb4cad5192631b28ae02bc0b3be0c076bd8628be914f6765f3d2c30ccfcd9f149ceacbee8dabcc467c2f04a1332dc4e37f1e847084fa095c8539d249c43419bee136d27cb70032c0ffda8669be9eb8fe68ff042f350f098f28a544d7e66cc6c0563191ad0eeb43ae1c5838deaa0980a82ffd632e6376a8f35379040017bafbc026243f9411074d93029eac627d6a5e68dcd2ff207d88c752475ca1841bd32bfde6ca375e400a3e8d9ddfec294dd3ba49c7d9e2316dd4f03a726dba2c0386e5df669c3eb2e1c31462e26baf54dc65dd5ccbefee426e3e8bda1c76db80f8e8265dd41a3b45238564bae4fdea5db14546027dcf6f42ffa82b2c51b7e23332dfca453ab113323cfc0317f65133f283e98705d5951dbed0cc90f293806c9bb12db6c53d495d7c383d12c75472a7a7f2ed3ce64c81b0109d6d4327316f15b0865150c53b4a38a87748a04ef250d0b5ef325e1d4c521b097d6e019c07a2da4f7ad38311af74b07ad5ac6cc812260f756ea3c66f225859cdae91ea2d61b028e1feff646add5b49eb5e66e50775ab8889c07b237a4b4ef284ec9b2a3656d20f6656ccaed0e67fdcb170df5e6c0c1cecbeb1d81264e984ab63623730fb02bb7bfd697badaf4eba3141f081c354749d82cba8bbcf7bbaa889ebbf037b4f02ce772ea199df803b0eb4393cb582684a8af0c2d20fb9846e8cce3fb8907f6e75a95638382e972a3dec20d9e8fc2c8dd6c43952a1d69c28132566273a0f1edf822ff3f754c0a591f53bf0d9b57aab1fb3b8125ac50f1eb8185cc24616b4242a2d344eaf9e13bef5214c9c703a9a9369216957d337b05f13fa0bd280b01359ed55712341c96484296af9a3ae6c9897b09fc4ad16303b494098d83241c93d11609bd533de430eb8635aee46e7787ad8665d66525b0fc2e2e38962cccde568c36b4048f44cbdd93a05b01ecaa9851e5b2a11dc3cce040fca16d0eaae12c1796e861150f4d32a789968967b31ba4fa6e64c543a992507ea24ddadb2e895b8987416cd789d9985a47bf69ffa3c9bf30d977eeeae31f499ff01bb523b2f32c10308cac4eb0f0c96fd0d9f4fa6eb0f4af61e1c4e62d3a40cf3775f03201e8eadd8369efb90f03cd987b502c451d747eb4e72014a3184d05c321d7081e47d5f174155c8958e390a42ec6df2d253a2e5cb7b6e0927179100f4e4163cc4908e9c1866c6e520049c8ab302f599c50d3e0f7db32b4f3f8864a72b516a59bf88b8747afd8b2a310c5f5e43e7008789f6546b7edb0566d3427c25cb80f404e40afee454bca20ad57316d8ac5f881e2ec20b441586b7b6bb11fde47f1bf78658cc28481887bb63ccec2cb6a287217a8b816484be2d4280ad20c56276f1e7bcc0f048e04c3ad347fd7c1c97246b540239f69d47fc9da0eac256025e15a91ec744927f29361d44ed51fe1488c047d0e83a2fed9f11207014e6b1a9c0e4a862f723fa0a4d477af220d7c95f3d20baa2c61934620f0f712dab3c7e5b99f8a80270aa4e3d974b669e75d0c160256a3bb2587f351db9149aa99f5386510c1afb70dc7fa1935b764aeae4b37e4fca2f8c0f5429e56a769845f39ca959573d604f2a09be2b35781f9c93ae7e337fb868d0e26095af616eef261d3ee34366256e619f19e44c3c6b1fa306329b21f21a398a751550807b397fe825c3732d464e880b73822a0043bb586f730c27df53c74803456180fb7a94e0b0375a277a025cf1ecc8ba52bdc32dc2cf8edd55e1ff08702e5442aa07d7c15b24a030ad4fd72b5a074ede6406c483b0bf09e032b6a3c0374faecfe60e3c0547924856c98dcd19978b5ea0d2e941ae197fa68165db85d4387e11f97255b459f32dc7475a70ef66274497507802ca1aa88487fa24da18e13e749fa26be7e931a5e2e58c2401b6f9246cf60594ae67debd1d646e8b6293e70a289bbf826ab0dd529466394686235cbea6eb12744773174fcfe4ef2d9a9630c51651ef5b967220c7919ddee00303dcea85416344120e78af44eeb3cd1d4ea911dc54716c873207e78eac2e492d22e6ff4f", 0x1000}, {&(0x7f0000000380)="de1c939f45cd46c70fb7f9507ea538906910c06f84beb3958c867f18b35d04e93970f4926cdb686787d94543f17352b0a6294209c7366120d206cb896433394da8ec2c7efd2f76a3c427848be2267da06f4ada096776c4f2309a22dc2fd6069b0e57548c03f51442f5436fa0b905e921366effdc5bff54a22b3dfbc6203ad1e9bb350193c774c4c3770813d17c46d146154ac6b7486e495026382d8a5c3ce334eb10204fe9cf", 0xa6}], 0x3, &(0x7f0000001700)="7741f4543135814e78fe2d314b20352378906c1fbfba8cb8f75744b43e03a6c34316606d0547d65783887c7b206d89338fd9c787fc3d982dbd8766066da040286d189ddec19961cc231259e4423a1e2a68a581b9d312ffe2a851d1735fac99f751730ea4f0201055b5d893e276a01e4d18497b876363c5e22f5c02323de61544ee4ffa13f3b44aa760", 0x89, 0x4000}, 0x4000800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='\x00d\x00\xec\xff\x03E') getdents64(r5, &(0x7f0000000080)=""/82, 0x34e) getdents64(r5, &(0x7f0000000df0)=""/528, 0x7f355eb8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r4, 0x1, 0x10}, 0xc) r6 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f00000017c0)={'syz', 0x1}, &(0x7f0000001800)="2aa2497d739ea446f7e3262190570215a33704c35e1d8f4552355b697358a7e56430cf6a395535a134ae2a1a63e4d9c17d902534f722149ba3621a205aaad70b98fa86c129a100f3e6707d392c22f270f058b2973f99c3585221029f95261a763067f8a5af9626a5095cf6a16592146ee6ab241f8c0faff20ceb87aeb1e50812f0ff0710769ffa856a7203786af3e327cad2a06df32a6f563a4dd90ea3727000408a4076c86fa4cd06349040413b3ec3dd343cb80bb9e6d0f6b5f85f2118379328a485bd821011374f122f9b6be2fad6e6a9c0fae01240e9f12f74915e5705c2c357a5", 0xe3, 0xfffffffffffffff8) keyctl$update(0x2, r6, &(0x7f0000001ac0)="d0f3f9d7913d44fea5f9ec8f1c392166d75c81b1e1ea89b25be4632d3537f5ba8ea499260730092a2ac50f9684267a90730935a4df2cc5a4688b9627cfbb23fed0276ef806cb5a283c6dbd135d54b08dc5edfb8e55ab9be73b202e44419dfb1922e5a261fc861bd19a16c29f543fc73149c57d5ca8ab828f07c7f3da0789b75d88760cc3f7fa51c263a1d07d30734f4d4a6f7a7299e44f86b705de67ce80f8fb52b3f5ce405b9edef44719bb70a37e63f9cd7c422d40d8f4be79b70072c1e8a5c84596a1b0fffbc8f6bb3579f1f70e60a9130d166564680000000000000000", 0xffffffffffffff0c) r7 = getpid() ptrace$setopts(0x4200, r7, 0x9, 0x1d) sendfile(r1, r0, &(0x7f0000000000)=0x4d03, 0x29) 10:02:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) sendto(r1, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) 10:02:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000d772e57080311c400000fd853e4ecaa62ff4e5ef9380000000c37a84000000000000000009001609a52e7ffc7a4217db7874800000000018694759adbfb2d49eae13558b75fb73c29ec62798ad94f6bb77"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x8000) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0x100}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f00000005c0)=0x3f) ioctl$VIDIOC_DBG_G_CHIP_INFO(r2, 0xc0c85666, &(0x7f0000000200)={{0x5, @name="a7a7889162b1b9b40f0efe0a1dbe0e184368af98b8adb572786f4d9d5eb82a6d"}, "4f97926fb6c58cf4d617999918e4af47e62bd075934ddcf21e0a13e4e1fac58f", 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) r3 = perf_event_open(&(0x7f00000006c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x8040, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3, 0x33093e40}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x8010, r3, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={r4, r5, r6}, 0xc) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f00000004c0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00'}) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000140)={0x18, 0x0, {0x3, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) connect$tipc(r2, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x2}}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8937, &(0x7f0000000080)={'bond0\x00', r9}) 10:02:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0xfffffffffffffc00, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4) syz_emit_ethernet(0x32, &(0x7f0000000cc0)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x200000000000011, 0x0, @rand_addr, @multicast1}, @dccp={{0x0, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x9, 0x3, 0x1ff, 'queue0\x00', 0x7}) 10:02:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) sendto(r1, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) 10:02:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x3, 0x0, [0xc0000101, 0x0, 0x400000b0], [0x0, 0xd004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff]}) r3 = dup3(r1, r1, 0x80000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x0, 0x8, 0x6942, 0x8, 0x40}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000280)={r4, 0x9}, 0x8) r5 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xfffffffffffffffc, 0x4100) ioctl$PPPIOCSCOMPRESS(r5, 0x400c744d) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000140)) alarm(0x0) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x2) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f00000002c0)={0x4, 0x1, 0x5}) ioctl$KVM_S390_VCPU_FAULT(r5, 0x4004ae52, &(0x7f00000000c0)=0xcb) 10:02:52 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 10:02:52 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x46939b90, 0x200000) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 10:02:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) sendto(r1, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) 10:02:52 executing program 1: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ac0)={{{@in6=@ipv4={[], [], @broadcast}, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000001bc0)=0xe8) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = gettid() getgroups(0xee, &(0x7f0000002240)=[0xee00, r1, r1, 0xee00, 0xffffffffffffffff]) stat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)) getpgrp(r2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000024c0), &(0x7f0000002500)=0xc) lstat(&(0x7f0000002540)='./file0/file0\x00', &(0x7f0000002580)) getpgrp(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002a00)={{{@in6=@mcast2, @in6=@remote}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000002b00)=0xe8) getresgid(&(0x7f0000002b40), &(0x7f0000002b80), 0x0) getpgrp(r2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002c00)={{{@in6=@local}}, {{@in=@multicast2}}}, &(0x7f0000002d00)=0xe8) getresgid(&(0x7f0000002d40), &(0x7f0000002d80), 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000002f40)) getegid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x440c0) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) umount2(0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0xfffffffffffffe97) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000540)={0x3, 0x0, 0x6, 'queue1\x00', 0x6}) r4 = dup(r0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440)='tls\x00', 0xfffffffffffffed8) write$P9_RCLUNK(r4, &(0x7f0000000040)={0xfffffffffffffee5, 0x79, 0x3f000000}, 0xffffffffffffffc4) mmap(&(0x7f0000011000/0x6000)=nil, 0x6000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="62fe64a6d43cf52b3de7591f4ec902b6a5ca2a395bb8394632a6aa7a1d68f1f7baf7342dc305ee444353f08ebd737a792929992b72ec81453f9b0e2fdfa2cf982c4e39b04667876495302dd0a46e70bbf2a39d28eb655d06228c7044bee85d79c2e1ded34f6b040a0923c9c3e44092b5c36368a95a693769f28b30eb58f85ce4ec81fa1aa0ab1888eab4c0000000000000000000000000"], 0x1) 10:02:52 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000300)=0x3) 10:02:52 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) sendto(r1, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) 10:02:52 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) readv(r1, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/54, 0x36}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x1) ioctl$TIOCSBRK(r2, 0x5427) r3 = syz_open_pts(r1, 0x4) r4 = dup3(r1, r1, 0x200000001401) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x2, 0x4, 0xc54c, 0x7}) write(r1, &(0x7f0000c34fff), 0xffffff0b) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) tkill(r0, 0x1000000000016) 10:02:52 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) sendto(r1, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) 10:02:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0xca5ea84}) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[@ANYRES64], 0xffffff8a) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)) 10:02:53 executing program 2: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x10005, 0x0) sendto(r1, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) 10:02:53 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:53 executing program 1: r0 = socket(0x200000000000011, 0x803, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8), 0x71, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x1015, 0x0, 0x5, "1b5779c86dd4d5347b2754649d077f2b", "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"}, 0x1015, 0x3) 10:02:53 executing program 4 (fault-call:3 fault-nth:0): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:02:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) close(r0) 10:02:53 executing program 5: syz_emit_ethernet(0xfffffffffffffcd9, &(0x7f0000001200)={@dev={[], 0x12}, @broadcast, [{[], {0x8100, 0x9, 0x101, 0x1}}], {@llc_tr={0x11, {@llc={0xe2, 0x6, "97", "c2f712a2c94a979372a1467efa7c6b86000f9e8da668017d9e8890792c49c87bd1090fd52eceaa082a040af19ebc37d6f467020cdff5af43e5d5f0e2e38ad9aaaa6a5e19e5659f4ca982deeb3650dfc45527d814c00bab3db5e60a25a96d7f6ba3527863f317725e01"}}}}}, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x47d, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000100)={{0x24f31624, 0x3fd}, 0x1, 0x8001, 0x2, {0xad35, 0x27}, 0x0, 0x6}) chroot(&(0x7f0000000040)='./file0\x00') ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/4096) 10:02:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x4010, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x4e20, @local}}}, &(0x7f00000002c0)=0x84) init_module(&(0x7f0000000380)='{\x00', 0x2, &(0x7f00000003c0)='-\x00') setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x3, 0x0, @dev}}}, 0x84) getsockopt$inet6_buf(r1, 0x29, 0xce, &(0x7f0000000300)=""/57, &(0x7f0000000340)=0x39) 10:02:53 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x3e8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)="34e30acd5e6981197fb871bfda3e12132ef163bd237f0ac772455f403994dfb5a33656c1909dbad3b48cea809963ff9265c85eb577701b67c1f6c3cf14fc6b334248f7fbf8ea0643", 0x48}]) [ 235.685863] FAULT_INJECTION: forcing a failure. [ 235.685863] name failslab, interval 1, probability 0, space 0, times 1 [ 235.761326] CPU: 1 PID: 9895 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #17 [ 235.768462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 235.777955] Call Trace: [ 235.780647] dump_stack+0x1db/0x2d0 [ 235.784290] ? dump_stack_print_info.cold+0x20/0x20 [ 235.789351] ? proc_fail_nth_write+0xa0/0x220 [ 235.793944] should_fail.cold+0xa/0x15 [ 235.797848] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 235.803010] ? ___might_sleep+0x1e7/0x310 [ 235.807172] ? arch_local_save_flags+0x50/0x50 [ 235.811807] __should_failslab+0x121/0x190 [ 235.816091] should_failslab+0x9/0x14 [ 235.819932] __kmalloc_track_caller+0x2d8/0x740 [ 235.824628] ? strncpy_from_user+0x4e0/0x4e0 [ 235.829073] ? strndup_user+0x77/0xd0 [ 235.832893] memdup_user+0x26/0xb0 [ 235.836465] strndup_user+0x77/0xd0 [ 235.840125] copy_mount_string+0x2a/0x40 [ 235.844232] __ia32_compat_sys_mount+0xcf/0x790 [ 235.848949] do_fast_syscall_32+0x333/0xf98 [ 235.853287] ? do_int80_syscall_32+0x880/0x880 10:02:53 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000240)) unshare(0x400) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x4) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="6f1bcfafa52390c48be9246fafd14d0a11430066b9e2aa8d9d20bc8608f3b89cd73f165584f51aeeb1730d553201319f69189e8d636997457aaac1054437d52b749c0aa7e6b610aec15efb698281f7675b3970d97f363141b1"], 0x0, 0x0, 0x3) write$binfmt_script(r0, 0x0, 0x0) r1 = getpid() r2 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v1={0x1000000, [{0xffc, 0xfffffffffffffff8}]}, 0xc, 0x2) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xffffffffffffffff) ioctl$BLKTRACESETUP(r2, 0xc0401273, &(0x7f0000000100)={[0x40000000, 0x40000000], 0x0, 0x81, 0xb, 0x3, 0x0, r1}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) [ 235.857945] ? trace_hardirqs_off+0x310/0x310 [ 235.862451] ? syscall_return_slowpath+0x3b0/0x5f0 [ 235.862486] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 235.862502] ? __switch_to_asm+0x34/0x70 [ 235.862520] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 235.862539] entry_SYSENTER_compat+0x70/0x7f [ 235.862551] RIP: 0023:0xf7f47869 [ 235.862564] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 10:02:54 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000400)="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", 0xfc) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 10:02:54 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r1 = memfd_create(&(0x7f00000001c0)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x20, 0x0, 0x3f, 0x100, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x5, 0x6, 0x287, 0xfff, 0x80, 0x401, 0x871a, 0x3, 0x5, 0x0, 0x4, 0x6, 0x2, 0x2, 0xfff, 0x200, 0x80000001, 0x2, 0xfffffffffffffffd, 0x7575, 0x100, 0x40, 0x761c946e, 0x3b09, 0x3, 0x0, 0x7, 0x1, @perf_config_ext={0x9, 0x2}, 0xa02, 0x2, 0x1, 0x3, 0x1, 0x5, 0x800}, 0x0, 0x6, r1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x6, 0x420200) setxattr$security_smack_entry(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='security.SMACK64MMAP\x00', &(0x7f0000000380)='securitywlan0^nodev$%+.\x00', 0x18, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @initdev}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000540)={0x0, 0x10007, 0x0, 0x2, 0x4}, &(0x7f0000000500)=0x18) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000005c0)=r3, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000780)='cpuset.mems\x00\x16\x98\xc2)\xf6\xbe\x9cq\x19(_\x90\x01B_0U%D\xfd\x127\\\r\x98\x18\x1d\x10=S\xa5WG*\xa8\xd9\xd5,\xe5\x93\xebk|@q\x04\xa3k<\\2\xf4\xa5\xeb\xcd5\xf8\x8f\x9f\xdc\x19\xb0h\xabl\xa5\r\xab\xe7\xca\x05V\xb4\x92\x15\x95\x14\xf1\xdb\xcc\xd6\x10\x87zL\x03\xfb_\x84\x8c\xf9\x06ssy32!\a\x8f\xbbJ\xf7\r-\xe8\x9d\xef\xca\xc3\xeb+\xc9\xc0\'\x9f\xfatEr', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x7e00, 0x2000005) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) ioctl$LOOP_CLR_FD(r0, 0x4c01) getsockopt$inet6_buf(r1, 0x29, 0x4d661ef64e5d9cf0, &(0x7f0000000680)=""/141, &(0x7f0000000300)=0x8d) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000480)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}, @loopback, @remote, 0x1000, 0x0, 0x5, 0x400, 0x9, 0x2}) [ 235.862571] RSP: 002b:00000000f5f220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 235.862608] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000040 [ 235.862616] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.862622] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.862629] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 235.862636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 10:02:54 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:54 executing program 1: set_mempolicy(0x8004, &(0x7f0000000140), 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) 10:02:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) r3 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r4, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xfb, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0) listen(r0, 0xbf0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000700)='westwood\x00', 0x9) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000580)={{{@in=@multicast1, @in6=@mcast2}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000680)=0xe8) r5 = socket$inet6(0xa, 0x6, 0x0) removexattr(0x0, &(0x7f0000000440)=@known='trusted.overlay.redirect\x00') connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x80000001, 0x7, 0x9, 0x9e, 0x9, 0x0, 0x1ff, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x1e, 0x4, 0x8, 0x81, 0x1}}, &(0x7f0000000100)=0xb0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000480)) r6 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000140)) socketpair(0x1, 0x0, 0x81, &(0x7f00000004c0)) sendmmsg(r6, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0xb}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r7 = dup2(r5, r2) write$cgroup_pid(r7, &(0x7f0000000380), 0x12) 10:02:54 executing program 1: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x2081f8) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000057c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005800)=0x14, 0x0) madvise(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2) [ 236.237146] print_req_error: I/O error, dev loop0, sector 192 flags 80700 [ 236.336857] print_req_error: I/O error, dev loop0, sector 0 flags 801 [ 236.344039] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 236.351929] print_req_error: I/O error, dev loop0, sector 8 flags 801 [ 236.358683] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 236.366488] print_req_error: I/O error, dev loop0, sector 16 flags 801 [ 236.373176] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 236.381013] print_req_error: I/O error, dev loop0, sector 24 flags 801 [ 236.387757] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 236.395556] print_req_error: I/O error, dev loop0, sector 32 flags 801 [ 236.402257] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 236.410033] print_req_error: I/O error, dev loop0, sector 40 flags 801 [ 236.416810] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 236.424622] print_req_error: I/O error, dev loop0, sector 48 flags 801 10:02:54 executing program 4 (fault-call:3 fault-nth:1): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:02:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000002c0)={{0x0, 0xffffffffffff0401}, {0xf}, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000015) 10:02:54 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)=@random={'security.', '(-\x00'}, &(0x7f0000000b40)='wlan0md5sumeth1keyring(*md5sumvmnet0-.[ppp0em1/[vboxnet0posix_acl_access', 0x48, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'security.', 'system.advise\x00'}, &(0x7f00000000c0)='vboxnet0em0\x00', 0xc, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000480)={r1, 0x1cf, &(0x7f0000000440)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000380)=0x372) write$cgroup_int(r0, &(0x7f0000000240), 0x12) [ 236.431309] Buffer I/O error on dev loop0, logical block 6, lost async page write [ 236.439123] print_req_error: I/O error, dev loop0, sector 56 flags 801 [ 236.445868] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 236.453736] print_req_error: I/O error, dev loop0, sector 64 flags 801 [ 236.460428] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 236.468212] Buffer I/O error on dev loop0, logical block 9, lost async page write 10:02:54 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x800, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) ioctl$TIOCGSID(r1, 0x5429, 0x0) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) fstat(r1, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, 0xf, &(0x7f0000000100)='/dev/sequencer\x00'}, 0x30) fchown(r0, r4, r3) sendmsg$unix(r1, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={0x18}, @cred={0x18, 0x1, 0x2, 0x0, r2}, @cred={0x18, 0x1, 0x2, r6, r2, r5}], 0x48}, 0x4004000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00000002c0)="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", 0x75c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) keyctl$session_to_parent(0x12) 10:02:54 executing program 1: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75c, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2b, 0x1, 0x0) getrandom(&(0x7f0000000440)=""/246, 0x47b, 0x3) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x1000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200)={r3, 0x8}, 0x8) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0xfffffffffffffe97) setsockopt$inet_mreqsrc(r1, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x6ed, 0x0, 0x3, 0x37, 0x8}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={r4, 0x80}, &(0x7f00000002c0)=0x8) r5 = dup(r1) write$P9_RCLUNK(r5, &(0x7f0000000040)={0xfffffffffffffee5, 0x79, 0x3f0003e8}, 0xffffffffffffffc4) mmap(&(0x7f0000011000/0x6000)=nil, 0x6000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="80"], 0x1) 10:02:54 executing program 3: setrlimit(0x7, &(0x7f0000000000)) setrlimit(0xd, &(0x7f0000000040)={0x8, 0x3ff}) r0 = timerfd_create(0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)={0x3a4, r1, 0x11, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x108, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x100000001, @local, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @remote, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1000, @ipv4={[], [], @broadcast}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @loopback, 0x7fff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @mcast1, 0x24a70700}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipddp0\x00'}}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff3fea}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5738}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe73}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc73c}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd3}]}, @TIPC_NLA_BEARER={0xa8, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ac000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbaa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xef}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x845}, 0x4c804) [ 236.758104] FAULT_INJECTION: forcing a failure. [ 236.758104] name failslab, interval 1, probability 0, space 0, times 0 [ 236.918862] CPU: 1 PID: 9956 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #17 [ 236.926016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.935378] Call Trace: [ 236.937981] dump_stack+0x1db/0x2d0 [ 236.941626] ? dump_stack_print_info.cold+0x20/0x20 [ 236.946723] ? __kernel_text_address+0xd/0x40 [ 236.951281] ? unwind_get_return_address+0x61/0xa0 [ 236.956232] should_fail.cold+0xa/0x15 [ 236.960156] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 236.965275] ? ___might_sleep+0x1e7/0x310 [ 236.969436] ? arch_local_save_flags+0x50/0x50 [ 236.974029] ? __ia32_compat_sys_mount+0xcf/0x790 [ 236.978877] ? do_fast_syscall_32+0x333/0xf98 [ 236.983382] ? entry_SYSENTER_compat+0x70/0x7f [ 236.987982] __should_failslab+0x121/0x190 [ 236.992226] should_failslab+0x9/0x14 [ 236.996052] kmem_cache_alloc+0x2be/0x710 [ 237.000603] ? should_fail+0x1e6/0xd22 [ 237.004589] ? __might_fault+0x12b/0x1e0 [ 237.008716] getname_flags+0xd6/0x5b0 [ 237.012531] user_path_at_empty+0x2f/0x50 [ 237.016694] do_mount+0x162/0x3330 [ 237.020241] ? __check_object_size+0xa3/0x790 [ 237.024754] ? copy_mount_string+0x40/0x40 [ 237.029071] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 237.034667] ? _copy_from_user+0xdd/0x150 [ 237.038827] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 237.044373] ? memdup_user+0x65/0xb0 [ 237.048097] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 237.053674] ? copy_mount_options+0x30e/0x440 [ 237.058183] __ia32_compat_sys_mount+0x664/0x790 [ 237.062955] do_fast_syscall_32+0x333/0xf98 [ 237.067288] ? do_int80_syscall_32+0x880/0x880 [ 237.071876] ? trace_hardirqs_off+0x310/0x310 [ 237.076382] ? syscall_return_slowpath+0x3b0/0x5f0 [ 237.081317] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 237.086861] ? prepare_exit_to_usermode+0x232/0x3b0 [ 237.091889] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 237.096755] entry_SYSENTER_compat+0x70/0x7f [ 237.101163] RIP: 0023:0xf7f47869 [ 237.104536] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 237.123530] RSP: 002b:00000000f5f220cc EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 237.131723] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000040 [ 237.138998] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.146271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.153557] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 237.160835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 10:02:55 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x20010000001, 0x8000}, 0x8) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00004e8000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) sync_file_range(r1, 0x1, 0x7, 0x3) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x8000, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000180)={@remote, @multicast2, 0x0}, &(0x7f00000001c0)=0xc) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000200)=r3) close(r0) 10:02:55 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:02:55 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bdev\x00', 0x0, 0x0) 10:02:55 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mISDNtimer\x00', 0x800, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) r1 = syz_open_dev$usbmon(&(0x7f00000006c0)='/dev/usbmon#\x00', 0x8bc6, 0x400000) ioctl$TCSBRKP(r1, 0x5425, 0xfff) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000700)) r2 = syz_open_dev$dmmidi(&(0x7f0000000600)='/dev/dmmidi#\x00', 0x0, 0x2000) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000640)={0x1, 0x100000001, 0x7}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000680)={0x9, 0x3, 0x10001, 0x7f, 'syz1\x00', 0x7cc}) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="31786ff17e2bab0e07b06d063ddbd0a51ed8cf9406c3947754aaee75afea35726949516b739d59f92609f3bf9f421906e5cf0377150a64d3913e9a8d5722bb0a15a6e5724b16ef35fa2c0f8b32e2902fb0287533", 0x54}, {&(0x7f0000000180)="1197c41f72c36d700ce27287d380cc53217aa529a6074c07924f9be4d6a7afea2ee98d141d0abd89d7f09cca1c31906187df3e557ad04db3407e2c3a6b2a713fd6a610ea2e8f3e3ce3d95ed6ad6be0bd38bcbd64a939409dcb11c6810c0c6f097e80a6c67061db59c533262cfdafb040a3a29ada210d10478abb68ceed407d453291c728ee48e6a1526e0829d8e2b1a8ae2395eed5ec79e504e2b3e34d9070802549aaaf497869f43c5e2735a65f9b403904a4f10ec1", 0xb6}, {&(0x7f0000000000)="c1a1cc21536b4dde6d7b11b625fa0ae9e107a83c95ed4339c2a3b1d44057bd379aa554e2b787425e2ce7792a306d459033", 0x31}, {&(0x7f0000000280)="349f3e078d0bfd3a4ce2a4442c804df264e69c792e6b571658419f1675feb8090caae73caa4f4a7cf83726ec57afb5bb8728e60aba8b4fc0a8cd7025111b1729c5c20cb5de3527feb8a944cfd9251b0395dfa0a45c782bbac2e284e7", 0x5c}, {&(0x7f0000000300)="74440e319bb120957ec307abef005220fbb11ccd9b3b53074a03c69073d1f61ab9fd622ee8f5c6c2bd7b5edf015e70aa59fbca6c89c8880ec48c69afec2f74732e36d8714b1977a6f42b832a83e823c44ccd4485131a48a17d201cc4bc0c244c18cea9093b9474987be9049e867e6a7b8ee14a4f1578aeb0cf3dc830fde956cbf9ac6ed5a87b956d", 0x88}, {&(0x7f00000003c0)="653f1ace63f16906f797a7ef2558e067b15ae3b0c129e0d7baaba976383b3ea33244a863f4608c60974205ad36b17a4d37d5bd9c72cb1e0ff5a3299c7194f228e7bdee4592becda0213ce799c5f9662da99036a91b2859e0210d14ae4aef03c1d455f514922d332a969df378c37f2074b35a76bf97671985149ad06b045d9d5211350f7c8c53f3fb1fc960d19258eb34148d628825a0c7053d474065f90e970b58e00eb5ccc169e79118750ae4cc7a0436cf9e288cdce95d524bc81d02df123fa92d1969df9da075ae185b03a63533676704e2bfd12f2d8b7d41d07ef1dbbebee7d5828d305987d8", 0xe8}, {&(0x7f00000004c0)="5be5f95642c9d1adab682b3f22eef2b053d0bde08452eb66b7440b77f1a0666fa383b607d93ad34743a746a211b41a2c95c411d2c56b930ec7fd529961fc045558bfb0a533df916cdd0953fccd999be6f7bbf8ed977ef8778abdc6376cee631f3b52968ffc11c8c5978128ab10dae3df986d0550246444368a8cd2af9b3f4ef48dd97b5c49510867f671c7cc723124a9f1b20f61c5b9e0dbc3b2fc4db5fe430528815c9f3c698733c78699fdda38ca19aa4e8a8f12206b3d1743adc9ae10f8d29026a1dc073069fb26df9184769d6f4d9d099c76bfd40ff4b92c22bc8901aec4f3", 0xe1}], 0x7) 10:02:55 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$sock_ifreq(r0, 0x8b2b, &(0x7f0000000100)={'veth1_to_bridge\x00', @ifru_map}) write$binfmt_aout(r0, &(0x7f0000000140)={{0x108, 0x4e77, 0x240, 0x84, 0x17d, 0xdd98, 0x20c, 0x1}, "", [[], [], [], [], []]}, 0x520) 10:02:55 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x30800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x20000054) listen(r0, 0x0) 10:02:56 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r0) ioctl$TIOCSSOFTCAR(r0, 0x40096101, 0x0) 10:02:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xaf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\x06\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00', 0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0x5, @empty, 0x38930e8f}, 0x1c) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/mnt\x00') listen(0xffffffffffffffff, 0x0) ioctl$VT_RELDISP(r0, 0x5605) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000440)='vegas\x00', 0x8377c82a1d841f) sendto$inet6(r3, &(0x7f00000002c0)="4873f44d7c94447c17edb8990e3185f4335c27a4bc257b7ec0bc4ab79c9925b4d6f32a640bdb6a2cc3fa3b760d72a502cfe34532720da69a5c28d59c0b18a1c0852749262abd205440075a64ed55ba87a027a0", 0x0, 0x10000000000, 0x0, 0x1c2) creat(&(0x7f0000000180)='./file0\x00', 0x180) write$P9_RMKDIR(r1, &(0x7f0000000200)={0x14, 0x49, 0x0, {0x20, 0x4, 0x1}}, 0x14) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x401104000000016) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) getpid() ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "cf8125ed3eb9f7c30b268e34400228323d01e923e3bebf12494aa3b3e2789c600d264b4f66c60c8284ffde984575a08385bb17a35c5b5937479cbc50b1a048ed", "3051df9bfc3496a0342c70c840a9a82aa30ad83bae087644676e5973752d85651474c8cd0b3f7fd3151c6acdc17a5717080c2f68cbde6a89a2c86421d1afd144", "e5c9f08135e864b53d3683e06cf64966d8d5e8b2f993ed7eaef778797c532df0", [0x4]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ifreq(r4, 0x8b1d, &(0x7f0000000080)={'team0\x00', @ifru_flags}) 10:02:56 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x80000, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x3a, 0x12, 0x0, 0x0) r2 = dup(0xffffffffffffff9c) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x2, 0x3, 0x100000001, 0x6}, {0x5aca, 0x3, 0x8, 0x80}, {0x3, 0x4, 0x9, 0x9}]}, 0x8) statx(r2, &(0x7f0000000000)='./file0\x00', 0x1100, 0x200, &(0x7f0000000040)) [ 238.055774] QAT: Invalid ioctl [ 238.101479] QAT: failed to copy from user cfg_data. [ 238.151960] QAT: Invalid ioctl 10:02:56 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:56 executing program 5: sendmmsg(0xffffffffffffffff, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="61b959025ea7ddac7f35044f73485bed4c094aded6df437043afeecb92f6dd9a9fb42b4777", 0x25}], 0x1}}], 0x1, 0x0) r0 = memfd_create(&(0x7f00000004c0)='dev ', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000040), 0x0, r0}, 0x68) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x10001, 0x10040) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r2) 10:02:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x0, 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x30e) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='veth0_to_bge\x00') socket(0x0, 0x20000000000003, 0x0) 10:02:56 executing program 0: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000080)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001ac0)={{{@in6=@ipv4={[], [], @broadcast}, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000001bc0)=0xe8) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002100)={{{@in6=@mcast2, @in6=@mcast1}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000002200)=0xe8) getgroups(0xee, &(0x7f0000002240)=[0xee00, r1, r1, 0xee00, 0xffffffffffffffff]) stat(0x0, &(0x7f0000002440)) getpgrp(r2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000024c0), &(0x7f0000002500)=0xc) lstat(&(0x7f0000002540)='./file0/file0\x00', &(0x7f0000002580)) getresgid(&(0x7f0000002b40), &(0x7f0000002b80), 0x0) getpgrp(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002c00)={{{@in6=@local}}, {{@in=@multicast2}}}, &(0x7f0000002d00)=0xe8) getresgid(&(0x7f0000002d40), &(0x7f0000002d80), &(0x7f0000002dc0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000002f40)) getegid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x440c0) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0xfffffffffffffe97) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000180)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000540)={0x3, 0x0, 0x6, 'queue1\x00', 0x6}) r3 = dup(r0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440)='tls\x00', 0xfffffffffffffed8) write$P9_RCLUNK(r3, &(0x7f0000000040)={0xfffffffffffffee5}, 0xffffffffffffffc4) mmap(&(0x7f0000011000/0x6000)=nil, 0x6000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="62fe64a6d43cf52b3de7591f4ec902b6a5ca2a8a4e902167d28f238f18f3a9395bb839467a1d68f1f7baf67d82d605ee9bd0bd8aec3f7687f09201a3156d0406e8b468a32399bd844c444353f08ebd737a792929992b72ec81453f9b0e2fdfa2cf982c4e39b0517516d3cb362d13f5d1204667876495302dd0a46e70bbf21f63dea4b4b839a35615e2c83bbd000769583f9d8eebbba39d28eb65228c8c44bee85d79c2e1ded34f6b040a0923c9c3e44092b5c36368055a6937df76bd738486f958ccc669f28b30eb58f8101c5ce4ec81fa1aa0ab18ff03b4c00000004cce"], 0x1) 10:02:56 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffff8}}, 0x28) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, &(0x7f0000000280)=0xc) close(0xffffffffffffff9c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={r3, 0x8, 0x2, "4096"}, 0xa) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7fffffff, 0x3f}, {0x40, 0xc16}], r1}, 0x18, 0x2) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:02:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000600)=""/144) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x40000000000009) perf_event_open(&(0x7f00000002c0)={0x20000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x0, 0x2080) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/loop-control\x00', 0x200, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="150025bd7000fddbdf2515000000090001006962000014000200080001001e00000008000400cf020000f4e0498d208b8e49a28332cd22ea69033566c32222dc341c097763086856e52ac0adecc22f000000000000000000000000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x4004080}, 0x40000) close(r3) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040), 0x4) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000080)) r4 = socket(0x840000000002, 0x3, 0xff) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x6) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f00000001c0)={0xfff, 0xfffffffffffffffe, 0xfff, 0x8000, 0x0, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\xc1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7\v5\xa0\xfdj\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\xe33&S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r6 = getgid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) r8 = getgid() stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x4, &(0x7f0000000780)=[r6, r7, r8, r9]) sendfile(r4, r5, 0x0, 0xffffffffffffff9e) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r11, 0x4008ae9c, &(0x7f0000000000)={0x1a}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000440)=0x0) socketpair(0x3, 0x4, 0x5, &(0x7f00000000c0)) setpriority(0x0, r12, 0x8) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000380)) 10:02:56 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video1\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf87, 0x8, 0x8, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x3a53, 0x687923fb, 0x1, 0x7, 0x8, 0xf6, 0x9, 0x1ff, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x1}, 0x2300, 0x1000000000, 0x109, 0x4, 0x1, 0x8}, 0x0, 0xd, r0, 0x8) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000100000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xd00}, 0x200000000, 0x40002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/56, 0x38}, {&(0x7f00000001c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/134, 0x86}, {&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000280)=""/16, 0x10}, {&(0x7f0000000540)=""/55, 0x37}], 0x7, 0x0) 10:02:56 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:56 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$tipc(r1, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) fremovexattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) 10:02:56 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @local, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev, @empty=0xac141400, @random="eb5de09d9520", @dev}}}}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) openat$cgroup(r0, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) clock_gettime(0x2, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r1, r2/1000+30000}, {0x77359400}}) [ 238.792831] IPVS: ftp: loaded support on port[0] = 21 10:02:57 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) ioctl$BLKBSZSET(r1, 0x40041271, &(0x7f0000000080)=0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) close(r0) 10:02:57 executing program 1: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioprio_set$pid(0x1, r0, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02063d8c02000000790700741e3c8100"], 0x10}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) 10:02:57 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) ioctl$BLKBSZSET(r1, 0x40041271, &(0x7f0000000080)=0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) close(r0) 10:02:57 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:57 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getrandom(&(0x7f0000000040)=""/107, 0x6b, 0x0) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000700), &(0x7f00000007c0), 0x8) 10:02:57 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xd200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="a8010000e46b69dad5d249e40d311c52c0689bcc4798360b3f193e564ce7dbd46636593d8488fd67ddf0cbc38a121b78a3b8956f", @ANYRES16=r1, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x40001}, 0x40044) 10:02:57 executing program 0: ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f000000fd80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8000, 0x0) linkat(r2, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00', 0x400) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 10:02:57 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) getitimer(0x0, &(0x7f00000005c0)) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000b77000/0x2000)=nil, 0x2000, 0x1000002, r3) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000a7050000090000000000000001000000000000000300000000000000ffffff7f000000000600000000000000010001000000000000020000000000000100007fffffffed05000000000000000200000000000000f7ffffff00000000ffffffff0000000009000000000000000100000000000000"]) poll(&(0x7f0000000100)=[{}], 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r4, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) getresgid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200)=0x0) getgroups(0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xee01, 0xee01, 0xee00, 0xee01, 0xee01]) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000600)=[0xee00, 0xee00, 0xffffffffffffffff]) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x8, &(0x7f0000000700)=[r5, r6, 0x0, r7, r8, r9, r10, r11]) fstat(r2, &(0x7f0000000140)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={r12}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:02:57 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40000000000000, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x159001, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0186404, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0xb4, 0x5, 0x3, &(0x7f0000fff000/0x1000)=nil, 0x10001}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x0, 0x16, &(0x7f0000000140)='/proc/capi/capi20ncci\x00'}, 0x30) kcmp(r3, r4, 0x5, r2, r2) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x4) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f00000002c0)=""/246) accept4(r2, &(0x7f00000001c0)=@x25, &(0x7f0000000240)=0x80, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 10:02:58 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) getpeername$tipc(r1, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) fremovexattr(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) 10:02:58 executing program 0: r0 = syz_open_dev$usb(0x0, 0x200, 0xfffffffffffffffe) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x2000000) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') unlink(0x0) lstat(0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000100)={0x3, {0x5854, 0xd74, 0xffffffff80000001, 0x3a72}}) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)={0x4}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000180)={0x7a, 0x0, [0x4b564d00, 0x35fd]}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000200)=0xf6400000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x40012, r6, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000500)={0x6}) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r1, @ANYBLOB="1e51f6576572d1950ed55981b5fddd7c97b86bffae251f73ee7e833b240f9d26c87d168a4387439c5195b255cff4a0b70fa977abd826c58307e611c378f893c0350f132415d30110d1b757ecbd2932776d9374c556e3b9ba62e4fd3b46a42bef5be3116d846d86bdc499c19c931184b9215733", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=r1, @ANYBLOB="02000500", @ANYRES32=r1, @ANYBLOB="02000700", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32=r1, @ANYBLOB="040002000000000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000400", @ANYRES32=r2, @ANYBLOB="10000200000000002000040000000000"], 0x7c, 0x2) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f000000a000/0x1000)=nil) 10:02:58 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:58 executing program 5: getpid() clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) setgid(0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) connect$rds(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001dc0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x1b) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 10:02:58 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000140)={{0x4, @addr=0x70000000000000}, 0x8, 0x8, 0x3}) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x25010610}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@newneigh={0x58, 0x1c, 0x318, 0x70bd25, 0x7, {0xa, 0x0, 0x0, r1, 0x4, 0x12, 0xb}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_MASTER={0x8, 0x9, 0x3}, @NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NDA_PROBES={0x8}, @NDA_PROBES={0x8, 0x4, 0x135}, @NDA_PORT={0x8, 0x6, 0x4e20}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) [ 240.493481] IPVS: ftp: loaded support on port[0] = 21 10:02:58 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:58 executing program 5: syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xdf, 0x40040) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='memory.high\x00f\xe0\a\xbc\x19W\x95\bY\xe6\x1a\x10L\x84Q\xcd\xf5\xa1c\x8f\xe9I5R=\xad\xfa\x9c\aY\xef\x01,\xc25K\x8b\xf9\x0e\x90\xff<\x00\xa9\xe0x\xfaq\xd7-Z\f\x85&\"<\xb8Y\x8aD\xc7\x00\xe7\xe4 \xa2\xb6g(Z\xd5w\x84\xd1\x99X\xdaQ+-\xf1\v$\xcdv\xe6`\\\xc4\xdf\x1eN\x8c\\\x9c\xe8T\x06\x8eLk\x88\x9d2d\xe0:3S\xef\x8b\x10\xa8\x89\xa4\xfe\xea\x01\x05\xfb\x81\x7f\x15\xe4b\xf0\x9c[\x91\x1d \xc0>\xaeg\xaa\r\xe5\r\xc7x.\x8c8\x83\x8eIO\xb8\\N1#H\xf2\x8f\x03V\xcf\xdb\xc8\xda\xa7)\x7f\xe6\xe3[\xf3', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x10000000000000ed) 10:02:58 executing program 1: r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) getitimer(0x0, &(0x7f00000005c0)) r3 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000b77000/0x2000)=nil, 0x2000, 0x1000002, r3) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000a7050000090000000000000001000000000000000300000000000000ffffff7f000000000600000000000000010001000000000000020000000000000100007fffffffed05000000000000000200000000000000f7ffffff00000000ffffffff0000000009000000000000000100000000000000"]) poll(&(0x7f0000000100)=[{}], 0x1, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r4, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) getresgid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000200)=0x0) getgroups(0x6, &(0x7f0000000240)=[0xffffffffffffffff, 0xee01, 0xee01, 0xee00, 0xee01, 0xee01]) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000600)=[0xee00, 0xee00, 0xffffffffffffffff]) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x8, &(0x7f0000000700)=[r5, r6, 0x0, r7, r8, r9, r10, r11]) fstat(r2, &(0x7f0000000140)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={r12}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:02:59 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:02:59 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x8000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000140)={0x127ff, 0x0, &(0x7f0000ffa000/0x3000)=nil}) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0)=0x6, 0x4) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) 10:02:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xffffffffffffffff) pwrite64(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="100c84c6410cdcd2cc7656a1ea4ab41e93b46e19bdb6b82cbc8bb0851bf26f5c6dbab6b5496db21e8e7cc71787c5703c6c4fa03d1b1486340ab3cea5907112e737d937e506fe5dbc9c31e4fe34bb8a5b3e8016b1211f9d0cea91c73dd8937532a0e45c39d283", 0x66, 0xfffffffffffffffd) keyctl$update(0x2, r1, &(0x7f0000000240)="9a048b6456af584abace20e67958df0d525d5c5798f224c3c0ad2403a83825f086ac65eed78e39754937588fc54dc8d7d6a474a262495edf209f794c09320daf911f9b569fa75676867ffd773a00e5fd", 0x50) syz_open_dev$sg(0x0, 0x100000000, 0x2000) [ 241.225295] syz-executor5 (10184) used greatest stack depth: 18312 bytes left 10:02:59 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:00 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x400, 0x0) write$smack_current(r0, &(0x7f0000000040)='\x00', 0x1) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="2f0000001800030007fffd946fa283bc8020000000040005031d856808000700080000001643ccbb24e0710b42fa3c", 0x2f}], 0x1}, 0x0) 10:03:00 executing program 0: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$setperm(0x5, r0, 0x40000) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x6b, &(0x7f0000000000)=[{&(0x7f0000000880)="24000000110007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e", 0xffffffffffffff6e}], 0x1}, 0x0) 10:03:00 executing program 1: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x400, 0x400042) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x9) 10:03:00 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:00 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x4000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x3ff, &(0x7f0000ffd000/0x1000)=nil, 0x1) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0xffffffffffffffff}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000180)={0x200000000000000, 0xd000, 0x5, 0x6, 0x13}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}]}) 10:03:00 executing program 0: r0 = socket(0x10, 0x6, 0x20000004) ioctl$sock_ifreq(r0, 0x897b, &(0x7f0000000140)={'sit0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) prctl$PR_GET_THP_DISABLE(0x2a) 10:03:00 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x11e, 0x200) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x401}}, 0x18) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000180)={'nat\x00'}, &(0x7f00000002c0)=0x50) 10:03:00 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40303, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000080)="367cafc4ee183cfad7bd421064fc988a115a9f42e3adeca3cf4974c4355b0dc60c9c51e77a24208603ef33984d2123584264335e5d63a7c10105d6934a8b6e61c0a79ee868fd43f404db4a52") r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_elf32(r1, &(0x7f0000001340)=ANY=[], 0x10ff) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) [ 242.230390] pit: kvm: requested 58666 ns i8254 timer period limited to 200000 ns 10:03:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0xe3, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000340)="cb", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0xfffffffffffffffd, @local}, 0x1c) recvmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000000280)=""/13, 0xd}, {&(0x7f00000002c0)=""/44, 0x2c}], 0x3}}], 0x1, 0x0, &(0x7f0000004000)) 10:03:00 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000), 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:00 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2180, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() fchown(r1, r2, r3) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000001c0)={0x7, @capture={0x1000, 0x1, {0x2, 0x81}, 0x1, 0x10000}}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="1f0000000203193b000007000000068100023b050900020000004000034258", 0x1f}], 0x1) [ 242.435025] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 10:03:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66576c64308b02d282c377a1f83dfb68e9d6867fe7c0eb8b10ce01005bd0efd28db006a924c955c39a4301005f3a06"], 0x34) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r2, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x7847, 0x20, 0x5, 0x7fffffff}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0xd5}, 0x8) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "39980cfd42119cc4e104030000000000000000000000000000"}, 0x24) write$P9_RLOCK(r1, &(0x7f00000002c0)={0x8, 0x35, 0xca3, 0x3}, 0x8) 10:03:00 executing program 1: r0 = getpid() perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x1, 0x54, 0x1, 0x1, 0x0, 0x101, 0x10000, 0x3, 0x7, 0x98, 0x2, 0x1, 0x4, 0x4, 0x7, 0x2, 0x5, 0xfffffffffffffffb, 0x80000000, 0x6, 0x0, 0x4, 0x2, 0x800, 0x4, 0x1, 0x3, 0xfffffffffffffff8, 0x0, 0x2, 0x4, 0x3, 0xd9, 0x3, 0x80000000, 0xffffffffffffff01, 0x0, 0x5, 0xb763e890a167b5ef, @perf_bp={&(0x7f0000000000), 0x2}, 0x200, 0x7f, 0x7fffffff, 0x9, 0x9, 0x1, 0xfffffffffffffff7}, r0, 0x7, 0xffffffffffffff9c, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0xb, 0x7, 0x2}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r1, &(0x7f00000004c0), 0x0}, 0x18) 10:03:00 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20005f) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0xfffffd6d) close(r0) uselib(&(0x7f0000000300)='./file0\x00') io_setup(0x1, &(0x7f0000000280)) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/120, 0x78}], 0x2) 10:03:00 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000), 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:01 executing program 3: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'sit0\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000000000001edaaea25b8ab856e52adfe34402fffffffffffffc89a62e00d71fa2e9346275f9644283ffff0000e66fc54b6e06bc264975fff0ac671fd7ce2a6e69bb6ba8057e51719371fcac9ab479462ba03bb33ff8911f"]}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x9, 0x820c, 0x4, 0x3, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x6}}, 0x4, 0xffff, 0x0, 0x6}, &(0x7f00000002c0)=0x98) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00\x00\x00\x00\x00\x00\x02\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x3, 0x0, [], [{0x80, 0x7b, 0x6, 0x0, 0x0, 0x40}, {0x0, 0x6, 0xae5, 0x0, 0x8}], [[], [], []]}) 10:03:01 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x800000200fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x8000002100, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000180)=0x1, 0xffffff80) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000040)=""/4, &(0x7f0000000000)=0x4) 10:03:01 executing program 3: socketpair$unix(0x1, 0x4000001000000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x416, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x2de0, 0xf812, 0x7f}) 10:03:01 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000), 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10040, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100)={0x400, 0x10001, 0x8bb}) tkill(0x0, 0x0) futex(&(0x7f000000cffc), 0x800000000005, 0x40, 0x0, &(0x7f0000000040), 0x400000000000001) ftruncate(r0, 0x2) 10:03:01 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000040), 0x4) sendfile(r2, r1, 0x0, 0x5) 10:03:01 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:01 executing program 1: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000100)={0x4000000000096e, "563d7029129fa759d8d2c8d6d1fb281150a3222da97d61c224f8bf76314f71d4", 0x0, 0x0, 0xfffffffffffffffd, 0x400000000000006}) mkdirat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x1ff) 10:03:01 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bat\x01\x00v0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="32cae4783d32"}, 0x14) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x80001, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xfffffffffffffe10) r4 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x800000000042101) write$sndseq(r4, 0x0, 0x0) r5 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f00000000c0)={0x80, 0x7f}) ptrace$getsig(0x4202, r3, 0x0, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000100)={0x1, 0xffffffff}) sendto$inet6(r0, &(0x7f0000000180)="050300000100babeffffffff8100", 0xe, 0x0, 0x0, 0x0) 10:03:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) getsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f0000000000), &(0x7f0000000080)=0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000200)={0x3e2, 0x20000000, 0x5000, 0x200, 0x9, 0x8, 0x3, 0x716, 0x1}, 0x10) write$binfmt_script(r0, &(0x7f0000002400)=ANY=[@ANYRESHEX, @ANYPTR], 0x1a) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x20100, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000180)={0x8000, 0xaa, 0x8, 0x800, 0x1b, 0x3, 0x6d, 0x8, 0x7, 0x1}) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f00000001c0)={0x3, 0x60cf7465a44c8880, [0x81, 0x6, 0x1, 0x0, 0x4, 0x6, 0x9, 0x1538]}) openat$cgroup_procs(r1, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) 10:03:01 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:01 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000004c0)={{0x4000000080}, 'port0\x00', 0x3f, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) ptrace$peekuser(0x3, r2, 0xfffffffffffffffd) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x44240, 0x0) read(r1, &(0x7f00000003c0)=""/178, 0xb2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 10:03:01 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x1, 0x4, 0x2, 0x22ac000000000}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'rmd320-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x100080810) sendmmsg$unix(r1, &(0x7f0000001300)=[{&(0x7f0000000980)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000000dc0), 0x0, &(0x7f0000000e40)}], 0x500, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000100)={{0x4, 0x3, 0x5, 0x2, 0x7}, 0x1000, 0x6d3, 0x7, 0x5454d4d3, 0x8000, "32d13459fb7eab66674f0348536034f8259b539e1418c296c28c9c93b1a253562e22ca1f79cf550527754c120fdda9e3d772c511ac711965ddd208a8b20815680ee2ad4bbac044a72009217bb14b0fd7587a1c15cc7e0495199efde981cd7dabe0ef639eee458a83c9710a682e7906406cff9f2eca288c07fb04217139fa0684"}) r2 = gettid() ptrace$setregs(0xf, r2, 0x7, &(0x7f0000000000)="1a73980bf35c026543d145dd590068ad1e3248748726b2aff89715250b69bb17c32e18f01dc2ed97cce064c4843e1357d760f87d21cddd808d083ede9e89132aacb2aacc805016781b1116f67298e2e26ae79ac6c688") 10:03:02 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000001000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_UNREGISTER(r1, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x7fffdffff000}) 10:03:02 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:02 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0xd808, 0x800) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000005c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x2, 0x7}}, 0x30) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000300)={0x0, 0x0, 0x9, 'queue0\x00'}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0x0, @dev}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000500)='ip6_vti0\x00', 0xfdfa) epoll_create(0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) getcwd(&(0x7f0000000200)=""/112, 0x70) pipe2(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f00000002c0)=0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x7ff, 0x6, "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", 0x0, 0x4, 0x6, 0x609, 0x0, 0x2, 0x9}, r8}}, 0x120) pwritev(r0, 0x0, 0x0, 0x0) r9 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r9, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) prlimit64(0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x14}, 0x2}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x0, @local}], 0x3c) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000900)={0x7, 0x2, 0x1, {0x8000, 0x0, 0x5, 0x7}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r9) sendfile(r1, r5, &(0x7f00000ddff8)=0x5b00000000001200, 0x102000002) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffff64e38f8dcb3612dc26f68ff20d500a27b139c51ff925b6"]) timer_create(0x4, &(0x7f00000007c0)={0x0, 0x1e, 0x2, @thr={&(0x7f00000006c0)="40dd0f91b470898f3a0aabd4fadd5b541f7d24bebe8fd3bbe8c6c2f8ec1d722b39e6016f5451e8c316ade03eb6e4e7a35bdd50a5dfa5c0832ed6e564584d89825ba553e00b763a6cc78806161947c39f5c0500de0c89e82c85d3d00b559421d986", 0x0}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r8, 0x3}}, 0x10) fsetxattr$security_capability(r4, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000600)=@v3={0x3000000, [{0x1000000, 0xa5f}, {0x8, 0x7f}]}, 0x18, 0x1) 10:03:02 executing program 4: execve(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)='GPL.[self\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='threaded\x00', &(0x7f0000000180)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000240)='threaded\x00', &(0x7f0000000280)='em1\x00', &(0x7f00000002c0)='threaded\x00', &(0x7f0000000300)='threaded\x00', &(0x7f0000000340)='}(\x00', &(0x7f0000000380)='threaded\x00']) r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) getpeername$unix(r0, &(0x7f0000000400)=@abs, &(0x7f0000000480)=0x6e) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:02 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0xf, 0x1, 0x0, {0x0, 0x0, 0x3}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x8001003, 0x100000001, 0x1}) 10:03:02 executing program 3: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000200)={0x804, 0x497, 0x6, 0x9, 0xfffffffffffffffa, 0x4, 0xba, 0x10001}, &(0x7f00000002c0)={0x8, 0x5ef2, 0x5, 0x3ff, 0x10001, 0x7ff, 0x10001, 0xffffffffffffffdf}, &(0x7f0000000340)={0x100, 0x5, 0x3, 0x100, 0x0, 0x2, 0x9, 0x6}, &(0x7f00000003c0)={r0, r1+30000000}, &(0x7f0000000440)={&(0x7f0000000400)={0x2a}, 0x8}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xffffffea) epoll_create(0xe29f) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140), &(0x7f0000000300)=0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000280)=0x8) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000180)) r4 = gettid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000000c0)=r4) socket$unix(0x1, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x71000}], 0x200000000000000f, 0x0) 10:03:02 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x501080, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80020005, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000bf8000/0xe000)=nil) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={r1, 0x7}, &(0x7f0000000180)=0x8) madvise(&(0x7f0000a62000/0x1000)=nil, 0x1000, 0x10200000008) 10:03:02 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:02 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x2}, 0x1c) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x3, {0xa, 0x4e24, 0x9, @loopback, 0x2}, r3}}, 0x38) sendto$inet6(r2, &(0x7f0000000100), 0x2f6, 0x24008010, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r2, 0x0, r1, 0x0, 0x3f, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) r5 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc040564b, &(0x7f0000000080)={0x0, 0x3, 0x0, [], &(0x7f0000000000)={0x0, 0x0, [], @p_u8=&(0x7f0000000140)}}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x1000000000013) 10:03:02 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:02 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:02 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x7, &(0x7f0000000140)=0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='encrypted\x00', 0x0) io_cancel(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 10:03:02 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clock_gettime(0x0, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x7530}, {r1, r2/1000+10000}}, 0xffffffffffffffff) clone(0x80000020102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='Bdev\x00d\xbd1a\x92\xe8qK_L\vp\xe0\x81R\x03\xad!m\xf0mA\xde\xad\xf5\x0fVE\xdc1V*Wl\xe5-@\x95\xb0v\xado?7\x92\x0e\xe4\x17\xb7l\x82\x01g\x04\xc9\xfdA?\v\x10w\x19\xeb\x0e\x85\x8eE\xcek-\x15g\x1a\b\xdazk!\xaa{\xee\x91D(p\xec\xad\\\x88q\x00\b\x00\x00\x040\x12\xd7\x8a2\xe1t\xab\xca\x06\xe4\x13\xe6h(\xb1\xff\x04\xd2\xba\xe9a\xb2\xad\xfb\x16BlF|\x9f\x0e\r{\xa4\t\x93\xa2\xa6\xa7\xeb\xb0\x8c/(\'\xa1\x9d\xa0\x83\xe6\xe2\x9f\xb7\xd8', 0x1, 0x0) 10:03:02 executing program 1: socket$inet(0x2, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100000fffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x3a) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x600) prctl$PR_SET_ENDIAN(0x14, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x1400) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000400), 0x10) dup(r1) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000000d000040050000000500000800010000000200400000000001000000aa9afabb2bb89700"]) 10:03:03 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0xd808, 0x800) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000005c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x2, 0x7}}, 0x30) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000300)={0x0, 0x0, 0x9, 'queue0\x00'}) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0x0, @dev}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000500)='ip6_vti0\x00', 0xfdfa) epoll_create(0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) getcwd(&(0x7f0000000200)=""/112, 0x70) pipe2(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f00000002c0)=0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000003c0)={0x6, 0x118, 0xfa00, {{0x7ff, 0x6, "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", 0x0, 0x4, 0x6, 0x609, 0x0, 0x2, 0x9}, r8}}, 0x120) pwritev(r0, 0x0, 0x0, 0x0) r9 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r9, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) prlimit64(0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x14}, 0x2}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x0, @local}], 0x3c) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000900)={0x7, 0x2, 0x1, {0x8000, 0x0, 0x5, 0x7}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r9) sendfile(r1, r5, &(0x7f00000ddff8)=0x5b00000000001200, 0x102000002) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffff64e38f8dcb3612dc26f68ff20d500a27b139c51ff925b6"]) timer_create(0x4, &(0x7f00000007c0)={0x0, 0x1e, 0x2, @thr={&(0x7f00000006c0)="40dd0f91b470898f3a0aabd4fadd5b541f7d24bebe8fd3bbe8c6c2f8ec1d722b39e6016f5451e8c316ade03eb6e4e7a35bdd50a5dfa5c0832ed6e564584d89825ba553e00b763a6cc78806161947c39f5c0500de0c89e82c85d3d00b559421d986", 0x0}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r7, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r8, 0x3}}, 0x10) fsetxattr$security_capability(r4, &(0x7f0000000180)='security.capability\x00', &(0x7f0000000600)=@v3={0x3000000, [{0x1000000, 0xa5f}, {0x8, 0x7f}]}, 0x18, 0x1) 10:03:03 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:03 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff0c) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0245629, &(0x7f00000001c0)={0x0, 0x6, 0x40, [], &(0x7f0000000040)=0x8}) munlockall() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f00000002c0)={[], 0x7, 0xfff, 0x9, 0x1c83, 0xffffffff, r1}) pread64(r0, &(0x7f0000000080)=""/145, 0x91, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0x4) kcmp(r1, r1, 0x1, r0, r0) 10:03:03 executing program 3: clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000200)={0x804, 0x497, 0x6, 0x9, 0xfffffffffffffffa, 0x4, 0xba, 0x10001}, &(0x7f00000002c0)={0x8, 0x5ef2, 0x5, 0x3ff, 0x10001, 0x7ff, 0x10001, 0xffffffffffffffdf}, &(0x7f0000000340)={0x100, 0x5, 0x3, 0x100, 0x0, 0x2, 0x9, 0x6}, &(0x7f00000003c0)={r0, r1+30000000}, &(0x7f0000000440)={&(0x7f0000000400)={0x2a}, 0x8}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xffffffea) epoll_create(0xe29f) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140), &(0x7f0000000300)=0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000), &(0x7f0000000280)=0x8) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000180)) r4 = gettid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000000c0)=r4) socket$unix(0x1, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x71000}], 0x200000000000000f, 0x0) 10:03:03 executing program 0: io_setup(0x3, &(0x7f0000000080)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x108200000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000100)={0xfffffffffffffff8, 0x5, 0x7fffffff}) getsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4) syz_genetlink_get_family_id$tipc(0x0) 10:03:03 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:03 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:03 executing program 0: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) getpeername(r0, &(0x7f0000000100)=@caif=@dgm, &(0x7f0000000040)=0x80) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x81, 0x4) fchownat(r0, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) 10:03:03 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-camellia-asm)\x00'}, 0x58) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x100) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @local}, &(0x7f0000000080)=0xc) setsockopt$inet6_int(r1, 0x29, 0xdf, &(0x7f00000000c0)=0x4, 0x4) 10:03:03 executing program 1: clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2, r0}) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x101000) tkill(r0, 0x15) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000080)) setpgid(r0, r0) 10:03:04 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, 0x0, 0x0) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:04 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1a8, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x85c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x900000000000}]}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b45}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8b1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x90}, 0x4040804) syslog(0x96db9d5e, &(0x7f0000000000), 0x124) 10:03:04 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x321) munmap(&(0x7f0000364000/0x2000)=nil, 0x2000) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000003c0)) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000100)='bridge0\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10) sendto$unix(r2, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r4 = dup2(r0, r0) write$P9_RLERRORu(r4, &(0x7f0000000080)={0x12, 0x7, 0x1, {{0x5, 'hash\x00'}, 0x80}}, 0x12) 10:03:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x8, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 10:03:04 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, 0x0, 0x0) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:04 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000001200)=[{&(0x7f0000001100)=""/233, 0xe9}], 0x1) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000900000/0x4000)=nil, 0x4000, 0xf, 0x0, 0x30144) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x0, 0x17, &(0x7f0000000000)='trusted.overlay.origin\x00', 0xffffffffffffffff}, 0x30) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000280)={&(0x7f00000001c0)=""/157, 0x9d}) 10:03:04 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x3, 0x9, 0x3}) 10:03:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = dup(r1) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x1, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x5, 0x21be, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x5, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x280080) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}]}) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000500)="2eb14749555eef3dfa2298ac030e48967728019058a6028a789d5073433ef59356d380af7828f8cc295a8115b9b970f6313dc9a7f9ab8d97c41fe0a8587d00066117ef158e3107ac872581c36700c48bc9acd74cd7b7f4c9017d4e2f523d4e6d53a5a6eb4018815cfe536cda21e05a00000000000000000000") sendfile(r2, r3, &(0x7f0000000040), 0x2008000fffffffe) 10:03:04 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vsock\x00', 0x4000000080, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = getpgrp(0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000180)={[], 0x0, 0x7ff, 0x2b5, 0x2, 0x4, r0}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r1, 0x0) read(r2, &(0x7f00000000c0)=""/91, 0xfffffffffffffce9) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[]) r4 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000001280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000040), 0x4) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000002080)={{0x0, @local, 0x4e21, 0x1, 'lblc\x00', 0x8, 0x2, 0xd}, {@multicast2, 0x4e24, 0x3, 0x0, 0x0, 0xffff}}, 0x44) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "94d4341307ee5d4501d9f99b60ff2618833263db3afce629f579d0956535eb893d885a358beb7c3251f0f29874bc643a28779214cd4d8b975beeff8780d29f6c", "9a65c9632090ff2319a1f977c69149162db3db7768da42b7cb2b14a4b98944a9"}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r6 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) 10:03:04 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="ceac5a6b17f5e39d94054931582bd547570c9f678234583ee12f33c3aa14c61960b28257ff551addf164d47ec2f30f6b2a712e3136606445b7ad23d313095595ee00b508100a5a375bb4514e06a8d8fd29b8e2b36d5530777a029c67153e9e4773296477364025608faacd59187836c6e4829e5da2caaef43a50b893910891f67898035300dcec46f33c3ebae2711f29d6b588a5d24a9bb5942744b12205a3931a5afe779c5fc2076bdc6b5b3541197b8a9139a4692c65075a1280d6d214fb686fb395630ae68e13f9e28dcbd5abcb1ca7ed2472fb977f7beac0e15e3bb5bd7cb32b61570d7c320953cb", 0xea}, {&(0x7f0000000100)="6498f85b0e2657844139fde75a8e48eef5ca18250270c3550b9783ae16faa5c95149d164d775013fdf2c4a16bd193799d4f54f7cbb211974c5e5c2c29ca77957e3fdfdd69778b61998f7fee7ed20bbde97", 0x51}, {&(0x7f0000000180)="146b4693baf5b13437ceea2d0b2c762799c7fa8fc454c8313fde016b7edbd121423f4697fde2fcad8cdfc35ea431ac987e511667c55a52ee3a70ec52362fb0eb9b630b9030031560553da6f7298741b207d43750a5272f56338c1c9e54fdb80a30c0b38d771f8c360c929832de8a3596", 0x70}, {&(0x7f0000000200)="5beab63ef2851411c4e1b1a25dc491c9db91c8791eba4cbec8ee", 0x1a}, {&(0x7f0000000240)="398525aaa9604de26e38d8b8350ec1ee86b354", 0x13}], 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0x2}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e20, 0x3f, @loopback, 0x4}}, 0xd0, 0x3, 0x9e5, 0x5, 0x800}, &(0x7f0000000400)=0x98) socket$key(0xf, 0x3, 0x2) 10:03:04 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, 0x0, 0x0) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000015000702000000000000000000ff0006e7a34fc9b6c6f51abaea87c417b392eaece1af3e04ccedca8ff5fb228204dff07361e8ce7a71372c40c533ddc0a9c17bef3bc42ce05089d724be925e1ad5506c81a34cb7c20000000019cd996cf575bac3842851af4cbf76426818e541abdc83e3a88193c576512671ece42d09beee998fd374a7d7d126fe5efa4ed45b814b45a9bfde2d8afba69624fb210a938a8602c9d64dddc75ae51f95178d860296f0548a20291a49d85fe477762c869f6a4022814f0d1be9cb57"], 0x14}}, 0x0) 10:03:04 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:04 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = socket(0xa, 0x3, 0x8) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000040)=0x3f) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x7, 0x4) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000003c0)={0x8001005, 0xd1c7, 0x1}) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={r3, 0x8, 0x57, 0x100, 0xfffffffffffffff7, 0x3, 0x100000000, 0x101, {r4, @in6={{0xa, 0x4e22, 0x9, @mcast2, 0xfffffffffffffffd}}, 0x6, 0xbb0000000, 0xfffffffffffffffd, 0x1, 0x77e63fbe}}, &(0x7f0000000240)=0xb0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00%k\b\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x8001}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000440)={r3, 0x7fffffff, 0xa5, 0x2319, 0x1, 0x7f, 0x7b, 0x2, {r5, @in6={{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8001}}, 0x6, 0x3, 0x1f, 0x4}}, &(0x7f0000000380)=0xb0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r6, 0x9}, &(0x7f0000000280)=0x8) 10:03:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x400000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = epoll_create1(0x0) epoll_wait(r4, &(0x7f00000004c0)=[{}], 0x1, 0x200) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xdf1505a9ebb5a838}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg(r1, &(0x7f0000000180)={&(0x7f0000000040)=@nfc={0x27, 0x0, 0x1, 0x1}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)="cbeab32c07084e562d0a19ff765fe8cefdde11b5eae5d3108a35db099d826f8fc639a9953e14615ad2988343bf", 0x2d}], 0x2, &(0x7f0000000500)=[{0xfc, 0x0, 0x2, "ffda1e8660b1fe60d35aa86cd421952ad7d0efe963808a3ad77d97c9dbee136e8d5f615362a6aaf1916e555cdcc2e60f0a629faa96740ec2c1aaed11a0487268b0337b2becba9c266e96d24c087dbe7cb011b699b6d3398059ab3164b9ab92328707b164979fe658077c45074e9c97276a4ede2b29c54787163dc86e47916915372abafdbff7772e13e740fa7400eee33391e2be1ae67ad849e26b976e38c50851bdbee6affb5e3a183bc2ab7cd0413f6e3dc6fd63bb319d024c02189c3106e9c7049a552fb4a562de24916d90212f189a3ff853578bc7774c662f19c137089518c435379b19e4f2e79eea7b801a55"}, {0x28, 0x0, 0x3f, "4d91fa3becb2a1a35e62db411c8414d1db45605969fdb3f2db7560"}, {0x18, 0x105, 0xf1, "f6dad006cf5400cc9852b463"}, {0xcc, 0x29, 0x8001, "7f39e552d8e56813e952120b7e438933f8d72dd7d425331271ae6a66b0e67d76f76ef70b9adcd852017d373c028afb398c8b940613cdacff2174a6da51626b80582c91c7c4deff374f908908aca9f009a9023ec06d0356f9653378eb58864ba3bbbe1120725fe93208ed63095fcf3ab7776c663f045cc1298550486cb2c43587f6021d919c6658ccf53f5deeb74552c61c96db7780a87d164ea305955135f470fa0e5dc59db6a69e6da39fdba9c0981e0223c58206f6fb786dabb7771be6"}], 0x208}, 0x4000) shutdown(r0, 0x0) [ 246.940588] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.950995] bridge0: port 1(bridge_slave_0) entered disabled state 10:03:05 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vsock\x00', 0x4000000080, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = getpgrp(0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000180)={[], 0x0, 0x7ff, 0x2b5, 0x2, 0x4, r0}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r1, 0x0) read(r2, &(0x7f00000000c0)=""/91, 0xfffffffffffffce9) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[]) r4 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000001280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000040), 0x4) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000002080)={{0x0, @local, 0x4e21, 0x1, 'lblc\x00', 0x8, 0x2, 0xd}, {@multicast2, 0x4e24, 0x3, 0x0, 0x0, 0xffff}}, 0x44) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "94d4341307ee5d4501d9f99b60ff2618833263db3afce629f579d0956535eb893d885a358beb7c3251f0f29874bc643a28779214cd4d8b975beeff8780d29f6c", "9a65c9632090ff2319a1f977c69149162db3db7768da42b7cb2b14a4b98944a9"}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r6 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r7 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7) 10:03:05 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:05 executing program 0: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x61) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200030000000000000020003800000000000000000000000000200001000000000000000000000001000000000000000010000000000000be00000000eaffffffffffffff000000"], 0x58) close(r0) uselib(&(0x7f00000000c0)='./file0\x00') 10:03:05 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="ede8062bbdccbcc4d81f5853bd4d46acaa7dec57a96fd084242b3c3e05f9be19c3250e30f80f1c6411bad71f634219a0c5b4a942ea3c6179d155678219825a0c6074d64d8443f4d9d5b50854aed4e862d6fa26fe176f6a9af6bba38733d6b38974901ffae8a2a33642e029000000000000000000000000"], 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) gettid() r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x800, 0x400000) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000100)=""/130) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0), 0x4) clone(0x7ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000002600)=0xffffffffffff0000, 0x4) r2 = getpid() exit_group(0x0) migrate_pages(r2, 0x2, 0x0, &(0x7f00000001c0)=0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000026c0)='IPVS\x00') setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000002a80)={0x0, 0x9, 0x9, 0x0, 0x4}, 0x14) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002500)=ANY=[@ANYBLOB="02002abd7000ffdbdf250100000041000100080001000a000000080002000000000008000b007369700014000300216822353e5c8fac14142100000000000000000500000000000000cd700d98d57c007369700008"], 0x1}}, 0x40001) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x10) modify_ldt$write(0x1, 0x0, 0x0) 10:03:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000180)=0x400001d) fchmod(0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000000c0)=0xf10001, 0xeffffdef) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000140)='personality\x00') setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x73c4, 0x4) syz_open_dev$sg(0x0, 0x0, 0x0) 10:03:05 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x301, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x18, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x48005) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:05 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@remote, r1}, 0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) sched_setaffinity(r2, 0x36e, &(0x7f00000001c0)) umount2(&(0x7f0000000200)='./file0\x00', 0xe) write$P9_RFLUSH(r0, &(0x7f00000002c0)={0x7}, 0x7) 10:03:06 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x1, @broadcast, 'hsr0\x00'}}, 0x1e) 10:03:06 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:06 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x40100, 0x0) recvfrom$unix(r1, &(0x7f0000000240)=""/211, 0xd3, 0x100, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000400)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000340), 0x87}]) write$P9_RCREATE(r1, &(0x7f0000000440)={0x18, 0x73, 0x1, {{0x40, 0x4, 0x5}, 0x101}}, 0x18) getsockname(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}}, &(0x7f0000000140)=0x80) ioctl$PPPIOCGFLAGS(r4, 0x8004745a, &(0x7f0000000180)) [ 248.491419] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.497918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.504706] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.511098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.553776] device bridge0 entered promiscuous mode [ 248.559775] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 248.584439] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.590913] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.625072] device bridge0 left promiscuous mode 10:03:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r0, 0x1156}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={0x6}, 0x8) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)) 10:03:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000080)='+/\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='proc)security\\)bdevwlan1vmnet0/\x00', &(0x7f0000000180)='/\x00', &(0x7f00000001c0)='*\x00', &(0x7f0000000200)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000280)='%md5sumnodev---}security\x00', &(0x7f00000002c0)='.cpusetvmnet1\x00', &(0x7f0000000300)='nodev\x00', &(0x7f0000000340)='-/procvmnet1-\\vboxnet1+:\x00', &(0x7f0000000380)='eth0vmnet0user\x00'], 0x1500) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000480)) r1 = socket$isdn(0x22, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x3f, &(0x7f00000004c0)="69895830670d42f6df5aec3582f3e48f48cfb71e4ad036236a6ec1528b54316000b48bb7033f7b25b98ac96ddde1686be2ac3ad274191e47fa5be2d4dc154f9286b427206184fb59d8a7e222b7ea0bd900fabc3a8a977b14d0497c3f9760d9e7b373e9808bd21a5d33418436c03dc236547e2223", 0x74) write$FUSE_IOCTL(r0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x5, 0x0, 0x5, 0xf7db}}, 0x20) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x74, &(0x7f0000000580)=[@in6={0xa, 0x4e20, 0x1f, @empty, 0x2}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0xfffffffffffffff7, @local, 0x81}, @in6={0xa, 0x4e23, 0x3, @remote, 0xffffffff}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000680)={r2, 0x1}, &(0x7f00000006c0)=0x8) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000700)=""/235) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6f) ioctl$TIOCCONS(r0, 0x541d) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000800)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000840)={r3, 0x2}) openat$cgroup_subtree(r0, &(0x7f0000000880)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f00000008c0)) r4 = geteuid() ioprio_set$uid(0x3, r4, 0x30e) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000980)={'veth0_to_bond\x00'}) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000009c0)=""/204) pivot_root(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='./file0\x00') ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000b40)=""/234) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000c40)={'nat\x00'}, &(0x7f0000000cc0)=0x50) r5 = epoll_create1(0xfa69c106c36c2b76) sendmsg$unix(r5, &(0x7f0000002100)={&(0x7f0000000d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000020c0)=[{&(0x7f0000000d80)="270a08f843d3762e872762859c", 0xd}, {&(0x7f0000000dc0)="9def3f7c578e151183bbe885336c4b44fac33c950714747e2723b5fce194f1a4b778f1e86ab754b211d09e15ef61de5a54170b557a712d38db8b94ed5210925b903c377e0da83a87683b99bd8e696a43e300d8c2add162e7f64558c45d6ad07295c6fdc201f0903d52b066aeef88fad7cde49eced7eaae62563d5e54094ae5b5f19ba321d6129f23f880112d964613345857e55c548932ea", 0x98}, {&(0x7f0000000e80)="bf5508d2e30b1c9654a48e11cd6675aacae1c009039d4301e8d45a256840dc28ae6aa046b21d8ed4ecdd0daad769961b51006f023fc39f39051bb49ac12566c5a7f269024082bd2ef09ebe1eff7da4f4ed2d3033506f15a7f83520ef91acf1a79d13f703fe6f79feedc4db700cf7a4a05f04144144a6a09b0cbb2aa3cd03ebceffc8f017403580cd8c5bf051fdd1526d638488", 0x93}, {&(0x7f0000000f40)="59a04d5f3fe405592b35e40262c6d36d90bd2ad983131f7d0b96795203bea904b2898dc615ab36637764291332974c", 0x2f}, {&(0x7f0000000f80)}, {&(0x7f0000000fc0)="ef712dc70f886353ed029ce60458b16fe40a17c509128dbaff1f44898def37881c8494e8594b6b4cb71da56f5980b4dc1f88845e06fc07191939507f1b43d5ad94", 0x41}, {&(0x7f0000001040)="2ed42de33a0bccf44fa92c7ddc0bcd3c1c3ccd4cb56ed25c4ec499beb8e5dff89663de701d78cce7347f7dbe0f4b8eaaf7df705038105568d57867cf96e0e6226a4225a4131e224aaab9c2f0feda207e19d715c76395a51d178c047f1ad05d78", 0x60}, {&(0x7f00000010c0)="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", 0x1000}], 0x8, 0x0, 0x0, 0x8040}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000002140)={@dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}, 0xc) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000002180)="909f74e8d21548cf67af74ae4be56a46d7bbd3f8fcea49e130a65d633a08bfb19551452c1fd1c5dc9d1e65d628f753cc5eded82cc286686611afe674a1e22ba2880915e36b9a01f1c7917a6d8855b1f3ea98e8e9fa8f32c5a61df68ac0acb02de93c38f9ff94d43b7eb900067cebaf55997bf25c9483fffc90f62678598cd6ec68b019fe34a2d45e0d16f2690800bc51b8cb31028ec3892196582168bffbd7188607a404ed3429f04c16f3b97387", 0xae) r6 = getpid() write$cgroup_pid(r1, &(0x7f0000002240)=r6, 0x12) 10:03:07 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7e, 0x1, 0x3}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xc, 0x4, 0x4, 0x4, 0x2, r0, 0xffffffffffffffff, [0x305f, 0xa, 0x1100, 0xe00000000000000]}, 0x9) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40080, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40047703, 0x6) pipe(0x0) 10:03:07 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000240)={@multicast2, @local}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0xe) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x1, 0x4) 10:03:07 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) [ 248.899684] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.906116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.912699] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.919136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.925935] device bridge0 entered promiscuous mode [ 248.931527] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 10:03:07 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x800000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000011c0)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r1, 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) clock_gettime(0x4, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=""/111, &(0x7f0000000140)=0x6f) syz_open_dev$video4linux(0x0, 0x0, 0x80000) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 'syz1\x00', 'syx1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00W1\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x00\x00\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x11c) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80001, 0x0) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000000)={0x3, 'syz0\x00'}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, 0x0, &(0x7f0000000380)) 10:03:07 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000240)={0x2, 0x20004e23, @multicast1}, 0x10f) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000280)={0x1f, {0xc678, 0x0, 0x7ff, 0x0, 0x400, 0x7}, 0x8a}, 0xa) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x0, @loopback}}}, 0x84) getresgid(&(0x7f0000000400), &(0x7f0000000480), &(0x7f0000000500)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='bbr\x00', 0x4) r3 = syz_open_dev$mice(&(0x7f00000004c0)='/dev/input/mice\x00', 0x0, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000540)=0x7, 0x4) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x10000000, @empty={[0xe00000002000000, 0x0, 0x801000cf00000000, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c) r4 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x8, 0x101400) sendto$inet(r4, &(0x7f00000002c0)="59e6b9068c2c13f3a45cc479a97640bf6e910e3bf20811cc608f2b25e885573f78b433ae1d393f57beb591f78d53dbbae6559c0223b99e20a3f33083d47cd2505c2003a9017a1174271630c7ba4dfea089f5033c287170dc7a3b75b9e5c0cb858d6fbd3041175abb1acffae432cb28d221a919b6d66eaab9d9ec053998bc1489fe376e734d2d565ffc642578783d26ac6d53f043d2bbc3aadc99b43274bf3d1d658ff4a66d4a147345a395a0d96942cd6065c25a26cdbb89157860ac4c267bada1385163b847682a81febf553ec39d4e145939560b1f80fe82b09aaa58f0", 0xde, 0x8000, &(0x7f00000003c0)={0x2, 0x4e22, @broadcast}, 0x10) r5 = gettid() ioctl$VIDIOC_DBG_G_REGISTER(r4, 0xc0385650, &(0x7f0000000440)={{0x3, @addr=0xfffffffffffff026}, 0x8, 0x5, 0x6}) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000)) fcntl$dupfd(r1, 0x406, r1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r5, 0x401104000000016) 10:03:07 executing program 3: r0 = memfd_create(&(0x7f0000000100)='}\x00', 0x0) ftruncate(r0, 0x100) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4, 0x2013, r0, 0x0) mprotect(&(0x7f0000393000/0x400000)=nil, 0x400000, 0x2000004) 10:03:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x107000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="b9be0a00000f3266b816000f00d066b887000f00d00f1a5b71430f01330f01c8440f01df0f20d835200000000f22d88f69e093550b6766410f383f0b", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 249.355916] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 249.494108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 10:03:07 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:07 executing program 5: r0 = memfd_create(&(0x7f0000000080)='#\\ppp1\x00', 0x0) write(r0, &(0x7f00000001c0)="f9b915be", 0xfffffffffffffe69) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)) 10:03:08 executing program 1: r0 = socket(0x80000000010, 0x3, 0x200) sendto(r0, &(0x7f0000000000)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x101002) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x101, 0x7}) connect(r1, &(0x7f00000007c0)=@rc={0x1f, {0x9d6, 0xa9, 0x40, 0x200, 0x8001, 0x3a7}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$packet(r2, &(0x7f00000006c0)=""/233, 0xe9, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000280)={@dev, @dev, 0x0}, &(0x7f0000000600)=0xc) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="800000000000000000000000000000000200000003000000010000001cbe0ab9080000000000000000000000000000002000000000000000000000000000000000000000000000000008000000000000b700000000000000af2a31607ba82881014b6d09dee23b9e71085bf3d3101e602e026d22857e432b768f9ee4245226143556e45db024065f4f38806993144c59a5808a8f51efafcd337653b00cc7dd6ac09dc5ded6ff3403a59872"]) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) write$binfmt_aout(r3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x1ed) sendmsg$xdp(r0, &(0x7f0000000ac0)={&(0x7f0000000640)={0x2c, 0x6, r5, 0x14}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000009c0)="d46e6d187eaeaa56706dec678dfb7fecb25a2217b68b72899770800a397e8cc03f92cc135a565a87f93493ae8e874d447266494be3d55cfe5ac3ac6ef0ce7cde3b9af6800354e1d094a92fb2d9034ed705b06321d6f0f982a2a50cf1b19f544d5e5ebc7f12140e4e9640c9781cc7ac7fdf644ac70877875acd3ba6a6fc9679dbb5a6bd9f8b2d2afe2b8a456f40d9b547415073764949bdbe5328ac4c76302d2ad260d0a307bde9785ef39787dda1f3878558abf32b3c43214f72acaa", 0xbc}], 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt(r3, 0x0, 0xfffffffffffffffc, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54ad77", 0x4a) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) getsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f00000001c0), &(0x7f0000000680)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in, [0x40, 0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x2, 0x0, 0x4, 0x0, 0x555, 0x100, 0x9, 0x8]}, &(0x7f0000000b80)=0x100) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @ipv4={[], [], @multicast2}, @loopback, 0x3, 0xfffffffffffffffd, 0x0, 0x400}) io_setup(0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001100)='team\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x80003, 0x3) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000100)=0x2, 0x2f0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000c80)) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x144}, {&(0x7f00000000c0)=""/85, 0x6f6}, {&(0x7f0000000fc0)=""/4096, 0x1064}, {&(0x7f0000000400)=""/120, 0x1078}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x15}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f6, 0x0, &(0x7f0000003700)={0x77359400}) 10:03:08 executing program 0: syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x2, 0x5) socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000440), 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000cc0)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000ac0)=""/129, &(0x7f00000000c0)=0x81) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000d00)={0x7f}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f0000000640)={{0x0, 0x3}, 'port0\x00', 0xf9, 0x4, 0x2, 0x0, 0x486, 0x2000000000001, 0x8, 0x0, 0x3, 0xb}) r5 = accept4$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x1f1e3a2ac63c00, 0x80c00) r7 = gettid() process_vm_readv(r7, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/25, 0x19}], 0x1, &(0x7f0000001100)=[{&(0x7f0000000c80)=""/59, 0x3b}, {&(0x7f0000000dc0)=""/76, 0x4c}, {&(0x7f0000000d40)=""/28, 0x1c}, {&(0x7f0000000e40)=""/186, 0xba}, {&(0x7f0000000f00)=""/125, 0x7d}, {&(0x7f0000000f80)=""/163, 0xa3}, {&(0x7f0000001040)=""/114, 0x72}, {&(0x7f00000010c0)=""/55, 0x37}], 0x8, 0x0) r8 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x20, 0x1d, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r9) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) write$binfmt_misc(r3, &(0x7f00000000c0)=ANY=[], 0x7fffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000540)=[@in={0x2, 0x4e24, @broadcast}], 0x10) getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7ff}, 0xc, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000094) recvfrom(r4, &(0x7f0000000180)=""/184, 0xfffffffffffffd84, 0x10100, 0x0, 0xfffffffffffffd51) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000c40)={'team0\x00', r6}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) getgid() fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000d80)=@v1={0x2, "5407db06da75f0b3e92e4c49c40bd67a4d54375a"}, 0x15, 0x2) 10:03:08 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000800)={{0x7}}) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x4, 0x5, 0xe, 0x0, 0x0, 0xffffffffffffffff, 0x12}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) unshare(0x40000000) r2 = dup(0xffffffffffffffff) write$P9_ROPEN(r2, &(0x7f00000003c0)={0x18, 0x71, 0x2, {{}, 0x81}}, 0x18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4), 0x1c) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]) listen(0xffffffffffffffff, 0x20000) socket$inet6(0xa, 0x5, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r5, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"d0fda24b6d61078df1a7a8bd55d8ddc6"}, 0x18, 0xd2d6e28, 0x5}, @in={0x2, 0x0, @dev}}}, 0x118) creat(&(0x7f0000000080)='./file0\x00', 0x10) write$eventfd(0xffffffffffffffff, &(0x7f0000000200), 0x8) sendmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000300)={0x0, @rand_addr, @multicast1}, &(0x7f0000000600)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000640)={@mcast2, 0x48, r6}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000240)={{0x2, 0x4e21, @multicast1}, {0x306, @random="fbdf6e1f027b"}, 0x46, {0x2, 0x4e22, @multicast2}, 'bpq0\x00'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000005c0)=0x1, 0x4) perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x3, 0x9ec6, 0x1, 0x2, 0x9, 0x5, 0x85, 0xffffffff00000000, 0x0, 0xfffffffffffffff7, 0x1f, 0xf93, 0x1, 0x0, 0x1, 0x136, 0x3, 0x2, 0xe77, 0x5, 0x2, 0x3, 0x9, 0x8000, 0x0, 0x9, 0x527, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x75b, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x9) 10:03:08 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) [ 250.463377] IPVS: ftp: loaded support on port[0] = 21 10:03:08 executing program 1: r0 = socket(0x80000000010, 0x3, 0x200) sendto(r0, &(0x7f0000000000)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x101002) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0x101, 0x7}) connect(r1, &(0x7f00000007c0)=@rc={0x1f, {0x9d6, 0xa9, 0x40, 0x200, 0x8001, 0x3a7}}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$packet(r2, &(0x7f00000006c0)=""/233, 0xe9, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000280)={@dev, @dev, 0x0}, &(0x7f0000000600)=0xc) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000840)=ANY=[@ANYBLOB="800000000000000000000000000000000200000003000000010000001cbe0ab9080000000000000000000000000000002000000000000000000000000000000000000000000000000008000000000000b700000000000000af2a31607ba82881014b6d09dee23b9e71085bf3d3101e602e026d22857e432b768f9ee4245226143556e45db024065f4f38806993144c59a5808a8f51efafcd337653b00cc7dd6ac09dc5ded6ff3403a59872"]) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) write$binfmt_aout(r3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x1ed) sendmsg$xdp(r0, &(0x7f0000000ac0)={&(0x7f0000000640)={0x2c, 0x6, r5, 0x14}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000009c0)="d46e6d187eaeaa56706dec678dfb7fecb25a2217b68b72899770800a397e8cc03f92cc135a565a87f93493ae8e874d447266494be3d55cfe5ac3ac6ef0ce7cde3b9af6800354e1d094a92fb2d9034ed705b06321d6f0f982a2a50cf1b19f544d5e5ebc7f12140e4e9640c9781cc7ac7fdf644ac70877875acd3ba6a6fc9679dbb5a6bd9f8b2d2afe2b8a456f40d9b547415073764949bdbe5328ac4c76302d2ad260d0a307bde9785ef39787dda1f3878558abf32b3c43214f72acaa", 0xbc}], 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt(r3, 0x0, 0xfffffffffffffffc, &(0x7f00000003c0)="3b58a920bf133167868ac62068fc4e462d4a07411fd71b0caed0cd834ee0dda2d8c7f84350d0f0417e40a74997367f288a17271e00d8d4b8dda68c21108edb69527a3c370d4e0f54ad77", 0x4a) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) getsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f00000001c0), &(0x7f0000000680)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in, [0x40, 0x0, 0x10000, 0x1ff, 0x4, 0x0, 0x2, 0x0, 0x4, 0x0, 0x555, 0x100, 0x9, 0x8]}, &(0x7f0000000b80)=0x100) ioctl$sock_inet6_SIOCADDRT(r3, 0x89a0, &(0x7f0000000100)={@local, @ipv4={[], [], @multicast2}, @loopback, 0x3, 0xfffffffffffffffd, 0x0, 0x400}) io_setup(0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001100)='team\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x80003, 0x3) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000100)=0x2, 0x2f0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000c80)) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x144}, {&(0x7f00000000c0)=""/85, 0x6f6}, {&(0x7f0000000fc0)=""/4096, 0x1064}, {&(0x7f0000000400)=""/120, 0x1078}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x15}], 0x8, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f6, 0x0, &(0x7f0000003700)={0x77359400}) 10:03:08 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:09 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:03:09 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x31, 0x40001) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f00000000c0)=0x3) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x402c4580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) [ 251.168808] IPVS: ftp: loaded support on port[0] = 21 10:03:09 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x0, 0xf95) getsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 10:03:09 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000380)='/dev/media#\x00', 0x4, 0x10000) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) 10:03:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x40403, 0x0) ioctl$VT_RELDISP(r1, 0x5605) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x73, @loopback, 0x0, 0x2, 'lblc\x00', 0x0, 0x0, 0x40}, 0x2c) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) socket$isdn_base(0x22, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x6d, &(0x7f0000ad2000), &(0x7f0000000080)=0xfdd2) 10:03:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0xa9d0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) 10:03:09 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x12714, 0x2, 0x90000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_X86_SET_MCE(r2, 0x4080aea2, &(0x7f0000000100)) 10:03:12 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x3fffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000240)={0xa, 0x4, 0xfa00, {r2}}, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x2b3, &(0x7f0000000040)=[{&(0x7f0000000000)="240000000b0607031dfffd946fa2830020200a0003000100061d85680c1baba20400ff7e", 0x24}], 0x20000090}, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000280)={{0x77359400}, {r3, r4+30000000}}, &(0x7f0000000300)) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x8) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f00000000c0)={0x2, 0x3, 0x3, "f0fe9c90acb4bbe42544b4780217a9bc1434dc0a0350b6420d4430710da2bcdf2754da99f19f46c29e0ee3e47e9dd64bda027f78bb67995b5e3ed511", 0xf, "3c22763d8271877ff34e7cd74381b7b19cde19c200331eb57f0be6c7d886410487247bc911fe8f44c5e6ade3edfb5ee9a61b3ebfb5aa08693c7f4733", 0x40}) 10:03:12 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:12 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80042407, &(0x7f0000000040)) r1 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r1, 0xc0205710, 0x0) 10:03:12 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$TCSBRKP(r0, 0x5425, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), 0x0}}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040), 0x87) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f0000000140)=0xfffffffffffffe8d) r5 = syz_open_dev$video(0x0, 0xffd, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x2, 0x76a, 0x40, 'queue1\x00', 0x7019}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) 10:03:12 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x40403, 0x0) ioctl$VT_RELDISP(r1, 0x5605) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x73, @loopback, 0x0, 0x2, 'lblc\x00', 0x0, 0x0, 0x40}, 0x2c) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) socket$isdn_base(0x22, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x6d, &(0x7f0000ad2000), &(0x7f0000000080)=0xfdd2) 10:03:12 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000001300)=""/4096) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000100)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x2, r2, 0x3c, 0x0, @ib={0x1b, 0x5, 0x8001, {"846d703d7494cc07861abb95b435d8b8"}, 0x100, 0x7ff, 0x2}}}, 0xa0) r3 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) r4 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r4, 0x1000000) sendfile(r3, r3, &(0x7f0000000040)=0xf10001, 0xeffffdef) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000180)=0x1) 10:03:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0xf4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000280)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000002c0)={@empty, 0x1f, r5}) sendmsg$nl_generic(r3, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x6c00000000000000, 0x1400f30b}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14d626f8b0cee6d342a194b0239e2ba800000022"], 0x1}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f00000014c0)=r4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000001780)={0x0, 0xffffffffffffffdd, 0xdf, "421f0ec759a98d9b5fb157c64e5b5c0b740fd74101b949f8f6086b868400e64d1458d9ca2d583f998cc5cc7be4eb7fd206856f9b103f990513f5bb04e0b509edf3e715e4f3dc3a6896c45860a9fdb6d2d41e2cb277729d1aaf632086ed57a9d585a813a96837e19c2078362e4d5d9a2390a8c4b698b51c79f87642b328b90fbfbcb8d4d9114c158301000000a00546c0e0630ab7876e32c754028a4f3353c00e121fcd8b4654aa953ff28df78ef02caa7a9a893f395c0d48849dd3201432f9bbbd8ba3b62e42882d9b4c63ff6bd000674a807e28e8c4d1b74e73ca7fc6079f"}, 0xe7) ioctl$UI_BEGIN_FF_ERASE(r6, 0xc00c55ca, &(0x7f00000000c0)={0x0, 0x4, 0x1000000005}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000001280)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) syz_emit_ethernet(0xf2, &(0x7f00000015c0)={@empty, @remote, [{[], {0x8100, 0x8, 0x1}}], {@mpls_uc={0x8847, {[{0x1, 0x100, 0x8, 0x20}, {0x8, 0x3, 0x3, 0x5}], @ipv4={{0x7, 0x4, 0x8000, 0x4, 0xd8, 0x68, 0x4, 0x0, 0x21, 0x0, @local, @loopback, {[@cipso={0x86, 0x8, 0x5, [{0x7, 0x2}]}]}}, @igmp={0x22, 0x3f, 0x0, @broadcast, "1dd8388694509d1509782604dd800d60c6e8c9b1e345bec5219e1ed648666ba4a1aff6f4deb533903cab59fa867d72a4d82f79ca8282073468d85c9a73095c7e58c39c2d4a4d0c4223df17945b191c35556d325295874817593852ed8bb7294451706241954351239debec67c4e168e54d1fb716398e2155ee813cc6219e7a9a1ac29392a37292e580883b98f295842b28276bd600edf9cc779d855474fb2450d1a0f8088b77aeefb98e035866c9136e0fdd4ace"}}}}}}, &(0x7f0000000200)={0x0, 0x1, [0x2e3, 0x9b6, 0x287, 0xf49]}) fsetxattr$security_smack_entry(r2, &(0x7f0000001440)='security.SMACK64\x00', &(0x7f0000001480)='vboxnet0\x00', 0x9, 0x2) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) stat(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001340)={0xffffffffffffffff, &(0x7f0000000300)="94b33835a6c3143062f3161a1940f5aa63b99481ec8a552f1e1a36fa9d1af0817836534f8da97396aeb2db0f807e7b73a192a329f9ed5fd05a1a9d74799fc8888c16c0043e88b49215dac7557d091015e5e91b78bbeeb3bfeec16095b6f802116d167f97c8a0bca772023b83a8f5fa553908180b3d43d61fe57618bc794ecf4245da635e1afeb9f9ed497aea5e9dfc87911e51da5f47179aa8bae7bf94b41360f92e15ed262db70e36408d080056061eed7ea83c29048d20df5d35e097e7113dd54f7fd51a4f3512be16480b397696fa7f20cc8c4580b8e69ace75882eccc6590531aeab0919855e62122aced61a66ab91753ad158341cf81a72cd8dc8d30074e02bb244913d9fd30ed05089b2c62214e19ae42a64d1f00c8a9462c2aeaff73d3de57cce08ed782dc5969075bf808c3d2c70c069348f86a11f82b68a3525ac7a77c0c46a1142e135602c2449c904a37d347cbd4260b22b6fea433877ef74f356b67d3a5497c218f814d8ab8226fb2f93652be8a5e49e853d9b7c925983a40bcbf90e6a351bd6555e6f41c5f13e1664af843057f0f2c6bbb46ea36882c2b0a82295c4a237c50be890eb0936acc8732667e939670a8f6e96bd6f263080216303d6749a58f92bbf1862f2c9ee8206d4a430ac9055d6750d55b3308df5909507c8846c62754fcb75379993b87b37bd1a3366ff1e60553ce058408276c2e38ed10f6df07badf18c44ba42bf7b2063c3be4948d50c8b1024546c2d1566387b268303ae05fd6ac3584359f82fc9fd3fb8c20d4fe2f08f2faccc90069d39e23f472f987772c80cd2bfd6e00caa1570da56cecd8abc69ede6136841bdb4454404cf49a037306db2630674e28e63005d52b8e51f56104afe26dfecf237134ad3499d167ca8cab87b754e583434ef768c13d8fe18ac5d9c3863227aa7af780db53e90069ff1c645359678a659d18f36f8e68cd2c58d0cb13d5e2579cbd6524b9feca4cb85947d69d12fab4b1509bfaaaad8751cb93cdf8ca6953d01dffdd80b8568d0d517e90a0fee70d42e0642fcab78532d918f59a2bd3cd497e30fdf537a770fecd17b2c95140c8682f3ef8f81107ec23994f0fcec99b7d7f61a659aa0f55bb84ad4fc1e9854e2a65f5a662b435e7171f1bc7d83cfd28aaf431029f3c7a4512c0b7e1c1381919c9848322af319c807b859aedb2aecad996406dccefb7e77a338ad5742aeb56fae7e24b33b508d04cff6cbf25d82d215971635f6816c23c5c20b02af225c3c8c190713581ab8cda4bf92ca2953a9198a22b005d5fa54b7a500c13985798f6d210749a504af07dc9d577f433383d36e83879648a4164315c7aee85a80287b0a4706d4213e72dfaffecec6e7d45eeabf650eb5ce3189b08652042d7d81e7b24b49c1c26c925f4f3e9efdc37f35859c1a62ffe03790e375e6652d3a03d6b4251e45f502df7f73fbe98926408312386566fc1f9cf419b15eb6b191a0263d6b64974492e3970e7c58638e77618cef05a9aeed2a58b3b50d96b838ee0678ba41eae5442256257baabcac42dc0f473ee51b32e1e7d879a173ad69dbab958a691ccba59a9e26a9c11f8e769edb67f7f79f17ba417fd3d391e051b6c67ff57acea163803cd8f0598eefb03520047ace0fff054dcbbcc5d3a45fb7f1b0e307c163a0c671255de286e6e2a46a2880578f060f36f95b081bb1e7c1644d21a126c8e46bb44120e78d0b2a327943721966cd79d638c6096de5c11375852982476bdc647d28a33bdb5d0e036578271266dc2c952e444f83ace43c1342d85df4dd8dca1e264ce14ff87886906172abde4cba0dc963c0d75ba41b7baa55c6468976ca0b09a6b6ce372ccae80a237108608a06bcdf794af03ed9cfe4760c5563e9f64737a4d90fb99d5dff87baf80a42318c1c980814e3a82118b939355afe362352c8e1c26b7b2f3e686acc6831f4bde89ee5297a6608645d7194400f5bbf83d157253bf316386c9de7df2d3abc23af283771b2f75170360aec1b018382b654874d10f9ea228096ea6405f8fd977880f8693db59c8d8d730b8a63be55e1601c0d602daed2b5c5a5a8da2dceec374f681c186c1926673dc9d8361c848c96553e067e1c16efd613c5df11813edbcb432ae8141194300e96b3c5ebe03208571d1e28d49f61a5259c6656cd52e8ec1a1f76b47421c14ef194cf68e5411c9cd4763a5ac6a63a36456e07dd30c559ed8904c4154f5d9f6af4661bdcecfafb71baaac30c8e0788a492c594b200456244c64bf460ac757cbc40f472b97d958f6a30de706f6c90f24c2d32299d23f839ac3044885d64d6da1a27d1784edb5c837dc6e7a64e88c42294defe4cf74008a3bc67bf4dfa33e315419cc52597f59b943bd1755c9d2eb02cf3e237b458601196ab402ef93197944fdf0555627dc2dda66bab01542b8ef3a6d168332712313425dde358fff77457254eea7006257badbfae3eee15e812923bba89e77aa1c990ab743dcc7643814c2b15f423de81a5e4269d93bdf30defd67435f67fbb10a872c614adc1459e7f64a671dc1ef76f717e39aa50674018db3c052d0232b5b7f6f06b4e1518e954c09320116f0b7875c3f1d9cf73b2870b802cc21c9397a2f739fbfd61eae2bc2ae9bb9cb6e8e24941973d58a41d233fd1ee7794a30821436b310425f1dddcbcbc297959560d048eceb89fa38e7376cdfe276fdf81d0f508a418c366a7eecf48315545a49cdfcf3c26c6257faf12cba844426a88ef50556283977c568c4613a6e8bac7b841d78a58cd129947f1a977524bf97957ba5b3493cae78f46d76068e9f211b76d0dd9cd9098a67243809c672a561db04b3b86560ded05a9e77bd2ed164d59c48a8d2abff267bdca142d2a9254c3537b364e968b0d43869de2be1613b55d4aa57201c26a8b467467c7a875cacfa6cc2e365b3682c6d19c406b71fab9835984f4626c6acb0becd37b7d02a4541e6770d782f72435eb8af701cda4129d9b9b1d155cd0b2465d8dd76b03557e080a91c94a61c1524f3816937f2a73c494d7b3f3b0c58538d88a29ac4da0fa681736836364b09fc515e2bf93128d2d93378c1d5cc6d9d4e8ecd2f59e14342151b2dbd638dee9376173813d6b286a46fa062c55babf27c9e3c30ee01826e7866bb6821379ac13e67401277cc54c46773532d4b621d4937e8cd3836f276b0c0cbe07b772b7334c4c0b26c4d1a1492faa3fea615d3a33f1e701acee02899ae5b8f12f8b45fd86b86cc4df1852795476555b23c3eb58a35a3ca3f909d0202d098dbf6a3f4450f176db34e97cbd7a9944ab0074c144fef17c20cb3ca7427f5beeaa5f10a196ecc0afec54e56dd47d7eefbace1a98a0b39cec771b03b7916e1d9f616106ab8b71914a53506e5606009e80b116c3a789f570bb3de04abeaa95cd2a7bda05acb3f0f8ddc7b8ed8f811a179cb613526bf716847520ab3e8ba5b06ce200e01a420c491ee26d6b8ae30bf19c751f030edcc492d594d219aab4187bc4cd88693ad81bcc4e6230ea272e40e43e18c4632772ac8cd30321ea02cfe01c68dbb9ed0330fc250156647495779c328e12fbdc07380db75ccf2c1b484c8bf721f94176e72fa4c8c222423d632f857fdf272bcc9818450cb5c78ff61dac2becc04520cdae6fbc64af5db57137c3f05f67056af6a85d50fbbefe50a9c582222fbd19e1122bcbdef5492d0377d82aadec66d7c198755dfb5a774dd9ab464c2b9f91ab194c22deec1beaeb830228463d2f51dcb5751763f630e4930dbddbb4ca6dc847f57be66a73b82bcbf2bfa71b5bea003f24345e5e31a752654893c4d963fc9719400b32b9dcce997b995597c882a77e11f49e7bb65f22a5ee95b3c918bb77f4f1f3270d9fa60ff396e72252c14898a538911c41eecbcb91d49a097551da8d853981db99aad6103d72c836cdc162f3a9966ff17a208cc3ffd53e50478b16b067af63aeb7de70eba193319f9d86b8b46267f347a23cea63f08c06054c4448ac666692e14eab91f2209b3b901e9a717833377b52a1649190f82eea89f4a7eb5c6c74c471ae1a1484480a0a776d97236c5e6859cc74880511e6312eaf65dbb347d21fc9f123ba5a8113e311b9c499c57f15e7073d0f0e368f75268f7d0bf9676b38df9b1fb55bb4e8a7bfc8f63a982e64b273486a3d2a6865344c972e67ea9ab7d9ab9e34d6f44bf1573fba2d019956e1eb52e85ba4d26d78bb11969d0c2837a046e073fb4a0727f16df93e030acf195af8a608b7ce979416cb317731e1fd5615c2211397c8f5dec3a9598c8898f66bf12a3c4cd34790c15a865d1e06c27372cfd5aa7689348769aba66c41c934527cb32586b3718b7c70458074addc54b5017d82ead12d1fbd0939c620772d348c2886c42ac9ba54fb3864f541863d60ffb6da53ed257e829e8a92e65ca3800190d9796f6850cba9bbd27054752552c3f98e45659fdf41fc1851c834296e92dfeb5b936efdeb610a69c71049a2da2e65f08686c435b4b5adcc73e6ed2b97c640fc59ce70a3d5447c055772e6f8688e795dc7ec7e938673361b1fb19237c36f5914d6018f9b431492d14fc23e31ea007a2c38e88d059f0a3990ed58643e13bfe34a57887cfc558a5f40370c857ab61ab8d53ce1a1ed22ee214250c0e2bdf11e4d3de75754e65571f5f99c3129f2ec5161fbf3030b6a487e8c245f5bd520b3b5ce441af1e1ca49f24094a90f993b200be2f0ca71a418aec111318b64dc6897ff9d9c4ea7b51407131bea899a0d6129ec7f0e1aaec0450663642a0c75d7be7854ffc3f25f71c2de9f9f0f618a6825adea0b17404129d21707a91aa774048614c2d97caef0ac59e7817ee67c41543a2fbbd62797c1f900df3a0d9b5ce7ac8433f9c8d768b9bd3f87551a3e5c6b14d7b48c6d2c59c6423414835e918aa07df16fd6259dc92655d760fafb3c2d06e3c1e7294b0c5ba821588d66cfed5362a650eaaf9940ab4dcf9543af19701f637ef3bc1fb94ab59067171b0ae61328dfcb4d71f1b2e739ee54e9585f188aa7840c79ec5808e8f4c102f31b2c6640ebf470e320eeeab8dddf56f3c6ec50fa9d1a6c6cbdbfdd05e461d154c593f968851608d83f2adafb4ac218adcf7d59a5485796549a78fcf3b210c8c8abcf08faae33f49ae9c2e3ea0044eb0c194ef4268592d3f5c53ac77292c80ae74c132609bb07f7a9efe13c88cb65c8dc44a284196027e9b1626878daf930db7d86063f871f4262cb686347ffae5cecc3ba34364500522932c294f97fb2bba7e2be0af4a4d143c7b758b51c47a5c82f9200be3f3102de15a34433d0b3e22fc534195c134d04622f5254c614a69fc9a60dba97d096fd9c05807f4fa020c67083834bf17b8c560d8e16b9fd1c121926333d5b98103d860fd834dbea4e7ad3b782db5c8e7b383c3abccfe9456d", &(0x7f0000001300)=""/41}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) socketpair(0x0, 0x2, 0x6, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000001700)='trusted.overlay.redirect\x00', &(0x7f0000001740)='./file0\x00', 0x8, 0x2) getsockopt$sock_timeval(r3, 0x1, 0x0, &(0x7f0000001200), &(0x7f0000001240)=0x8) fsetxattr(r0, &(0x7f0000000100)=@known='trusted.overlay.opaque\x00', &(0x7f0000000140)='userposix_acl_access\x00', 0x15, 0x0) 10:03:13 executing program 5: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280), &(0x7f0000000200)}}, &(0x7f00009b1ffc)=0x0) timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) tkill(r0, 0x1000000000016) creat(&(0x7f0000000000)='./file0\x00', 0x0) 10:03:13 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:13 executing program 3: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000002c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x80000000, 0x1615451bf1bb3328) prctl$PR_GET_KEEPCAPS(0x7) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000140)=0xffffffffffffffff, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000280)={r1, r0, r0}, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={&(0x7f0000000300)={'sha3-384-generic\x00'}, 0x0, 0x2}) 10:03:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@setneightbl={0x24, 0x43, 0x200, 0x70bd2b, 0x25dfdbff, {0x7}, [@NDTA_THRESH1={0x8, 0x2, 0x3f}, @NDTA_THRESH2={0x8, 0x3, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) prctl$PR_MCE_KILL_GET(0x22) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', '+securitymd5sum\'vmnet1bdev-proc(^trustedGem1^]\x00'}) 10:03:13 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000080)={0x6, 0x0, [{0x0, 0x101, 0x1, 0x7, 0x7abd7e0f, 0x9, 0x7fff}, {0x40000000, 0x2, 0x3, 0x1, 0x8001, 0x3, 0x101}, {0xa, 0x9, 0x5, 0xfffffffffffffff8, 0x7fffffff, 0x6d}, {0x4, 0x9, 0x0, 0x1ff, 0x6, 0x2, 0xfffffffffffffffc}, {0xc0000000, 0x4, 0x4, 0x5, 0x2, 0xebf, 0xffff}, {0x0, 0x74b3, 0x1, 0x1, 0xd, 0xfffffffffffffff8, 0x7}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000180)={0xa9, 0x3}) 10:03:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:03:13 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x91, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x1, 0x0, [], &(0x7f0000000100)={0x98f905, 0x0, [], @p_u16=0x0}}) 10:03:13 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x12, &(0x7f0000000880)={@remote}, 0x20) 10:03:13 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='autogroup\x00') fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x7) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xc2100, 0x0) 10:03:14 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x40403, 0x0) ioctl$VT_RELDISP(r1, 0x5605) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x73, @loopback, 0x0, 0x2, 'lblc\x00', 0x0, 0x0, 0x40}, 0x2c) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) socket$isdn_base(0x22, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x6d, &(0x7f0000ad2000), &(0x7f0000000080)=0xfdd2) 10:03:14 executing program 5: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0xf5) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@multicast2, @local, 0x0, 0x1, [@dev]}, 0x14) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000026, &(0x7f0000000380)={@multicast2, @local}, 0xc) 10:03:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00063f45d5647c58b8f3a8000003060501ff0080f4ed0f589e49fcd53c0006000000f40a06010c000200000000000000090000000096ade3d3f507cf879f1662838244cedb854bc18f3f2416b4c0c0122aab755ba3736831155145bf6c0aeb9cc431b7a7f9df8cb9cc4884df42021c201de85abea2bd2d6e87bb287656f2dded8a14c9023e093f54676cc08c32f09f1af5289f"], 0x2c}, 0x1, 0xf0}, 0x0) 10:03:14 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:14 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getitimer(0x1, &(0x7f0000000140)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40840, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000040)={[0x1, 0x6004, 0x0, 0x6000], 0x0, 0x80, 0x4}) 10:03:14 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000400)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x1f) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e23, 0x0, @local, 0x7fffffff}}}, 0x84) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000003c0)={'ip6tnl0\x00', {0x2, 0x4e24, @loopback}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], &(0x7f0000000380)=0x4) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, r1, {0xfff6, 0x5}, {0xc, 0x5}, {0xf, 0xfb3f4f2faede5e10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:14 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='\x00\x00\x00\x00\x00', 0x2002002, 0x0) 10:03:15 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000000440)=""/85, 0x55, 0x40) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x0, 0x0, @remote}, @in6={0xa, 0x4e22, 0x4, @mcast1}], 0x38) r2 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x101100) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000300)={0x7, 0x3ff, 0x0, 0x1f, 0x0, 0x1c43, 0x2, 0x0, 0x7fff}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000004c0)=0xc) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x8, &(0x7f0000000500)={0xffff}) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0), 0x8) clock_gettime(0x11000000000, &(0x7f0000000100)={0x0, 0x0}) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r4+30000000}, &(0x7f0000000240), 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x1000, 0x81, 0x4, 0x0, 0x5, 0x8000, 0x0, 0x7ff, 0x9b41, 0x9b6, 0x1, 0x1ff}) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 10:03:15 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x4) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x80000001fffffffc, 0x800007f, 0x0, 0x0, 0x40000000000, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x2, 0x40) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f00000002c0)={0x7f, 0x20}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000980)}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2f8bb5f5ea660ae3}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, r3, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x70, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffeff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x5}, 0x4800) ioctl$sock_ifreq(r2, 0x89fa, &(0x7f0000000180)={'sit0\x00', @ifru_flags}) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='iso9660\x00', 0x80, &(0x7f0000000200)='@\x88]mime_typeeth1&^vmnet0*md5sumGPLmd5sum$:posix_acl_accessnodevlo,)cgroup\x00') 10:03:15 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x8, @mcast2, 0x101}}, 0x3, 0x20}, &(0x7f0000000100)=0x88) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r1, 0xffffffffffffff7f}, 0xc) 10:03:15 executing program 0: modify_ldt$write2(0x11, &(0x7f0000000000)={0x100000000, 0x20001000, 0xffffffffffffffff, 0x7fff, 0x3, 0xffe0000000000000, 0x5, 0x48, 0x80, 0x800}, 0x10) r0 = getpid() r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x101400, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x9, 0x80000000, 0x1000, 0x80, 0x0, 0x3, 0x800, 0x1, 0x63dd, 0x5, 0x10001, 0x3, 0x100000001, 0x819f, 0x6, 0x5f, 0x9, 0x5, 0xf, 0xf18f, 0x4, 0x0, 0x100000000, 0x6, 0x49d, 0x401, 0x80, 0x6c, 0x8000, 0x2, 0x40, 0x100000000, 0x7, 0x9, 0x697, 0x2, 0x0, 0x6, 0x5, @perf_config_ext={0x1ff, 0x5}, 0x20004, 0x3, 0x5d, 0x9, 0xfffffffffffffffb, 0x9, 0x80000000}, r0, 0x4, r1, 0x1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r3, 0x22, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x881}, 0x8881) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x22040, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x4, 0x1, 0x2, 0x6, 0x3, 0x1, 0x7, 0x2, r6}, &(0x7f0000000380)=0x20) ioctl$int_out(r2, 0x2, &(0x7f00000003c0)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000400)={@loopback, 0x1, 0x1, 0x3, 0xc, 0x5, 0xfff}, &(0x7f0000000440)=0x20) bind$pptp(r2, &(0x7f0000000480)={0x18, 0x2, {0x1, @local}}, 0x1e) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f00000004c0)={0x1ff, "d27b096db9aef0d22ad22e913373ac6d81c55505108d50bd9d41197a6187d6ec", 0x2, 0x10, 0xf4, 0x2, 0x4, 0x0, 0xfffffffffffffff7, 0x4}) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40047705, &(0x7f0000000540)={0xafc, 0x6}) connect$pppoe(r4, &(0x7f0000000580)={0x18, 0x0, {0x4, @broadcast, 'ip6gre0\x00'}}, 0x1e) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000900)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000a00)=0xe8) lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)=0x0) lstat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getgid() getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000d00)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000e00)=0xe8) stat(&(0x7f0000000e40)='\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0}, &(0x7f0000001740)=0xc) fstat(r4, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001800)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000001900)=0xe8) r18 = getgid() getresuid(&(0x7f0000001940)=0x0, &(0x7f0000001980), &(0x7f00000019c0)) stat(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001ac0)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000001bc0)=0xe8) lstat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000001dc0)=[{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000640)="d037ed68ee768a39d189891fdc84e3d95c5e20cabb2c38498bd7cdaa7d7c870c772661d6e3276b541b825521dee7866c0b193dbe030c6df2deff8b02eea3e94e63a1953c57dd2c7106d53a4d8f4e33f327a435cd633a4572bef5abedc5808c48", 0x60}, {&(0x7f00000006c0)="b052043b9eec7be357ee20dffaeb0f3e8e085fc0bbc4c767a0b3d29f17716fd14f2b1fd95e40f4ec412f4d2e3ddeb12e476ea374f97ffcb77bf5f74ace4f8bc025cd2e2df3be2056022f1b4e5b8f20661ed5855e7dde4d243a4e79f6ef60fb267a1060cad393c54a28c533a33852820256f722178dd5f41d593bad13d3d7743a657601d35a381180117b77c3b6b65d99e51b943a2e0b81b0d30d20465eaa5bd5a41982dd60fcba72768122856abefd1ecfb5deaad40989dfcb867ddc570b232e6182d7c41bbbec7f260ac732a267158ec4ed11ef4067df4888d1d8717a4f84f9f88a7e5f21e8e36918", 0xe9}, {&(0x7f00000007c0)="d2d3c5e38b5c293061f1643f7acc944f56864e210b14daa5ebad6a3fca31b1a97013d2b57c9afd503062b18b9ab7f75911cc3dca9495b78ef09a48e93d357de8946e23e713a01c667e91cb00ffad4e84c6c725fd8c9201b04d077f7c5ba42f1f8c2571157f2b2bcf6a4b9f", 0x6b}, {&(0x7f0000000840)="b40e8c9496f05f31aedf3fb84c274c4b26a0a98fdce15699dba169684397c53232ec522924add48588568b3a4375e2ae40bda02495127b7ff0635a3025c1789819c0ee5f3aef4648674bbe215c28b82b2986540e171b1e726b841981db77c759adf6", 0x62}], 0x4, &(0x7f0000000f00)=[@rights={0x34, 0x1, 0x1, [r1, r5, r1, r2, r2, r5, r1, r2, r5, r2]}, @rights={0x18, 0x1, 0x1, [r1, r4, r2]}, @cred={0x18, 0x1, 0x2, r0, r7, r8}, @rights={0x1c, 0x1, 0x1, [r2, r4, r1, r5]}, @cred={0x18, 0x1, 0x2, r0, r9, r10}, @rights={0x10, 0x1, 0x1, [r5]}, @cred={0x18, 0x1, 0x2, r0, r11, r12}, @cred={0x18, 0x1, 0x2, r0, r13, r14}, @rights={0x30, 0x1, 0x1, [r5, r4, r5, r2, r4, r2, r1, r2, r2]}], 0x108, 0x4000000}, {&(0x7f0000001040)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000011c0)=[{&(0x7f00000010c0)="392890e3b0abbb6c8bc9460b98dc077ad0e2079bb4fb68df1d42a01f84795b2536243995aa9346b94bfb40a442f2b8b2e92402854c01259150593f16934df19f10198fbc69212e80d19347e5259e37c8fa8c08073b6dc320d9837d9ef385a18cda248cbc65d5962d6d71c9aed77f547b366668baaf4ce205ebef5d2257077fab360074cc29ddf1ccad5e543315972637f102e4fe1d28478a55044e639bf985347e4164e50b7a1730c16c8d8aa5a27309e5ff258b73aae69d763392e19cd3cba7c3308b2b071fa6a75b7792366fe84f0f6cb052ab92b9b4498c5770", 0xdb}], 0x1, &(0x7f0000001200)=[@rights={0x10, 0x1, 0x1, [r2]}, @rights={0x2c, 0x1, 0x1, [r1, r5, r4, r1, r4, r2, r2, r1]}], 0x3c, 0x800}, {&(0x7f0000001240)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000016c0)=[{&(0x7f00000012c0)="0498225b36a6574c0d52295f6c947f0fe0ba8bb5cff1733c2ddde25e6cb0ddfb651bfad5de5c55e70db089fa603eea90a4cc2319fb56af4696944aeb6f13683f545f9f859bee40c458b1a7370183bd2fc1b74149e540db4aec3ae47f85323409bd59b9d22b37c73f412353b5af96406599b84a4598c7eea21557429134e463abd591978b3dc2452a941302f543a0a9e84cd536fd5fb84cb4cc549b0fdd0af8e37dde4decbd630eb2ccd9e6e308ef3d029e420204fce03ea596dfb35366d8cccba5148f3d3b4bc34a725f079cd6816dfa", 0xd0}, {&(0x7f00000013c0)="727a68eb7fe7929c6cca18c2ae1bc563dae10e190b36f504e52aef92180e8bd7cf8eab68e519205daf59d055cacb746d7ab9aa6e93d2d3235f73ba78b66dc7b45bce9ea9e4bbb1d637fd980d6d1f5ad606d4b9a50b7e15222ddacb9018d1a5e6aff8a1e973146e8bc223f1229b3c5f38aee3416148239d0e1ace77af1d3abc3fbdc83c0dc53db4d7dd5c3b1967c308708d4525e41d3ca4eccea387b7810ae3eb0a2c6a4e5b8c32c364ce3e53aa86c8391cd8e0ad13404c203c1d3cec9e1998b1700fba6139b036a0dc1acf5d0ebde203a36e2867233420d0d27545c4a83060e339db1b8566b94c851de47cbc66df8f0e", 0xf0}, {&(0x7f00000014c0)="14533cbd17a5554bd6eaf4ed9ee44189af5e44f89386de3a6778741694b1de08f390225a9c826cf0a435590163d90d73f0b5de019dc815b61b9938b433324620e1d7ce682fca5fac7ce8837fbdfad22a", 0x50}, {&(0x7f0000001540)="43c6e9edc30cf88564baf556ba9ec73119b59534e00ceda7edf54ea8adce8229150b7e93749ddcd7c2678ddae3bd2388c14a360e8b9387bed58a170d3b44673a073df5031a48b3b55d1875631f881a1766134371db4bf9224ebd407eb96112fb1f03597f81821c9c05b9c96681525c0c152d23a2b9cff776a9e23473872643a78b388f4f867b41feb81e4d5e", 0x8c}, {&(0x7f0000001600)="ea576da160d8ff1fc6fe2ce8e44a73535d19a05504a94e8201ea330e71a35ac7890d0135b325e1561f2ad4a77751f329ab7e4f4b89b8f6ac7b8b79dca687b4447146edd7268723b34eaa13f3692abdc0e5be6a798c64d42113a6ed203c1b25bc8fc5e5a5b752b8b9db3ab92f1385c678b782bb96a22c7722fc13bcf9459575971e93df9d6b5abd0b5c75d6355e413a855ace8580aef68f27b30ac7d65cc1b804782efa366d258dac67ae91f63942c9d743e570a30764555efc", 0xb9}], 0x5, &(0x7f0000001cc0)=[@cred={0x18, 0x1, 0x2, r0, r15, r16}, @rights={0x14, 0x1, 0x1, [r1, r1]}, @rights={0x18, 0x1, 0x1, [r2, r1, r2]}, @rights={0x24, 0x1, 0x1, [r4, r1, r4, r2, r2, r2]}, @cred={0x18, 0x1, 0x2, r0, r17, r18}, @cred={0x18, 0x1, 0x2, r0, r19, r20}, @cred={0x18, 0x1, 0x2, r0, r21, r22}, @rights={0x30, 0x1, 0x1, [r4, r4, r5, r4, r2, r5, r1, r5, r4]}], 0xe0, 0x4}], 0x3, 0x4000050) 10:03:15 executing program 5: r0 = gettid() openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() sched_setscheduler(r0, 0x2, 0x0) setitimer(0x200000000041, 0x0, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00'}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x15, &(0x7f0000000340)=@filter={'filter\x00?\x00', 0xe, 0x1, 0x0, [0x0, 0x200005c0, 0x200005f0, 0x20000778], 0x0, 0x0}, 0x50) 10:03:16 executing program 1: r0 = epoll_create1(0x0) flock(r0, 0x2) r1 = epoll_create1(0x0) flock(r1, 0x8000000000002) r2 = gettid() r3 = dup2(r0, r1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x19}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000840) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 10:03:16 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:16 executing program 0: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x2001f, r0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="8dd4af51ea5587ab5a7db8992ba58ca267f755d331ded7621055d11086935c19371711f1de301888fbd46a9525", 0x2d) pipe(&(0x7f0000000080)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xfffffe02, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000008000)={0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, @sadb_x_nat_t_port={0x1}]}, 0x40}}, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000000000000070000000000000091fdffffff0000"]) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x74, 0x30, 0x2, 0x7fff}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000280)={r3, 0x8f}, 0xfffffffffffffef7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000$user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, 0x1}, 0x50) poll(&(0x7f0000000140)=[{r4}], 0x1, 0x5cc5) r5 = open(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000001000), 0x1000) open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000001000), 0x1000) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000500)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) getresuid(&(0x7f00000003c0), &(0x7f0000000600), &(0x7f0000000640)=0x0) getresuid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) setresuid(r6, r7, r8) write$FUSE_OPEN(r4, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x2) 10:03:16 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = dup2(r0, r0) ioctl$KDDELIO(r1, 0x4b35, 0x9) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000000c0)={0x100, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e20, @rand_addr=0xffffffff}}}, 0x104) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3061770000000000000000000000000000000100000000000000000000395f0116d5e55aaabcdf0338bfd16b509a760261bd809f2202309d0fb1ed009d046bf1cf255e3fefd14bb12307070000008ce65def59636abc465d25557aa9110b4b7ac6abdddb17b8e00605c559319c4c63020f16d7132024"], 0xb) 10:03:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) fadvise64(0xffffffffffffffff, 0x0, 0x6, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000140)) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @remote}, 0x2, 0x2, 0x3, 0x4}}, 0x28) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x8000000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x58, 0x18000) 10:03:16 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xfffffffffffffce0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:16 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000000c0)={0x0, @bt={0x2, 0x3, 0x1, 0x1, 0x6, 0x1ff, 0x40, 0x181, 0x997a000000000, 0xffffffff, 0x7, 0x5, 0x10001, 0x3ff, 0x0, 0x38}}) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x0, "8572f8762defa051f68a627a39979e4218edb9fa0a17bd8dcce215c17025f13c", 0x0, 0x1202, 0x0, 0x0, 0x2, 0x3}) 10:03:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002a40)={&(0x7f0000002980), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000002000010000000000000000000a0000000040000000000000040000001400110076657468300000000000000000000000"], 0x34}}, 0x0) 10:03:16 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x5, 0x4, {0x1000000000000001, @raw_data="883d24b91e57e886fca466088baf5f344209b2ad8ff2fc646b40af17a5d6edc8b93b458ee535075ab6255500490203eeaf583bc7a60e265aabd7e9ecf30a465123c224323d7b491b3766360dc1b9bd5fe8f1de70928c443c0db7e303df5f9bb3e419088730b48f7fea5cf3ecae85e2191e973262f5b50eb5cc802f9abd23442b2dc48bd1aedeb8c94f012b8e1cab645f9797e4ba66c8b015291899a8e028010013acc1d1425afd2c36bdf7846a0f4e9b5817031598f56733e9190211c7f7213d3e1efa442647df93"}}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000280)={0x0, @reserved}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000240)=0x1) 10:03:16 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x100000000, 0x129000) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x100000000, 0x101, @name="dc34885d609c78aa001cec69d2bd3af0cdd760c63166b1f7ae4e466568525396"}) r1 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc058565d, &(0x7f0000000280)={0x0, 0x4, 0x0, {0x0, @sdr}}) 10:03:16 executing program 5: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x11, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0xffffffffffffff82) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in6=@dev, @in6=@ipv4={[], [], @multicast1}}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x90b, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @dev}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r1, r0}}, 0x18) gettid() write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000004c0)) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x200) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2008800}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc8, r5, 0x304, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec4b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffc01}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x29}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0xc040) r6 = getgid() getgroups(0x1, &(0x7f00000006c0)=[r6]) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) 10:03:17 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000001840)=0x3b) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000), 0x0, 0xfffffffffffffff7) r3 = dup2(r1, r2) fcntl$setown(r2, 0x8, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) init_module(&(0x7f0000000080)='vmnet0\x00', 0x7, &(0x7f00000000c0)='\x00') sendfile64(r1, r3, &(0x7f0000000100), 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x400, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40004) tkill(r0, 0x14) connect$caif(r3, &(0x7f0000000000)=@util={0x25, "a9214eb2581315b2d80611872d238104"}, 0x18) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000040)={0x619, 0x8000, 0x1}) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x5, 0xd0800) 10:03:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/94, 0x5e}], 0x1, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000800)={0x4, 0x0, [{0x8, 0x4, 0x0, 0x0, @irqchip={0x3f, 0x8}}, {0x7fff, 0x1, 0x0, 0x0, @sint={0xa9, 0x4}}, {0xffffffff7fffffff, 0x2, 0x0, 0x0, @sint={0x3}}, {0x2, 0x2, 0x0, 0x0, @sint={0xef, 0x100000000}}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/fib_triestat\x00\x8e\xa1\x1d\\\xb1z\x80-\x95p\x1f\x19\xf2\x9e\x84\x8372\f\xcf\x9b\x1c\x87\xc5\x96\x8dJr\x05\xf5\xcd\xafd\xbav]\xc2\x1c>\xa3\xfda1\xa8\xb6W\\D\xb4\xde\xa9\t{\xb3\x84\x89K\xa8G\xf6\x9b\x8ba\x86\x05c<~\xa1\x9fI/\x8d\xfc\\%\x7f\x8c\xcb\x9a}.a\xe4\xf2\xaf\ns\xda\xbb&\xb7\xe4=\xfa') preadv(r1, &(0x7f0000000480), 0x1000000000000162, 0x0) getuid() ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x2) vmsplice(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="aeb6af395a829bcd02ea4ca0356f699526e392e8540d6d98037f5a171c582495ac4af92d46aab7dcdcf0620277aa023af22e882c70a977c016d3ce5be2a2216190e34dc4aa32b0305797d937076b77e7d1995c7f51a4a088641bf57e1966293a90d4dc7adbae987658683a05375001661ca926b2a7625ef0e04f4ab92aef5832138e", 0x82}, {&(0x7f00000000c0)="9b92fbdeac330e273459505ad3c55e75073ed5bcd2f529875aabd5a6e5371dbb8a37d9c5f6b443ca5859a3b260f2e256e25604d239ce5c6757b5764d045e86b91d28141d88cb0a58aa8d116b895180936ac310d664b46a6ccd2903ff492d963750e1011070febeb6ba69e37af254189ecfb9ca8c128d2ff3b744260b0ac68876155ed516eb1a468eb5402bda2d432e9a96", 0x91}, {&(0x7f0000000200)="d7cfaa4dda196007e4c0fcb4cd413be27956d6620aa91e3cec33490acb77", 0x1e}, {&(0x7f0000000240)="f036083c045cf00be713128ad8aff54db5475c6447925ce96e72e926871d7766ef7539ec33dca466ad88274886e7aa3843619456730f37e9ddd5c0b5626ed21a9910a3f5ea78fca01e145cfcb209fd5797a9f330d3a4ae27bee24972307f9a6edd79be007046ca052e622f76cb4468b7691684e76534f09280c19f7d21de01a1818fe98d029a994fb50f81d9b8bab3c732050ea18cb7cb4c4d753973f9b8280ec8a6a5064633", 0xa6}, {&(0x7f0000000300)="30481234b81875d84413036acfe6b498f741de25389b5f12b702169e91e6ed50b05314598795cd0c58812ac5e7064491b64ceaeb9348e4c211730ff84e14ef685179d5", 0x43}, {&(0x7f0000000380)="395c0e2df2751707548afc349b84611845f1947e388da4e0effe09ddfca06ee7", 0x20}, {&(0x7f00000003c0)="6ee73152b6cee43bc5e2783734173905f07ce6f6490c22c9f485f38a08c30724e5a3825ac0374e029695e089", 0x2c}, {&(0x7f0000000400)="60b9b8eb205a3116248078923e5e341d10bba630dca685cc8ebdd3bdc9dcccb2794b14926488fcec6914f9a2881773a5e4e435e742df27847f06d0ff2f605e36827cad21f608cc0c5b7038f479463ca6", 0x50}, {&(0x7f0000000480)="f41f43bf015d71e0ca9909fd805df467d49f46d918df10cc6fd7655c1defdbfe57a1072ea0b83787e7f18a0d9e5f9ebed911b41ed1548178b7ea2e4fa2dd105cba50f1d9cfa693a9192cc1632a73af36a013ec65ca4bd475ff081c14ef1bbb002064d8666ffbbc3de67be9d4a3c8db57f6746035ebc14d169d95d11703a74fe71b079735079dd996c72c81748639e4b30e3d5c7c565a5124b88e234e5ec8bb30a8c1238c3bbc60121f1261d76e54fffe03893e803403cfd8d0c203bddbb26b63d7280c8d7a21eff764c0e54f6a254dbf0220e88d98de199682b21691130edd92a7ef4df76ed68f9c1719ef", 0xeb}], 0x9, 0x2) geteuid() 10:03:17 executing program 1: r0 = bpf$MAP_CREATE(0xb, &(0x7f0000733000), 0x2c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @mss={0x2, 0x6}, @sack_perm, @mss={0x2, 0x6}, @mss={0x2, 0x4}, @window={0x3, 0x1, 0x2}], 0x6) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r2) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 10:03:17 executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[], 0x0, 0x280}) add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:03:17 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) sendto$isdn(r0, &(0x7f0000000080)={0x8001, 0x4, "7313e4a3da0e055044ce2b878b6a4d1edeb5d76cb382476785d291a60cb40d2222154d04b742be2468cd04d9c75e0b7b6ac3d0e65f0fdd375ff573eb"}, 0x44, 0x0, &(0x7f0000000100)={0x22, 0x7, 0x5, 0x96b, 0xdc25}, 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4000, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000580)=0x400, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) 10:03:17 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:17 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x80000000, 0x80) 10:03:17 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) ftruncate(r0, 0x3) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x200002) ioctl(r1, 0xffffffffffffffbd, &(0x7f00000000c0)) 10:03:17 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f41300003000100025bd7000fcdbdf2500000000180101001401160000000c00010067616374000000004c0002000c00030003000610010000000c00030002006021ffffffff1800020006000000050000000200000006000000dc0000000c00030000005a01070000100c0003000200480803000000b4000600b8047983c411178af60a2245a31105fbb1f107f0dea60b768cf1923216ecc593a319f288202c947fb46ed05bf3c9647deb27ba11d78d24482bb5989f2e312bafdf76a1cf68f9fc96b09050aac71d9ef53269be7860323b13a1045a314ae46dca73515da0e8db34447919ebd12da4938334d4969378a33bb846d4cd3ff5e1810c8f21b776a658dbfafa4eada5575e7d8897c1e063783d69dcc48e7805ca5fe0bf25017c3e04be877a4c390719444500000000cc000100c8001c0000000800010069666500380002000c000400aaaaaaaaaa1d00000c000400e8773fc98acb00001c00010005000000010000000f0000000000000001000000010000008000060020f106281852353386ac7c362c21757b9688f74b4a2acd85ddb153f8fa5f1f116b1adb896a6fdd5bed1ea40517fa1aa964f65565d63ec7f3fe8f990f6b0a28b5c90356a7b1f7852f0f798bed8afe6c720db86a66c9f8d2246436b2f9d77d2556d899cf6fa94f928dc2d9e2387da223518db17e427d1788dc510000000000b0000100ac001700000010000100636f6e6e6d61726b00000000200002001c00010001000000000000000f00000001000080c1ffffffd80c000074000600fc10da6b2051fc10ea2e67232cf35accdc11c5160fc4699653d4285e15b82c6f1ec05451f7d4486c5db9cff8221d0681be73b9d8968ae97771432da75308191911706cf62a3ecf74deefd1125b8eb808f587d37b5aa30d40b7758da4c80a262f3f5b69e96c573a7994d666faf005b5f000004410010040101a000000080001006e6174002c000200280001000900000000100000ffffffff0900000007000000ffffffffac1e0101ffffff0001000000041006000e200be94c50e6819292eaae95344b4c45f6282e413f18263c748651d3e82d14a3a44ccfed5bc24535568963704a6ef62fe7c77e8e7931746be0a57827636fff5240eb57a8d0365ef582b4d5fd13229c6ffde37526e1b5320236f569ecd282d1b56507ada12b15e76e9a061d97269c8c2596df7d151f4859a9d761c72586fffe9361b498da3f222579dbef918d658b9ac1413a054787188c6c6a830065e51dfa60f4140bbf1a9b829d4cfc75b0b175d4cc22e4b9164c812502ed00dc760ae3ccc8ada98b957103b09d0e8ef7d782cde81e0d1358c1f4df38a88fcfd1cd9fdace875bcf85059ce2d49d64fd7fadce225a68850025d2ac4c194668b5198532cafe7a48e333837ef0a5bde873bc6c40e17043bb9c41166dc661171b8a35f9bf02d02af74a2028a15e2a9257500fbc43c68802c24852e7e7766baa2cacee3aae1261f4be80d7e999a2e63d6f374c2a1fe89f0fcbcbd8e2a63ca86badec1a9ff6e64700a6afdc4da4070c0b9c0564133b640f938e48402a434f67752019489aafaf78de1733c77d739e636b7fe5d2ae05abab6a379bb473446b405c64b249a2524764350bb2831b4b5723d2f6e0b4b3cea0866b5d05ef77df6b9893877a6499dda4d0a0a934a9d02610eabb56c1293b8cc2103be76efedd8d464b1cfac85ef0f9a0d36add80cc31587fc8b019d3fd7821a7f3e898cb3c7b30dbb1497c53ce91095ddb635d0dd3a12c4f595afddd43bd4d3cf12eb9a34c1cf0d52b1f51bedab75c4696607af4f72ed694d31dfa61671d8b5ee660e6721b82c254b72605677df210abab9c07eb84b01c71f760264e7d2d1d6cec0ee21be34515369953d1c325f867dbf7bf1ab51729c928cf3b565b824fea432c3e28d4f11c66cb438091eed94d415008b3e05d369bec8984beff83899308a5de60a595c241aee8094411f70d351e05fdec558f4384a9a360c21039b05dc5efb6611880d965d17e5a5ac760cc8735a055ec720aa61b8dc7da3399a4128a3669ca667f274ac91880bac21c1de7af3a8a5671f080483effb2bf270c8c55c37b946115a4e2c85449e4eb33331a39e2961b08e8fda48a5616b378fe45f2037f07dd2afe4717231f225152465bda534da11a059ed84539bd1fa17339ae49955d844564a373d3b6ec0d0e3c63eccb2f07f759e541306b78b76597f21c2385154c156b14319c2dbe30fc36b760153fd3aff81ce734f1159e6135bbf381c78d2f66d9d81eb25b5ccc85ef2b40ebc58c544151bb6d248849fd927b905d9ad1a1aa1d13ca52cafc33451e115833b16aedbd38a56a9a9de17d7e5be39525787b5d212c1ebd14c9b72e72e9c1520f0eaf2bd8a6440cef5d10f5ce7e6cdd89f6602c7408eb4434e334b234e96af43dfa4ce23fc13aaf47e19a47a4bd677beb39a7efcbec5ae6f58d0da5f38daa400f23d9562ea80bdfc96dc828fe13ac6db7e213e8cd07831d8665eded1b6ac1ae46ff79a98be024d77dd333f1e84a300d0da8088415e010b156ed0dd722c6036abe6d020c398ffd58af412440040e6bd5be5637ea4450afeb427e0d6ce6a99216e06e6ff1161eaaf1ce723e70ceea805691b53e59fd21ece94ba0d83e328f3760da4440a1448bac703899a6538aa21ac3483a4d2da9dfa0371c5396a3ccc0e733b763014e94bbc9bf665ab680e3618f09b859ffe71bdba591797cb8c4c294917ce9f63ba1558908157c2e7fcf573b11918e6569317ac3ea704a18320111344aaf5e1be43979b559f4f714416b4d2172efb23c7ed6754867180fed765c8853a570bffd30b425eaf158d24b1d50299d310b02205d89b3f497c240e2eea28ed09206c77f42e06f02a7d809f8709408a9329ce1dfa48b34c24aee3efdfa7dbb00caeacf2ac6ef334f6a6723466e56152279c392cbf958d0b5235f6d5424ec944ef35709f27170cddb6bb7d3402298c3fc5c0a15256073711efbd4ef168a6290f13cd29cec8f92a79e3bf28823e611fc5230aa9a888ed5fec9d11014ac6c5c3f97b1562635057c34a03985794cbf0f5b3257d94fdae8179ba926ddf0038774b1e0984769ce98d39713f88cc56a925726f74f84feb0846b082f6126c7d88a4b544766517c53f1be73cb7e5895d36230938cc4a74a2fbd8f568d7fabbff34887895f79a6a11c2a3c0f1ab202b6f06af5b86be9cbe93b5a52e044a705228a7a8f3aebf04019b24b3630f701871f51d7bc20faae1cfc27abb6e85b46dcbc3eaaa47e739d6f962ec1e44d6e7192cfd9449f3b227bb624761992db8e3660f530eb61e4c06289e76b212700db95eccc357d230041bcaa391cdb3e7850f8f21dc12d3e0285aba20a8ecfec5495f679a8220872acc0fe4a7ba470a472b75091e095fb09d700bdee179c94c764fc21815238ed716bab6d70ad5e1f4acce38b7c0486b9a5b8ed483747beccff35459af5502e74565f323629fca72895f584fc442d9da9c5e75e582ac93e52c9f7b4a099c06e2b14ee6e0aaf8bc9809a9e13039aac2c772ff07abf7c0b4c7e514a1f4ce60675742ce9196832ffa0044618b4ac2b7e6fb52d8a4ae8d2c125ddb0dbe8592434a159d2cb4c7d7ea583e3c6f91a684b9f5152e8f06aaa0d37e161246c414f3ef0fea9f8c6f1634fac1404372cb58780804635ccf2e1933bb3552a3e7ccce708ac128115ff15cb65a945f5d41c989dd6cebad80bf3934783297cfd4a41202901ea8d5536e735218c82af1a03ae9e843477a3a0c37276abcd744193a4f4dd1e73d84eec102b51c34fb911f4657d885c8ed5762582bf5e0276621eceed25389b5fbc271e7da215f85e5ca7313d1d311a8a0bda9104489c04d3168b39cf343076856713aea5171709f3b258145192c8c5b4462dcb6bac9fc530e49146b53bd8997de76b3bd26147530e56f3631afb70fd3de98eea260c8160d10198739b591041719611c6dc25d9cee6834690e5e03c0f21fdbfedae19329ef9d1964257927873fd1f0282e674b512f43df570b8b1ebed0e31398532584097046cd7511452deb73d71ea3cee38dcac7d760da70b8224d2099226a1bb01ef55e417f57b25cc1d1fbd27a577f905a1af44abd532e5a688fce6409532d4aa84a5b7bb449368711f31530dbc42dbe5ee2cd0448ed36f332a3d13a4c3b0d0d08edaabbadb39f540127428c4539a26c37b093c933d5d463e1e2ab920ea6521024db702ec2c9485d313abc3ad144c3dc546e680778630ab8684c2561a631c86a5d506208f471f784db34918ed339e3616190f738e04dc1299c7559e03a110f4bfaa7e9bcd22f3985f95664d6b5de44a5843ab5d79292d691f56546e0f3fd6ad3a7d049824d60f889a80d6cf9028d3db1d23e12ac35231e06a96131f299631726133311e40bb46bad8fed1f384a6656e4cc17297a5701d69c9fe0a36ac2718c63821ae6ea254be83f4dc4806abecf86d087e6efa68fbbb75403569bf0e798d6764b0aee6250cf99f27f6c6ede5e98ef8c50dd451ccc07bbf1df8a0b19a438935bc7929df256fcd4f3c1a33e92525d9afe59cf484f0afb0558ddee842e39c5e8db90bff33b890889f67681f154676214d5623da3ab2072f4224574822664dd7bfb371145bc10b2b2488a4f79aa5067348d76924c03284ac9c01a9421f8f12b65d95199071925df1024b342612c5221eb209b808db43fe6011ca7a1f7127fd622de75d16c1e9b2f8629996dbbc81bee5eec54370b6f03827a15060341dfc5b94807ae354c6bc09086db90413fa8a656892b9b5428812a4d5412bd53bbb816fcd72f0ad93742f190c777a0a70a04773033da0060732b433399ec003fe45c5989a119fa6783f91aa524ddb96c5ab8a1404f8266b1ce6385d1241281dd4cd9ed436129bd631c11169f6a0edcd7a50730e24c510c7e1da9f3a800c796cd57c72ac9b0fe85a95642f684faa08eb762e27634e60aa784acbd2fbdb957e456fa16255ab56dea929bcade04158ea957b5e4fc6b89b5e55d644d7b215df9b6b79edaf75d20672293979d99f5523afefa42f2075ed47fd2a4420ffc1baf507d7843325753dcd86743a2773cddd8e48195e7ee65cedf61f9d448ac3cc6400fe10b17554997821519b92aa998956e3ca981ca1340ea2179b9a59283d38500faa053c35d79123a71866b925b59b0a0c9d5d822ccecf787fe01e213ebba49f2b08c3bbd41e96d38f6e9973b73581d03b92c38bbde401d25c1ff303c1354e94e5a722519da95c08899e8cda68a8abf4b7b246879dcca80be239b49d69e2c0d798f4ab516e2dbc15cfb10835e9580d35e90735e215b1db6baa8976c2f914de4f75b7028a9d24ed503349387110d9a64da855f9058d9a0206469968dee536d7c067c7b7e5b77982afdec13704bce1cc36058f4bc006cb97b8b6a3d0b7f284d8d20db4388e0b97408a34be1e779a44d9fb6dfc3719a98b6d98a41b5d34ee9888299f99733de723ddf792fd93e61cf4e88c9684aaadb21f96b8073407f928c32afbe840bb9b67d55b216739ba4c63e04513930d0b1607b0f7034ba47a93a183cb5cf3bf95bf1cc3aa8cf93dc50de6822c5b90642f640b3453b3d0eb021aed9a89478c459a3044c1f7fc5cc18786bc7677d6a6897d647c73e5178af86bfeca153b1f24d1bebd01a73c4952563df13d70eaf28ccc2e4a11722c01db674b1ad48fd04dc7935a83d1c9e4642d3be978df70b9ca2a0b7cad15b229e6779e651fa96debe876c629c7a462d014a21ccb29f04e2c77ad35420859c69d47bfa6a211a4f761d8b07264c833b366a6a0113934e65ad483dbf92b66b56ee6a035ad09e94996206f79b26cd87bfe36c4774d441ae1cfdae0133515d28caddc7955e7d4d8bdce09c72701fe975c28f19d2a316d81d2c8194eabd8e5ebbcddc3a31e927dda4c259b3a1b6b923e3b7deec489c0dfa2076f6059a50c1d14a678b0a0ac97824fd1b2e62c59a116a5b9a5ac75046b7dadb477f16c1125613b6553640e97f71bb0c3f4c68781acc6b33b0e968c30f0b291b4662047bc8253eb8bd01fbb2971777bace21016fb4f870268a846bb7075db034f56600ce08a1e1767d29b4183213eaaae2d059f724d5d195771bbb3850378cec75462a39abd4dc7934c6db34e56ba350cb026c46b5986b13515dc6df9c8db8c6ab12c4be0e5557a790e1f103016d33349c5aa493bdd83c98ba3bf1aea6d1e1ac3f0e4c8c473b8f9727e057c5edf2c2a50b98f41a8cb1acc4b0f5dba3a8dec90b98a050f5773c20562f4e0a841fbe86006ab9b2702e367f083fc67f8613c0a181f2620083752853bcaa91592dfe7f4cd3b8f9800f3184a0438836f429e407d9f44b93f7db1034ec8c4505db4a90c64a671de73daadcdc0c911c175cb4852437f9009085a958cc3ce633212e130aa84541480c3140752416fae355d19f9ee7f5efdd83da07a2bb49336bc5b17a6728fc89ed89dec517abb63d85ecff8030ba7fa202604ac29f0b1da8c3c8845acf10243e403738675597a4f6ed096bf0a8b48f8a5f6a3b29199a397246117b8d545e2af1b3afff4de3a6826445e734d4b198fb2a3028fd555b78b997cb58936b9508dc887afd85b8eee3b5c5b4393a79929091c797c303d76ead37493e9561c60dd9e90881b62b581bb3bf5b8c89b81b97a30cebbda2f76202d4a1d5f6a9d9ca56b2653af3f959abba42a013a006d8ddf2401d69c156fac3608ead7b115fdc52972183b6e4d81677fb09babf0b6ee88e5178d376e8a2c1eb292b97ca6d564935dc62d90a42b4423c627cbfe4b51f79ca10f0000080101000401030000000c000100736b626d6f6400001c0002000c000400aaaaaaaaaa1d00000c000300ffffffffffff0000d40006006d38e3316083242043408f45af11b3b620b73c6d67ef1ebb6befe7ad8558efa3ede823c8b9365f82b6a9044a3008c84406208e8cbf318107f5dab50c9e02189c0c3f6a1c872db04831067b46df7efd51d0f9e09ff66e89c33de0a9a20222b2d1e20a37680e39321e551dea537318dcb6cfa9c8f7e1fe545e15cd9f419c96fd9b09896f5650e53b690942b566439ad736b504d8d9cb988cad799465246a54a4f6d6c01e84870ac385ea4494085a0e739d9d7f3f7dcb6d0b4e518f2c57177750d536e60ecf38521503d2c6735cd8da41b50000"], 0x13f4}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000004280)='/dev/sequencer\x00', 0x14000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000180)="144e427b82d4c1968955715d91c74c2a74c240ce4fa1936d5ad2ebf28fee712ee1c6e927f95d6dacbf0744ebc80d3f95d87c0015df4f889ef21ac366468e21", 0x3f}, 0x68) r2 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) bind(0xffffffffffffffff, &(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x2, [], &(0x7f0000000140)}) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000042c0)) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000015c0)=""/131, &(0x7f0000000080)=0x83) 10:03:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4011, 0xb00, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) 10:03:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000aef357d13bf89a8bc41d9bd2cb0000000000000000000286730a4971f2e5666f3c52d12867dcd74d3715658f8d4f2800adb6dccb1fe3b1d7a9336f19a4f2affec1bcf24ce44ef48d466aa23a1e9a3d9a0e8cc7b217ab34f7d34ff31cd04135ea2f4f4675ded24d119c4e4e970c3aa8a49353"]) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000080)) 10:03:17 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) write$P9_RLCREATE(r0, &(0x7f0000000080)={0x18, 0xf, 0x2, {{0x2d, 0x0, 0x7}, 0x5efe}}, 0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x3}, &(0x7f0000000180)=0x88) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=0x0) write$P9_RGETLOCK(r0, &(0x7f0000000240)={0x23, 0x37, 0x1, {0x2, 0x7, 0x1ff, r2, 0x5, 'sit0\x00'}}, 0x23) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r1, 0xfffffffffffff48c}, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x89f9, &(0x7f0000001500)={'sit0\x00', @ifru_data=&(0x7f0000000000)="a17a67d74ef4725fb785e0055d8775ac6edc8ad926c363d15d31f102c5fa278a"}) ioctl$int_out(r0, 0x5460, &(0x7f0000000280)) 10:03:20 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r0, 0x7b9, 0x0) 10:03:20 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f0000000040)={0x3ff, 0x761, 0x1, 0x2, 0x800, 0x2}) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000140)={0x9, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz1\x00', {0xee, 0x3, 0x0, 0x6}, 0x16, [0xf04, 0xffffffffffffffff, 0x2, 0x2, 0x7f, 0xfffffffffffffffb, 0x4fe, 0x80000000, 0xfff, 0x4, 0xdb, 0x4, 0x4, 0x9, 0xff, 0x80000000, 0x3ff, 0x10001, 0x7d, 0xc397, 0x2, 0x1, 0xff, 0x1, 0x3, 0x8, 0xff, 0x5, 0x7fffffff, 0x0, 0x6, 0x5, 0x4, 0x40, 0x1, 0x65, 0x3, 0xfffffffffffffffe, 0x0, 0x3, 0xa0, 0xffffffffffff8ced, 0x1, 0x0, 0x3, 0xdad, 0x1e0, 0x5, 0x8, 0xb71, 0x20, 0x2, 0x7, 0x6, 0x7ff, 0x1, 0x401, 0x2, 0x1, 0xf419, 0x80000001, 0x7ff, 0xfd, 0x6], [0xc0, 0xfffffffffffffe00, 0x5c, 0x0, 0x101, 0x1ff, 0x8, 0x3f, 0x1, 0x5, 0x9, 0x5, 0x8dde, 0x2, 0x6, 0x8000, 0x100000001, 0x0, 0xfb, 0xfffffffffffff001, 0x3f, 0x6, 0x80000000, 0x5, 0x8, 0x0, 0x3ff, 0x719, 0x9, 0x9, 0x0, 0x66bf, 0x8, 0x7, 0x2, 0x79422ae5, 0x4, 0x2, 0x100000000, 0x6, 0x40, 0x1, 0x7fffffff, 0x9, 0x9, 0x729, 0x5, 0xffffffffffffff1e, 0x9, 0x5, 0x6, 0x2, 0x8, 0x6, 0xffffffffffffff08, 0x5, 0x1, 0xec31, 0x6, 0xbd, 0x4, 0x874, 0x0, 0x9], [0x0, 0x1, 0x9, 0x100, 0x100000000, 0x1, 0x7, 0x8, 0x3, 0x5341, 0x1, 0x1, 0x9, 0x0, 0x4, 0xfffffffffffffe00, 0x0, 0x5, 0xaf0e, 0xad, 0x84, 0x4000400000000, 0xc079, 0xbd6, 0x6, 0x1000, 0x8a8, 0xbd, 0xffff, 0xff34, 0xfffffffeffffffff, 0x10000, 0x5, 0xfffffffffffffffa, 0x2, 0x7, 0x6, 0x6, 0x5, 0x40, 0xffffffffffff8000, 0x6, 0x10000, 0x0, 0x9, 0x6, 0x2, 0x8, 0x5, 0x6, 0x4, 0x81, 0xe92, 0x6, 0x0, 0x5, 0x3, 0x93, 0x2, 0x4, 0x80000001, 0x40, 0x5f7530e1, 0x81], [0x3, 0xfffffffffffff001, 0xfffffffffffffff7, 0x3, 0x6, 0x1, 0x1, 0x4, 0x3, 0x10001, 0xfc0, 0x401, 0x8000, 0x8, 0x1, 0xfff, 0x80000001, 0x2, 0xb2, 0x100000001, 0xff, 0x2, 0x3, 0x2000, 0x9, 0x7fff, 0x100, 0x1f, 0x8, 0x6, 0xfffffffffffffffb, 0x2910, 0x2, 0xd85, 0x2, 0x80000001, 0x1, 0x7, 0x8, 0x4, 0xffff, 0xa817, 0x7fffffff, 0x362, 0x3976, 0x8, 0x1, 0x3, 0xfffffffffffffa7c, 0x10000, 0x1, 0x200, 0x882, 0xc2, 0x5, 0xfffffffffffffeff, 0xf74, 0x10f, 0x7, 0x3, 0x6d, 0x5, 0x2, 0x3]}, 0x45c) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f0000000600)={0x94, 0x4ece0000, 0x7fff, 0x80, 0x6, 0xa}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000640)=""/4096, &(0x7f0000001640)=0x1000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001680)='/dev/autofs\x00', 0x400, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000016c0)) ioctl$VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000001700)={0x7, @pix_mp={0x0, 0x9, 0x34367c5b, 0xd, 0x7, [{0x80e, 0x5}, {0x4, 0x6}, {0x10000, 0xfff}, {0x2, 0x8}, {0x800, 0x8}, {0xbcf, 0x7}, {0x3, 0x5}, {0x9, 0xb8f7}], 0x7, 0xbaef, 0x7, 0x1, 0x3}}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001800)={0x0, 0xe8, "3132c975faf65ce34364bb759426bf0dc7d7bfd0c756578e4de0b16fe9f8d724028235f255ad47b9fb1b57cb1d61c65ab658af27deada2b04bad2d721cea8c80c7fcea76bd1d5421a87f94c6a31799fd4638dd4ac9a4ea9b6460f35869ea44035a54852e44e00deb6726770d19240152338ba511d05b323216f060adc0f38aaba78002955847840a17e8d611ea73aaf38cb471ac7b66624494d27afb1249c84340d185d246511854cdd0cbf6a2027b6a2ea661cf1040c8df2af84eda0310d1fb27006688ad14e8f37d6308e8f2cb73367ad5ba7f026af5d9b3e9fdfb65f1d6d5b4828900994723fe"}, &(0x7f0000001900)=0xf0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001940)={r2, 0x2}, &(0x7f0000001980)=0x8) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000001a00)={&(0x7f00000019c0)=[0x0, 0x0], 0x2}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001a40)={r2, 0xfffffffffffffff7}, &(0x7f0000001a80)=0x8) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000001ac0)={0x1e, 0x33, 0x0, 0x2, 0x7, 0xff, 0x4, 0x156, 0x1}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000001b00)={0x2, 0x7, 0xffffffffffff0000}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000001b40)=0x1e7a) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/vga_arbiter\x00', 0x8000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c00)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000001e00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x168, r4, 0x402, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4d}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7d80}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf3}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xc}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf415}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x161d33e5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x10) getsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f0000001e40), &(0x7f0000001e80)=0x4) r5 = syz_genetlink_get_family_id$team(&(0x7f0000001f00)='team\x00') getsockname$packet(r1, &(0x7f0000001f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001f80)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002080)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000002180)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000002280)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x4804000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x60, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r7}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r8 = openat(0xffffffffffffffff, &(0x7f00000022c0)='./file0\x00', 0x541480, 0x91) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000002300)=r3) ioctl$BLKRESETZONE(r8, 0x40101283, &(0x7f0000002340)={0x9}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000023c0)={&(0x7f0000002380)='./file0\x00', 0x0, 0x8}, 0x10) 10:03:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x200000) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x8000101842, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000580)) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, r3, 0x0) r4 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) prctl$PR_GET_FP_MODE(0x2e) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f00000000c0), 0x4) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000240)={0x2, 0x7, 0x80000001, 0x1, 0x401, 0x4}) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000013c0)=""/21, 0xfffffea1) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r4) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='fuseblk\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000500)='./file0/file0\x00', 0xe, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/net/pfkey\x00', 0xbfffe, 0x0) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000540)="e4124b0dd7aad573d7f2118653b6d5abe827ec6b90b4fdc3879ee901f8f7105897c4af71334d31ebf1a61bc0b8d526b8ac2773da0cb6617bb334777d1398eda9c3d885878ca2297172d7a86a43fc53fe382fb11d3c3cbe00", 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x1}) 10:03:20 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "0426f0dce8c25c7ab9e2b18772cad622"}, 0x11, 0x3) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:20 executing program 1: getpgid(0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000480)={0x2, 0x23ee, 0xfffffffffffffffc, 'queue1\x00', 0x4}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x252, 0x82) r2 = memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) socket$inet6(0xa, 0x80803, 0x37) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) perf_event_open$cgroup(&(0x7f0000000400)={0x7, 0x70, 0x7fffffff, 0xb3, 0x800, 0x5, 0x0, 0x101, 0x0, 0xa, 0xfff, 0x600000, 0x2, 0x8000, 0x0, 0x7, 0x5, 0x3, 0xdf, 0x0, 0x0, 0x0, 0x81, 0xa6, 0xdf3, 0x5, 0x9, 0xa2, 0x5, 0x4, 0x2799, 0xa5, 0xfff, 0x9, 0x2, 0x0, 0x1, 0x6, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x7aace71b}, 0x404, 0x4, 0x2, 0x7, 0x8, 0x1000}, r2, 0x0, r2, 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20}, 0xfffffffffffffda2) listen(r3, 0x20000003) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000100)={0x9, 0x3, 0x6, 0xff, '\x00', 0x7fffffff}) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, 0x0, 0x0) write$FUSE_IOCTL(r2, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x2, 0x4, 0x5, 0xc39}}, 0x20) socket$bt_rfcomm(0x1f, 0x3, 0x3) r5 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000047ffc), 0x0) recvmmsg(r5, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001f00)}}], 0x1, 0x0, 0x0) ioctl$void(r1, 0x5451) connect(r5, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000240)={0x100000000, 0x5}) ioctl$KDSETLED(r0, 0x4b32, 0x7) sendfile(r1, r1, &(0x7f0000000000)=0x39044, 0x2000005) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000200)={0x3, 'hsr0\x00'}, 0x18) 10:03:20 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x541b, 0x712000) [ 262.157636] print_req_error: 7 callbacks suppressed [ 262.157650] print_req_error: I/O error, dev loop0, sector 32 flags 1 [ 262.170070] buffer_io_error: 6 callbacks suppressed [ 262.170080] Buffer I/O error on dev loop0, logical block 4, lost async page write 10:03:20 executing program 0: socket$netlink(0x10, 0x3, 0x7) getresgid(0x0, &(0x7f0000000140), 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x900, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000500)=""/89, 0x59}, {0x0}], 0x2, 0x0) [ 262.217717] print_req_error: I/O error, dev loop0, sector 40 flags 1 [ 262.219515] print_req_error: I/O error, dev loop0, sector 136 flags 80700 [ 262.224524] Buffer I/O error on dev loop0, logical block 5, lost async page write 10:03:20 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) getresgid(0x0, &(0x7f00000008c0), &(0x7f0000000900)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x60220c, 0x7ffffe, 0x4002011, r1, 0x0) 10:03:20 executing program 3: creat(&(0x7f00000000c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x42, 0x0, 0xff, "56445b3a5b7006995382a887c91726c3", "85ba6185638f4e1c77707adb3e5217ea33783e53dd61cfcf9e4b5138a2e4dd104772dc0ece15659cec6c2dd920"}, 0x42, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 10:03:20 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0x9) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000"]) 10:03:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2c, 0x35, 0x829, 0x0, 0x0, {0x2803, 0x1fffffff}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0xffff000000000000}}]}]}, 0x2c}}, 0x0) 10:03:20 executing program 3: r0 = eventfd(0x0) pipe(0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000001300)={0x4}) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) write$P9_RXATTRWALK(r0, &(0x7f0000001480)={0xf}, 0xf) lstat(0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) 10:03:20 executing program 4: write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) [ 262.629875] netlink: get zone limit has 4 unknown bytes 10:03:21 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000cc0)) ftruncate(r0, 0x208200) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) getresgid(0x0, 0x0, &(0x7f0000000900)) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x602200, 0x7ffffe, 0x4002011, r1, 0x0) 10:03:21 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003e00)={'lo\x00', 0x0}) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/120, 0x78}, {0x0}], 0x2}, 0x0) bind$packet(r0, &(0x7f00000009c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="020400000300600000000000fff55b4202938207d9fb3780398d5375000006007929301ee616d5c01843e06590080053c0e385472da7222a2bb401000000c3b542914c5e61eaa96fa9a1e8d1843e770afd6e9ef5837dbdeba97bc406eb04d1f087c0299c", 0x64, 0x0, 0x0, 0x0) 10:03:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{}, 'syz0\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00@\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) 10:03:21 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1d) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x66, 0x400040) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000180)) creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xffffffd8) clone(0x40000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lsetxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:21 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(0xffffffffffffffff, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 263.103983] protocol 88fb is buggy, dev hsr_slave_0 [ 263.108343] IPVS: ftp: loaded support on port[0] = 21 [ 263.109246] protocol 88fb is buggy, dev hsr_slave_1 [ 263.121148] input: syz0 as /devices/virtual/input/input13 10:03:21 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000380)) read(r0, &(0x7f0000000000)=""/42, 0x2a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 263.187966] audit: type=1804 audit(1547114601.267:32): pid=11127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/newroot/121/file0/bus" dev="ramfs" ino=38994 res=1 [ 263.216797] input: syz0 as /devices/virtual/input/input14 10:03:21 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x59, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) [ 263.303837] audit: type=1804 audit(1547114601.277:33): pid=11127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/newroot/121/file0/bus" dev="ramfs" ino=38994 res=1 [ 263.373345] audit: type=1804 audit(1547114601.277:34): pid=11127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/newroot/121/file0/bus" dev="ramfs" ino=38994 res=1 10:03:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 263.449639] audit: type=1804 audit(1547114601.277:35): pid=11127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor5" name="/newroot/121/file0/file0/bus" dev="ramfs" ino=38997 res=1 10:03:21 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() select(0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1c) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast1, @loopback, @empty, 0x0, 0x0, 0x0, 0x12a}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 263.523105] audit: type=1804 audit(1547114601.277:36): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor5" name="/newroot/121/file0/file0/bus" dev="ramfs" ino=38997 res=1 10:03:21 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:21 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x3, 0x3, &(0x7f000045c000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x4c}}, &(0x7f0000281ffc)='G\xffL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xffffff7f00000000, 0xe, 0x0, &(0x7f00000000c0)="3b1163cd78b89e1ba101df682bb0", 0x0}, 0x28) [ 263.610807] IPVS: ftp: loaded support on port[0] = 21 10:03:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000003c0)="04783b02", 0x4) 10:03:21 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:21 executing program 1: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000940)={0x20}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x42, 0x0, 0xff, "56445b3a5b7006995382a887c91726c3", "85ba6185638f4e1c77707adb3e5217ea33783e53dd61cfcf9e4b5138a2e4dd104772dc0ece15659cec6c2dd920"}, 0x42, 0x0) write$P9_RSTAT(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='I'], 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 10:03:24 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:24 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x64}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) 10:03:24 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 10:03:24 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000740)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x436) creat(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x108) clone(0x200001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200001e4) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) 10:03:24 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0xffffffff, 0x6, 0x1000, 0x7, 0x20, 0x7, 0xffffffffffffffe1}, 0x1c) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFLAGS(r0, 0x80046601, &(0x7f0000000340)) finit_module(r0, &(0x7f00000001c0)='threaded\x00', 0x3) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x2, 0x0) fchown(r0, r1, r2) clone(0x80000020104, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x40) 10:03:24 executing program 0: keyctl$join(0x1, &(0x7f0000000600)={'syz', 0x1}) keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x1}) 10:03:24 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0), 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) membarrier(0x4, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000400)={0x0, 0x1000000000008}, 0x8) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40801) 10:03:24 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 10:03:24 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}) read(r1, &(0x7f00000000c0)=""/19, 0xfd12) 10:03:24 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 10:03:24 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000500)=""/89, 0x59}, {0x0}, {&(0x7f0000000640)=""/232, 0xe8}], 0x3, 0x0) [ 266.958910] syz-executor4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 267.034901] CPU: 1 PID: 11204 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #17 [ 267.042110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 267.051462] Call Trace: [ 267.054078] dump_stack+0x1db/0x2d0 [ 267.057727] ? dump_stack_print_info.cold+0x20/0x20 [ 267.062833] dump_header+0x1e6/0x116c [ 267.066674] ? add_lock_to_list.isra.0+0x450/0x450 [ 267.071652] ? print_usage_bug+0xd0/0xd0 [ 267.075728] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 267.080674] ? ___ratelimit+0x37c/0x686 [ 267.084666] ? mark_held_locks+0xb1/0x100 [ 267.088826] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 267.093942] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 267.099061] ? lockdep_hardirqs_on+0x415/0x5d0 [ 267.103649] ? trace_hardirqs_on+0xbd/0x310 [ 267.108275] ? kasan_check_read+0x11/0x20 [ 267.112427] ? ___ratelimit+0x37c/0x686 [ 267.116398] ? trace_hardirqs_off_caller+0x300/0x300 [ 267.121511] ? do_raw_spin_trylock+0x270/0x270 [ 267.126131] ? trace_hardirqs_on_caller+0x310/0x310 [ 267.131151] ? lock_acquire+0x1db/0x570 [ 267.135136] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 267.140287] ? ___ratelimit+0xac/0x686 [ 267.144186] ? idr_get_free+0xee0/0xee0 [ 267.148176] ? lockdep_hardirqs_on+0x415/0x5d0 [ 267.152788] oom_kill_process.cold+0x10/0x9d4 [ 267.157326] ? cgroup_procs_next+0x70/0x70 [ 267.161598] ? _raw_spin_unlock_irq+0x5e/0x90 [ 267.166145] ? oom_badness+0xa50/0xa50 [ 267.170043] ? oom_evaluate_task+0x540/0x540 [ 267.174523] ? mem_cgroup_iter_break+0x30/0x30 [ 267.179114] ? mutex_trylock+0x2d0/0x2d0 [ 267.183179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.188765] ? rcu_read_unlock_special+0x380/0x380 [ 267.193723] out_of_memory+0x885/0x1420 [ 267.197706] ? mem_cgroup_iter+0x508/0xf30 [ 267.201949] ? oom_killer_disable+0x340/0x340 [ 267.206460] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 267.211568] ? lock_acquire+0x1db/0x570 [ 267.215566] mem_cgroup_out_of_memory+0x160/0x210 [ 267.220420] ? do_raw_spin_unlock+0xa0/0x330 [ 267.224854] ? memcg_memory_event+0x40/0x40 [ 267.229176] ? do_raw_spin_trylock+0x270/0x270 [ 267.233778] ? _raw_spin_unlock+0x2d/0x50 [ 267.237942] try_charge+0x12a9/0x19b0 [ 267.241750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.247300] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 267.252165] ? rcu_read_unlock_special+0x380/0x380 [ 267.257111] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 267.261977] ? get_mem_cgroup_from_page+0x190/0x190 [ 267.267011] mem_cgroup_try_charge+0x43a/0xdb0 [ 267.271610] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 267.277154] ? mem_cgroup_protected+0xa10/0xa10 [ 267.281845] ? shmem_getattr+0x2c0/0x2c0 [ 267.285910] ? _raw_spin_unlock_irq+0x28/0x90 [ 267.290410] ? lockdep_hardirqs_on+0x415/0x5d0 [ 267.294996] ? trace_hardirqs_on+0xbd/0x310 [ 267.299324] ? kasan_check_read+0x11/0x20 [ 267.303476] ? trace_hardirqs_off_caller+0x300/0x300 [ 267.308600] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 267.313542] shmem_getpage_gfp+0xa85/0x4b70 [ 267.317896] ? shmem_add_to_page_cache+0x19a0/0x19a0 [ 267.323004] ? page_mapping+0x56d/0xa20 [ 267.326983] ? __page_mapcount+0x550/0x550 [ 267.331218] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 267.336759] ? __set_page_dirty_no_writeback+0x3a1/0x690 [ 267.342214] ? do_writepages+0x1a0/0x1a0 [ 267.346312] ? kasan_check_write+0x14/0x20 [ 267.350553] ? finish_task_switch+0x2ec/0xac0 [ 267.355058] ? __switch_to_asm+0x34/0x70 [ 267.359153] ? __switch_to_asm+0x40/0x70 [ 267.363223] ? preempt_notifier_register+0x200/0x200 [ 267.368332] ? __switch_to_asm+0x34/0x70 [ 267.372398] ? do_writepages+0x1a0/0x1a0 [ 267.376468] ? __writepage+0xe0/0xe0 [ 267.380198] ? lockdep_hardirqs_on+0x415/0x5d0 [ 267.384786] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 267.390327] ? unlock_page+0x2b1/0x4a0 [ 267.394220] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 267.399766] ? balance_dirty_pages_ratelimited+0x1b0/0x2370 [ 267.405479] ? retint_kernel+0x1b/0x2d [ 267.409372] ? preempt_schedule+0x4b/0x60 [ 267.413531] ? balance_dirty_pages+0x3740/0x3740 [ 267.418299] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 267.423843] ? shmem_write_end+0x384/0xa40 [ 267.428085] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 267.433346] ? iov_iter_advance+0x354/0x1490 [ 267.437759] ? __lock_is_held+0xb6/0x140 [ 267.441830] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 267.447373] ? iov_iter_fault_in_readable+0x22c/0x450 [ 267.452573] shmem_write_begin+0x105/0x1e0 [ 267.456842] generic_perform_write+0x2a0/0x6b0 [ 267.461446] ? add_page_wait_queue+0x480/0x480 [ 267.466036] ? current_time+0x1b0/0x1b0 [ 267.470020] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 267.475040] ? generic_write_check_limits+0x291/0x380 [ 267.480246] __generic_file_write_iter+0x25e/0x630 [ 267.485180] ? mutex_trylock+0x2d0/0x2d0 [ 267.489279] generic_file_write_iter+0x34e/0x6a0 [ 267.494113] ? __generic_file_write_iter+0x630/0x630 [ 267.499233] ? __might_fault+0x12b/0x1e0 [ 267.503315] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 267.508857] ? iov_iter_init+0xea/0x220 [ 267.512839] __vfs_write+0x764/0xb40 [ 267.516561] ? kernel_read+0x120/0x120 [ 267.520476] ? rcu_read_lock_sched_held+0x110/0x130 [ 267.525499] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 267.530261] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.535797] ? __sb_start_write+0x1ac/0x360 [ 267.540132] vfs_write+0x20c/0x580 [ 267.543697] ksys_write+0x105/0x260 [ 267.547337] ? __ia32_sys_read+0xb0/0xb0 [ 267.551423] ? trace_hardirqs_off_caller+0x300/0x300 [ 267.556537] __ia32_sys_write+0x71/0xb0 [ 267.560525] do_fast_syscall_32+0x333/0xf98 [ 267.564858] ? do_int80_syscall_32+0x880/0x880 [ 267.569445] ? trace_hardirqs_off+0x310/0x310 [ 267.573950] ? syscall_return_slowpath+0x3b0/0x5f0 [ 267.578893] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 267.583969] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.588827] entry_SYSENTER_compat+0x70/0x7f [ 267.593241] RIP: 0023:0xf7f47869 [ 267.596645] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 267.615549] RSP: 002b:00000000f5f430cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 267.623270] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200009c0 [ 267.630542] RDX: 00000000ffffff1b RSI: 0000000000000000 RDI: 0000000000000000 [ 267.637815] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.645082] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 267.652353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.664307] memory: usage 307200kB, limit 307200kB, failcnt 39 [ 267.670355] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 267.687443] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 267.699046] Memory cgroup stats for /syz4: cache:241784KB rss:56004KB rss_huge:53248KB shmem:241784KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:241852KB active_anon:56100KB inactive_file:0KB active_file:0KB unevictable:0KB [ 267.728974] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=10062,uid=0 [ 267.750270] Memory cgroup out of memory: Kill process 10062 (syz-executor4) score 1106 or sacrifice child [ 267.761959] Killed process 10062 (syz-executor4) total-vm:71052kB, anon-rss:2224kB, file-rss:33468kB, shmem-rss:0kB [ 267.781858] cgroup: fork rejected by pids controller in /syz4 10:03:25 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:03:25 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 10:03:25 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x60}}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000500)=""/89, 0x59}, {0x0}, {&(0x7f0000000640)=""/232, 0xe8}], 0x3, 0x0) 10:03:25 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:25 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000000), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'syzkaller1\x00', 'ip6tnl0\x00', '\x01ama\x00\x00\x00\x00J\xb2\xce\xc8\x00', @remote, [], @remote, [], 0x2a8, 0x2a8, 0x320, [@bpf0={'bpf\x00', 0x210, {{0x3, [{}, {}, {0x6}]}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "339ebc4bb0c0fba43162d5c302d891b307544d821a0dcb492ba4aa23baaca6e53f392b79c58e0581db804208237c3df1c60b6b34da2747cd3200fbb384511226"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffdffffffffc}]}, 0x3ec) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 267.782097] oom_reaper: reaped process 10062 (syz-executor4), now anon-rss:0kB, file-rss:32792kB, shmem-rss:0kB [ 267.905493] kernel msg: ebtables bug: please report to author: Wrong len argument [ 267.987987] kernel msg: ebtables bug: please report to author: Wrong len argument [ 268.293161] syz-executor4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 268.310553] CPU: 1 PID: 11263 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #17 [ 268.317758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.327114] Call Trace: [ 268.329710] dump_stack+0x1db/0x2d0 [ 268.333343] ? dump_stack_print_info.cold+0x20/0x20 [ 268.338385] dump_header+0x1e6/0x116c [ 268.342189] ? add_lock_to_list.isra.0+0x450/0x450 [ 268.347127] ? print_usage_bug+0xd0/0xd0 [ 268.351198] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 268.356134] ? ___ratelimit+0x37c/0x686 [ 268.360125] ? mark_held_locks+0xb1/0x100 [ 268.364279] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 268.369392] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 268.374502] ? lockdep_hardirqs_on+0x415/0x5d0 [ 268.379098] ? trace_hardirqs_on+0xbd/0x310 [ 268.383430] ? kasan_check_read+0x11/0x20 [ 268.387593] ? ___ratelimit+0x37c/0x686 [ 268.391575] ? trace_hardirqs_off_caller+0x300/0x300 [ 268.396708] ? do_raw_spin_trylock+0x270/0x270 [ 268.401306] ? trace_hardirqs_on_caller+0x310/0x310 [ 268.406338] ? lock_acquire+0x1db/0x570 [ 268.410320] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 268.415433] ? ___ratelimit+0xac/0x686 [ 268.419329] ? idr_get_free+0xee0/0xee0 [ 268.423307] ? lockdep_hardirqs_on+0x415/0x5d0 [ 268.427902] oom_kill_process.cold+0x10/0x9d4 [ 268.432405] ? cgroup_procs_next+0x70/0x70 [ 268.436648] ? _raw_spin_unlock_irq+0x5e/0x90 [ 268.441151] ? oom_badness+0xa50/0xa50 [ 268.445047] ? oom_evaluate_task+0x540/0x540 [ 268.449459] ? mem_cgroup_iter_break+0x30/0x30 [ 268.454054] ? mutex_trylock+0x2d0/0x2d0 [ 268.458121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.463680] ? rcu_read_unlock_special+0x380/0x380 [ 268.468643] out_of_memory+0x885/0x1420 [ 268.472630] ? mem_cgroup_iter+0x508/0xf30 [ 268.476877] ? oom_killer_disable+0x340/0x340 [ 268.481377] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 268.486485] ? lock_acquire+0x1db/0x570 [ 268.490479] mem_cgroup_out_of_memory+0x160/0x210 [ 268.495328] ? do_raw_spin_unlock+0xa0/0x330 [ 268.499741] ? memcg_memory_event+0x40/0x40 [ 268.504072] ? do_raw_spin_trylock+0x270/0x270 [ 268.508675] ? _raw_spin_unlock+0x2d/0x50 [ 268.512832] try_charge+0x12a9/0x19b0 [ 268.516637] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.522186] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 268.527053] ? rcu_read_unlock_special+0x380/0x380 [ 268.532075] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 268.536934] ? get_mem_cgroup_from_page+0x190/0x190 [ 268.541968] mem_cgroup_try_charge+0x43a/0xdb0 [ 268.546561] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 268.552116] ? mem_cgroup_protected+0xa10/0xa10 [ 268.556793] ? shmem_getattr+0x2c0/0x2c0 [ 268.560860] ? _raw_spin_unlock_irq+0x28/0x90 [ 268.565357] ? lockdep_hardirqs_on+0x415/0x5d0 [ 268.569942] ? trace_hardirqs_on+0xbd/0x310 [ 268.574266] ? kasan_check_read+0x11/0x20 [ 268.578419] ? trace_hardirqs_off_caller+0x300/0x300 [ 268.583541] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 268.588501] shmem_getpage_gfp+0xa85/0x4b70 [ 268.592849] ? shmem_add_to_page_cache+0x19a0/0x19a0 [ 268.597957] ? page_mapping+0x56d/0xa20 [ 268.601939] ? __page_mapcount+0x550/0x550 [ 268.606181] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 268.611723] ? __set_page_dirty_no_writeback+0x3a1/0x690 [ 268.617182] ? do_writepages+0x1a0/0x1a0 [ 268.621261] ? __switch_to_asm+0x34/0x70 [ 268.625325] ? __switch_to_asm+0x34/0x70 [ 268.629382] ? __switch_to_asm+0x40/0x70 [ 268.633442] ? __switch_to_asm+0x34/0x70 [ 268.637513] ? __switch_to_asm+0x34/0x70 [ 268.641603] ? __switch_to_asm+0x34/0x70 [ 268.645670] ? __switch_to_asm+0x34/0x70 [ 268.649748] ? __switch_to_asm+0x40/0x70 [ 268.653809] ? __switch_to_asm+0x34/0x70 [ 268.657877] ? __switch_to_asm+0x40/0x70 [ 268.661967] ? do_writepages+0x1a0/0x1a0 [ 268.666051] ? __writepage+0xe0/0xe0 [ 268.669781] ? pci_mmcfg_check_reserved+0x170/0x170 [ 268.674801] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 268.680264] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 268.685805] ? unlock_page+0x2b1/0x4a0 [ 268.689696] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 268.695237] ? balance_dirty_pages_ratelimited+0x1b0/0x2370 [ 268.700955] ? preempt_schedule+0x4b/0x60 [ 268.705107] ? preempt_schedule_common+0x4f/0xe0 [ 268.709869] ? balance_dirty_pages+0x3740/0x3740 [ 268.714629] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 268.720170] ? shmem_write_end+0x384/0xa40 [ 268.724416] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 268.729452] ? iov_iter_advance+0x354/0x1490 [ 268.733863] ? __lock_is_held+0xb6/0x140 [ 268.737933] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 268.743490] ? iov_iter_fault_in_readable+0x22c/0x450 [ 268.748693] shmem_write_begin+0x105/0x1e0 [ 268.752945] generic_perform_write+0x2a0/0x6b0 [ 268.757547] ? add_page_wait_queue+0x480/0x480 [ 268.762150] ? current_time+0x1b0/0x1b0 [ 268.766135] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 268.771156] ? generic_write_check_limits+0x291/0x380 [ 268.776355] __generic_file_write_iter+0x25e/0x630 [ 268.781289] ? mutex_trylock+0x2d0/0x2d0 [ 268.785371] generic_file_write_iter+0x34e/0x6a0 [ 268.790142] ? __generic_file_write_iter+0x630/0x630 [ 268.795248] ? __might_fault+0x12b/0x1e0 [ 268.799311] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 268.804940] ? iov_iter_init+0xea/0x220 [ 268.808924] __vfs_write+0x764/0xb40 [ 268.812650] ? kernel_read+0x120/0x120 [ 268.816557] ? rcu_read_lock_sched_held+0x110/0x130 [ 268.821591] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 268.826356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.831896] ? __sb_start_write+0x1ac/0x360 [ 268.836252] vfs_write+0x20c/0x580 [ 268.839802] ksys_write+0x105/0x260 [ 268.843435] ? __ia32_sys_read+0xb0/0xb0 [ 268.847502] ? trace_hardirqs_off_caller+0x300/0x300 [ 268.852623] __ia32_sys_write+0x71/0xb0 [ 268.856647] do_fast_syscall_32+0x333/0xf98 [ 268.860981] ? do_int80_syscall_32+0x880/0x880 [ 268.865563] ? trace_hardirqs_off+0x310/0x310 [ 268.870081] ? syscall_return_slowpath+0x3b0/0x5f0 [ 268.875040] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 268.880073] ? __switch_to_asm+0x34/0x70 [ 268.884192] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.889052] entry_SYSENTER_compat+0x70/0x7f [ 268.893486] RIP: 0023:0xf7f47869 [ 268.896853] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 268.915754] RSP: 002b:00000000f5f430cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 268.923464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200009c0 [ 268.930730] RDX: 00000000ffffff1b RSI: 0000000000000000 RDI: 0000000000000000 [ 268.938001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 268.945285] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 268.952551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 268.980449] memory: usage 307200kB, limit 307200kB, failcnt 89 [ 269.001697] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 269.009114] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 269.021969] Memory cgroup stats for /syz4: cache:241868KB rss:55968KB rss_huge:53248KB shmem:241868KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:241932KB active_anon:56084KB inactive_file:0KB active_file:0KB unevictable:0KB 10:03:27 executing program 5: 10:03:27 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:27 executing program 0: 10:03:27 executing program 1: 10:03:27 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) [ 269.053848] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=11221,uid=0 [ 269.068611] Memory cgroup out of memory: Kill process 11221 (syz-executor4) score 1106 or sacrifice child [ 269.078787] Killed process 11221 (syz-executor4) total-vm:70656kB, anon-rss:2204kB, file-rss:33464kB, shmem-rss:0kB [ 269.091162] oom_reaper: reaped process 11221 (syz-executor4), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB 10:03:27 executing program 1: 10:03:27 executing program 0: 10:03:27 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ncpfs\x00', 0x4000, 0x0) 10:03:27 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:27 executing program 5: 10:03:27 executing program 1: 10:03:27 executing program 0: 10:03:27 executing program 5: 10:03:27 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:27 executing program 1: 10:03:27 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 269.752874] syz-executor4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 269.763452] CPU: 0 PID: 11307 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #17 [ 269.770639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.779978] Call Trace: [ 269.782554] dump_stack+0x1db/0x2d0 [ 269.786179] ? dump_stack_print_info.cold+0x20/0x20 [ 269.791203] dump_header+0x1e6/0x116c [ 269.795006] ? add_lock_to_list.isra.0+0x450/0x450 [ 269.799933] ? print_usage_bug+0xd0/0xd0 [ 269.804014] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 269.808950] ? ___ratelimit+0x37c/0x686 [ 269.812918] ? mark_held_locks+0xb1/0x100 [ 269.817067] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 269.822163] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 269.827263] ? lockdep_hardirqs_on+0x415/0x5d0 [ 269.831853] ? trace_hardirqs_on+0xbd/0x310 [ 269.836180] ? kasan_check_read+0x11/0x20 [ 269.840338] ? ___ratelimit+0x37c/0x686 [ 269.844322] ? trace_hardirqs_off_caller+0x300/0x300 [ 269.849420] ? do_raw_spin_trylock+0x270/0x270 [ 269.854000] ? trace_hardirqs_on_caller+0x310/0x310 [ 269.859034] ? lock_acquire+0x1db/0x570 [ 269.863003] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 269.868097] ? ___ratelimit+0xac/0x686 [ 269.871982] ? idr_get_free+0xee0/0xee0 [ 269.875959] ? lockdep_hardirqs_on+0x415/0x5d0 [ 269.880553] oom_kill_process.cold+0x10/0x9d4 [ 269.885058] ? cgroup_procs_next+0x70/0x70 [ 269.889316] ? _raw_spin_unlock_irq+0x5e/0x90 [ 269.893820] ? oom_badness+0xa50/0xa50 [ 269.897725] ? oom_evaluate_task+0x540/0x540 [ 269.902136] ? mem_cgroup_iter_break+0x30/0x30 [ 269.906724] ? mutex_trylock+0x2d0/0x2d0 [ 269.910784] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.916343] ? rcu_read_unlock_special+0x380/0x380 [ 269.921269] out_of_memory+0x885/0x1420 [ 269.925256] ? mem_cgroup_iter+0x508/0xf30 [ 269.929515] ? oom_killer_disable+0x340/0x340 [ 269.934023] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 269.939123] ? lock_acquire+0x1db/0x570 [ 269.943086] mem_cgroup_out_of_memory+0x160/0x210 [ 269.947927] ? do_raw_spin_unlock+0xa0/0x330 10:03:28 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640), 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:28 executing program 0: 10:03:28 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:28 executing program 5: 10:03:28 executing program 1: [ 269.952340] ? memcg_memory_event+0x40/0x40 [ 269.956677] ? do_raw_spin_trylock+0x270/0x270 [ 269.961275] ? _raw_spin_unlock+0x2d/0x50 [ 269.965431] try_charge+0x12a9/0x19b0 [ 269.969240] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.974794] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 269.979649] ? rcu_read_unlock_special+0x380/0x380 [ 269.984620] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 269.989476] ? get_mem_cgroup_from_page+0x190/0x190 [ 269.994517] mem_cgroup_try_charge+0x43a/0xdb0 [ 269.994641] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 269.994659] ? mem_cgroup_protected+0xa10/0xa10 [ 269.994677] ? shmem_getattr+0x2c0/0x2c0 [ 270.004788] ? _raw_spin_unlock_irq+0x28/0x90 [ 270.004805] ? lockdep_hardirqs_on+0x415/0x5d0 [ 270.004822] ? trace_hardirqs_on+0xbd/0x310 [ 270.004838] ? kasan_check_read+0x11/0x20 [ 270.004856] ? trace_hardirqs_off_caller+0x300/0x300 [ 270.004880] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 270.004901] shmem_getpage_gfp+0xa85/0x4b70 [ 270.004937] ? shmem_add_to_page_cache+0x19a0/0x19a0 10:03:28 executing program 1: [ 270.050604] ? page_mapping+0x56d/0xa20 [ 270.054610] ? __page_mapcount+0x550/0x550 [ 270.058857] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 270.064408] ? __set_page_dirty_no_writeback+0x3a1/0x690 [ 270.069885] ? do_writepages+0x1a0/0x1a0 [ 270.073955] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 270.079505] ? check_preemption_disabled+0x48/0x290 [ 270.084538] ? kasan_check_write+0x14/0x20 [ 270.088808] ? up_read+0x212/0x2b0 [ 270.092355] ? do_writepages+0x1a0/0x1a0 [ 270.096430] ? __writepage+0xe0/0xe0 [ 270.100166] ? lockdep_hardirqs_on+0x415/0x5d0 [ 270.104754] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 270.110296] ? unlock_page+0x2b1/0x4a0 [ 270.114203] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 270.119755] ? balance_dirty_pages_ratelimited+0x1b0/0x2370 [ 270.125493] ? preempt_schedule+0x4b/0x60 [ 270.129924] ? balance_dirty_pages+0x3740/0x3740 [ 270.134715] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 270.140299] ? shmem_write_end+0x384/0xa40 [ 270.144542] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 270.149571] ? iov_iter_advance+0x354/0x1490 10:03:28 executing program 5: [ 270.154010] ? __lock_is_held+0xb6/0x140 [ 270.158086] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 270.163636] ? iov_iter_fault_in_readable+0x22c/0x450 [ 270.168851] shmem_write_begin+0x105/0x1e0 [ 270.173107] generic_perform_write+0x2a0/0x6b0 [ 270.177714] ? add_page_wait_queue+0x480/0x480 [ 270.182310] ? current_time+0x1b0/0x1b0 [ 270.186302] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 270.191331] ? generic_write_check_limits+0x291/0x380 [ 270.196537] __generic_file_write_iter+0x25e/0x630 [ 270.201478] ? mutex_trylock+0x2d0/0x2d0 [ 270.205611] generic_file_write_iter+0x34e/0x6a0 [ 270.205636] ? __generic_file_write_iter+0x630/0x630 [ 270.205651] ? __might_fault+0x12b/0x1e0 [ 270.205675] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 270.205692] ? iov_iter_init+0xea/0x220 [ 270.205714] __vfs_write+0x764/0xb40 [ 270.215564] ? kernel_read+0x120/0x120 [ 270.215612] ? rcu_read_lock_sched_held+0x110/0x130 [ 270.215628] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 270.215642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.215655] ? __sb_start_write+0x1ac/0x360 [ 270.215674] vfs_write+0x20c/0x580 [ 270.215696] ksys_write+0x105/0x260 [ 270.215713] ? __ia32_sys_read+0xb0/0xb0 [ 270.215731] ? trace_hardirqs_off_caller+0x300/0x300 [ 270.215751] __ia32_sys_write+0x71/0xb0 [ 270.276725] do_fast_syscall_32+0x333/0xf98 [ 270.281066] ? do_int80_syscall_32+0x880/0x880 [ 270.285658] ? trace_hardirqs_off+0x310/0x310 [ 270.290183] ? syscall_return_slowpath+0x3b0/0x5f0 [ 270.295126] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 270.300177] ? __switch_to_asm+0x34/0x70 10:03:28 executing program 5: [ 270.304258] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.309170] entry_SYSENTER_compat+0x70/0x7f [ 270.313598] RIP: 0023:0xf7f47869 [ 270.316986] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 270.335902] RSP: 002b:00000000f5f430cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 270.343627] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200009c0 [ 270.350915] RDX: 00000000ffffff1b RSI: 0000000000000000 RDI: 0000000000000000 [ 270.358195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.365470] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 270.372754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 10:03:28 executing program 0: [ 270.432387] memory: usage 307200kB, limit 307200kB, failcnt 142 [ 270.439079] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 270.446461] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 270.463290] Memory cgroup stats for /syz4: cache:241804KB rss:55948KB rss_huge:53248KB shmem:241804KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:241964KB active_anon:56068KB inactive_file:0KB active_file:0KB unevictable:0KB [ 270.544480] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=9487,uid=0 [ 270.562294] Memory cgroup out of memory: Kill process 9487 (syz-executor4) score 1106 or sacrifice child [ 270.579871] Killed process 9487 (syz-executor4) total-vm:70260kB, anon-rss:2196kB, file-rss:33468kB, shmem-rss:0kB 10:03:28 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x40) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000480)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000800)=0xe8) getresgid(&(0x7f0000000840), &(0x7f0000000880)=0x0, &(0x7f00000008c0)) sendmsg$unix(r0, &(0x7f0000000a00)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000240)="f64a6c225d89966c4cf88dd1f52a8da43e10549cad63343458860292cecf6245f0434c2501a17888361aac0cb94c5e7ec7c6826c2edd4272e3bcc1576165991e6c61e2e0da75273430b67633e0735dc0019419a89de4d6988a039e0b1049e9ae54934c9dfd890c5cfd40c4c1228bd1a7250c571c7f1c160cf069c8b5", 0x7c}, {&(0x7f00000002c0)="ce7bb4db329b2a9e33814fc8c46d3483bb38222cb6c26e1152146ab026e05f5378caa862cce65604fda683956bfa20bd64afdc3c09d3496f9f3e4fb3f0be4a33f182ea2270b6a774fc06342e76d4ebee5de49cb82ae8f6b0f8ecd7170001120e9b48dda5d97e14306cbbaf", 0x6b}, {&(0x7f0000000340)="546cca2d2c5394b92764d360af48dae27cc64878050ea05237c3ac48ad5e9645679ea50679aeece9fd1f85d85685b28489ba4027b4dd6bdbc6db6751df9600ec2616031a13842a7784d02260d00c03bf7bd88995e7510de265e76306c55300cb56c940f87de9f87f54a731625eac2ad4453fb624705039307e48c00992bbe262e3167913fb6db63ad2a8e64e4e6e5ec05e7171df9823", 0x96}, {&(0x7f0000000400)="0be0a5e7e0a62aab7153a0e406fa396488daaef77cf73b949d7f4ed7919544a45c56c7953558a248af07ee7c", 0x2c}], 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="240000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="240000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="180000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="180000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="180000002300000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6], 0xa8, 0x4}, 0x44) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='\xd3\bev ', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") 10:03:28 executing program 5: 10:03:28 executing program 1: [ 270.593005] oom_reaper: reaped process 9487 (syz-executor4), now anon-rss:0kB, file-rss:32792kB, shmem-rss:0kB 10:03:28 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640), 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:28 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:28 executing program 0: 10:03:28 executing program 5: 10:03:28 executing program 1: 10:03:28 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bdev\x00', 0x0, 0x0) 10:03:29 executing program 1: 10:03:29 executing program 5: 10:03:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) 10:03:29 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:29 executing program 1: 10:03:29 executing program 5: 10:03:29 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640), 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:29 executing program 0: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000df8fd9)="2600000022004701050000000000000005006d20002b1f00c05d080a4a51f10101c7033400b0", 0x26) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00005b5000)={0x0, 0x0, 0x0}, 0x0) 10:03:29 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000040c0), 0x1000) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x12a) write$FUSE_IOCTL(r0, &(0x7f0000000240)={0x20, 0x0, 0x2, {0x8, 0x7, 0x4}}, 0x20) 10:03:29 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:29 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/97, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/181, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 10:03:29 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xff3c) r1 = fcntl$getown(r0, 0x9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000001c0)) timerfd_gettime(r0, &(0x7f0000000240)) fcntl$setown(r0, 0x8, r1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x0, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:29 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xfffffffffffffffd) clone(0x800000200f6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, &(0x7f0000000080)='y\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @my=0x1}, 0xffffffffffffff22) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1c00486}, 0xc, 0x0}, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000003c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:03:29 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) sigaltstack(&(0x7f0000e3a000/0x1000)=nil, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x4000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000760000/0x1000)=nil, &(0x7f000083c000/0x2000)=nil, 0x1000, 0x1}) 10:03:30 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) unshare(0x8020001) r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x1) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000480)) restart_syscall() r1 = syz_open_dev$usb(&(0x7f0000000580)='/dev/bus/usb/00#/00#\x00', 0x530f, 0x801) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xffffffff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x3, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000340)='./file0\x00', 0x400, 0x100) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000380), 0x0}, 0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xffffffffffffffff}, &(0x7f00000001c0)=0x8) readv(r0, &(0x7f0000001d40)=[{&(0x7f00000000c0)=""/125, 0x7d}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000000140)=""/7, 0x7}, {&(0x7f0000000780)=""/106, 0x6a}, {&(0x7f0000001a00)=""/184, 0xb8}, {&(0x7f0000001ac0)=""/221, 0xdd}, {&(0x7f0000001bc0)=""/169, 0xa9}, {&(0x7f0000001c80)=""/141, 0x8d}], 0x9) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r3, 0x5}, &(0x7f00000003c0)=0x8) fcntl$setlease(r1, 0x400, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000180)}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000300)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="000000000000000070bce308c31d16157feacce5192f15ec91d374acb0a92645733561a994fe9e00d900000900ef1887b30e97addbab2a8c15df1e812de4ec2264b2da4e6ccb7d148c91033d617db13543c041ea1aaad38231f5697d1bbe5dc1d07a08a6435e4a05c4cd7e58531b625984956f0200e32e3fbdb699b6194f4ff19d0c83b1c251043b14a36a0b80f09e5937d6a876f1a80da7dc7f64f13bea1529ae6a49e9d57363c8bb9f542c07eb668ba50525187a6f541f2fe2e06b53e19c174a44a772cba8a167e69c622f134539b652618630672682716fea7ec7a2a25b42aa1518363681dc503c502bcceb31417befde6e76dce07efe77140b1f9686af7eccb1cacbb555833b79a256477716bfb38815f424390e7e831cdf5376044c6f85925556249b7b3b8ed324a6"], 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r4, 0x40046411, &(0x7f0000000400)=0x1) rt_sigprocmask(0x1, &(0x7f0000000540)={0xff}, &(0x7f00000005c0), 0x8) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000840)) syz_open_procfs$namespace(r5, &(0x7f00000009c0)='ns/mnt\x00') ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000380)={'veth0_to_bridge\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000005c0)=ANY=[]) setns(r1, 0x2000000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000040)={0x1f004, 0x108000}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={0x0, 0x0, 0x10, 0x4, 0x38000000000}, &(0x7f0000000680)=0x18) clone(0x10062101, &(0x7f0000000180)="156b001f7186570f11872209006ab5fd824d23e35467b4aad899bc1d890aa416937392f8b8078d59a8cf169766ccdf750dd7285f", 0x0, &(0x7f0000000000), &(0x7f00000004c0)) 10:03:30 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 272.071860] syz-executor4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 272.114602] CPU: 1 PID: 11410 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #17 [ 272.121813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.131681] Call Trace: [ 272.134276] dump_stack+0x1db/0x2d0 [ 272.137912] ? dump_stack_print_info.cold+0x20/0x20 [ 272.142969] dump_header+0x1e6/0x116c [ 272.146787] ? add_lock_to_list.isra.0+0x450/0x450 [ 272.151729] ? print_usage_bug+0xd0/0xd0 [ 272.155801] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 272.160745] ? ___ratelimit+0x37c/0x686 [ 272.164737] ? mark_held_locks+0xb1/0x100 [ 272.168899] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 272.174015] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 272.179138] ? lockdep_hardirqs_on+0x415/0x5d0 [ 272.183733] ? trace_hardirqs_on+0xbd/0x310 [ 272.188067] ? kasan_check_read+0x11/0x20 [ 272.192236] ? ___ratelimit+0x37c/0x686 [ 272.196227] ? trace_hardirqs_off_caller+0x300/0x300 [ 272.201351] ? do_raw_spin_trylock+0x270/0x270 [ 272.205942] ? trace_hardirqs_on_caller+0x310/0x310 [ 272.210971] ? lock_acquire+0x1db/0x570 [ 272.214962] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 272.220080] ? ___ratelimit+0xac/0x686 [ 272.223977] ? idr_get_free+0xee0/0xee0 [ 272.227973] ? lockdep_hardirqs_on+0x415/0x5d0 [ 272.232578] oom_kill_process.cold+0x10/0x9d4 [ 272.237098] ? cgroup_procs_next+0x70/0x70 [ 272.237120] ? _raw_spin_unlock_irq+0x5e/0x90 [ 272.237138] ? oom_badness+0xa50/0xa50 [ 272.237159] ? oom_evaluate_task+0x540/0x540 [ 272.237176] ? mem_cgroup_iter_break+0x30/0x30 [ 272.249764] ? mutex_trylock+0x2d0/0x2d0 [ 272.249781] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.249812] ? rcu_read_unlock_special+0x380/0x380 [ 272.249837] out_of_memory+0x885/0x1420 [ 272.249859] ? mem_cgroup_iter+0x508/0xf30 [ 272.281520] ? oom_killer_disable+0x340/0x340 [ 272.286029] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 272.291140] ? lock_acquire+0x1db/0x570 [ 272.295250] mem_cgroup_out_of_memory+0x160/0x210 [ 272.300107] ? do_raw_spin_unlock+0xa0/0x330 [ 272.304523] ? memcg_memory_event+0x40/0x40 [ 272.308857] ? do_raw_spin_trylock+0x270/0x270 [ 272.308885] ? _raw_spin_unlock+0x2d/0x50 [ 272.308905] try_charge+0x12a9/0x19b0 [ 272.308923] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.308947] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 272.308968] ? rcu_read_unlock_special+0x380/0x380 [ 272.317701] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 272.317722] ? get_mem_cgroup_from_page+0x190/0x190 [ 272.317754] mem_cgroup_try_charge+0x43a/0xdb0 [ 272.317773] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 272.317791] ? mem_cgroup_protected+0xa10/0xa10 [ 272.317810] ? shmem_getattr+0x2c0/0x2c0 [ 272.365534] ? _raw_spin_unlock_irq+0x28/0x90 [ 272.370039] ? lockdep_hardirqs_on+0x415/0x5d0 [ 272.370057] ? trace_hardirqs_on+0xbd/0x310 [ 272.370073] ? kasan_check_read+0x11/0x20 [ 272.370098] ? trace_hardirqs_off_caller+0x300/0x300 [ 272.370122] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 272.383196] shmem_getpage_gfp+0xa85/0x4b70 [ 272.383235] ? shmem_add_to_page_cache+0x19a0/0x19a0 [ 272.383249] ? page_mapping+0x56d/0xa20 [ 272.383266] ? __page_mapcount+0x550/0x550 [ 272.410907] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 272.416459] ? __set_page_dirty_no_writeback+0x3a1/0x690 [ 272.421924] ? do_writepages+0x1a0/0x1a0 [ 272.425994] ? add_lock_to_list.isra.0+0x450/0x450 [ 272.430919] ? mark_held_locks+0x100/0x100 [ 272.435167] ? print_usage_bug+0xd0/0xd0 [ 272.439217] ? do_writepages+0x1a0/0x1a0 [ 272.443267] ? __writepage+0xe0/0xe0 [ 272.447048] ? __mark_inode_dirty+0x2ff/0x1590 [ 272.451626] ? inode_switch_wbs_work_fn+0x2280/0x2280 [ 272.456814] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 272.462357] ? unlock_page+0x2b1/0x4a0 [ 272.466230] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 272.471751] ? balance_dirty_pages_ratelimited+0x1b0/0x2370 [ 272.477451] ? balance_dirty_pages+0x3740/0x3740 [ 272.482191] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 272.487716] ? shmem_write_end+0x384/0xa40 [ 272.491936] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 272.496941] ? iov_iter_advance+0x354/0x1490 [ 272.501333] ? __lock_is_held+0xb6/0x140 [ 272.505386] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 272.510921] ? iov_iter_fault_in_readable+0x22c/0x450 [ 272.516121] shmem_write_begin+0x105/0x1e0 [ 272.520360] generic_perform_write+0x2a0/0x6b0 [ 272.524937] ? add_page_wait_queue+0x480/0x480 [ 272.529502] ? current_time+0x1b0/0x1b0 [ 272.533461] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 272.538463] ? generic_write_check_limits+0x291/0x380 [ 272.543657] __generic_file_write_iter+0x25e/0x630 [ 272.548594] ? mutex_trylock+0x2d0/0x2d0 [ 272.552660] generic_file_write_iter+0x34e/0x6a0 [ 272.557416] ? __generic_file_write_iter+0x630/0x630 [ 272.562502] ? __might_fault+0x12b/0x1e0 [ 272.566563] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 272.572126] ? iov_iter_init+0xea/0x220 [ 272.576108] __vfs_write+0x764/0xb40 [ 272.579819] ? kernel_read+0x120/0x120 [ 272.583700] ? rcu_read_lock_sched_held+0x110/0x130 [ 272.588704] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 272.593457] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.598978] ? __sb_start_write+0x1ac/0x360 [ 272.603296] vfs_write+0x20c/0x580 [ 272.606831] ksys_write+0x105/0x260 [ 272.610468] ? __ia32_sys_read+0xb0/0xb0 [ 272.614530] ? trace_hardirqs_off_caller+0x300/0x300 [ 272.619629] __ia32_sys_write+0x71/0xb0 [ 272.623608] do_fast_syscall_32+0x333/0xf98 [ 272.627943] ? do_int80_syscall_32+0x880/0x880 [ 272.632522] ? trace_hardirqs_off+0x310/0x310 [ 272.637015] ? syscall_return_slowpath+0x3b0/0x5f0 [ 272.641949] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 272.646969] ? __switch_to_asm+0x34/0x70 [ 272.651038] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.655893] entry_SYSENTER_compat+0x70/0x7f [ 272.660296] RIP: 0023:0xf7f47869 [ 272.663656] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 272.682560] RSP: 002b:00000000f5f430cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 272.690272] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 272.697534] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000 [ 272.704801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 10:03:30 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{0x0}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:30 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) socket$netlink(0x10, 0x3, 0x4) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x9) 10:03:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) sigaltstack(&(0x7f0000e3a000/0x1000)=nil, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x4000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000760000/0x1000)=nil, &(0x7f000083c000/0x2000)=nil, 0x1000, 0x1}) 10:03:30 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) [ 272.712068] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 272.719328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.743670] memory: usage 307200kB, limit 307200kB, failcnt 189 [ 272.755868] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 272.769253] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 272.821198] Memory cgroup stats for /syz4: cache:237228KB rss:60212KB rss_huge:57344KB shmem:237228KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:237236KB active_anon:60376KB inactive_file:0KB active_file:0KB unevictable:0KB [ 272.850228] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=9544,uid=0 10:03:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) sigaltstack(&(0x7f0000e3a000/0x1000)=nil, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x4000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000760000/0x1000)=nil, &(0x7f000083c000/0x2000)=nil, 0x1000, 0x1}) 10:03:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x420400) sendto$inet(r0, &(0x7f0000000080)="b1c41d4ce06714b8d0dfd6e923535639e26f84708089af4535c0df1916b4a18a487a9d23f4b3446e2be0b6168df4c6ec876679031c11185130839a12b381e3c7b33b47b72fbdb9ded6f717af0b102854ff5483c7befd028e81b4efa73c48ddbaa661618affcf4d56f9ac355d4fc673bac4cd7616819afa", 0x77, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) r1 = syz_open_dev$adsp(0x0, 0x0, 0x141) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x0) read$FUSE(r2, &(0x7f0000000240), 0x1000) write$evdev(r1, &(0x7f00000000c0), 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x18) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0x7f, 0x10000, 0x1, 0x0, 0x3, 0x6, 0x3ff, 0x1, 0x4, 0x8000, 0x5, 0x80, 0x8eb, 0x146ce1e4, 0x1, 0x1}}) [ 272.873894] Memory cgroup out of memory: Kill process 9544 (syz-executor4) score 1106 or sacrifice child [ 272.894250] Killed process 9544 (syz-executor4) total-vm:70260kB, anon-rss:2196kB, file-rss:33468kB, shmem-rss:0kB [ 272.910319] oom_reaper: reaped process 9544 (syz-executor4), now anon-rss:0kB, file-rss:32792kB, shmem-rss:0kB 10:03:31 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x365, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000100)=0x3, 0x4) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x40) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:31 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 10:03:31 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0751a651763bcf8ffffff79a4dcff08000098914278033800b4040000ff7fffff2d020000005eafe556b35e1d006504040001000000040400008500d9c6a566d57b1e19c0e322ece68cfa170000000000000000000000000000058e5c6e6df31b895122089100a355aaae9ac3ceb3650eeeb3d3243ba48f34474476b5f9108bfe28aead7f63cfbf5f36c710c2aad200000000"], 0x0}, 0x48) r2 = socket$inet6(0xa, 0x81000000000002, 0x5) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000002c0)=r6) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f00000003c0)={{0x6c, @rand_addr=0x134, 0x800004e28, 0xfffffffffffffffe, 'lblcr\x00', 0x1e, 0x3, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x3}}, 0xffffffffffffffbc) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r7 = gettid() clock_nanosleep(0x2, 0x1, &(0x7f00000000c0)={0x77359400}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0xb8ef9e4c5c28237b, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r7, 0x1000000000014) r8 = memfd_create(&(0x7f00000009c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac<\xa0\x02\xeb\x12\tu\\\xb2\x0f.\x05VT\xad\xe3\xd5\xb2\xbf\x1d\xe1p^3\b\xb1\x83O\x00\x91\xe5\x9e\x1b\xc4\xb9g_\xa2\xe4\xbexz\x8a\xa2\xb3\x06\x03\x1e\xbaXvEN\x1d\x06R(\x94zUy\x12\xac\x02t\xe6\xc651,\xdb\x9b\xb1d\xd6\xea\xc8u\xf7\xb9\x1c\x10\xf4\xf4\xad\x1eS1\x0eS\xd1Wu]\xb7\xe7\v%\xe4\x13`\xd3\xd2~\xa1\xeb,\xde\xa5-\xb4\xcfMy\xb7\xfc\x1f\x90]\x1d\xb2\xbe\x90\xdd\xf4p\xd4s\f\xc8\xb5\x1a\xf8\x04\xc7\xb6*\xcais\x8cs\xb3@\x8b\xd2\xc25\xce4\x8cy\x89\xc2\x943\xfa\n\xc2^\xe6\xe6}\x9e\\\xee\xbc\x9d\xd4\x9f\xeam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[], 0xfffffffffffffdfd) close(r4) r9 = dup3(r3, r8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="8a482a7bc757b13ff64a2c777badc97166029c047feabfc401c6eee06875aa47e7a6df74afcf3b4feb2567f0599b2ca766d86838bbe0ac5e839083d9f9757742b33d017138ac3dc14d0b6d7d3c1e67d6a4e1ecf601ab164da4be6e", @ANYPTR64=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r8, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC=r3], @ANYPTR64=&(0x7f0000000940)=ANY=[@ANYRESOCT=r2], @ANYRESDEC=0x0, @ANYRES64=r10, @ANYRESOCT=r1], @ANYRESHEX], 0x75}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x168}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESOCT=r6, @ANYRES32=r9]], 0x8}}, 0x0) 10:03:31 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x84040) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x3}) r1 = socket$inet6(0xa, 0x6, 0x80000001) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'bond_slave_1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="32355a7710d12575a4eb7cbaa71a2be14504d109608497484de225e8ca7ca708aac18bfe5abbaf5433bf44278875cd5b847a01c99d254a34b777915a5f3a3a7556cfe12827c3259f004f9135565c60a9eb0bd59d620f8e4fc93e2d1ceee404e9b1495731b9948aa812a6b904291ac2aa5051102b41498f864397170bd1a32ddb7db55af0fd6c4fa0af520cf50011d1ca8eee669ab81d0aa1abe7eaf549fc8f8caf913a08025f9a3daf6e414b9f1e5c15011b915001e0e1eb0f950c0957b5eb754e51b96a859c2925425de4829090d6d9ab18c11e98aa8abbf3d8406a400c747974958c5b897dadc95b926b95915d162abfc9"]}) 10:03:31 executing program 3: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 10:03:31 executing program 5: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0xfffffffffffffffd) clone(0x800000200f6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) [ 273.285825] bridge0: port 3(gretap0) entered blocking state [ 273.324503] bridge0: port 3(gretap0) entered disabled state [ 273.360374] device gretap0 entered promiscuous mode [ 273.380005] bridge0: port 3(gretap0) entered blocking state [ 273.385927] bridge0: port 3(gretap0) entered forwarding state 10:03:31 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{0x0}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:31 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}]}]}}}}}}}, 0x0) 10:03:31 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}]}]}}}}}}}, 0x0) 10:03:31 executing program 1: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='\x00d\x00\xec\xff\x03E') getdents64(r1, &(0x7f00000002c0)=""/528, 0x210) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) 10:03:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="0800000000800000010000000500000008000a0027"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008f0000"]) 10:03:31 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x4000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:31 executing program 1: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x101000, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000002c0)={'team_slave_1\x00', 0x101}) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000240)={0xa3, 0x4}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CAPI_GET_FLAGS(0xffffffffffffffff, 0x80044323, 0x0) socket$inet6(0xa, 0x800000000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002d40)='/dev/cuse\x00', 0x82800, 0x0) io_setup(0x800, &(0x7f00000003c0)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000200)={0x100000000, {0x3, 0x31, 0x7aa5, 0xef, 0x1, 0x6}}) socket$key(0xf, 0x3, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, &(0x7f0000000540)={'syz'}, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x101000) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x60200, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x10040, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7, 0x200040) ioctl$VT_OPENQRY(r3, 0x5600, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000002d80)) syz_genetlink_get_family_id$tipc2(0x0) 10:03:31 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}]}]}}}}}}}, 0x0) 10:03:32 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0751a651763bcf8ffffff79a4dcff08000098914278033800b4040000ff7fffff2d020000005eafe556b35e1d006504040001000000040400008500d9c6a566d57b1e19c0e322ece68cfa170000000000000000000000000000058e5c6e6df31b895122089100a355aaae9ac3ceb3650eeeb3d3243ba48f34474476b5f9108bfe28aead7f63cfbf5f36c710c2aad200000000"], 0x0}, 0x48) r2 = socket$inet6(0xa, 0x81000000000002, 0x5) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000002c0)=r6) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f00000003c0)={{0x6c, @rand_addr=0x134, 0x800004e28, 0xfffffffffffffffe, 'lblcr\x00', 0x1e, 0x3, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x3}}, 0xffffffffffffffbc) clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r7 = gettid() clock_nanosleep(0x2, 0x1, &(0x7f00000000c0)={0x77359400}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0xb8ef9e4c5c28237b, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r7, 0x1000000000014) r8 = memfd_create(&(0x7f00000009c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac<\xa0\x02\xeb\x12\tu\\\xb2\x0f.\x05VT\xad\xe3\xd5\xb2\xbf\x1d\xe1p^3\b\xb1\x83O\x00\x91\xe5\x9e\x1b\xc4\xb9g_\xa2\xe4\xbexz\x8a\xa2\xb3\x06\x03\x1e\xbaXvEN\x1d\x06R(\x94zUy\x12\xac\x02t\xe6\xc651,\xdb\x9b\xb1d\xd6\xea\xc8u\xf7\xb9\x1c\x10\xf4\xf4\xad\x1eS1\x0eS\xd1Wu]\xb7\xe7\v%\xe4\x13`\xd3\xd2~\xa1\xeb,\xde\xa5-\xb4\xcfMy\xb7\xfc\x1f\x90]\x1d\xb2\xbe\x90\xdd\xf4p\xd4s\f\xc8\xb5\x1a\xf8\x04\xc7\xb6*\xcais\x8cs\xb3@\x8b\xd2\xc25\xce4\x8cy\x89\xc2\x943\xfa\n\xc2^\xe6\xe6}\x9e\\\xee\xbc\x9d\xd4\x9f\xeam\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) write$binfmt_misc(r0, &(0x7f0000000c40)=ANY=[], 0xfffffffffffffdfd) close(r4) r9 = dup3(r3, r8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="8a482a7bc757b13ff64a2c777badc97166029c047feabfc401c6eee06875aa47e7a6df74afcf3b4feb2567f0599b2ca766d86838bbe0ac5e839083d9f9757742b33d017138ac3dc14d0b6d7d3c1e67d6a4e1ecf601ab164da4be6e", @ANYPTR64=&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r8, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC=r3], @ANYPTR64=&(0x7f0000000940)=ANY=[@ANYRESOCT=r2], @ANYRESDEC=0x0, @ANYRES64=r10, @ANYRESOCT=r1], @ANYRESHEX], 0x75}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x168}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESOCT=r6, @ANYRES32=r9]], 0x8}}, 0x0) 10:03:32 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {}]}]}}}}}}}, 0x0) 10:03:32 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2, 0x0) pipe(&(0x7f00000003c0)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x0, 0x0) unshare(0x2000400) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 10:03:32 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {}]}]}}}}}}}, 0x0) 10:03:32 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{0x0}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000100)={&(0x7f0000004000/0x3000)=nil, 0x2, 0x5, 0x0, &(0x7f0000002000/0x4000)=nil, 0x9}) dup3(r1, r2, 0xfffffffffffffffc) r3 = gettid() ptrace$setregs(0xf, r3, 0x4, &(0x7f00000001c0)="88a1fdf548fbe740c60093640369580d14f6a6d57b852a77ec7abbb57808b13def6b693b6198385a4c607be4d932b3ef13f42b53a471e87ba87f2fef50301a48bb4f7026f0c1f90cab451fbd7944d495cf58e6b12b399a5e4bcf81586378502c555bb7fcfe1ff6e16004793331ff6dce5594a7bc096da46a1cf29da956c4a696f02e99c9e40fed3e216dd57a61986e26022178bb0eee4fd965c6bb76e5eaeb08ed9596910af74e82b16a478a7a08f67d3c3bf4c1b26257388cdf794828e83789db27ef8f31a12ecedef6cabe56fe1a9936bcde40db947b37e3c1280e327f019a3270e57eecdc") mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r2, 0x0) fcntl$getflags(r2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x301000, 0x0) 10:03:32 executing program 1: set_mempolicy(0x4004, &(0x7f0000000140)=0x6, 0x9) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x442e, 0x40040) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x3f, @remote, 0x4e20, 0x4, 'fo\x00', 0x23, 0x5, 0x4f}, {@dev, 0x0, 0x0, 0x2, 0x4, 0x20}}, 0x44) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x308, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x800) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000680)='/dev/loop#\x00', 0x0, 0x800000000105082) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000006c0)) r4 = getpid() perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x8000, 0x9, 0x7fff, 0x4, 0x0, 0x7f, 0x10000, 0x2, 0x7, 0x32, 0x5, 0x7, 0x0, 0x2, 0x4, 0x9, 0xa2d, 0x2, 0x1f, 0x0, 0x57e, 0x1000, 0x6, 0x7, 0x0, 0xc0c, 0xfffffffffffffff9, 0x9415, 0x0, 0x7f, 0x200, 0x1f, 0x800, 0x3, 0x61, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0x7fff}, 0x4008, 0x3, 0x1f, 0x0, 0x80000001, 0x4, 0x40000000000000}, r4, 0xe, r1, 0x0) iopl(0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000580)='b`\xe1h0\x00\x03\x00\x00\x00\x00\xe9\xff\x01\x00t') r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000200)) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r5) sendfile(r3, r5, &(0x7f00000ddff8), 0x102000000) 10:03:32 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {}]}]}}}}}}}, 0x0) 10:03:32 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:32 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0xc8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:32 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:32 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@dev]}]}]}}}}}}}, 0x0) [ 274.974688] IPVS: ftp: loaded support on port[0] = 21 10:03:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x400000000000000, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={0x0, 0x4000000000088, 0x0, 0x40, &(0x7f0000ffa000/0x4000)=nil, 0x10e15}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x6, {0x1}, 0x6, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x1000, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x0, 0x33093e40}) r1 = userfaultfd(0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000340)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB='{yz\x00'], 0x1200e) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{0x0}], 0x1, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x40a602) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000240)=""/26) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r2, &(0x7f00000030c0), 0x1000) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x1, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0xfffffffffffffffb, 0x0, 0x101, 0x0, 0x0, 0x800, 0xc071, 0x81, 0x7, 0x0, 0x69ef, 0x6, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x539e, 0x0, 0x0, 0x0, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x28100, 0x2eb, 0x400, 0x6, 0x1, 0x73bc, 0x3}, 0x0, 0x3, 0xffffffffffffff9c, 0xa) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) r4 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) dup2(r4, r4) 10:03:33 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000180)="dd188aab022e94dcea404a3288b2f79a921fe45da6bb614f469810d5c64f473dff23973817a3c3bee738e7d0b23bf65676b87e49a32df7303eeb48799613cff03dea573baa180119ef3093bd3f936c34a0a665c94ee9a151e602eaa89c0a7368a19bb34c628b60ccb01153e2fbb0778a45000153ea6590339096ea1fcfb540cd97cf95e9bca66da48d2d1bf8f1dea8d7bebf100e72cf0b9e90a7a5c16c3805a228efe6f68cbbf257e30e363d89b60982705a86d5e3fcbd70e26ba1850efe420cde1d91abd7f2c9f3f93a66f4c6c379764a28839e2b042f865e3744bef7f4b45dd8bb", 0xe2) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x5b) fcntl$setstatus(r0, 0x4, 0x800) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0xfffffffffffffe97) setsockopt$inet_mreqsrc(r0, 0x11a, 0x1, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2=0xe000000a, @loopback}, 0x28) r1 = dup(r0) write$P9_RCLUNK(r1, &(0x7f0000000040)={0xfffffffffffffee5}, 0xffffffffffffffc4) sendto$inet(r0, &(0x7f0000000380)="12db7c9ae725efe836b63751a4a562415c2ac7dba260b5ee9f39d3f1bddcedca04992912057ea2e3c2b5a9a4f82e806829a03b5ef05c8dc2911c44f721e8a2eea1f2e9eea1ee6d3b83fd2a3452bf29b4ed1f957da4aa71d61435631c521041e15aedd0a637c916871013aa0401d69b3f97e7f605880e56388bf3dbd3c46b", 0x7e, 0x0, 0x0, 0x0) 10:03:33 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:33 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:33 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000100)={&(0x7f0000004000/0x3000)=nil, 0x2, 0x5, 0x0, &(0x7f0000002000/0x4000)=nil, 0x9}) dup3(r1, r2, 0xfffffffffffffffc) r3 = gettid() ptrace$setregs(0xf, r3, 0x4, &(0x7f00000001c0)="88a1fdf548fbe740c60093640369580d14f6a6d57b852a77ec7abbb57808b13def6b693b6198385a4c607be4d932b3ef13f42b53a471e87ba87f2fef50301a48bb4f7026f0c1f90cab451fbd7944d495cf58e6b12b399a5e4bcf81586378502c555bb7fcfe1ff6e16004793331ff6dce5594a7bc096da46a1cf29da956c4a696f02e99c9e40fed3e216dd57a61986e26022178bb0eee4fd965c6bb76e5eaeb08ed9596910af74e82b16a478a7a08f67d3c3bf4c1b26257388cdf794828e83789db27ef8f31a12ecedef6cabe56fe1a9936bcde40db947b37e3c1280e327f019a3270e57eecdc") mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r2, 0x0) fcntl$getflags(r2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x301000, 0x0) [ 275.385829] IPVS: ftp: loaded support on port[0] = 21 10:03:33 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:33 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:35 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = request_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='wlan0keyring7trusted)\x00', 0xffffffffffffffff) r2 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000240)="f328d5bbaf0dfe1ba383a872208870e8b799b7a5b4f1670a97d503c15b9e7b44351692fb163e4fffa1aa4f790f64a1afadc2db467915480329b9050aff07f1559a411b7430db5b5b81c8f70b8fc2834e1d6a8690a96056d56563d2d6e8b51b72514131308ecef22289e05f93f6ac06f825e65a27f386872b4502694605a9b5c4e513a937b0b678dc398ada3e24d2f21d7e2ac43336fa0287", 0x98, 0xfffffffffffffffa) keyctl$reject(0x13, r1, 0x5, 0x8000, r2) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000100)={&(0x7f0000004000/0x3000)=nil, 0x2, 0x5, 0x0, &(0x7f0000002000/0x4000)=nil, 0x9}) dup3(r1, r2, 0xfffffffffffffffc) r3 = gettid() ptrace$setregs(0xf, r3, 0x4, &(0x7f00000001c0)="88a1fdf548fbe740c60093640369580d14f6a6d57b852a77ec7abbb57808b13def6b693b6198385a4c607be4d932b3ef13f42b53a471e87ba87f2fef50301a48bb4f7026f0c1f90cab451fbd7944d495cf58e6b12b399a5e4bcf81586378502c555bb7fcfe1ff6e16004793331ff6dce5594a7bc096da46a1cf29da956c4a696f02e99c9e40fed3e216dd57a61986e26022178bb0eee4fd965c6bb76e5eaeb08ed9596910af74e82b16a478a7a08f67d3c3bf4c1b26257388cdf794828e83789db27ef8f31a12ecedef6cabe56fe1a9936bcde40db947b37e3c1280e327f019a3270e57eecdc") mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r2, 0x0) fcntl$getflags(r2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x301000, 0x0) 10:03:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x42002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) recvfrom$packet(r1, &(0x7f00000000c0)=""/78, 0x4e, 0x120, &(0x7f00000001c0)={0x11, 0xc, r2, 0x1, 0x9d70}, 0x14) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) 10:03:35 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000100)={&(0x7f0000004000/0x3000)=nil, 0x2, 0x5, 0x0, &(0x7f0000002000/0x4000)=nil, 0x9}) dup3(r1, r2, 0xfffffffffffffffc) r3 = gettid() ptrace$setregs(0xf, r3, 0x4, &(0x7f00000001c0)="88a1fdf548fbe740c60093640369580d14f6a6d57b852a77ec7abbb57808b13def6b693b6198385a4c607be4d932b3ef13f42b53a471e87ba87f2fef50301a48bb4f7026f0c1f90cab451fbd7944d495cf58e6b12b399a5e4bcf81586378502c555bb7fcfe1ff6e16004793331ff6dce5594a7bc096da46a1cf29da956c4a696f02e99c9e40fed3e216dd57a61986e26022178bb0eee4fd965c6bb76e5eaeb08ed9596910af74e82b16a478a7a08f67d3c3bf4c1b26257388cdf794828e83789db27ef8f31a12ecedef6cabe56fe1a9936bcde40db947b37e3c1280e327f019a3270e57eecdc") mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r2, 0x0) fcntl$getflags(r2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x301000, 0x0) 10:03:35 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:35 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="0961b98cfecc19e9f5a19118ce14d34bd482156d9c01f4e31de7cf89391d030300009d1c9bd64fc4194e2738488248df8d200a21d70d8e0d7b7d72368129b5ba79811e16099e12dd03bd0e702e5f4c026c5567ff00000000000000d89e78ac304edfb86948c5a8bee46c911e5bb807ff31049f9f0c60291066cdbfe7cf78f5c157cfaab4e52804f869592da30a088c655f58bde5c3cc00000000000000000000000000000000000000000000", @ANYRES32=0x0], &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r1, 0x8000, 0xfff, 0x3}, 0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x70, &(0x7f0000000200)={r1, @in={{0x2, 0x0, @local}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x7fff}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x7c, &(0x7f0000000040)={r2}, 0x8) 10:03:35 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000040)="66b9800000c00f326635010000000f30dfb900000f018cc760ba4000ec0fc7a8d65f0fc75a0dbaa10066ed660fe7150fae4baaba2100b80020ef", 0x3a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) modify_ldt$write(0x1, &(0x7f0000000000)={0x5b, 0x1000, 0x2000, 0x1f, 0x8, 0x9, 0x0, 0x9e, 0x1}, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) 10:03:35 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:35 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:35 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xe8) getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=0x0) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000001d00)={0x6b0731c2e46e87e6, 0x0, {0x2, 0x6, 0x200d, 0x7, 0x9, 0x2, 0x2, 0x7}}) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)=""/4096, 0x1000) getgroups(0x4, &(0x7f0000000900)=[0x0, 0xee01, 0x0, 0xffffffffffffffff]) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000980)=0x0, &(0x7f0000000b00), &(0x7f0000000b40)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000b80)={0x0, 0x0, 0x0}, &(0x7f0000000bc0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000c00)={{}, {0x1, 0x7}, [{0x2, 0x1, r1}, {0x2, 0x2, r2}, {0x2, 0x2, r3}, {0x2, 0x4, r4}, {0x2, 0x5, r5}, {0x2, 0x2, r6}, {0x2, 0x3, r7}], {0x4, 0x6}, [{0x8, 0x1, r8}, {0x8, 0x2, r9}, {0x8, 0x3, r10}, {0x8, 0x1, r11}, {0x8, 0x6, r12}, {0x8, 0x7, r13}, {0x8, 0x2, r14}, {0x8, 0x5, r15}, {0x8, 0x3, r16}], {0x10, 0x2}, {0x20, 0x4}}, 0xa4, 0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:35 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r1, 0x0) keyctl$set_timeout(0xf, r1, 0x0) 10:03:35 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:35 executing program 0: r0 = syz_open_dev$evdev(0x0, 0xffffffff80000000, 0x1000000) r1 = fcntl$dupfd(r0, 0xfffffffffffefffe, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x610b02, 0x51) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x00\x0f\x1c\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r4, 0x4, 0x14400) pread64(r4, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000)) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="b5d7522f9d33b63f526ccc682338444a302afa4b8659b651f6dd80f6217b3ad368cce469ca5172", 0x27}], 0x1}], 0x1, 0x4010) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip\xae8lmwla\x12R\xa8\\ \xdcbe\xb4&[\xa0uk\xeb\xea\v\xbc\xfc\x04\x1a\x99/\xcb\xbbUg') r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bind$pptp(r4, &(0x7f0000000200)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) recvfrom$inet6(r5, &(0x7f0000000480)=""/123, 0x7b, 0x1, &(0x7f0000000500)={0xa, 0x4e23, 0x2, @remote, 0x8}, 0x1c) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000100)={0x0, [0x0, 0x0, 0x500]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000400)={@broadcast, @multicast1, 0x0, 0x4, [@dev={0xac, 0x14, 0x14, 0x25}, @empty, @local, @remote]}, 0x20) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x1, 0x0) bind$tipc(r4, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x8000}, 0x0) dup2(r2, r6) write$smack_current(0xffffffffffffffff, &(0x7f0000000040)='usercgroup\x00', 0xb) eventfd(0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev}, @in6, @in={0x2, 0x0, @dev}]}, 0x0) getpeername$netlink(r1, &(0x7f0000000300), 0x0) 10:03:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000100)={&(0x7f0000004000/0x3000)=nil, 0x2, 0x5, 0x0, &(0x7f0000002000/0x4000)=nil, 0x9}) dup3(r1, r2, 0xfffffffffffffffc) r3 = gettid() ptrace$setregs(0xf, r3, 0x4, &(0x7f00000001c0)="88a1fdf548fbe740c60093640369580d14f6a6d57b852a77ec7abbb57808b13def6b693b6198385a4c607be4d932b3ef13f42b53a471e87ba87f2fef50301a48bb4f7026f0c1f90cab451fbd7944d495cf58e6b12b399a5e4bcf81586378502c555bb7fcfe1ff6e16004793331ff6dce5594a7bc096da46a1cf29da956c4a696f02e99c9e40fed3e216dd57a61986e26022178bb0eee4fd965c6bb76e5eaeb08ed9596910af74e82b16a478a7a08f67d3c3bf4c1b26257388cdf794828e83789db27ef8f31a12ecedef6cabe56fe1a9936bcde40db947b37e3c1280e327f019a3270e57eecdc") mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r2, 0x0) fcntl$getflags(r2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x301000, 0x0) 10:03:36 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:36 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x80247009, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, 0x0) r3 = memfd_create(&(0x7f0000000140)='^\x00', 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$KVM_S390_UCAS_MAP(r4, 0x4018ae50, &(0x7f00000004c0)={0xffffffff, 0x1, 0x4}) readv(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r5 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x800) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000440)={0x0, r5, 0x2, 0x9, 0xeda, 0x7212}) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f00000003c0)="a8a1f424491ec4c6e4371e0f5eaea3cdd7b30cb10a107ce6b2a420c3eab14dc1342294b4757807a8c0f3b40eac4bbe0fb7ff31b51dd9bfcbdebbfe5eb47903d6f47285a224ec5b3d7d61c10e031fe0b6ed1dd143fa2dae830566b12c9a3593f241a77f578f12554e", 0x2a4}], 0x1, 0x81003) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) r6 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x1, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, &(0x7f0000000280)={0x0, 0x0, {0xb, 0x10, 0x3, 0x1a, 0x2, 0xfff, 0x2, 0xe2, 0x1}}) ioctl$DRM_IOCTL_DROP_MASTER(r6, 0x641f) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) sendfile(r2, r3, 0x0, 0x102002700) r8 = fcntl$getown(r2, 0x9) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x1, 0x0, 0xc6, 0x10, r8}) 10:03:36 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x10001, 0x4, 0xbac}) ioctl$TIOCNXCL(r0, 0x540d) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000280)='threaded\x00', 0x265) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x14, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000c27bd7000fcdbdf25010000000000000009410000004c00180000000075647000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a58d862aa9609e32d4021dfb5370bdaa8f134d1ebb38263111d6e4cce8eb9c10b4c712e586c19920902bc928e3b99f63f1ee623b7bf621c90"], 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 10:03:36 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:36 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:36 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x2000004000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) [ 278.319954] binder: 11718:11731 ioctl c028660f 20000440 returned -22 10:03:36 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:36 executing program 0: r0 = syz_open_dev$evdev(0x0, 0xffffffff80000000, 0x1000000) r1 = fcntl$dupfd(r0, 0xfffffffffffefffe, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x610b02, 0x51) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x00\x0f\x1c\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r4, 0x4, 0x14400) pread64(r4, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, &(0x7f0000001000)) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)=""/144, 0x90) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)="b5d7522f9d33b63f526ccc682338444a302afa4b8659b651f6dd80f6217b3ad368cce469ca5172", 0x27}], 0x1}], 0x1, 0x4010) r5 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip\xae8lmwla\x12R\xa8\\ \xdcbe\xb4&[\xa0uk\xeb\xea\v\xbc\xfc\x04\x1a\x99/\xcb\xbbUg') r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bind$pptp(r4, &(0x7f0000000200)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) recvfrom$inet6(r5, &(0x7f0000000480)=""/123, 0x7b, 0x1, &(0x7f0000000500)={0xa, 0x4e23, 0x2, @remote, 0x8}, 0x1c) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000100)={0x0, [0x0, 0x0, 0x500]}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000400)={@broadcast, @multicast1, 0x0, 0x4, [@dev={0xac, 0x14, 0x14, 0x25}, @empty, @local, @remote]}, 0x20) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x1, 0x0) bind$tipc(r4, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x8000}, 0x0) dup2(r2, r6) write$smack_current(0xffffffffffffffff, &(0x7f0000000040)='usercgroup\x00', 0xb) eventfd(0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev}, @in6, @in={0x2, 0x0, @dev}]}, 0x0) getpeername$netlink(r1, &(0x7f0000000300), 0x0) 10:03:36 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 278.517994] binder: 11718:11728 ioctl c028660f 20000440 returned -22 10:03:36 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x10) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) socket$bt_bnep(0x1f, 0x3, 0x4) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000100)={&(0x7f0000004000/0x3000)=nil, 0x2, 0x5, 0x0, &(0x7f0000002000/0x4000)=nil, 0x9}) dup3(r1, r2, 0xfffffffffffffffc) r3 = gettid() ptrace$setregs(0xf, r3, 0x4, &(0x7f00000001c0)="88a1fdf548fbe740c60093640369580d14f6a6d57b852a77ec7abbb57808b13def6b693b6198385a4c607be4d932b3ef13f42b53a471e87ba87f2fef50301a48bb4f7026f0c1f90cab451fbd7944d495cf58e6b12b399a5e4bcf81586378502c555bb7fcfe1ff6e16004793331ff6dce5594a7bc096da46a1cf29da956c4a696f02e99c9e40fed3e216dd57a61986e26022178bb0eee4fd965c6bb76e5eaeb08ed9596910af74e82b16a478a7a08f67d3c3bf4c1b26257388cdf794828e83789db27ef8f31a12ecedef6cabe56fe1a9936bcde40db947b37e3c1280e327f019a3270e57eecdc") mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r2, 0x0) fcntl$getflags(r2, 0x0) 10:03:37 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40246608, &(0x7f0000000000)={0xba, 0x7fff, 0x10000, 0x0, 0x885, 0xffffffff}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0x0, 0x1, 0x0, [], &(0x7f0000000080)={0x98f908, 0xfffffffffffffffd, [], @p_u32=&(0x7f0000000100)=0xe7ffffffffffffff}}) 10:03:37 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:37 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='ppp0+,selfppp0vmnet1proc\']\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) syz_open_dev$vcsn(0x0, 0x0, 0x0) r2 = dup2(r1, r0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0xffffffffffff780b}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x989680}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x9e\xdez\x8cZ\xe9^\xc8g,\x934\x0fd:fO\x13\xee\xabe\xc02)\x01\xdck\xd3l\xde,Q\xf0\x1b\x7f\v\x01O\x9f\x91\xee\xb7\xc3|r@\xf4v\xc8\xd7S\xd0\x00\xaa\x8f\xaf\x8f\xb5t\xdb\xcf\xa6\xdcM'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000d40), 0x0) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x1c) io_setup(0x400, 0x0) io_submit(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r3 = creat(0x0, 0x0) keyctl$clear(0x7, 0x0) listen(r3, 0x3) io_setup(0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000c40), 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000680)={0x0, 0xffffffffffffffe0, 0xa, 0x0, 0x7f, 0xb731}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="424294f2f1f0a800ff36bf624add2c6673eb87eca50dddfc0901b7080965435d2d7dee3778c4475f28ccfbd86ff04b8c5bc014b8208956eb03af4632c1e417d4164eecf03f42b7539303992d5f91882d4e21ec7f6200ec82c1d834502706345095633c"]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) 10:03:37 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) [ 278.976461] syz-executor4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 279.029189] CPU: 1 PID: 11755 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #17 [ 279.036395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.045747] Call Trace: [ 279.048347] dump_stack+0x1db/0x2d0 [ 279.051988] ? dump_stack_print_info.cold+0x20/0x20 [ 279.057016] ? perf_trace_lock+0x12f/0x750 [ 279.061279] dump_header+0x1e6/0x116c [ 279.065100] ? add_lock_to_list.isra.0+0x450/0x450 [ 279.070057] ? print_usage_bug+0xd0/0xd0 [ 279.074160] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 279.079126] ? ___ratelimit+0x37c/0x686 [ 279.083126] ? mark_held_locks+0xb1/0x100 [ 279.087287] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 279.092433] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 279.097557] ? lockdep_hardirqs_on+0x415/0x5d0 [ 279.102170] ? trace_hardirqs_on+0xbd/0x310 [ 279.106516] ? kasan_check_read+0x11/0x20 [ 279.110674] ? ___ratelimit+0x37c/0x686 [ 279.114659] ? trace_hardirqs_off_caller+0x300/0x300 [ 279.119763] ? do_raw_spin_trylock+0x270/0x270 [ 279.124341] ? trace_hardirqs_on_caller+0x310/0x310 [ 279.129383] ? lock_acquire+0x1db/0x570 [ 279.133933] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 279.139057] ? ___ratelimit+0xac/0x686 [ 279.142998] ? idr_get_free+0xee0/0xee0 [ 279.146999] ? lockdep_hardirqs_on+0x415/0x5d0 [ 279.151633] oom_kill_process.cold+0x10/0x9d4 [ 279.156148] ? cgroup_procs_next+0x70/0x70 [ 279.160396] ? _raw_spin_unlock_irq+0x5e/0x90 [ 279.164917] ? oom_badness+0xa50/0xa50 [ 279.168870] ? oom_evaluate_task+0x540/0x540 [ 279.173287] ? mem_cgroup_iter_break+0x30/0x30 10:03:37 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000840), &(0x7f0000000200)='./file0\x00', &(0x7f00000008c0)='proc\x00', 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)) 10:03:37 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:37 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40800, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="44ec48861a0e275dace06f124e478cd7a9a8162aec18410e365878c629298ac9f456f9a54710af8593b7967f328127e2b279421dae44ddb210ddfc3fa025cc6eec8fa8f03d3c5b1314477ef8f73928f7a02ec8b06cf043994c13621a61c4f06993df396e1b395de67df89df60fb7d1ab39672d8e8a4080d332367cd76e8e98394f111fe0e0e828f6103ea5ad3fa37a3783e9085b9e288b43767e26b4d7d8b7794c27a815298e963811f545a33bbe0e99a6d398892235a9853480d5573b93741f11b336b102e6099cfe4a85de7f9da7aeb4ecd2b385ec7932a827bc5fdb8dace9b46fcfad888c68f17e2065307e5a52", 0xef}, {&(0x7f0000000400)="76bc971d2b3e6683f4f094f3e9cc5a30249970857f149c00cf61e53eb67351b9fa19147d40bcee4fd30512f8c1a678a5ab4b2cd5d784253b20465abb62476c0a41db5ae1aae417640ca17811244e5f2a30d5e70543732abf15d20fbcddeac3ae718b35813599a0f0fae4d47b3b2244da1bdcae015c2f8357d05f1e7c5e20344f34a0df2d05232c904b4552309334eda432098ab656f1bd5e771295069c1413cd573773cda472ab482bb22aad240b126f0a10fc2c1f5bdadbd5859a96a07a0413bd372b5719484f82f1af2021091d21ba5a795285bebd8256f669529e224d978d07af93b013c328206277aa80ac84b82fdfdb0caaaad04855f9389d8ebcfce620fcf1ee623460ffaa15783cf015ad4e15340b209825f9d79205ae70648d42f384b28257c0f343fd126614940017268fb522eb078ab0fc8c9d03efa63f4405531ef03ce58d1755acb375843f826168a100af5319c3df2feede378073371ff53769436bf04a88aac80b0d908601ac22d60b358b9a5cdfe17a0f03482c6153e4ca5a0507f4ef0f9287fc1ef988a84553762ef47bb08fb298dbc30f7dc77a1246ae30c1e04e686867cfba9e1738617488a3bbbd9474cee0b8ba294122ec52a4c53ada2076003fc66c6e3df537498b00335a3e82d970893e9741ed780166f2cc42854f49e5bad259f0f4ff2d64f7ead8725eb76ee897bba62301cdcda21a25b72f6ec18a7e0498ee214f6e09d110550808238f352680859a4655444e51374a89bc80e79e5741c91d5a7aade94042e4849ef62a35b468605df18d83f0e5b23caecc126268a8d780bd582449fcdf7d5328f87523cb79c84e7e967512e4f3de91b2e91e18bd4770450145b2e3cecb745c047a265c03b4f0705e24ab976df2cf3d75fedbd1254a09da19cd314d151640ed07cb8a76a631ddcc7335cda84378b4eaf0b15db80a4f5d5b74cafde764878febc97270de05a9e592db9226e48cadd4164c38371447f316a96780a9b40e169e2774e99f55b6ce775d6f49c43f9c14b3a8ac35838fdf610675ac6a278c32cb32fa27bae7b758d39b10c4174f6b12c36a93feeb3fb6efe1b53c2e526c2d80f74f3f30c99f78d187aa24f4c8fc25f4a467b1d00d1ce1c6617d9acde9c947f36e724068ab76db61f0ddff879fb070163bdf64321c2cfed9c9647b238511effa9b665ec167fbf23e7552825105ae1d819a6e394f0f187115b9dbfdae7e408b8b20e4f43f00fe5323dddf953ed9d8b7913f2f019ff7fed8de5a75e4b35c3712ac02f3e66304b3febc2cd5b9d6a56b353dbb5585f35be97ab38cbff42220e8422c83fb165392b20d0b24123d8a63a83567d7bfaee100dcb44af6f36e3da39e337513af813823446da0e150f58be290adfd3a77f10b3f44a45dabbe87eff646e23825bdf9fb2363780b90f0b90e872d370afa464541d5eaa898a73b047893d1ee834a25df1ca2a6fd4a63af95f5e87bad4f6c4af4046aa4bfeed2c770906305f25c3d3068e42a4b9eba36ebbc310fd642495a603f83edfac0c11bc236f07b9fded40e26b7d691d39ae671840b9e2553df9114c01e8d2f298670420e40a3a174b8ef91ef7642729f4e98953f754304c28edcc26b6db0c0e89dab65a7fcefb987c1f8d423b3a09522348c46bbd2d541df28f85e3fa2b375671ca694ad9211fbef6814ba0e7e7d687eb5f37bda3e8a9733cd360b15adff72aa6f547c6914823d467700db34c329075de0683b675293e93b0c264550247f14f469b8a9bb69c3bc2fa5c33d287fbd95b6ead63a7831bdbd9e8a5bed0faeab59db6dc768ec64830c6e92be99e50fb7b2b3f0517e3917979e785d9b5861711753b6eef0610c17169f9c8ac3ed93bfdea3c05b8e662f36ba55a2a20610e6dc9d68ba2a00c1ac9726589b090e7b5587f96aa553935d2c874d40e7b1a23ea125a21647c37b9caeb25d0a52d3d7e154f1e82da8fa0e1b670209a0c6685d5742bf845f5365b0162f0d5f0c4bb6fd4e03d319279c498d88652e9ca0299dfdd73956cfcc93fcfdf1c2df58e731d9c35ebd000aaf68a592f916ff98c018700283f45d8e96da946fcf7989bccb22beed1aff54aefdc6ce4d3311a8ed5af4d8b630dcd4bb27df3b3bdd1f1baecafbe80e192cb3293312b0958d62920f2ef26d6119c21cdba7106976962e9a52a600cb0d560363405d66e792d9a676c72b41d66a7e47c7109466fee645ec77ba35d2ed714bd999955bc156cf415697f9a74c99c43bdf9ffe22481d064cee1f2c0137dbc8c409e20000e0c5bbf07aba1f548fa50354c0965ce3123efacf61a41a1e2e6afcc71dbec7491492272b32a39ad9b8a24021d6585c8cec97cdd58cf8650f9223a68dbf27eacffe0e9c9bd2601c354f94115d8d86c113e75d6450be56aa3b7ffdab248f10e7a3667a6d82fc6104acc6c3ee837c4b303336d9e8a039baa00d780802f1fa36d02ee5722aae44bc8d7f59fe815988af15969a7134f5300161741cedacdae47d69dd5c6c82f6b0f55c8ef2f3474dbcdf299050b845431f748dff960728709840855a5c04e451d4b932867336d6220402d5eacdbb63fbee29b30ea342b19f4271ce6d74cf394e988060f642f833c16f59ae89c479ff8bab1954294c10d7edbb9d35b40c1f577f7eabdccb8b93c8d772b53bdb6ea72ea755fec78ee64e3ee964784910d464bc34e6f942927cc9c25d3935127e3704f33343494337637c90d4e0b4fb1ce77afdfd0b474d07b299348c6a5c90a4fafecf4833f8b9b73f5d1067e486f067667bba90d70c9691ed213c4d4931262e67e2161b35596c57809ea442746478d82e44f44fa2435a6675d55f45b17e95249395885abca3c9d936574c842ca1d6b2e028f99924cca28a121ac5e630b449fdd9595d44d609dd8d67b652044ec68e9236e2b15c42b834a66f998a1ccd27d65feeccd35eda918454456151d577b2009bb91bee75a4db83a8e659728e73fd98aea9b0ad5969474b5cde50125f75998dc03a5a06621ebb484697ae299a0a9644451d83b58619d051dc9698eacb3bb312a2c20081d41e1d2a086451cc86b1740daf0ebaaaa9aba12f1580ee159cf7ce90d3d4064649cb3cf08fd028b76f73dfd7443aeec7eb1c384984e27a5e3d6e6a5d706ab5ef4a03534d485d43b1d1fe416a03a5614a1c35f22bc4fce9e95a0c117b3bc08e0e49bfd03324fac0bf7b9ad1f1646ffc1981470753ed891c631e6d9b4e933230305bbbd8d9186e47b4da0bedb5bd0f4579b8f0ce082188be3e54f61757b07747dc59a6dbb5a3505639ce4f7efac56b1f82eb16e3c5adae718a84529e55bcd2187b181a6810de53c6bada858c499b0ced111f760550a0969334560bdcdbf51a2ba75d4ec5d53d50269ece3e9f2add797f9e26d6abbadf4dbf1ec1da8ff1a14a02d4893f4b56c4136dbbeecd109de05d26fc6ffdd22bcd4a16f00ef77fe2827e480942290c98710db3b085f6a558554dd492f16320663da0a716730ca893e463926d4597f803d418aa52d0f3aa46cb18995d4448cae133979b2d164a47523e68619531157885a88ebf47238f1e8fb240b4c25192030796a08a949f3096edd8df6df924c8950f0587bda9ce7bfd40489201786453749018767eaf9960fc551c39cad651c58760f543c50b88861d46be928e6311b312323542f598ae33c75728095f6f252f71493a820db63c03e8c2e9515b7337bce4414635a04be67c5c3e29c4068735eb199063bb5b79640a55dab54e77707d662b533df4a22aec95cd3160c02bdce0de0a522978d8dbece9b1efdf6d1e60af1bc4a09c26654232a0ceac57fb4c9ba04b817a1227bda5630c902d8b322ba17289746976c12013251e836692af5337b0acac66fdebc941200a51eeb16719188716e8d59a6d03768d83054c09cc9a6e7b6273d346846421de8a57f661f9120a41d3448d0696a45b3ff220f264b886fe8d8d8393d7bf58fa087e07db28c6a759155c1119f280e5fb1839d86dabfe814c7cb7a0bded5c2850addbcbfffa7d83e70b44f04b5cdf2c1f17990158074ca0d823e1e6362cf50171337f242cc62523e1b72d825ed357e62c23d8517bf41982b62e1095fdaf8ee97a56d4311a4e6e3dbf7704f33a1921f9b0707c620551fc2bd116581bcfa4932d707a6a8f929c804217f2c3a3b7019a025d2e8a3e6dc2f8e9367b172ba2f462e040c8beea69b8440c6b12a69c2211a65b13b13fe78548b6d989f0385fb2b99c5fef51c54861e0124d7a0d5c668bb4bc098b1cb0fbf339b43ca358d36dade80728f1439e21e5aa2fc8096b4d8e401e5d7472195d6cd975a90255344e6bb69bba462952e44a753f394a7761aef4c0337fd5cb07b112eb3eba33edf00e60e6329dd2b5eec27fa386445cc6954798d45489893e9af42d09675b12b5fd83c998da1c264faf3629b398bb0ef16a26e87dd7b78aa1a1ca6dfc0c341e48a94c3c88e59000b5a720199a0ef692e60aa2a1ae732e3d83db52294d5318458e84fe64e97ddf2c82368dc22198e0603c85298b51119a2cdca442c2b89cfcef6846630dde3a0e513e60164c28be1d6b20f3605872d894aec7bc25fd132dbfcb41562b37ffdd6c20c01e06199cd4c02757f01c8b9ca65bc74c841ff6a9210cee2e5818ae90038c98f574cd9fdb615815ebbe1c7309d34e4a5a92124a78e1f6cb6955edc8a168db02d87fa98bf80ca14b75dea8b7e277bbcd6c47d54bdd249370fa240d15f1abfcc0f5d558a0c45358d3bb03d9e3fa5435136039f40f896f20b2d728081adf59b8ab67c8f1ea8e037a6654894211d02f7e776541cf288d6c1eb99c7feeb9c03c2fb19320a8a595c3b38d33a5bb662f09cb8c18ee7f8ec4998f420f9dab5f8e0a9b7eea5ea65224cbd70050d2744ac1c8aaff441b38e6ca6d39b8831d6c5fb847130b5f5cc86f89ddbfdda695c9c2e035213b7417b292414141d49a30885d0800c20f049cee3f4b826b7f43454a665121d71c903c800b6b99ff913eb00ceb302fd4cc41b714b193296423e1f2fccfaf2b06e9c780b33a61d44a8e9102e9bf686cb48e12197c7b03bded61dd0ff20fd947c3efb318662fd4afe62b3cad3d5b707ed7aa1f3190362cef720d7d578a99c9aeb588dda5d14cd9788ffb2b8e7187cc017d2757fe5bd9b9b8382a1e25b749383cce2bc4c535cb603805cf9aa3f4f8ac8a76a7ca4a8c4467c6b7961b4a74aeec4011fab8443394e450f7a07e4105a298ccdb817bdb6e231409f556d7563680b41894d918df8bb0ba80de8dfdd49c0d25ddeffaae7a44ec7e857c2b23a906e9376fd1b4ad2acac57bbdfb0787f2d152a87136d6e295304da137d427de3cd237d0363e45ea57c63c9364c7f90342aa33e4304e59531dffa1a44cf93b17673b5dfdca5bb0708379cc4e8f18cc6a45ffda0abe7c454adeccdbf97f406a82f15b5b97fc1a7c4b371690a9c2892fb70847f2ed4567830db931030394d63d1b5839da01cc46232f3e283a5838dea06595051b9c5647abfdaa45acad318e7bb948027b5b1a4cd8ba6948d3bbaf83a1800ced58b1143fa6aa6d512ed701837aae435ad6706757e2ef9f966969fa36b2ba2960665ae90107d010e4f7e73c23b2a45724fff6cedf3cba6feaf79335bccd7ee07016da6cc3fba20aca1ab335e632163fe56c3da455553b7ea3d2599d3f19ab1163c726662064d455cf60892f4a2fac4258015b73fd4fc46224f4e6307ae3c58a9c60426bb528a491aaea076a6518cc788d6bfc8e2f92758c04c90fdd047c5983c7f4a410d6bb0d39f302aa0d6dbe", 0x1000}], 0x2, &(0x7f00000000c0)}, 0x850) write$P9_RLCREATE(r0, &(0x7f00000000c0)={0x18, 0xf, 0x1, {{0x46, 0x4, 0x7}, 0x100}}, 0x18) r1 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x400000000000160, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x14, 0x42, 0x201}, 0x14}}, 0x0) [ 279.177870] ? mutex_trylock+0x2d0/0x2d0 [ 279.177887] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.177919] ? rcu_read_unlock_special+0x380/0x380 [ 279.177944] out_of_memory+0x885/0x1420 [ 279.187530] ? oom_killer_disable+0x340/0x340 [ 279.187551] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 279.187570] ? lock_acquire+0x1db/0x570 [ 279.187609] mem_cgroup_out_of_memory+0x160/0x210 [ 279.187626] ? do_raw_spin_unlock+0xa0/0x330 [ 279.196512] ? memcg_memory_event+0x40/0x40 [ 279.196527] ? do_raw_spin_trylock+0x270/0x270 10:03:37 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) [ 279.196555] ? _raw_spin_unlock+0x2d/0x50 [ 279.196575] try_charge+0x12a9/0x19b0 [ 279.196602] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.196627] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 279.196644] ? rcu_read_unlock_special+0x380/0x380 [ 279.251566] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 279.256448] ? get_mem_cgroup_from_page+0x190/0x190 [ 279.261494] mem_cgroup_try_charge+0x43a/0xdb0 [ 279.266088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 279.266114] ? mem_cgroup_protected+0xa10/0xa10 [ 279.266136] ? shmem_getattr+0x2c0/0x2c0 [ 279.266154] ? _raw_spin_unlock_irq+0x28/0x90 [ 279.266169] ? lockdep_hardirqs_on+0x415/0x5d0 [ 279.266185] ? trace_hardirqs_on+0xbd/0x310 [ 279.276361] ? kasan_check_read+0x11/0x20 [ 279.276380] ? trace_hardirqs_off_caller+0x300/0x300 [ 279.276400] ? debug_smp_processor_id+0x1c/0x20 [ 279.276422] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 279.276443] shmem_getpage_gfp+0xa85/0x4b70 [ 279.276497] ? shmem_add_to_page_cache+0x19a0/0x19a0 [ 279.322149] ? page_mapping+0x56d/0xa20 [ 279.326152] ? __page_mapcount+0x550/0x550 10:03:37 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) [ 279.330422] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 279.336005] ? __set_page_dirty_no_writeback+0x3a1/0x690 [ 279.341471] ? do_writepages+0x1a0/0x1a0 [ 279.345539] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 279.351100] ? check_preemption_disabled+0x48/0x290 [ 279.356147] ? kasan_check_write+0x14/0x20 [ 279.360399] ? up_read+0x212/0x2b0 [ 279.363969] ? do_writepages+0x1a0/0x1a0 [ 279.368036] ? __writepage+0xe0/0xe0 [ 279.371772] ? lockdep_hardirqs_on+0x415/0x5d0 [ 279.376360] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 279.381903] ? unlock_page+0x2b1/0x4a0 [ 279.385804] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 279.391351] ? balance_dirty_pages_ratelimited+0x1b0/0x2370 [ 279.397069] ? preempt_schedule+0x4b/0x60 [ 279.401238] ? balance_dirty_pages+0x3740/0x3740 [ 279.406006] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 279.411553] ? shmem_write_end+0x384/0xa40 [ 279.415850] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 279.420892] ? iov_iter_advance+0x354/0x1490 [ 279.425312] ? __lock_is_held+0xb6/0x140 [ 279.429391] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 279.434941] ? iov_iter_fault_in_readable+0x22c/0x450 [ 279.440164] shmem_write_begin+0x105/0x1e0 [ 279.444447] generic_perform_write+0x2a0/0x6b0 [ 279.449060] ? add_page_wait_queue+0x480/0x480 [ 279.453677] ? current_time+0x1b0/0x1b0 [ 279.457643] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 279.462646] ? generic_write_check_limits+0x291/0x380 [ 279.467842] __generic_file_write_iter+0x25e/0x630 [ 279.472774] ? mutex_trylock+0x2d0/0x2d0 [ 279.476824] generic_file_write_iter+0x34e/0x6a0 [ 279.481608] ? __generic_file_write_iter+0x630/0x630 [ 279.486721] ? __might_fault+0x12b/0x1e0 [ 279.490782] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 279.496308] ? iov_iter_init+0xea/0x220 [ 279.500286] __vfs_write+0x764/0xb40 [ 279.503988] ? kernel_read+0x120/0x120 [ 279.507896] ? rcu_read_lock_sched_held+0x110/0x130 [ 279.512920] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 279.517664] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 279.523184] ? __sb_start_write+0x1ac/0x360 [ 279.527509] vfs_write+0x20c/0x580 [ 279.531038] ksys_write+0x105/0x260 [ 279.534653] ? __ia32_sys_read+0xb0/0xb0 [ 279.538715] ? trace_hardirqs_off_caller+0x300/0x300 [ 279.543821] __ia32_sys_write+0x71/0xb0 [ 279.547794] do_fast_syscall_32+0x333/0xf98 [ 279.552128] ? do_int80_syscall_32+0x880/0x880 [ 279.556711] ? trace_hardirqs_off+0x310/0x310 [ 279.561192] ? syscall_return_slowpath+0x3b0/0x5f0 [ 279.566134] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 279.571144] ? __switch_to_asm+0x34/0x70 [ 279.575210] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 279.580059] entry_SYSENTER_compat+0x70/0x7f [ 279.584462] RIP: 0023:0xf7f47869 [ 279.587852] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 279.606766] RSP: 002b:00000000f5f430cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 279.614460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200009c0 [ 279.621734] RDX: 00000000ffffff1b RSI: 0000000000000000 RDI: 0000000000000000 10:03:37 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) [ 279.629004] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.636258] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 279.643513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.676882] memory: usage 307200kB, limit 307200kB, failcnt 247 [ 279.682963] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 279.704411] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 279.710569] Memory cgroup stats for /syz4: cache:234708KB rss:62412KB rss_huge:59392KB shmem:234708KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:234768KB active_anon:62532KB inactive_file:0KB active_file:0KB unevictable:0KB [ 279.745420] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=10225,uid=0 [ 279.762346] Memory cgroup out of memory: Kill process 10225 (syz-executor4) score 1106 or sacrifice child [ 279.772629] Killed process 10225 (syz-executor4) total-vm:70524kB, anon-rss:2204kB, file-rss:33460kB, shmem-rss:0kB [ 279.789307] oom_reaper: reaped process 10225 (syz-executor4), now anon-rss:0kB, file-rss:32784kB, shmem-rss:0kB 10:03:37 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x42}, 0x28, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000140)={0x10000000, 0x9}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:37 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:37 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:37 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6020}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r2 = socket$kcm(0x2, 0x2, 0x73) bind(r2, 0x0, 0x0) 10:03:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000740)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000100)={0x1ff, 0x0, 0x2022, 0x6, 0x100000000, 0x0, 0x2, 0x1}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0xfc, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)) 10:03:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000100)={&(0x7f0000004000/0x3000)=nil, 0x2, 0x5, 0x0, &(0x7f0000002000/0x4000)=nil, 0x9}) dup3(r1, r2, 0xfffffffffffffffc) r3 = gettid() ptrace$setregs(0xf, r3, 0x4, &(0x7f00000001c0)="88a1fdf548fbe740c60093640369580d14f6a6d57b852a77ec7abbb57808b13def6b693b6198385a4c607be4d932b3ef13f42b53a471e87ba87f2fef50301a48bb4f7026f0c1f90cab451fbd7944d495cf58e6b12b399a5e4bcf81586378502c555bb7fcfe1ff6e16004793331ff6dce5594a7bc096da46a1cf29da956c4a696f02e99c9e40fed3e216dd57a61986e26022178bb0eee4fd965c6bb76e5eaeb08ed9596910af74e82b16a478a7a08f67d3c3bf4c1b26257388cdf794828e83789db27ef8f31a12ecedef6cabe56fe1a9936bcde40db947b37e3c1280e327f019a3270e57eecdc") mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r2, 0x0) 10:03:38 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:38 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r0, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r0, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) sendto(r2, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) 10:03:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x50, &(0x7f0000001580)}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001600), 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000240)={0x10000, 0x1, 0x2f6b, 0x4, 0xffffffffff21fd25}, 0xc) r3 = dup2(r1, r0) getsockopt$inet_udp_int(r3, 0x11, 0x0, 0x0, &(0x7f0000000340)) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r4 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4000) write$P9_RREAD(r4, &(0x7f0000001640)=ANY=[@ANYBLOB="2c000000550200e8cb159cb51d3c6bd12bb95f7258ba140008000000000000e83276a9f3599305000000000000000000000000000000f30665888582eaa739cf6289db6f704cab79783de18c19268a20306023c8c1bafb987d875f12d9f6345e18a27036f6e867b4b13e9bc72cb24b4c863cf8f8ceeaeb4bc54eda9ed91284d42105715f2ba6563bef2d88773fb765de5377c07388a7dab9000683878a3c802b9bb060e9450c03626ad990f36ac23c0ef83e1e58ddf9015621bcef85cafe873841193c14274c6669264a13a144d556f4ffce5c495e7a4c1df994a773343e6b672ec8595c7bb068e204aa2d4dcdede2b8a7517e68"], 0xf4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sendmsg(r0, 0x0, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0xa200) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000040)={0x28, 0x19, 0x17, 0x1d, 0x2, 0x2, 0x3, 0xa7, 0x1}) getsockname$inet(r4, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10) getrandom(&(0x7f0000000480)=""/4096, 0x1000, 0x2) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x3b, @remote, 0x4e21, 0x3, 'fo\x00', 0x19, 0x3ff, 0x18}, {@broadcast, 0x4e23, 0x5, 0x7, 0x5, 0x974b}}, 0x44) 10:03:38 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0xfffffffffffffffd, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x77) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000000)) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000011000)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0xfffffffffffffdff) close(r1) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 10:03:38 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:38 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='nfs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000380)=""/206) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x7fffffff}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getegid() fchownat(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x100) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x100000, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000480)={0xa5a1}) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000007c0)={0x15, 0x197, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x800, 0xaf87, {"ad1fc9e8beaa401e177f5769edf738ce"}, 0x5828, 0x8, 0x2}, @in6={0xa, 0x4e23, 0x3, @empty, 0x4}}}, 0x215) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r2, &(0x7f0000000680)='attr/exec\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) [ 280.633973] syz-executor4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 280.676633] CPU: 0 PID: 11828 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #17 [ 280.683834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.693189] Call Trace: [ 280.695789] dump_stack+0x1db/0x2d0 [ 280.699426] ? dump_stack_print_info.cold+0x20/0x20 [ 280.704449] ? perf_trace_lock+0x12f/0x750 [ 280.708722] dump_header+0x1e6/0x116c [ 280.712534] ? add_lock_to_list.isra.0+0x450/0x450 [ 280.717474] ? print_usage_bug+0xd0/0xd0 [ 280.721643] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 280.726606] ? ___ratelimit+0x37c/0x686 [ 280.730613] ? mark_held_locks+0xb1/0x100 [ 280.734774] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 280.739888] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 280.745003] ? lockdep_hardirqs_on+0x415/0x5d0 [ 280.749617] ? trace_hardirqs_on+0xbd/0x310 [ 280.753949] ? kasan_check_read+0x11/0x20 [ 280.758117] ? ___ratelimit+0x37c/0x686 [ 280.762104] ? trace_hardirqs_off_caller+0x300/0x300 [ 280.767214] ? do_raw_spin_trylock+0x270/0x270 [ 280.771808] ? trace_hardirqs_on_caller+0x310/0x310 [ 280.776837] ? lock_acquire+0x1db/0x570 [ 280.780826] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 280.785944] ? ___ratelimit+0xac/0x686 [ 280.789844] ? idr_get_free+0xee0/0xee0 [ 280.793830] ? lockdep_hardirqs_on+0x415/0x5d0 [ 280.798437] oom_kill_process.cold+0x10/0x9d4 [ 280.802954] ? cgroup_procs_next+0x70/0x70 [ 280.807201] ? _raw_spin_unlock_irq+0x5e/0x90 [ 280.811704] ? oom_badness+0xa50/0xa50 [ 280.815637] ? oom_evaluate_task+0x540/0x540 [ 280.820075] ? mem_cgroup_iter_break+0x30/0x30 [ 280.824692] ? mutex_trylock+0x2d0/0x2d0 [ 280.828774] ? __switch_to_asm+0x40/0x70 [ 280.832856] out_of_memory+0x885/0x1420 [ 280.836848] ? pci_mmcfg_check_reserved+0x170/0x170 [ 280.841884] ? oom_killer_disable+0x340/0x340 [ 280.846392] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 280.851504] ? lock_acquire+0x1db/0x570 [ 280.855500] mem_cgroup_out_of_memory+0x160/0x210 [ 280.860366] ? memcg_memory_event+0x40/0x40 [ 280.864739] ? _raw_spin_unlock+0x41/0x50 [ 280.868898] try_charge+0x12a9/0x19b0 [ 280.872707] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 280.878264] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 280.883137] ? rcu_read_unlock_special+0x380/0x380 [ 280.888088] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 280.892961] ? get_mem_cgroup_from_page+0x190/0x190 [ 280.898017] mem_cgroup_try_charge+0x43a/0xdb0 [ 280.902639] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 280.908204] ? mem_cgroup_protected+0xa10/0xa10 [ 280.912901] ? shmem_getattr+0x2c0/0x2c0 [ 280.916972] ? _raw_spin_unlock_irq+0x28/0x90 [ 280.921491] ? lockdep_hardirqs_on+0x415/0x5d0 [ 280.926107] ? trace_hardirqs_on+0xbd/0x310 [ 280.930440] ? kasan_check_read+0x11/0x20 [ 280.934614] ? trace_hardirqs_off_caller+0x300/0x300 [ 280.939736] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 280.944695] shmem_getpage_gfp+0xa85/0x4b70 [ 280.949050] ? shmem_add_to_page_cache+0x19a0/0x19a0 [ 280.954160] ? page_mapping+0x56d/0xa20 [ 280.958158] ? __page_mapcount+0x550/0x550 [ 280.962393] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 280.967941] ? __set_page_dirty_no_writeback+0x3a1/0x690 [ 280.973416] ? do_writepages+0x1a0/0x1a0 [ 280.977481] ? __switch_to_asm+0x34/0x70 [ 280.981555] ? __switch_to_asm+0x34/0x70 [ 280.985655] ? __switch_to_asm+0x40/0x70 [ 280.989728] ? __switch_to_asm+0x34/0x70 [ 280.993797] ? __switch_to_asm+0x34/0x70 [ 280.997870] ? __switch_to_asm+0x34/0x70 [ 281.002403] ? __switch_to_asm+0x34/0x70 [ 281.006468] ? __switch_to_asm+0x40/0x70 [ 281.010531] ? __switch_to_asm+0x34/0x70 [ 281.014651] ? __switch_to_asm+0x40/0x70 [ 281.018741] ? do_writepages+0x1a0/0x1a0 [ 281.022821] ? __writepage+0xe0/0xe0 [ 281.026542] ? pci_mmcfg_check_reserved+0x170/0x170 [ 281.031567] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 281.036346] ? retint_kernel+0x2d/0x2d [ 281.040247] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 281.045795] ? unlock_page+0x2b1/0x4a0 [ 281.049692] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 281.055240] ? balance_dirty_pages_ratelimited+0x1b0/0x2370 [ 281.060960] ? preempt_schedule+0x4b/0x60 [ 281.065116] ? preempt_schedule_common+0x4f/0xe0 [ 281.069887] ? balance_dirty_pages+0x3740/0x3740 [ 281.074663] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 281.080205] ? shmem_write_end+0x384/0xa40 [ 281.084454] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 281.089485] ? iov_iter_advance+0x354/0x1490 [ 281.093898] ? __lock_is_held+0xb6/0x140 [ 281.098008] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 281.103550] ? iov_iter_fault_in_readable+0x22c/0x450 [ 281.108780] shmem_write_begin+0x105/0x1e0 [ 281.113034] generic_perform_write+0x2a0/0x6b0 [ 281.117668] ? add_page_wait_queue+0x480/0x480 [ 281.122258] ? current_time+0x1b0/0x1b0 [ 281.126243] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 281.131267] ? generic_write_check_limits+0x291/0x380 [ 281.136471] __generic_file_write_iter+0x25e/0x630 [ 281.141405] ? mutex_trylock+0x2d0/0x2d0 [ 281.145495] generic_file_write_iter+0x34e/0x6a0 [ 281.150267] ? __generic_file_write_iter+0x630/0x630 [ 281.155372] ? __might_fault+0x12b/0x1e0 [ 281.159444] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 281.164986] ? iov_iter_init+0xea/0x220 [ 281.168978] __vfs_write+0x764/0xb40 [ 281.172708] ? kernel_read+0x120/0x120 [ 281.176636] ? rcu_read_lock_sched_held+0x110/0x130 [ 281.181663] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 281.186438] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 281.191979] ? __sb_start_write+0x1ac/0x360 [ 281.196315] vfs_write+0x20c/0x580 [ 281.199873] ksys_write+0x105/0x260 [ 281.203517] ? __ia32_sys_read+0xb0/0xb0 [ 281.207604] ? trace_hardirqs_off_caller+0x300/0x300 [ 281.212729] __ia32_sys_write+0x71/0xb0 [ 281.216715] do_fast_syscall_32+0x333/0xf98 [ 281.221054] ? do_int80_syscall_32+0x880/0x880 [ 281.225659] ? trace_hardirqs_off+0x310/0x310 [ 281.230165] ? syscall_return_slowpath+0x3b0/0x5f0 [ 281.235106] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 281.240128] ? __switch_to_asm+0x34/0x70 [ 281.244202] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.249060] entry_SYSENTER_compat+0x70/0x7f [ 281.253491] RIP: 0023:0xf7f47869 [ 281.256862] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 281.275780] RSP: 002b:00000000f5f430cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 281.283503] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200009c0 [ 281.290780] RDX: 00000000ffffff1b RSI: 0000000000000000 RDI: 0000000000000000 [ 281.298050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.305321] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 281.312605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.330941] memory: usage 307200kB, limit 307200kB, failcnt 293 [ 281.345901] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 281.381357] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 281.397069] Memory cgroup stats for /syz4: cache:237144KB rss:60320KB rss_huge:57344KB shmem:237144KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:237028KB active_anon:60368KB inactive_file:0KB active_file:0KB unevictable:0KB [ 281.429214] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=10455,uid=0 [ 281.447883] Memory cgroup out of memory: Kill process 10455 (syz-executor4) score 1106 or sacrifice child [ 281.468308] Killed process 10455 (syz-executor4) total-vm:70392kB, anon-rss:2200kB, file-rss:33460kB, shmem-rss:0kB 10:03:39 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x1000000, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') 10:03:39 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000100)={&(0x7f0000004000/0x3000)=nil, 0x2, 0x5, 0x0, &(0x7f0000002000/0x4000)=nil, 0x9}) dup3(r1, r2, 0xfffffffffffffffc) gettid() mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r2, 0x0) 10:03:39 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r0, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r0, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) sendto(r2, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) [ 281.491282] oom_reaper: reaped process 10455 (syz-executor4), now anon-rss:0kB, file-rss:32784kB, shmem-rss:0kB 10:03:39 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:39 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:39 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:39 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='nfs\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000380)=""/206) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x7fffffff}) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000140), 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getegid() fchownat(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x100) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780), 0x24, 0x0) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000540)}, 0x10) clone(0x100000, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000480)={0xa5a1}) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000007c0)={0x15, 0x197, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @ib={0x1b, 0x800, 0xaf87, {"ad1fc9e8beaa401e177f5769edf738ce"}, 0x5828, 0x8, 0x2}, @in6={0xa, 0x4e23, 0x3, @empty, 0x4}}}, 0x215) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r2, &(0x7f0000000680)='attr/exec\x00') clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 10:03:40 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x20000) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000280)={0x10000}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000300), 0x4) r2 = dup2(r0, r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000340)=0x0) ptrace$cont(0x1f, r4, 0x8, 0x3) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f00000007c0)={@loopback, @multicast1}, &(0x7f0000000800)=0xc) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000140)={0xfadf, 0x8, @name="8a862d1317edb895ca3069f439cf02790e33e9c0acd8629856b2e5e76476b3be"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) readlinkat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=""/209, 0xd1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x9, 0x41}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) munmap(&(0x7f0000585000/0x1000)=nil, 0x1000) 10:03:40 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup(r0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) clock_gettime(0x1, &(0x7f0000000040)) getsockopt(r2, 0x0, 0xd1, 0x0, 0x0) 10:03:40 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xfffffffffffffdfd) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:40 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r0, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r0, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10005, 0x0) sendto(r2, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) 10:03:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8f}, 0x1c) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10:03:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r2, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f0000000100)={&(0x7f0000004000/0x3000)=nil, 0x2, 0x5, 0x0, &(0x7f0000002000/0x4000)=nil, 0x9}) dup3(r1, r2, 0xfffffffffffffffc) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r2, 0x0) 10:03:40 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:40 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x7, 0x4) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 10:03:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000240)=0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000480), 0x4) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000700)=0xffffffffffffff00) stat(&(0x7f0000004980)='./file0\x00', &(0x7f00000049c0)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="54000000170100000200000043000000fbb9c8d4d457a834b39f23ebfa592d6fbbe9999cf9395952dc78f2962db0cfcb34c38625f0b1df46cb103c4227d6831d314dea55402d213f283537f4a35a8265fdd071246f4e4ce30d5ff0dc6a44f84ec4d4d570e81a5768939ce89a31868b68b7ea7b13bb9d5a53f5ce60878cc54baa1199908332381884e0ac5cd129eaea0dac38ae2494107ba7e7c497f3fd41f08cb3fa721683a175aa0c7bdd583fcf6b32d1cc34"], 0xb3}], 0x1, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x1, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000100)={0x8000, 0x7, 0x7fff, 0x9, 0x101, 0x795}) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x7003, &(0x7f00000000c0)) preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000180)=""/116, 0x74}], 0x1, 0x100000000000000) close(r5) fcntl$getownex(r4, 0x10, &(0x7f0000000440)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000640)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000680)) getpgrp(0xffffffffffffffff) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000006c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f0000000780)=0xc) getpgrp(r6) getpgid(0x0) rmdir(&(0x7f0000000300)='./file0\x00') ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000380)={r7, &(0x7f0000000280)=""/225}) r8 = openat$md(0xffffffffffffff9c, &(0x7f0000000280)='/dev/md0\x00', 0x0, 0x0) close(r8) signalfd(0xffffffffffffffff, &(0x7f0000000200), 0x8) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f00000004c0)={&(0x7f0000ffa000/0x3000)=nil, 0x400, 0x4, 0x50, &(0x7f0000e00000/0x200000)=nil, 0x6}) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) 10:03:40 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:40 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x7, 0x4) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 10:03:41 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 283.018812] syz-executor4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 283.037476] CPU: 0 PID: 11908 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #17 [ 283.044695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.054056] Call Trace: [ 283.056659] dump_stack+0x1db/0x2d0 [ 283.060319] ? dump_stack_print_info.cold+0x20/0x20 [ 283.065361] ? check_preemption_disabled+0x48/0x290 [ 283.070404] dump_header+0x1e6/0x116c [ 283.074218] ? add_lock_to_list.isra.0+0x450/0x450 [ 283.079153] ? perf_trace_lock+0x750/0x750 [ 283.083401] ? print_usage_bug+0xd0/0xd0 [ 283.087483] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 283.092427] ? ___ratelimit+0x37c/0x686 [ 283.096419] ? mark_held_locks+0xb1/0x100 [ 283.100613] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 283.105739] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 283.110854] ? lockdep_hardirqs_on+0x415/0x5d0 [ 283.115450] ? trace_hardirqs_on+0xbd/0x310 [ 283.119778] ? kasan_check_read+0x11/0x20 [ 283.123951] ? ___ratelimit+0x37c/0x686 [ 283.127936] ? trace_hardirqs_off_caller+0x300/0x300 [ 283.133052] ? do_raw_spin_trylock+0x270/0x270 [ 283.137646] ? trace_hardirqs_on_caller+0x310/0x310 [ 283.142668] ? lock_acquire+0x1db/0x570 [ 283.146672] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 283.151788] ? ___ratelimit+0xac/0x686 [ 283.155691] ? idr_get_free+0xee0/0xee0 [ 283.155708] ? lockdep_hardirqs_on+0x415/0x5d0 [ 283.155755] oom_kill_process.cold+0x10/0x9d4 [ 283.155777] ? cgroup_procs_next+0x70/0x70 [ 283.155798] ? _raw_spin_unlock_irq+0x5e/0x90 [ 283.155817] ? oom_badness+0xa50/0xa50 [ 283.155840] ? oom_evaluate_task+0x540/0x540 [ 283.155857] ? mem_cgroup_iter_break+0x30/0x30 [ 283.155873] ? mutex_trylock+0x2d0/0x2d0 [ 283.194567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 283.200153] ? rcu_read_unlock_special+0x380/0x380 [ 283.205104] out_of_memory+0x885/0x1420 [ 283.209119] ? oom_killer_disable+0x340/0x340 [ 283.213650] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 10:03:41 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 283.218765] ? lock_acquire+0x1db/0x570 [ 283.222766] mem_cgroup_out_of_memory+0x160/0x210 [ 283.227631] ? do_raw_spin_unlock+0xa0/0x330 [ 283.232052] ? memcg_memory_event+0x40/0x40 [ 283.236385] ? do_raw_spin_trylock+0x270/0x270 [ 283.241021] ? _raw_spin_unlock+0x2d/0x50 [ 283.245184] try_charge+0x12a9/0x19b0 [ 283.248988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 283.254542] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 283.259413] ? rcu_read_unlock_special+0x380/0x380 [ 283.264371] ? get_mem_cgroup_from_mm+0x1ea/0x420 10:03:41 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 283.269222] ? get_mem_cgroup_from_page+0x190/0x190 [ 283.274268] mem_cgroup_try_charge+0x43a/0xdb0 [ 283.278879] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 283.284424] ? mem_cgroup_protected+0xa10/0xa10 [ 283.289108] ? shmem_getattr+0x2c0/0x2c0 [ 283.293185] ? _raw_spin_unlock_irq+0x28/0x90 [ 283.297689] ? lockdep_hardirqs_on+0x415/0x5d0 [ 283.297707] ? trace_hardirqs_on+0xbd/0x310 [ 283.297723] ? kasan_check_read+0x11/0x20 [ 283.297742] ? trace_hardirqs_off_caller+0x300/0x300 [ 283.297768] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 283.297798] shmem_getpage_gfp+0xa85/0x4b70 [ 283.297863] ? shmem_add_to_page_cache+0x19a0/0x19a0 [ 283.330320] ? page_mapping+0x56d/0xa20 [ 283.334310] ? __page_mapcount+0x550/0x550 [ 283.338574] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 283.344146] ? __set_page_dirty_no_writeback+0x3a1/0x690 [ 283.349626] ? do_writepages+0x1a0/0x1a0 [ 283.353707] ? _raw_spin_unlock_irq+0x5e/0x90 [ 283.358215] ? finish_task_switch+0x1e9/0xac0 [ 283.362722] ? finish_task_switch+0x1a8/0xac0 [ 283.367248] ? __switch_to_asm+0x40/0x70 [ 283.371322] ? __switch_to_asm+0x34/0x70 [ 283.375402] ? preempt_notifier_register+0x200/0x200 [ 283.380527] ? __switch_to_asm+0x34/0x70 [ 283.384626] ? do_writepages+0x1a0/0x1a0 [ 283.388702] ? __writepage+0xe0/0xe0 [ 283.392434] ? mark_held_locks+0xb1/0x100 [ 283.396613] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 283.401390] ? lockdep_hardirqs_on+0x415/0x5d0 [ 283.405993] ? retint_kernel+0x2d/0x2d [ 283.409895] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 283.415447] ? unlock_page+0x2b1/0x4a0 [ 283.419348] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 283.424900] ? balance_dirty_pages_ratelimited+0x1b0/0x2370 [ 283.430642] ? trace_hardirqs_on_caller+0x310/0x310 [ 283.435672] ? preempt_schedule+0x4b/0x60 [ 283.439836] ? balance_dirty_pages+0x3740/0x3740 [ 283.444627] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 283.450176] ? shmem_write_end+0x384/0xa40 [ 283.454434] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 283.459461] ? iov_iter_advance+0x354/0x1490 [ 283.463887] ? __lock_is_held+0xb6/0x140 [ 283.467971] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 283.473514] ? iov_iter_fault_in_readable+0x22c/0x450 [ 283.478704] shmem_write_begin+0x105/0x1e0 [ 283.482952] generic_perform_write+0x2a0/0x6b0 [ 283.487613] ? add_page_wait_queue+0x480/0x480 [ 283.492209] ? current_time+0x1b0/0x1b0 [ 283.496204] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 283.501220] ? generic_write_check_limits+0x291/0x380 [ 283.506422] __generic_file_write_iter+0x25e/0x630 [ 283.511350] ? mutex_trylock+0x2d0/0x2d0 [ 283.515453] generic_file_write_iter+0x34e/0x6a0 [ 283.520214] ? __generic_file_write_iter+0x630/0x630 [ 283.525381] ? __might_fault+0x12b/0x1e0 [ 283.529440] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 283.534974] ? iov_iter_init+0xea/0x220 [ 283.538957] __vfs_write+0x764/0xb40 [ 283.542664] ? kernel_read+0x120/0x120 [ 283.546574] ? rcu_read_lock_sched_held+0x110/0x130 [ 283.551644] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 283.556402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 283.561944] ? __sb_start_write+0x1ac/0x360 [ 283.566271] vfs_write+0x20c/0x580 [ 283.569814] ksys_write+0x105/0x260 [ 283.573432] ? __ia32_sys_read+0xb0/0xb0 [ 283.577503] ? trace_hardirqs_off_caller+0x300/0x300 [ 283.582621] __ia32_sys_write+0x71/0xb0 [ 283.586628] do_fast_syscall_32+0x333/0xf98 [ 283.590968] ? do_int80_syscall_32+0x880/0x880 [ 283.595573] ? trace_hardirqs_off+0x310/0x310 [ 283.600091] ? syscall_return_slowpath+0x3b0/0x5f0 [ 283.605044] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 283.610060] ? __switch_to_asm+0x34/0x70 [ 283.614157] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.619010] entry_SYSENTER_compat+0x70/0x7f [ 283.623416] RIP: 0023:0xf7f47869 [ 283.626796] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 283.645712] RSP: 002b:00000000f5f430cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 283.653435] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200009c0 [ 283.660707] RDX: 00000000fffffdfd RSI: 0000000000000000 RDI: 0000000000000000 [ 283.667995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.675283] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 283.682554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.700084] memory: usage 307200kB, limit 307200kB, failcnt 319 [ 283.706383] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 283.713318] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 283.737855] Memory cgroup stats for /syz4: cache:236856KB rss:60236KB rss_huge:57344KB shmem:236856KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:236988KB active_anon:60368KB inactive_file:0KB active_file:0KB unevictable:0KB [ 283.799383] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=10580,uid=0 [ 283.814900] Memory cgroup out of memory: Kill process 10580 (syz-executor4) score 1106 or sacrifice child [ 283.837839] Killed process 10580 (syz-executor4) total-vm:70392kB, anon-rss:2200kB, file-rss:33460kB, shmem-rss:0kB [ 283.854834] oom_reaper: reaped process 10580 (syz-executor4), now anon-rss:0kB, file-rss:32784kB, shmem-rss:0kB [ 283.871511] syz-executor4 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 283.903873] CPU: 1 PID: 11907 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #17 [ 283.911103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.920459] Call Trace: [ 283.923063] dump_stack+0x1db/0x2d0 [ 283.926713] ? dump_stack_print_info.cold+0x20/0x20 [ 283.931730] ? perf_trace_lock+0x12f/0x750 [ 283.936003] dump_header+0x1e6/0x116c [ 283.939813] ? add_lock_to_list.isra.0+0x450/0x450 [ 283.944763] ? print_usage_bug+0xd0/0xd0 [ 283.948833] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 283.953788] ? ___ratelimit+0x37c/0x686 [ 283.957791] ? mark_held_locks+0xb1/0x100 [ 283.961950] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 283.967061] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 283.972178] ? lockdep_hardirqs_on+0x415/0x5d0 [ 283.976774] ? trace_hardirqs_on+0xbd/0x310 [ 283.976881] ? kasan_check_read+0x11/0x20 [ 283.976913] ? ___ratelimit+0x37c/0x686 [ 283.976943] ? trace_hardirqs_off_caller+0x300/0x300 [ 283.976958] ? do_raw_spin_trylock+0x270/0x270 [ 283.976989] ? trace_hardirqs_on_caller+0x310/0x310 [ 283.977003] ? lock_acquire+0x1db/0x570 [ 283.977027] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 283.977044] ? ___ratelimit+0xac/0x686 [ 283.977062] ? idr_get_free+0xee0/0xee0 [ 284.021048] ? lockdep_hardirqs_on+0x415/0x5d0 [ 284.025641] oom_kill_process.cold+0x10/0x9d4 [ 284.030127] ? cgroup_procs_next+0x70/0x70 [ 284.034353] ? _raw_spin_unlock_irq+0x5e/0x90 [ 284.038851] ? oom_badness+0xa50/0xa50 [ 284.042731] ? oom_evaluate_task+0x540/0x540 [ 284.047128] ? mem_cgroup_iter_break+0x30/0x30 [ 284.051698] ? mutex_trylock+0x2d0/0x2d0 [ 284.055748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 284.061282] ? rcu_read_unlock_special+0x380/0x380 [ 284.066202] out_of_memory+0x885/0x1420 [ 284.070172] ? oom_killer_disable+0x340/0x340 [ 284.074655] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 284.079749] ? lock_acquire+0x1db/0x570 [ 284.083719] mem_cgroup_out_of_memory+0x160/0x210 [ 284.088550] ? do_raw_spin_unlock+0xa0/0x330 [ 284.092964] ? memcg_memory_event+0x40/0x40 [ 284.097270] ? do_raw_spin_trylock+0x270/0x270 [ 284.101860] ? _raw_spin_unlock+0x2d/0x50 [ 284.106031] try_charge+0xd44/0x19b0 [ 284.109731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 284.115259] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 284.120089] ? rcu_read_unlock_special+0x380/0x380 [ 284.125050] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 284.129882] ? get_mem_cgroup_from_page+0x190/0x190 [ 284.134890] ? rcu_read_lock_sched_held+0x110/0x130 [ 284.139909] mem_cgroup_try_charge+0x43a/0xdb0 [ 284.144509] ? mem_cgroup_protected+0xa10/0xa10 [ 284.149250] ? __anon_vma_prepare+0x36d/0x760 [ 284.153735] ? anon_vma_fork+0x880/0x880 [ 284.157788] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 284.163307] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 284.168836] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 284.173770] __handle_mm_fault+0x2594/0x55a0 [ 284.178172] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 284.183012] ? check_preemption_disabled+0x48/0x290 [ 284.188024] ? handle_mm_fault+0x3cc/0xc80 [ 284.192258] ? lock_downgrade+0x910/0x910 [ 284.196390] ? kasan_check_read+0x11/0x20 [ 284.200521] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 284.205786] ? rcu_read_unlock_special+0x380/0x380 [ 284.210700] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 284.216221] ? check_preemption_disabled+0x48/0x290 [ 284.221243] handle_mm_fault+0x4ec/0xc80 [ 284.225307] ? __handle_mm_fault+0x55a0/0x55a0 [ 284.229875] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 284.235397] ? vmacache_update+0x114/0x140 [ 284.239638] __do_page_fault+0x5da/0xd60 [ 284.243703] do_page_fault+0xe6/0x7d8 [ 284.247500] ? trace_hardirqs_on_caller+0xc0/0x310 [ 284.252429] ? vmalloc_sync_all+0x30/0x30 [ 284.256572] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 284.262032] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 284.267574] ? prepare_exit_to_usermode+0x232/0x3b0 [ 284.272603] ? page_fault+0x8/0x30 [ 284.276133] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.280962] ? page_fault+0x8/0x30 [ 284.284485] page_fault+0x1e/0x30 [ 284.287919] RIP: 0023:0x8054252 [ 284.291197] Code: 00 83 c4 20 83 f8 ff 89 45 b0 0f 84 86 01 00 00 8b 45 b0 85 c0 0f 84 bb 04 00 00 8b 4d b0 8b 7d a8 8d 84 39 40 fb ff ff 89 c6 <89> 88 70 02 00 00 89 b8 74 02 00 00 89 45 b4 05 8c 00 00 00 c7 46 [ 284.310084] RSP: 002b:000000000845fba0 EFLAGS: 00010286 [ 284.315450] RAX: 00000000f5f01b40 RBX: 0000000000020000 RCX: 00000000f5ee1000 [ 284.322704] RDX: 0000000000000003 RSI: 00000000f5f01b40 RDI: 0000000000021000 [ 284.329959] RBP: 000000000845fc18 R08: 0000000000000000 R09: 0000000000000000 [ 284.337225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.344488] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.367737] memory: usage 290124kB, limit 307200kB, failcnt 320 [ 284.373927] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 284.380678] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 284.386920] Memory cgroup stats for /syz4: cache:222088KB rss:58164KB rss_huge:55296KB shmem:222088KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:222204KB active_anon:58212KB inactive_file:0KB active_file:0KB unevictable:0KB [ 284.408938] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=11054,uid=0 [ 284.423789] Memory cgroup out of memory: Kill process 11054 (syz-executor4) score 1106 or sacrifice child [ 284.435357] Killed process 11054 (syz-executor4) total-vm:70392kB, anon-rss:2200kB, file-rss:33460kB, shmem-rss:0kB [ 284.448642] oom_reaper: reaped process 11054 (syz-executor4), now anon-rss:0kB, file-rss:32784kB, shmem-rss:0kB 10:03:42 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x7, 0x4) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 10:03:42 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:42 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r1, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f0000000100)={&(0x7f0000004000/0x3000)=nil, 0x2, 0x5, 0x0, &(0x7f0000002000/0x4000)=nil, 0x9}) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r1, 0x0) 10:03:42 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x98d985b0f91c6d85, &(0x7f0000000000)=""/4, &(0x7f0000000040)=0x4) 10:03:42 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) r1 = getpgid(0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f00000005c0)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) getresgid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0) r7 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000800)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@loopback}}, &(0x7f0000000900)=0xe8) r9 = getegid() r10 = gettid() getresuid(&(0x7f0000003280), &(0x7f00000032c0), &(0x7f0000003300)=0x0) fstat(r0, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000033c0)=0x0) fstat(r0, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getgid() r16 = fcntl$getown(r0, 0x9) r17 = geteuid() r18 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000039c0)={0x0, 0x0, 0x0}, &(0x7f0000003a00)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003a40)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000003b40)=0xe8) stat(&(0x7f0000003b80)='./file0\x00', &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = getpid() stat(&(0x7f0000003c40)='./file0\x00', &(0x7f0000003c80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003d00)=0x0, &(0x7f0000004280), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000003d80)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003dc0)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000003ec0)=0xe8) getresgid(&(0x7f0000003f00)=0x0, &(0x7f0000003f40), &(0x7f0000003f80)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000003fc0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004000)={0x0, 0x0}, &(0x7f0000004040)=0xc) getgroups(0x3, &(0x7f0000004080)=[0xee01, 0x0, 0xffffffffffffffff]) sendmmsg$unix(r0, &(0x7f0000004200)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000000100)="60bc572c94b7183ae4346f6369958770a8cd628e027874eb23db6359e478475374af78dd688c13f8d3c6d9146959a49f60121a83b4def92b4d8e95e1253c600b3b0597385212078e5865da50a1dae3528dacbf228614aafc00d152b6ce7325d79730a8fe7821182342ca7f4e75e1c5222712c96a9838014d8794e95856d44349b7cbc53ad3b3ec43feeaab1bac89d92ac8870396e22b38dc3d0c", 0x9a}, {&(0x7f0000000240)="c09ff88ab26ac65d1414da10b0472cc5b7251bea79fc1dec25efb3944b3a01683fa49eeee6debf52144eb58dd65ac8571566ea9bf2901d36724253008f6054ebfd21f487da1fb063941a4d89145c93bc95f1dc8383a7e0eb2f5cb3815e5c5a9d1f438bbd3fba211e77ad012380517383d4ed3937869249f9371eff4ae5d9293071a0defe816b871745681d32edb2fc4ec8358e5a8023eee9f8a1921ec555806f01b213af9d85cb657127f3c1f3c74dfb7e15c3b5d10e7b659234e6449070b4f9920fb43d412f2334a483f6ca8e8b13", 0xcf}, {&(0x7f0000000340)="5330034a3a087bdeaab17d63768e93c8e9dae675e6fad641ad01b3c51f2ea02f5b6e141fe7923aa33966307ab1c0090f0a7efed6031b0424d7982d90ef3853946bd2643c7883a2d2bd3f58921d0d54f3c7e642fdf1a7bb7a55ee6c14e6f9c58860dbfde5ba7c430d764ffcfa4a7de4134cfe712d79ba638ac1124fa630e53bb409e7eafa468ecaadc284d3da64d67e99a07a41dd0eed9f7f39325123239da64a855202463a4db3d4f910942e850428a21851cf926595bde342d1a2c7234588a0c128a8bd48c100eb7b1a1657845d946eb5408102e06beba9d480d1bceaa1299c3af054ee", 0xe4}, {&(0x7f00000001c0)="8792e4403c", 0x5}], 0x4, &(0x7f0000000940)=[@rights={0x14, 0x1, 0x1, [r0, r0]}, @cred={0x18, 0x1, 0x2, r1, r2, r3}, @cred={0x18, 0x1, 0x2, r4, r5, r6}, @cred={0x18, 0x1, 0x2, r7, r8, r9}], 0x5c, 0x4040011}, {&(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000a80)="37b96e69870c60fa17a6d3570edbd3010710a5f240c7cd964a75f184343ebc51b0575ba2a4bd73ccffa01cfb9a8419765ec934dd5214846d538c624144386c31c1984e9b6862cf6a5c859b6a133e0ae1edc8d8d810e4d231f7b320667d289b485821dddb4d759076aa14194e71f138e762ee0fc89e2b32dd2c5a0ae4b5597aab750da5cc06ab1336b4bf388a7e4ffc1156f8da527d17fef5dd234ceb5f003aed", 0xa0}, {&(0x7f0000000b40)="04c6c293842b3638c198c9d92697caaa68ae9277c60c01ce8245e2c581bfd09bebe6c38202e490687252613c6f81b2042d800c8c0ff57aad9b5899dee66155009bbcccb334fea57b46b15b2fe6b56b2f78477792eb36359bc7bc51014f96a76c6b560ab4aff8f30bea987d554b88caf311a2ed3cdbabd8b0", 0x78}, {&(0x7f0000000bc0)="daa9052314cacad9f45e8683c985f007a3f8ca34f92d60e31605e90cf50fc380c717670685ae33418099534c51eba2203651ec3edc5c11b75ecab4d969aeb611b0385ba72c629922337962dceed5706412958ee7eb8a9ed2486bdb8093b3efeb3316f6508d8f01d17d5600c900546a085cc0e5c2c079c5164042bcb8e8daa3cf1e8e77ebb5be944eb9c61823ac", 0x8d}, {&(0x7f0000000c80)="a8f835e8e8637fe0d9eb0888caa777d84adb0603b6533d2e6333b1ad2a6bbd3636b4afded5237ecb04bf6681d581e8d16e3a12b431d0469cc07fe940fbb054da39ae18fdfe90428efa9ba48aaee9a0b50510987c87a32ab80224b70668cef0b8466c795b9a6efa91a149995482b755f982a2bd8263bc0d412ebdf6387c0b8018cbfb061de916ef", 0x87}], 0x4, &(0x7f0000000d80)=[@rights={0x18, 0x1, 0x1, [r0, r0, r0]}], 0x18, 0x10}, {&(0x7f0000000dc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000000e40)="ad92af8eaf1d1945040e895f2bcec16e0b5aa7636872b17670883078898a13b748009a6c2a67b87def536123132db6c3edea8a8f48119f470bf77c2d38086292df2a2de0a3863ed0e2620b458cd6391e59345e28db95809cc85723fb19adb00c5650c3c5a26780b0793989291548cf011913c436", 0x74}, {&(0x7f0000000ec0)="830022d73c98b0c0adca16cb547e700c8f8dbb91dfc437e2acc254aadbcf9201b87e9e0c53d0e4e3c433ec06aee845929ea3362c5ab08ec860969001c552d61325d2dd4c46b279db9cdb43e43535a17f0e258688aeb0b6", 0x57}, {&(0x7f0000000f40)="144781317d9485da02c7d41991680454c2b0e4c999502438a4d4d5a55ffe2d5106b9a5e2a3a8c37c392f934fe0733772dddc1835d5d3d9f3a8b09bbe", 0x3c}, {&(0x7f0000000f80)="1b19fd059864cc113810f922dc811a4938fe6b4950a44d5d4e216b9105643318db5dcb64451ec53e00b8d9512ab72581f8e618ea735e178954010740adff20ca9864d96022231f921d344ead65c328265c359070e03a5f35763205da0dc9e60bb382b35de7d5e0e28d680efa8e28dd5ee8049d6208217b320393d5c728ccc6b6fd57a5cd26fbc60c598d10fbe721f7c86f82ce70f20fd4bd716779af23ef735bb0e8ab9afda10babc14f22d8e25986fe497ef481a62bc11bae9d84c41efd55e19f9197216498d4", 0xc7}, {&(0x7f0000001080)="f145e4e76aeae41238c54c353dfa07b083afa687cc7ab88593f6818a183a65335528b0de0d172a4f97fb34dd3f4d4d2b22cf4855f10cb3fa8006d038fa8bdf5b77a15404986623b587f8973aae6666", 0x4f}, {&(0x7f0000001100)="1c5f23d7cb9cbb788b7f624495ca2cecaad15f3a36c473bbd80af68327e2ac8adeacbed3e5c8a55ad3161c2472336d32dddf73cd5c48f3887e3b6924a1a7947a7b273133800398f9e291b0d0bea6", 0x4e}, {&(0x7f0000001180)="20812e0c4eefddc4a053cf36ee8b222744ebca487293e674a869872a80c00ed08a5ea5e12b38495465cca96f64d29dd2213f51fccdaba90573ab9c149462925dd3fbcaab74ad4d027d5284e44b783821b15ba0110eb5cd91fdaec23e86d91d74dfaa1ff86b", 0x65}, {&(0x7f00000043c0)="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", 0x1097}, {&(0x7f0000002200)="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", 0x1000}], 0x9, &(0x7f0000003480)=[@cred={0x18, 0x1, 0x2, r10, r11, r12}, @rights={0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r13, r14, r15}], 0x94, 0x4040004}, {&(0x7f0000003540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003980)=[{&(0x7f00000035c0)="75132ef0d59d0e2a82f097a46340ee7717a05cf126221cd71a479dfaf2ee077191825ee976b769f8c59f342f7472ce", 0x2f}, {&(0x7f00000042c0)="ae61db68fd41fe0de47b52f4e983db052b2fa137e68bc0612ac43461179a014795399b98971569e9584191163e8600f995d3798ed437731ebe0c069d80c87d84051a92fb193cb8abfb3849dd7a0e7fba5ff2a1462336e3bf85c266dc2677563f4b0121b050d89df864166522ac674c02d1b9bed7e02f4901e9fbc030cad54a3008a8ed4be45ed37513c118fa6bc4338ceee7894661c887194590966f5a8302eedd84afabd31b34b0e2ca50290b6528e9dc75286da0a709ac4ab7cfff795fe0fce542a01be9206796df583829cb6292721d6ed219d011ee4f6c843a8fa00387970f62d60e430b5d4948", 0xe9}, {&(0x7f0000003700)="6f5a285177b597ce8e2c794d982a1caff8a25046d8d274722a7df0e1de51d5abf8f7f40fbd62a7b04a9602bf6f046dba7d83b4b9edb9d19d2147cf1171f562be5478b7c0f043ade77633a22f24745b76c2c1d3aeb9017f5a1cfc74d23f2cc018ff74bbc69fb7a8cf5ec2e0d76accc68b3a47d5cf3ca85bd6ff021a1cec75acf2149a45a790cfd0a35f49edbc15fbc461", 0x90}, {&(0x7f00000037c0)="848ed1fcb11028051b503be302c7f71bca5d6878b17e68990c93e89b42f29a1238af6bc7162c8622a70d7035941910c45df530a13c3be9e06fb1b9c5908cf44c2ed732a02e07d69a3b1dce194772bbbb5ff8543a5181c3ed86e0135595b0f38f2e4b566c581d5a7c380c3894a9651fe4ad00bcc2bdbb9005b6e022e3262e0057c6007d7d8fda454f460d75fc7807c84123cf3bce81924c5756d05a069feab7b3", 0xa0}, {&(0x7f0000003880)="fe8826873dcce827fba6796676e32f01e7c173be56fa93618c062195662ed7909f9f0d994f79496b125669b0c8443f3b5f69d1d3656d98df61f08c72431ef286650aabc7bf21d578b141de2e3058aa42d38b7737e8a5dc4e9f702675b2e0a8d764093ef8e10225fe5406f2e4b626858767cf2a9ffc3c8e6ffaef096577e348e16d93447981d6c43fe4d38bd014205f27dc07612da7d2f7e60e2ef92f76e60a5c7ca30ef5a7b750e103bcddd0e2fddd0633c8d551d78437ddfee31dbcebc408e69f1fb055380147f90ec059e37f7d16d49ccd20a573c2c9a3a8ef2d670dc132b06796d9f040e78093aaef7256ea333b28ea", 0xf1}], 0x5, &(0x7f00000040c0)=[@cred={0x18, 0x1, 0x2, r16, r17, r18}, @rights={0x24, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r19, r21, r22}, @cred={0x18, 0x1, 0x2, r26, r5, r20}, @rights={0x1c, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r23, r24, r25}, @rights={0x24, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r26, r27, r28}, @rights={0x10, 0x1, 0x1, [r0]}, @cred={0x18, 0x1, 0x2, r29, r30, r31}], 0x104}], 0x4, 0x4010) 10:03:42 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x7, 0x4) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 10:03:42 executing program 3: syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x38, 0x0, 0x0, 0x0, [{[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:42 executing program 0: io_setup(0x8000, &(0x7f0000000000)=0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='auxv\x00') r3 = epoll_create1(0x80000) r4 = socket$inet(0x2, 0x80000, 0x5) r5 = syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x5, 0x101000) r6 = accept4(0xffffffffffffff9c, &(0x7f00000003c0)=@hci, &(0x7f0000000440)=0x80, 0x80000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x80800) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/cachefiles\x00', 0x12549d69ccb10bd2, 0x0) r10 = signalfd4(0xffffffffffffff9c, &(0x7f0000000740), 0x8, 0x800) r11 = syz_open_dev$dspn(&(0x7f0000000840)='/dev/dsp#\x00', 0xff, 0x4000) r12 = socket$packet(0x11, 0x2, 0x300) io_submit(r0, 0x7, &(0x7f0000001900)=[&(0x7f0000001980)={0x0, 0x0, 0x0, 0xb, 0x10001, r1, &(0x7f0000000080)="3f32ea8dffd0efd432", 0x9, 0x6, 0x0, 0x3, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x100000001, r3, &(0x7f0000000180)="d1208ea5b3398a28936584da9ad9b537889d0ad5c0370934e2234f96c73fab813042c0d627bdb3ce848a4fc3438821c97e752cf3dabd9c8c32e1f9f4934319894047ee1298c0431d29520a219442ff56ba4bb93bebfa0c724d9c6db344865e07a9197b9bfe4e5f3c5af97321a42f0e6bdaa350e74ecbd89178ce6ffeb99f728eb0a3dfc8e86f5ccad0762f23", 0x8c, 0x8000, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xff, r4, &(0x7f00000002c0)="941e5203a62d50c0850e549238e36959965b9f64fb37f00cc6aabc95f989090d83cc3346ed9a2aabe7edd3474c6f472623738aff86b350b5e4aec431b9dae5ce969c3b5c54648d56c493c0acfc9cad9ed3ee18d964cc76a3bde08c20bb25e253e909d2f9da", 0x65, 0x1, 0x0, 0x1, r5}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x7, 0x3, r6, &(0x7f0000000480)="1e6ad7024ebc9cd8cc4f1639f92d41819f178e076b416d166060aeec1f81bbc3949e4a3bd0d0704d9b7baeb26c907ed6f5986a9883a51933b5b295f66f012c5adaec261379d0dc7846e21c4411f49dff35fc382f9b95e5459a761dfaa20b203868e94958e0ac4dc29065f42e48923f147ad5aa4346b015dd95872efe17b60db3344ad132ff6832f19764a1aebd650492d35c4d7be776c4f4c0867bcddb93a46df7e61b70e022513d6e3917bbb61b3993019c668531ae360d0d52ae7d7cca3811f7dc99b9a6c6592972e152991ff9815e1a0cdf7c17", 0xd5, 0x400, 0x0, 0x1, r7}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x500000, r8, &(0x7f0000000640)="bb35acc2842db8f49dbdbd20867d7a31b21907a6735f2e34b2da8ebc66720350c321c1a6057ab167bca3c90b213520e6f55464de122a658ae65100b30d71a26b663b150925", 0x45, 0x1000, 0x0, 0x2, r9}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0xf, 0x3, r10, &(0x7f0000000780)="e756663d2c63438d84ed38889b7ad952b28bb92e7cd5f9d7a82fdb23330371a58d19d5d15f4d110a88357ac2f7a2d222e194b14cb6954a7da039a62d63ce3bde7bf154ef8ba8ab5b63948349aeda4f0c0029e472a170008123f889d27cebed4bdeaac382093cf1fd1a31726ae1b69b12104656cf777274b2bbf23ebf20f8cc8e5e11db7ee0ae6df362d6496f943c8be28ffec422d0520ba20f9a391948c078a19a5a6bbf5a6c930a17e57d493140ba546e007010507bd5", 0xb7, 0x6, 0x0, 0x1, r11}, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x7, 0x4ae8, r12, &(0x7f00000008c0)="d098e2d052782bd0ce25cadadd737c92740bc9afbe07985efdbb9c08af91adc1819ac2d8ec5af157fea02734f2e2ebded0d30b5ae2d1f234fe7f6be5406bc47244fb030309c84a467c42810660b8eda45e06a8876b77fa273e6707262e276ab138569dd9a29077bcaee82b3d81b9e4baf03d9b780e59f3f221ff21debe6ba0a087b78ed62cd3a3aeeb567ecf412724b7f95701ad04ceb85d9e11d70507dc4b444e075729ea25db90d8eee09c7f14969c65882cf5d8e6d61a6d39199d0c16d04eced5da209116b202663efac3cd4c12f38c8d8c75008a28ad5778a230f41651bc492e5eb28b9866aa10f5bd7d490c5ce956b5fca9070cbc8bc2842f1f0bc34c663dfbde2e089e9136210d7a620806761f3be99f8843b2a66083a9b386414f77cc5695cc6fb538b9ff1ba084a82ae4b193b6d6fea1eb17c07b3e50a1da42648456450be914809aaee5ee4ba4fa44e9f81705402f1157d748b3747f52a56cb932cb2b8d249891c308745630b73826038982b84dae597fbfbe4773963e917aad1d2747752ad400a9d3cd44d38adb0c3a419a7730e669fa5fd71553787054a0a17435c2818d7b6ffb718b7f7fa58852be7296c2ee41fe564df3166f53e0358b0bbd41f8c81db03e86c125266d63fe10ad87d1cff1cd63f20e01a04e44e8bd46d68903f0a7befedfe141c3bf68bef8006c88c66f05209c71ac9133396e0698fc2abbc9dcb88c46189c48486e5183f442dc1557084c951847515e09d8bb67e5216373092a52cf1dd275f261b4f2a9249691cb4d16f4e75add18370d29402d562120604497a62d7d97c60320cc0a22ae5762e64a89b18f5aedc21efda22fcd2df53371c9afe810818983a817d93e5a3019e94ca6d6f43de3a029210530f23966cad4c40b1c7b259bb47016bce89acb3074658ceefb53d00ca5f3ded14db0b8cb46d0ad86957a34ef3244a65457d57fd00c8e45d33c6a09f9f26a22aff387a6d3afbc6faaec5fc7e38ecd09a2fe9a9061ee6fc5ae7e93402b093278e325484b2169b04e0e885dc8fa3796bcecf6cc142ae56a8d825bf254c2cd973edfd4966ec6d54bb0d6cec72e0ac24d3d6a221a0b85ad92c6205209ae642defb6b68187ef8f0a122ae32de36d262efa53c548d37f34313456ff96b7c7cfa7fa224ad956229e3ae84e157b74a672f344c34702e7be76637e09b6fa934f358a5451c5a5fb292e71a3c8234668e097f87ff93f0b1c91d6346c53adb24f71543330e32bc18dc59b7f90b5a33ca364f21c59293da5b59a634b7c687ae21b1c10b375ec550d8a750d94f8bcd2f9e46750a753d9cc1df2aafdb43ee8b2c6c48c8bc77af81bd3aa7beb8a3f5a706060039abcfadf78dfaac0cdd6393e28f79bb947a24c157c383d2c0b0f0c970c23a96840d5dd00bdb6b024575bab4ac53f6fc7c25a0eac10656621b5cb5aa05004e86dc4be3e22bd5f7a1fc08447e273c50fc58458b663acbe024f96916ad3bfe96fb9edeaee15dd24e585ff3d91e3fad5fa465f34309aa20a3190c60aba3747a655b6a7b0e9bde2b2984f230ac3afbe1a9c11181f8477fcb60980baa01f48e66f86da68d1d29cc01728f06b0a86fad170db8027e85688d1fb7301b339a8757eff816c43c92692981d6bb25c2d4bddcc9824fd420b5367527ed30bbc84abc0ff200f98b4d6b696b85f2f38cc707b434683893e5513c5517bfceb1fa0312507979bd746150f6f92d25a2ddb95d4d7e630659e44a4c4deff0f6b18118aa19b445ba31d366db8b909fd17036da0719cfa925ff4b50e34b3af4e6d6f7b6a280831df40735ff907016204e6e4372e44102ddcba0de2602ee1ed1545064ece7cf3f2ced28cf35352615862474e643e06561852532a9bc32063d13a266f06efb08ba06c579df57ef6f11d916f1e5b7630983d9339fb18833eeec89279205f246fbb997d8548a7d3655cef9916c18f2d4c673f9bef1eeb075787881e4706b7fa7e356a27b4dd02af223c1cd0a47aa733e790a70c36c751143dec706cef4009ed447c6059403e97f186ce9a693a3c496f3b8d62ba9370452208287c3bb4895da96f399e89ae632036d40c045d978ec1540c85d3bae70c2c7a46f29b53601fc95b268a7a22d4ca9160feed1ba5c5067c5c0609152677bf2deae3a40e16878c1102992d6ef477c7445c620d80cc40186d2fa910bbf8a4ccff2674001c35ae62d0c16d9e818e3dbea89e5b0e59cdbf05d32407bb1be9698bd4969f67dd91a0735a744a9d633cfbbb6b70a0202088ea4ac7629afa50dfdb1f60508ca20283f790d426d0d1e8427ca7c0d6c260ac280d98e1e36c512e5e8d4accff8ac908ad9c655720972026290ba90bd6f66c65ac03cd06f58c622f3f22fb3c37e0bcde26013540b2ee1fd74e61ed6e01fdfbcf22053e6413b0f33a7af55257b676fecb5173baf6e98e8373d2416dd816f5a5e89364a4f468306a0a0e652f8b098d5ddeffd09941fbfc8204d23c544ff5a0d88ab9be127bf6a603561247d10d9cb365409a78d1c30008c6093636107304a1795d6d45c059817ddd73f27db51c5721b3887cb760b99e55b1a757d0eae20e9606d2766389f7a49854cfe72c81636d7d5b1dc5e6d08f74c04c17be07a0f98c4fa965f5950d14cb10452fc330b1c99f244f6f8df765b5ef6bccda91533b186851efa6e9682fbe1837fdaea3505e08eeb7af76f12e5b675dd75e1f00eb809d1e60e22c4ffc00a45e76b0737953a66d2c39c7a68c1c0abcb6802dce87dd18793328fd4e4d455dab714b2cb2114a7971acf0c68e48436463d3ce4971bfc29c26bd126598e11202e74350ce1f63f02d742f9e7ec3309a1c9f739d9a92bfec67deae45a92d827a78cd298ba48f3a9a8e688de210457af9c7ffc073065c9651dec3936a4ecf7ad6c240fe8e6b819ca67b327c2d1db412f7a36ac9ba1c6722569eecf1642611200a79b4c524286c8f63fc642800325a33962ce51d2e1377a3b1bde1615b9801e3cb622d967ed6738e7e348adc305ebfed81a610aef97f3aa68a740e2baca41cb0a665955fff27c57e5d52618d686e24554b38f12cb7b88beb62f9fd63fc117c36f702806f19f348898cbf173d863e74ccc35675eefbdaec6e34be160e4d5a5091d6e46c57b1d10daaa63d6806d52b8145de1a847b43336e2fb80a50330d9def9be12547cf24fda8fe0a8f9bb0861a1234476a227f6476f72a0dfc036a9c032bc7fda0112cd5ccdab4ba299ebf6b24d02fb8bb2abb4962f3f02708906688b1334ab85ddbb0b3ad8152e9a894399135a04234cdabcf82023dc3097f91282116b018b7eb0b9a33c42bcc51e2a77a4e4226e1b94c74b14828fba9e3b3f205018beb184511238b218525be75be5995c69b337ab48f63365d870ca99ef2392b558ecc05addb278e8b6c72b85ca7cc2fdf3421d4105f04eb11a77e95694060f8933be588df42dd8980869fb86dc5667abe1ad66207877740bb30b24f2a854b67e6eb3309dad72285342b9d1c1ffe5d3b5ebce848f78cd4d7248b6360e5bfa6b9f57c14ea759d33bb79f1d7be8dc0f807e2848f1df748831f2e44fe937fa8aefc93b26a0f35ebc9992fd7f04bd07b283d32438f48d1ba57925aa453b7cc345cc7bdb971168c632d75e8fc743d6a98b5802c17fa77ae1c31aaf9246d44ee0f65a69f2917b2441c11fc9da1652df07eae2fa7e5464b34575fa835c68417333090ed247cc5a05987760056d76295374b40d4164705e5e045d196927e1c769c3852c4e49516093cf58df2a1de24b325d16e674909a0c3a917a4e1abf38fc95648993056f0542c4dc52528137d37e192ce68612bee6e7bb4c4600c9cf72951764f26c113c0fea2c5351df6162ebe3084b4617cc5a6d8b5afea861b056ed227912d290adf7a6c8ead8cecd4ffe90ac0b2474c0e271ad25f2366c9ea7404dd39b88a23f5185fba862078b79c1276cd8a5396e6343a077f2d65aadac4731b462509e789759882d4662d3d110864674ffaf5343a32f23eff503011df71a9562b2c47baccc31e1bb3db9cf6eb56a7a22377d389bfecc1b25e5e1d669c757394cc7329f4e94b33d2ac44ec468334750f7a3e40d2effc11f4ac7d5c8443bf6349c88a9ec7b2c8864991be43bcf5854413d0051f3171e4fa84d74bd7e8c410f4dea12e33b6f9907dfa2258afb4b2d8a6d6bfe0abfec3e7727cd20e79c2776d500e271a9484d36aed1606b48cd7508292c2b59e10d0e4ed5d463ab331296b7a7d23d85c23bde0b60a92ac8590d779118877262ecf5d5d093e004f7dedb177fd7c7d7f74001340e04a0da2b2a201f04a7113bd4aff1e05e210efc2c10e97b873ccc4c5f80f9efdcc1f6e11590587300ef0103865236722e73180cacbf301153694c7c834b99bee30af062974ed63cc58628115b8ed40c2ae47ad39aa241f16199aa536a21f8286529f2bc1934ae600cb4d63e09cee52311b8ec21b7eff43d8ddd9c9c747729d99acb5830b39e08afa2bbcd78633235348dfdf80c140da7466efaab157be1485d7110e12371b68e8e461b25a0c92ace1e6a175c44557af0e5de79e2aeef3113cebe764381d2c96efc3cd45b3a45e66d559eab1f3fbe7fa5e6ee200ae3852d76294c982744f76a8bf1b0d59a2d7fd2d91242ac0ab56559d35b9240417407d77688eb4f9932c9d4213d98b7bb35f114269746bceb8885776030d8d419b65339925e018a20f9187f62b8dcfa28af54aac701ac373f823c0448ba3357dc238c9934d7101629e0e7858dfd6141f9e877a7c06aa164b81664cdab74e405d3fbbcd431136db0e02345922dbbc2890682f893805b6c05a1f58273e24ab73e79388e98378c7c99e622948bc114b3c4528c3bd7cadcf8bebb4d33b4ac0fba481e703cdedef1666fa925c5e37c6ca0e92cd292b48d37299c36c715482045d58f67ecd3686952d1a732208319d3343d2f719692fc50038fddb10b57ab0d9af26160e3d4226189ddf3443b13fa3f0e3b2f6d1b3588349468f4d5abf265f6dcf0fecfbd00ab42722a224e30305094f0e60fbc4f8ec7b3a500130cca2a660b980299aa2cdf49616d46182d56d152ec6859f4ff73a75037e123d5eddc2c2b062a60bf37ae718088d2725561f7eb497bd9d2bada4f00726f156b002b21bfc29d0dc52929f13888dbde7f523ee33094dca01bf541a89baec48f346cad0c342f1db4f88ed56603f2736d2d62e6b785daf6f339b8320f8ac51a660f94a692e1c4ad147df030d5d7d586ade7e921428c19f16185d25979ff10db09e5e14343d807d4de065b4c86f49adce2611c48400bb3b82d0aabbd71abc88b7b1bbdc8fa0087576111d9cbe60dccc5fadee80e7499604ab046bfd9c4161966ef77d60f5838cb30adf8d644d90c7dd5b5a54a18476280f43cf826af88d7dec9bc89866693ab3146637ac8aeab709296721b4394ef838952387c6dc3e0134c9ef0085557ebc67739da9864e884911d7984795b2ae546a81cc6fffadcb7815aa2db7e7d1ac741bea50e1a142ed226870b5a650442f4f5e0f025c5806f1b155f20228b5adab45aa0c5b58425ab94e23e0cc6096565b57ba6e7eabf113e2a00daf42fa46ce522bbce952a4b15dbce98cf9c3a8c29759e187fb20e6677e8b88d98403812900f9600378ed57759de064e302438bac60498e605c397570cee451a84f648f80301dab3fe0e6f6b73d44c09e345081501d05d75c19c0b25645607bdc899ceb99a254229356ff4f8652016a2f50acd5f20fbd53bb537e18715b8e79d99b4ff41dc112d9f92c6c9cc600372f13", 0x1000, 0x3}]) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x400000000004, 0x9}, 0x2c) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r13, &(0x7f0000000080), 0x0}, 0x20) ioctl$FS_IOC_GETVERSION(r12, 0x80047601, &(0x7f0000001940)) 10:03:42 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x7, 0x4) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:42 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:43 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x7, 0x4) exit(0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:43 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:43 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x7, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:43 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r1, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r1, 0x0) 10:03:43 executing program 3: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x3c, 0x0, 0x0, 0x0, [{[], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:43 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x7, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x10001, 0x0, 0x3, @discrete={0xef8, 0x3}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8001, 0x10}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0xffffffffffffe3ca}, 0x8) ioctl$TCSBRKP(r1, 0x5425, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) r3 = dup(r0) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000140)) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x21c) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x2, 0x6, 0x20}}, 0x28) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:43 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$P9_RSYMLINK(r0, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x10, 0x0, 0x8}}, 0x14) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:43 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x7, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:43 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x10001, 0x0, 0x3, @discrete={0xef8, 0x3}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8001, 0x10}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0xffffffffffffe3ca}, 0x8) ioctl$TCSBRKP(r1, 0x5425, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) r3 = dup(r0) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000140)) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x21c) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x2, 0x6, 0x20}}, 0x28) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:43 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:43 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:43 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x10001, 0x0, 0x3, @discrete={0xef8, 0x3}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8001, 0x10}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0xffffffffffffe3ca}, 0x8) ioctl$TCSBRKP(r1, 0x5425, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) r3 = dup(r0) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000140)) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x21c) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x2, 0x6, 0x20}}, 0x28) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:44 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r1, 0x0) 10:03:44 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:44 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x10001, 0x0, 0x3, @discrete={0xef8, 0x3}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8001, 0x10}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0xffffffffffffe3ca}, 0x8) ioctl$TCSBRKP(r1, 0x5425, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) r3 = dup(r0) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000140)) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x21c) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x2, 0x6, 0x20}}, 0x28) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:44 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3f, 0x480000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x4200000, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000100)={0x5, 0x7, 0x3, 0x101, 0x9, 0xcba1, 0x69e}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x10001, 0x0, 0x3, @discrete={0xef8, 0x3}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8001, 0x10}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0xffffffffffffe3ca}, 0x8) ioctl$TCSBRKP(r1, 0x5425, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) r3 = dup(r0) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000140)) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x21c) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:44 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:44 executing program 3 (fault-call:0 fault-nth:0): syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:44 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) [ 286.504837] FAULT_INJECTION: forcing a failure. [ 286.504837] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 286.545899] CPU: 0 PID: 12094 Comm: syz-executor3 Not tainted 5.0.0-rc1+ #17 [ 286.553143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.562505] Call Trace: [ 286.565114] dump_stack+0x1db/0x2d0 [ 286.568764] ? dump_stack_print_info.cold+0x20/0x20 [ 286.573800] ? print_usage_bug+0xd0/0xd0 [ 286.577885] should_fail.cold+0xa/0x15 [ 286.581790] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 286.586902] ? __lock_acquire+0x572/0x4a30 [ 286.591160] ? __lock_acquire+0x572/0x4a30 [ 286.595421] ? mark_held_locks+0x100/0x100 [ 286.599685] should_fail_alloc_page+0x50/0x60 [ 286.604199] __alloc_pages_nodemask+0x323/0xdc0 [ 286.608889] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 286.613936] ? print_usage_bug+0xd0/0xd0 [ 286.618147] ? tun_build_skb.isra.0+0x277/0x1770 [ 286.622924] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 286.628485] alloc_pages_current+0x107/0x210 [ 286.632981] skb_page_frag_refill+0x434/0x680 [ 286.637498] ? sock_kfree_s+0x70/0x70 [ 286.641323] ? rcu_read_unlock_special+0x380/0x380 [ 286.646279] tun_build_skb.isra.0+0x2f8/0x1770 [ 286.650885] ? tun_chr_read_iter+0x1e0/0x1e0 [ 286.655316] ? __lock_acquire+0x572/0x4a30 [ 286.659606] ? print_usage_bug+0xd0/0xd0 [ 286.663685] ? add_lock_to_list.isra.0+0x450/0x450 [ 286.668646] ? mark_held_locks+0x100/0x100 [ 286.672984] ? aa_file_perm+0x42e/0x1090 [ 286.677075] ? find_held_lock+0x35/0x120 [ 286.681161] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 286.686716] ? check_preemption_disabled+0x48/0x290 [ 286.691762] ? aa_file_perm+0x42e/0x1090 [ 286.695851] tun_get_user+0xbc9/0x4150 [ 286.699758] ? add_lock_to_list.isra.0+0x450/0x450 [ 286.704759] ? tun_build_skb.isra.0+0x1770/0x1770 [ 286.709662] ? lock_downgrade+0x910/0x910 [ 286.713849] ? kasan_check_read+0x11/0x20 [ 286.718029] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 286.723318] ? rcu_read_unlock_special+0x380/0x380 [ 286.728273] ? tun_get+0x22e/0x380 [ 286.731828] ? tun_chr_close+0x180/0x180 [ 286.735900] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 286.738760] syz-executor4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 286.740901] ? common_file_perm+0x231/0x800 [ 286.740927] tun_chr_write_iter+0xbd/0x160 [ 286.740947] do_iter_readv_writev+0x902/0xbc0 [ 286.764469] ? vfs_dedupe_file_range+0x780/0x780 [ 286.769246] ? apparmor_file_permission+0x25/0x30 [ 286.774108] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 286.779694] ? rw_verify_area+0x118/0x360 [ 286.783891] do_iter_write+0x184/0x610 [ 286.787789] ? iov_iter_get_pages+0x1290/0x1290 [ 286.792471] ? lock_downgrade+0x910/0x910 [ 286.796643] compat_writev+0x235/0x420 [ 286.800541] ? do_pwritev+0x280/0x280 [ 286.804372] ? kasan_check_write+0x14/0x20 [ 286.808642] ? __mutex_unlock_slowpath+0x195/0x870 [ 286.813592] ? wait_for_completion+0x810/0x810 [ 286.818199] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 286.823758] ? __fdget_pos+0xdc/0x1f0 [ 286.827562] ? __fdget_raw+0x20/0x20 [ 286.831300] ? __sb_end_write+0xd9/0x110 [ 286.835384] do_compat_writev+0x11d/0x270 [ 286.839541] ? compat_writev+0x420/0x420 [ 286.843629] ? trace_hardirqs_off_caller+0x300/0x300 [ 286.848746] ? __do_page_fault+0x3f1/0xd60 [ 286.852994] __ia32_compat_sys_writev+0x74/0xb0 [ 286.857689] do_fast_syscall_32+0x333/0xf98 [ 286.862022] ? do_int80_syscall_32+0x880/0x880 [ 286.866645] ? trace_hardirqs_off+0x310/0x310 [ 286.871163] ? syscall_return_slowpath+0x3b0/0x5f0 [ 286.876114] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 286.881665] ? prepare_exit_to_usermode+0x232/0x3b0 [ 286.886699] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 286.891555] entry_SYSENTER_compat+0x70/0x7f [ 286.895998] RIP: 0023:0xf7f2d869 [ 286.899367] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 286.918319] RSP: 002b:00000000f5f29054 EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 286.926038] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00000000f5f290a4 [ 286.933312] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 286.940623] RBP: 00000000f5f29168 R08: 0000000000000000 R09: 0000000000000000 10:03:44 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:44 executing program 1: socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) [ 286.947900] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 286.955170] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 286.962538] CPU: 1 PID: 12082 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #17 [ 286.969745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.979112] Call Trace: [ 286.981716] dump_stack+0x1db/0x2d0 [ 286.985361] ? dump_stack_print_info.cold+0x20/0x20 [ 286.990394] ? perf_trace_lock+0x12f/0x750 [ 286.994668] dump_header+0x1e6/0x116c [ 286.994688] ? add_lock_to_list.isra.0+0x450/0x450 [ 286.994707] ? print_usage_bug+0xd0/0xd0 [ 286.994727] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 286.994746] ? ___ratelimit+0x37c/0x686 [ 286.994770] ? mark_held_locks+0xb1/0x100 [ 286.994787] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 286.994802] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 286.994817] ? lockdep_hardirqs_on+0x415/0x5d0 [ 286.994834] ? trace_hardirqs_on+0xbd/0x310 [ 286.994849] ? kasan_check_read+0x11/0x20 [ 286.994864] ? ___ratelimit+0x37c/0x686 [ 286.994879] ? trace_hardirqs_off_caller+0x300/0x300 [ 286.994895] ? do_raw_spin_trylock+0x270/0x270 [ 286.994911] ? trace_hardirqs_on_caller+0x310/0x310 [ 286.994924] ? lock_acquire+0x1db/0x570 [ 286.994944] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 286.994962] ? ___ratelimit+0xac/0x686 [ 286.994981] ? idr_get_free+0xee0/0xee0 [ 286.994996] ? lockdep_hardirqs_on+0x415/0x5d0 [ 286.995021] oom_kill_process.cold+0x10/0x9d4 [ 286.995041] ? cgroup_procs_next+0x70/0x70 [ 286.995062] ? _raw_spin_unlock_irq+0x5e/0x90 [ 286.995080] ? oom_badness+0xa50/0xa50 [ 286.995113] ? oom_evaluate_task+0x540/0x540 [ 286.995132] ? mem_cgroup_iter_break+0x30/0x30 [ 286.995145] ? mutex_trylock+0x2d0/0x2d0 [ 286.995168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 286.995211] ? rcu_read_unlock_special+0x380/0x380 [ 287.004461] out_of_memory+0x885/0x1420 [ 287.004491] ? oom_killer_disable+0x340/0x340 [ 287.004512] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 287.004531] ? lock_acquire+0x1db/0x570 [ 287.004557] mem_cgroup_out_of_memory+0x160/0x210 [ 287.004600] ? do_raw_spin_unlock+0xa0/0x330 [ 287.004619] ? memcg_memory_event+0x40/0x40 [ 287.004633] ? do_raw_spin_trylock+0x270/0x270 [ 287.004662] ? _raw_spin_unlock+0x2d/0x50 [ 287.004680] try_charge+0x12a9/0x19b0 [ 287.168918] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.174491] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 287.179385] ? rcu_read_unlock_special+0x380/0x380 [ 287.184334] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 287.189180] ? get_mem_cgroup_from_page+0x190/0x190 [ 287.194225] mem_cgroup_try_charge+0x43a/0xdb0 [ 287.198811] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 287.204359] ? mem_cgroup_protected+0xa10/0xa10 [ 287.209037] ? shmem_getattr+0x2c0/0x2c0 [ 287.213123] ? _raw_spin_unlock_irq+0x28/0x90 [ 287.217630] ? lockdep_hardirqs_on+0x415/0x5d0 [ 287.222221] ? trace_hardirqs_on+0xbd/0x310 [ 287.226545] ? kasan_check_read+0x11/0x20 [ 287.230697] ? trace_hardirqs_off_caller+0x300/0x300 [ 287.235810] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 287.240750] shmem_getpage_gfp+0xa85/0x4b70 [ 287.245113] ? shmem_add_to_page_cache+0x19a0/0x19a0 [ 287.250219] ? page_mapping+0x56d/0xa20 [ 287.254198] ? __page_mapcount+0x550/0x550 [ 287.258431] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 287.263968] ? __set_page_dirty_no_writeback+0x3a1/0x690 [ 287.269420] ? do_writepages+0x1a0/0x1a0 [ 287.273479] ? __switch_to_asm+0x34/0x70 [ 287.277541] ? __switch_to_asm+0x34/0x70 [ 287.281609] ? __switch_to_asm+0x40/0x70 [ 287.285673] ? __switch_to_asm+0x34/0x70 [ 287.289769] ? __switch_to_asm+0x34/0x70 [ 287.293844] ? __switch_to_asm+0x34/0x70 [ 287.297907] ? __switch_to_asm+0x34/0x70 [ 287.301969] ? __switch_to_asm+0x40/0x70 [ 287.306035] ? __switch_to_asm+0x34/0x70 [ 287.310098] ? __switch_to_asm+0x40/0x70 [ 287.314169] ? do_writepages+0x1a0/0x1a0 [ 287.318235] ? __writepage+0xe0/0xe0 [ 287.321963] ? pci_mmcfg_check_reserved+0x170/0x170 [ 287.327018] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 287.331780] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 287.337319] ? unlock_page+0x2b1/0x4a0 [ 287.341208] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 287.346748] ? balance_dirty_pages_ratelimited+0x1b0/0x2370 [ 287.352467] ? preempt_schedule+0x4b/0x60 [ 287.356624] ? preempt_schedule_common+0x4f/0xe0 [ 287.361386] ? balance_dirty_pages+0x3740/0x3740 [ 287.366146] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 287.371684] ? shmem_write_end+0x384/0xa40 [ 287.375922] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 287.380936] ? iov_iter_advance+0x354/0x1490 [ 287.385375] ? __lock_is_held+0xb6/0x140 [ 287.389475] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 287.395044] ? iov_iter_fault_in_readable+0x22c/0x450 [ 287.400239] shmem_write_begin+0x105/0x1e0 [ 287.404498] generic_perform_write+0x2a0/0x6b0 [ 287.409128] ? add_page_wait_queue+0x480/0x480 [ 287.413712] ? current_time+0x1b0/0x1b0 [ 287.417692] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 287.422712] ? generic_write_check_limits+0x291/0x380 [ 287.427911] __generic_file_write_iter+0x25e/0x630 [ 287.432842] ? mutex_trylock+0x2d0/0x2d0 [ 287.436910] generic_file_write_iter+0x34e/0x6a0 [ 287.441674] ? __generic_file_write_iter+0x630/0x630 [ 287.446779] ? __might_fault+0x12b/0x1e0 [ 287.450843] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 287.456387] ? iov_iter_init+0xea/0x220 [ 287.460364] __vfs_write+0x764/0xb40 [ 287.464108] ? kernel_read+0x120/0x120 [ 287.468013] ? rcu_read_lock_sched_held+0x110/0x130 [ 287.473030] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 287.477785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.483321] ? __sb_start_write+0x1ac/0x360 [ 287.487652] vfs_write+0x20c/0x580 [ 287.491202] ksys_write+0x105/0x260 [ 287.494838] ? __ia32_sys_read+0xb0/0xb0 [ 287.498907] ? trace_hardirqs_off_caller+0x300/0x300 [ 287.504020] __ia32_sys_write+0x71/0xb0 [ 287.508033] do_fast_syscall_32+0x333/0xf98 [ 287.512360] ? do_int80_syscall_32+0x880/0x880 [ 287.516945] ? trace_hardirqs_off+0x310/0x310 [ 287.521446] ? syscall_return_slowpath+0x3b0/0x5f0 [ 287.526393] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 287.531409] ? __switch_to_asm+0x34/0x70 [ 287.535475] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 287.540357] entry_SYSENTER_compat+0x70/0x7f [ 287.544767] RIP: 0023:0xf7f47869 [ 287.548136] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 287.567039] RSP: 002b:00000000f5f430cc EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 287.574750] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200009c0 [ 287.582018] RDX: 00000000ffffff1b RSI: 0000000000000000 RDI: 0000000000000000 [ 287.589283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 287.596548] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 287.603815] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 287.665373] memory: usage 307092kB, limit 307200kB, failcnt 336 [ 287.671519] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 287.702887] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 10:03:45 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x10001, 0x0, 0x3, @discrete={0xef8, 0x3}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8001, 0x10}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0xffffffffffffe3ca}, 0x8) ioctl$TCSBRKP(r1, 0x5425, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) r3 = dup(r0) ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000140)) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:45 executing program 3 (fault-call:0 fault-nth:1): syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r1, 0x0) 10:03:45 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) [ 287.709306] Memory cgroup stats for /syz4: cache:236760KB rss:60248KB rss_huge:57344KB shmem:236760KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:236812KB active_anon:60388KB inactive_file:0KB active_file:0KB unevictable:0KB [ 287.762532] FAULT_INJECTION: forcing a failure. [ 287.762532] name failslab, interval 1, probability 0, space 0, times 0 [ 287.795219] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor4,pid=12017,uid=0 [ 287.837382] Memory cgroup out of memory: Kill process 12017 (syz-executor4) score 1106 or sacrifice child [ 287.857240] CPU: 1 PID: 12120 Comm: syz-executor3 Not tainted 5.0.0-rc1+ #17 [ 287.864468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.873826] Call Trace: [ 287.876470] dump_stack+0x1db/0x2d0 [ 287.880113] ? dump_stack_print_info.cold+0x20/0x20 [ 287.882358] Killed process 12017 (syz-executor4) total-vm:70524kB, anon-rss:2204kB, file-rss:33464kB, shmem-rss:0kB [ 287.885136] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.885154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.885176] ? check_preemption_disabled+0x48/0x290 [ 287.885199] should_fail.cold+0xa/0x15 [ 287.885212] ? perf_trace_lock+0x12f/0x750 [ 287.885230] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 287.885247] ? add_lock_to_list.isra.0+0x450/0x450 [ 287.885291] ? __alloc_pages_nodemask+0xaca/0xdc0 10:03:46 executing program 4: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x9, 0x7, 0x3000}, 0x4) clone(0x800000200fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@dev, @in=@dev}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) getresuid(&(0x7f0000000480), &(0x7f0000000680), &(0x7f00000006c0)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x800000, 0x30, 0xffffffff, 0x106ed36b}, &(0x7f0000000300)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000340)={r1, 0x9, 0x30, 0x8cc, 0x4}, &(0x7f0000000380)=0xf5752840f5b7a04a) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000800)={0x5, 0x0, [], {0x0, @bt={0x1000, 0x1ff, 0x0, 0x3, 0x2, 0x8000, 0x10001, 0x0, 0x0, 0x8, 0x16, 0x5, 0x7ff, 0x9, 0x1}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'nr0\x00', 0x0}) connect$packet(r0, &(0x7f0000000240)={0x11, 0xff, r2, 0x1, 0x7, 0x6, @local}, 0x14) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000004c0)={@pptp={0x18, 0x2, {0x1, @multicast1}}, {&(0x7f0000000080)=""/147, 0xffffffffffffff7c}, &(0x7f0000000200), 0x10}, 0xffffffffffffffcd) getsockname(r0, &(0x7f0000000280)=@hci, &(0x7f0000000400)=0x80) 10:03:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x10001, 0x0, 0x3, @discrete={0xef8, 0x3}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8001, 0x10}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0xffffffffffffe3ca}, 0x8) ioctl$TCSBRKP(r1, 0x5425, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) r3 = dup(r0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 287.885323] ? __might_fault+0x12b/0x1e0 [ 287.885360] __should_failslab+0x121/0x190 [ 287.885378] should_failslab+0x9/0x14 [ 287.885395] kmem_cache_alloc+0x47/0x710 [ 287.951092] ? ___might_sleep+0x1e7/0x310 [ 287.955271] __build_skb+0xaf/0x430 [ 287.958909] ? skb_try_coalesce+0x1aa0/0x1aa0 [ 287.963445] ? kasan_check_write+0x14/0x20 [ 287.967694] ? copyin+0xb5/0x100 [ 287.971132] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 287.976167] build_skb+0x74/0x280 [ 287.979637] ? __build_skb+0x430/0x430 [ 287.983548] tun_build_skb.isra.0+0xf19/0x1770 [ 287.988161] ? tun_chr_read_iter+0x1e0/0x1e0 [ 287.992580] ? __lock_acquire+0x572/0x4a30 [ 287.996835] ? print_usage_bug+0xd0/0xd0 [ 287.996854] ? add_lock_to_list.isra.0+0x450/0x450 [ 287.996878] ? mark_held_locks+0x100/0x100 [ 287.996894] ? aa_file_perm+0x42e/0x1090 [ 287.996909] ? find_held_lock+0x35/0x120 [ 287.996924] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 287.996942] ? check_preemption_disabled+0x48/0x290 [ 287.996955] ? aa_file_perm+0x42e/0x1090 [ 287.996980] tun_get_user+0xbc9/0x4150 [ 288.037274] ? add_lock_to_list.isra.0+0x450/0x450 [ 288.042242] ? tun_build_skb.isra.0+0x1770/0x1770 [ 288.046059] oom_reaper: reaped process 12017 (syz-executor4), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB [ 288.047103] ? lock_downgrade+0x910/0x910 [ 288.061485] ? kasan_check_read+0x11/0x20 [ 288.065650] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 288.070946] ? rcu_read_unlock_special+0x380/0x380 [ 288.075912] ? tun_get+0x22e/0x380 [ 288.079462] ? tun_chr_close+0x180/0x180 [ 288.083536] ? debug_lockdep_rcu_enabled+0x71/0xa0 10:03:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x10001, 0x0, 0x3, @discrete={0xef8, 0x3}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8001, 0x10}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0xffffffffffffe3ca}, 0x8) ioctl$TCSBRKP(r1, 0x5425, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 288.088504] ? common_file_perm+0x231/0x800 [ 288.092850] tun_chr_write_iter+0xbd/0x160 [ 288.097114] do_iter_readv_writev+0x902/0xbc0 [ 288.101638] ? vfs_dedupe_file_range+0x780/0x780 [ 288.106409] ? apparmor_file_permission+0x25/0x30 [ 288.111268] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 288.116841] ? rw_verify_area+0x118/0x360 [ 288.116862] do_iter_write+0x184/0x610 [ 288.116881] ? iov_iter_get_pages+0x1290/0x1290 [ 288.116901] ? lock_downgrade+0x910/0x910 [ 288.116923] compat_writev+0x235/0x420 [ 288.116943] ? do_pwritev+0x280/0x280 [ 288.116960] ? kasan_check_write+0x14/0x20 [ 288.116977] ? __mutex_unlock_slowpath+0x195/0x870 [ 288.116997] ? wait_for_completion+0x810/0x810 [ 288.125041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.125069] ? __fdget_pos+0xdc/0x1f0 [ 288.125103] ? __fdget_raw+0x20/0x20 [ 288.125122] ? __sb_end_write+0xd9/0x110 [ 288.125148] do_compat_writev+0x11d/0x270 [ 288.125170] ? compat_writev+0x420/0x420 [ 288.125190] ? trace_hardirqs_off_caller+0x300/0x300 [ 288.125207] ? __do_page_fault+0x3f1/0xd60 [ 288.125231] __ia32_compat_sys_writev+0x74/0xb0 [ 288.125251] do_fast_syscall_32+0x333/0xf98 [ 288.199336] ? do_int80_syscall_32+0x880/0x880 [ 288.203930] ? trace_hardirqs_off+0x310/0x310 [ 288.208440] ? syscall_return_slowpath+0x3b0/0x5f0 [ 288.213384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 288.218934] ? prepare_exit_to_usermode+0x232/0x3b0 [ 288.223968] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 288.228826] entry_SYSENTER_compat+0x70/0x7f [ 288.233241] RIP: 0023:0xf7f2d869 10:03:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x10001, 0x0, 0x3, @discrete={0xef8, 0x3}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8001, 0x10}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0xffffffffffffe3ca}, 0x8) ioctl$TCSBRKP(r1, 0x5425, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 288.236620] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 288.255531] RSP: 002b:00000000f5f29054 EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 288.263268] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00000000f5f290a4 [ 288.270552] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000003 [ 288.277838] RBP: 00000000f5f29168 R08: 0000000000000000 R09: 0000000000000000 [ 288.285129] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 288.292405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 10:03:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x10001, 0x0, 0x3, @discrete={0xef8, 0x3}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8001, 0x10}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0xffffffffffffe3ca}, 0x8) ioctl$TCSBRKP(r1, 0x5425, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x10001, 0x0, 0x3, @discrete={0xef8, 0x3}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8001, 0x10}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0xffffffffffffe3ca}, 0x8) ioctl$TCSBRKP(r1, 0x5425, 0x4) r3 = dup(r0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:46 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:46 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r1, 0x0) 10:03:46 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x10001, 0x0, 0x3, @discrete={0xef8, 0x3}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8001, 0x10}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r2, 0xffffffffffffe3ca}, 0x8) r3 = dup(r0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:46 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:47 executing program 3: syz_emit_ethernet(0xd, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:47 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f0000000380)={&(0x7f0000001000/0x4000)=nil, 0x0, 0x3, 0x2, &(0x7f0000007000/0x2000)=nil, 0xb}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r1, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r1, 0x0) 10:03:47 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x10001, 0x0, 0x3, @discrete={0xef8, 0x3}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8001, 0x10}, &(0x7f0000000200)=0xc) r2 = dup(r0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:47 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, {0x307, @random="a749e6f1ab90"}, 0x4, {0x2, 0x4e24, @rand_addr=0x1000}, 'nlmon0\x00'}) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000100)) socket$inet_smc(0x2b, 0x1, 0x0) 10:03:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x10001, 0x0, 0x3, @discrete={0xef8, 0x3}}) r2 = dup(r0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:47 executing program 3: syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x2000, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:48 executing program 3: syz_emit_ethernet(0xfdef, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 290.031408] IPVS: ftp: loaded support on port[0] = 21 10:03:48 executing program 3: syz_emit_ethernet(0x2000023e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:48 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 290.376614] chnl_net:caif_netlink_parms(): no params data found [ 290.476679] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.483413] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.500240] device bridge_slave_0 entered promiscuous mode [ 290.515140] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.521787] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.538861] device bridge_slave_1 entered promiscuous mode 10:03:48 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, 0x0, 0x0, 0x0) 10:03:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r1, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r1, 0x0) 10:03:48 executing program 3: syz_emit_ethernet(0x7ffff000, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:48 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 290.579392] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 290.599678] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 290.723328] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 290.743186] team0: Port device team_slave_0 added [ 290.749573] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 290.786264] team0: Port device team_slave_1 added [ 290.806226] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 290.835633] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 290.938053] device hsr_slave_0 entered promiscuous mode [ 290.994068] device hsr_slave_1 entered promiscuous mode [ 291.034715] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 291.041834] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 291.081210] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.087719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.094439] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.100808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.204294] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 291.210492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.220549] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 291.231017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.239456] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.247227] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.256185] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 291.270163] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 291.276855] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.288089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.296416] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.302793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.326111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.335086] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.341474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.359135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 291.371459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 291.380006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 291.400542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 291.413269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 291.429234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.448847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 291.460492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 291.470441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.489576] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 291.499285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 291.539487] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 291.601565] 8021q: adding VLAN 0 to HW filter on device batadv0 10:03:50 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) fcntl$setown(r0, 0x8, r1) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:50 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:50 executing program 3: syz_emit_ethernet(0xfffffdef, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:50 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:50 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, 0x0, 0x0, 0x0) 10:03:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) 10:03:50 executing program 3: syz_emit_ethernet(0xfffffffffffffdef, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:50 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:50 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x300, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:50 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:50 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x500, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:50 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:50 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) memfd_create(&(0x7f0000000080)='ppp1\x00', 0x6) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:50 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:50 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x600, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:50 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:50 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x3, 0x11391613, 0x200, 0x29, 0x7, 0x0, 0x7, 0x4d, r1}, &(0x7f0000000140)=0x20) 10:03:50 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, 0x0, 0x0, 0x0) 10:03:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) 10:03:51 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x700, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:51 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x802, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:51 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x803, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:51 executing program 0: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 293.745454] device bridge_slave_1 left promiscuous mode [ 293.764814] bridge0: port 2(bridge_slave_1) entered disabled state 10:03:51 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:51 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x804, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000001031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000a00)=""/4096, &(0x7f0000000080)=0x1000) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:51 executing program 0: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) 10:03:51 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080), 0x0, 0x0) [ 293.841027] device bridge_slave_0 left promiscuous mode [ 293.853833] bridge0: port 1(bridge_slave_0) entered disabled state 10:03:52 executing program 0: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:52 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x806, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:52 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080), 0x0, 0x0) 10:03:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) dup(r0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:52 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x807, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) dup(r0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 294.358391] device hsr_slave_1 left promiscuous mode [ 294.436573] device hsr_slave_0 left promiscuous mode [ 294.485556] team0 (unregistering): Port device team_slave_1 removed [ 294.507214] team0 (unregistering): Port device team_slave_0 removed [ 294.541912] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 294.593353] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 294.702651] bond0 (unregistering): Released all slaves 10:03:52 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:52 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x808, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) dup(r0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:52 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'bond0\x00'}}, 0x1e) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f00000000c0)="002fe3a1141134b5ee37445d43f510b4f3def984d4cfc8f5fec294dd0b43b29cf9cc0848b62639b0cd1360fbb50655459bb64dbff98d1fc61f4e8e873aae23c20a8dbfac6967ec720179d0c2084d3d94354aaec8ea92a58ec3e78729b01a29042dd0b3586be014f417fa7efb081c2ab2325bf84c3492af2fed5e07a976e60a58dc090d55d5c99e5c3ccc35b1e06db80d74828dc6d37e48378b7a7e824401a5e3d5eb65075e38844e6ca7e1") clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000001c0)=0x933b942, 0x361) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={r0, r0, 0xf, 0x1}, 0x10) 10:03:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f00000024c0)=""/110, 0x6e, 0x40000000, &(0x7f0000002540)=@in6={0xa, 0x4e20, 0x1ff, @local, 0xffffffff}, 0x80) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r1, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r1, 0x0) 10:03:52 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x80b, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, 0x0) 10:03:53 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080), 0x0, 0x0) 10:03:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, 0x0) 10:03:53 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x817, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:53 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0) 10:03:53 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x82c, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:53 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, 0x0) 10:03:53 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0) 10:03:53 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x833, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:53 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000380)='threaded\x00', 0x2) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) get_robust_list(r2, &(0x7f0000000300)=&(0x7f00000002c0)={&(0x7f00000001c0)={&(0x7f0000000180)}, 0x0, &(0x7f0000000280)={&(0x7f0000000240)}}, &(0x7f0000000340)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r1, 0x4) 10:03:53 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r0, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r0, 0x0) 10:03:53 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x8201, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x2, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x60, 0x10, &(0x7f0000000140)=[@ptr={0x70742a85, 0x0, &(0x7f00000000c0), 0x1, 0x2, 0xe}, @fd={0x66642a85, 0x0, r1, 0x0, 0x4}, @fda={0x66646185, 0x6, 0x3, 0x26}], &(0x7f00000001c0)=[0x38, 0x38]}}], 0xc9, 0x0, &(0x7f00000002c0)="1fffa688d9da782be2a4059dac1cd14fdc6037a2b1c0f2567173d0eb96900e419052f59fdad37dd46bbaf16a2983dcf968ee391c793cbe6d229803e82fd0f3c79b6a336b12263156bc27df3aa5905dd066c76d4abc689642cbc8a163b87fa8e040eebce2338cc13201ccf8fb2937cfb580b46a85887559d1c95eb4080df58c2b616dd58445a74d41155527fcb1ba87bec4e659f9492d7a13826a294c4cdc6339904d5b009f43980f4efd459cc7f6c92d9daee61573152f7e5f3b209c336c79428a16fb6111e396e65b"}) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r2, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) 10:03:53 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0) 10:03:53 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x83a, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:54 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r0, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r0, 0x0) 10:03:54 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x85c, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:54 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) 10:03:54 executing program 5: r0 = syz_open_dev$usb(0x0, 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r0, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r0, 0x0) 10:03:54 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x870, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:54 executing program 4: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) process_vm_writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/104, 0x68}], 0x1, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/10, 0xa}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f00000002c0)=""/212, 0xd4}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/18, 0x12}], 0x5, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:54 executing program 5: r0 = syz_open_dev$usb(0x0, 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r0, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r0, 0x0) 10:03:54 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) 10:03:54 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x8fc, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:54 executing program 1 (fault-call:5 fault-nth:0): clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:55 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x4305, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:55 executing program 5: r0 = syz_open_dev$usb(0x0, 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r0, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r0, 0x0) 10:03:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f}) 10:03:55 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) 10:03:55 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x4800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:55 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r0, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r0, 0x0) 10:03:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f}) 10:03:55 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)=0x1) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:55 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r0, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r0, 0x0) 10:03:55 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x6000, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:55 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f}) 10:03:55 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:55 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r0, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r0, 0x0) 10:03:55 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x8035, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:55 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 297.946660] FAULT_INJECTION: forcing a failure. [ 297.946660] name failslab, interval 1, probability 0, space 0, times 0 [ 297.994580] CPU: 0 PID: 12557 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #17 [ 298.001805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.011176] Call Trace: [ 298.013780] dump_stack+0x1db/0x2d0 [ 298.017427] ? dump_stack_print_info.cold+0x20/0x20 [ 298.022455] ? debug_smp_processor_id+0x1c/0x20 [ 298.027164] ? perf_trace_lock+0x12f/0x750 [ 298.031426] should_fail.cold+0xa/0x15 [ 298.031453] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 298.031480] ? ___might_sleep+0x1e7/0x310 [ 298.031498] ? arch_local_save_flags+0x50/0x50 [ 298.031515] ? lock_release+0xc40/0xc40 [ 298.040504] __should_failslab+0x121/0x190 [ 298.040526] should_failslab+0x9/0x14 [ 298.040544] kmem_cache_alloc_trace+0x2d1/0x760 [ 298.040679] ? drm_modeset_backoff+0x810/0x810 [ 298.040729] drm_atomic_state_alloc+0xb7/0x120 [ 298.075207] set_property_atomic+0xbc/0x330 [ 298.079539] ? wait_for_completion+0x810/0x810 [ 298.084139] ? drm_object_property_get_value+0x180/0x180 [ 298.089632] ? mutex_unlock+0xd/0x10 [ 298.093403] ? __drm_mode_object_find+0xb7/0x210 [ 298.098205] drm_mode_obj_set_property_ioctl+0x43f/0x780 [ 298.103700] ? drm_mode_obj_find_prop_id+0x140/0x140 [ 298.108871] ? drm_dev_unregister+0x480/0x480 [ 298.113422] drm_connector_property_set_ioctl+0x1b5/0x2c0 [ 298.118987] ? lock_acquire+0x1db/0x570 [ 298.122985] ? drm_connector_set_obj_prop+0x1a0/0x1a0 [ 298.128183] ? rcu_sync_dtor+0x170/0x170 [ 298.132425] ? drm_lease_owner+0x45/0x60 [ 298.136526] ? drm_is_current_master+0x5c/0x140 [ 298.141234] drm_ioctl_kernel+0x278/0x340 [ 298.145391] ? drm_connector_set_obj_prop+0x1a0/0x1a0 [ 298.150617] ? drm_setversion+0x8c0/0x8c0 [ 298.154775] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 298.160361] ? _copy_from_user+0xdd/0x150 [ 298.164546] drm_ioctl+0x592/0xb50 [ 298.168095] ? drm_connector_set_obj_prop+0x1a0/0x1a0 [ 298.173302] ? drm_version+0x3d0/0x3d0 [ 298.177214] ? __fget_light+0x2db/0x420 [ 298.181232] ? fget_raw+0x20/0x20 [ 298.184709] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 298.190272] ? fput+0x128/0x1a0 [ 298.193563] ? do_fast_syscall_32+0x13b/0xf98 [ 298.198079] ? do_fast_syscall_32+0x13b/0xf98 [ 298.202608] drm_compat_ioctl+0x241/0x310 [ 298.206802] ? security_file_ioctl+0x93/0xc0 [ 298.211227] ? compat_drm_setunique+0x10/0x10 [ 298.215730] __ia32_compat_sys_ioctl+0x197/0x620 [ 298.220518] do_fast_syscall_32+0x333/0xf98 [ 298.224852] ? do_int80_syscall_32+0x880/0x880 [ 298.229450] ? trace_hardirqs_off+0x310/0x310 [ 298.233974] ? syscall_return_slowpath+0x3b0/0x5f0 [ 298.238913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.244476] ? prepare_exit_to_usermode+0x232/0x3b0 [ 298.249504] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.254365] entry_SYSENTER_compat+0x70/0x7f [ 298.258772] RIP: 0023:0xf7f66869 [ 298.262147] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 298.281051] RSP: 002b:00000000f5f620cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 298.288763] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004010aeab [ 298.288773] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.288782] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.288792] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 298.288801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.308429] [ 298.317854] kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 298.318072] ================================================ [ 298.330944] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 298.336388] WARNING: lock held when returning to user space! [ 298.336397] 5.0.0-rc1+ #17 Not tainted [ 298.336402] ------------------------------------------------ [ 298.336410] syz-executor0/12557 is leaving the kernel with locks still held! [ 298.336419] 1 lock held by syz-executor0/12557: [ 298.336423] #0: 000000008c7984bd (crtc_ww_class_acquire){+.+.}, at: set_property_atomic+0xb4/0x330 [ 298.386244] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 298.396346] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 298.402760] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 298.413252] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 298.419793] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:03:56 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, 0x6e) 10:03:56 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x8100, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:56 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xf5, 0x2, 0x1000, "bc18ce607fc8a6b535ec4a0ec603d60c", "f256f981c4e872bb6874e7717d1e1e1f9458889f6220b41e606f7d9f6ab99ea971bb55b6e0af1c814a54416b6f45e4ff9fba73486fc1811e60c4245c0bb08730f991e8e44d30543e9ff683631572d79d5424f4757c8f5cbfa99c840e7fc78558f8c56ae20bb78a78ca40a7f13141cf8abd66ce696453c7b81dc487e6987bef260394ff63e9e036b1cc5fc431901c815293a0d61aeb39cef67091ee5521c8b60720acbb62d04b7df1e24190b82871e19ef4b0c1c625d96769dfb594f3cb1ed45e82b789667e1e5ba1b8a404514d36ff1a46ae33d5cafd4c35ea67df45ee76180d"}, 0xf5, 0x3) ioctl$RTC_EPOCH_READ(r0, 0x8004700d, &(0x7f0000000240)) 10:03:56 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0x200006e6}], 0x1, 0x0) 10:03:56 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r0, 0x0) 10:03:56 executing program 0 (fault-call:2 fault-nth:1): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:56 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x8847, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 298.511695] kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env [ 298.519178] FAULT_INJECTION: forcing a failure. [ 298.519178] name failslab, interval 1, probability 0, space 0, times 0 [ 298.534323] kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:03:56 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r0, 0x0) [ 298.584031] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 298.590507] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 298.604601] CPU: 1 PID: 12571 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #17 [ 298.611820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.621174] Call Trace: [ 298.623774] dump_stack+0x1db/0x2d0 [ 298.627417] ? dump_stack_print_info.cold+0x20/0x20 [ 298.632466] ? save_stack+0xa9/0xd0 [ 298.636114] ? save_stack+0x45/0xd0 [ 298.639760] should_fail.cold+0xa/0x15 [ 298.643659] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 298.648807] ? lock_acquire+0x1db/0x570 [ 298.652798] ? ___might_sleep+0x1e7/0x310 [ 298.656955] ? arch_local_save_flags+0x50/0x50 [ 298.661555] ? lock_acquire+0x1db/0x570 [ 298.665558] __should_failslab+0x121/0x190 [ 298.669811] should_failslab+0x9/0x14 [ 298.673625] __kmalloc+0x2dc/0x740 [ 298.677208] ? drm_atomic_state_alloc+0xb7/0x120 [ 298.681978] ? kasan_unpoison_shadow+0x35/0x50 [ 298.686573] ? drm_atomic_state_init+0x176/0x3c0 [ 298.691352] drm_atomic_state_init+0x176/0x3c0 [ 298.695943] ? __drm_atomic_state_free+0xf0/0xf0 [ 298.700713] ? drm_modeset_backoff+0x810/0x810 [ 298.705309] drm_atomic_state_alloc+0xcf/0x120 [ 298.709926] set_property_atomic+0xbc/0x330 [ 298.714278] ? wait_for_completion+0x810/0x810 [ 298.718877] ? drm_object_property_get_value+0x180/0x180 [ 298.724345] ? mutex_unlock+0xd/0x10 [ 298.728068] ? __drm_mode_object_find+0xb7/0x210 [ 298.732843] drm_mode_obj_set_property_ioctl+0x43f/0x780 [ 298.738308] ? drm_mode_obj_find_prop_id+0x140/0x140 [ 298.743417] ? drm_dev_unregister+0x480/0x480 [ 298.747927] drm_connector_property_set_ioctl+0x1b5/0x2c0 [ 298.753468] ? lock_acquire+0x1db/0x570 [ 298.757456] ? drm_connector_set_obj_prop+0x1a0/0x1a0 [ 298.762652] ? rcu_sync_dtor+0x170/0x170 [ 298.766720] ? drm_lease_owner+0x45/0x60 [ 298.770791] ? drm_is_current_master+0x5c/0x140 [ 298.775489] drm_ioctl_kernel+0x278/0x340 [ 298.779648] ? drm_connector_set_obj_prop+0x1a0/0x1a0 [ 298.784881] ? drm_setversion+0x8c0/0x8c0 [ 298.789058] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 298.794614] ? _copy_from_user+0xdd/0x150 [ 298.798779] drm_ioctl+0x592/0xb50 [ 298.802345] ? drm_connector_set_obj_prop+0x1a0/0x1a0 [ 298.807549] ? drm_version+0x3d0/0x3d0 [ 298.811450] ? __fget_light+0x2db/0x420 [ 298.815449] ? fget_raw+0x20/0x20 [ 298.818910] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 298.824457] ? fput+0x128/0x1a0 [ 298.827756] drm_compat_ioctl+0x241/0x310 [ 298.831914] ? security_file_ioctl+0x93/0xc0 [ 298.836331] ? compat_drm_setunique+0x10/0x10 [ 298.839229] cgroup: fork rejected by pids controller in /syz1 [ 298.840828] __ia32_compat_sys_ioctl+0x197/0x620 [ 298.840855] do_fast_syscall_32+0x333/0xf98 [ 298.855789] ? do_int80_syscall_32+0x880/0x880 [ 298.860372] ? trace_hardirqs_off+0x310/0x310 [ 298.864878] ? syscall_return_slowpath+0x3b0/0x5f0 [ 298.869830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.875373] ? prepare_exit_to_usermode+0x232/0x3b0 [ 298.880399] ? trace_hardirqs_off_thunk+0x1a/0x1c 10:03:56 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0x7ffff000}], 0x1, 0x0) 10:03:56 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x8, 0x0) 10:03:56 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r0, 0x0) 10:03:56 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0xa6) [ 298.885258] entry_SYSENTER_compat+0x70/0x7f [ 298.887108] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 298.889666] RIP: 0023:0xf7f66869 [ 298.889681] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 298.889689] RSP: 002b:00000000f5f620cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 298.889703] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004010aeab [ 298.889712] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.889723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.905393] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 298.918392] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 298.918401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.972839] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 298.979493] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 298.990888] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 298.997453] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 299.007377] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 299.013952] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 299.025473] kobject: 'loop4' (000000007201ae1e): kobject_uevent_env [ 299.031895] kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 299.041948] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 299.048436] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 299.058243] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 299.064722] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 299.075371] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 299.081827] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 299.091848] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 299.098319] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:03:57 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000340)='veth1\x00', 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r1, &(0x7f0000002680)="e8", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r3, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r3, 0x0, 0x0) 10:03:57 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x200800fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x6000, 0xc0, &(0x7f0000000600)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000500)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000540)={0x2, 0x5, "f254de27e0c6fa58dd66739bc816f71d75d3b8138bd23cb5c99b8a0255ecf421", 0xbf, 0x0, 0x5b, 0xb6, 0xa1}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x4}, [{0x2, 0x3, r1}, {0x2, 0x0, r2}, {0x2, 0x2, r3}], {0x4, 0x2}, [{0x8, 0x7, r4}, {0x8, 0x4, r5}], {0x10, 0x5}, {0x20, 0x3}}, 0x4c, 0x3) 10:03:57 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r0, 0x0) 10:03:57 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0xa600) 10:03:57 executing program 0 (fault-call:2 fault-nth:2): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:57 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x8848, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 299.363131] kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env [ 299.393730] kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 299.412752] FAULT_INJECTION: forcing a failure. [ 299.412752] name failslab, interval 1, probability 0, space 0, times 0 [ 299.435803] CPU: 1 PID: 12636 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #17 [ 299.443043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.452406] Call Trace: [ 299.455005] dump_stack+0x1db/0x2d0 [ 299.458668] ? dump_stack_print_info.cold+0x20/0x20 10:03:57 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:57 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r0, 0x0) [ 299.463699] ? save_stack+0xa9/0xd0 [ 299.467334] ? save_stack+0x45/0xd0 [ 299.470973] should_fail.cold+0xa/0x15 [ 299.474866] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 299.479991] ? lock_acquire+0x1db/0x570 [ 299.483973] ? ___might_sleep+0x1e7/0x310 [ 299.484205] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 299.488131] ? arch_local_save_flags+0x50/0x50 [ 299.488156] __should_failslab+0x121/0x190 [ 299.488175] should_failslab+0x9/0x14 [ 299.507171] __kmalloc+0x2dc/0x740 10:03:57 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x8906, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 299.507488] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 299.510715] ? drm_atomic_state_alloc+0xb7/0x120 [ 299.510734] ? kasan_unpoison_shadow+0x35/0x50 [ 299.510749] ? drm_atomic_state_init+0x212/0x3c0 [ 299.510765] drm_atomic_state_init+0x212/0x3c0 [ 299.538850] ? __drm_atomic_state_free+0xf0/0xf0 [ 299.542692] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 299.543623] ? drm_modeset_backoff+0x810/0x810 [ 299.543645] drm_atomic_state_alloc+0xcf/0x120 [ 299.543663] set_property_atomic+0xbc/0x330 10:03:57 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, r0, 0x0) [ 299.543679] ? wait_for_completion+0x810/0x810 [ 299.543697] ? drm_object_property_get_value+0x180/0x180 [ 299.543719] ? mutex_unlock+0xd/0x10 [ 299.577337] ? __drm_mode_object_find+0xb7/0x210 [ 299.582124] drm_mode_obj_set_property_ioctl+0x43f/0x780 [ 299.586622] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 299.587596] ? drm_mode_obj_find_prop_id+0x140/0x140 [ 299.587614] ? drm_dev_unregister+0x480/0x480 [ 299.587637] drm_connector_property_set_ioctl+0x1b5/0x2c0 [ 299.587657] ? lock_acquire+0x1db/0x570 [ 299.616169] ? drm_connector_set_obj_prop+0x1a0/0x1a0 [ 299.621369] ? rcu_sync_dtor+0x170/0x170 [ 299.625437] ? drm_lease_owner+0x45/0x60 [ 299.629510] ? drm_is_current_master+0x5c/0x140 [ 299.630133] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 299.634189] drm_ioctl_kernel+0x278/0x340 [ 299.634209] ? drm_connector_set_obj_prop+0x1a0/0x1a0 [ 299.634225] ? drm_setversion+0x8c0/0x8c0 [ 299.634241] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 299.634256] ? _copy_from_user+0xdd/0x150 [ 299.634274] drm_ioctl+0x592/0xb50 [ 299.634288] ? drm_connector_set_obj_prop+0x1a0/0x1a0 [ 299.634311] ? drm_version+0x3d0/0x3d0 [ 299.652047] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 299.654179] ? __fget_light+0x2db/0x420 [ 299.654195] ? fget_raw+0x20/0x20 [ 299.654211] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 299.654225] ? fput+0x128/0x1a0 [ 299.654247] drm_compat_ioctl+0x241/0x310 [ 299.654266] ? security_file_ioctl+0x93/0xc0 10:03:57 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r0, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x10, r0, 0x0) [ 299.654282] ? compat_drm_setunique+0x10/0x10 [ 299.715178] __ia32_compat_sys_ioctl+0x197/0x620 [ 299.719961] do_fast_syscall_32+0x333/0xf98 [ 299.724296] ? do_int80_syscall_32+0x880/0x880 [ 299.728885] ? trace_hardirqs_off+0x310/0x310 [ 299.733389] ? syscall_return_slowpath+0x3b0/0x5f0 [ 299.738330] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.743880] ? prepare_exit_to_usermode+0x232/0x3b0 [ 299.748912] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.753774] entry_SYSENTER_compat+0x70/0x7f [ 299.758194] RIP: 0023:0xf7f66869 [ 299.761569] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 299.780492] RSP: 002b:00000000f5f620cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 299.788230] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004010aeab [ 299.795513] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 299.799990] kobject: 'loop5' (00000000b669d385): kobject_uevent_env 10:03:57 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x200000000020011, r0, 0x0) mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) [ 299.802792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 299.816457] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 299.818390] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 299.823743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 299.906983] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 299.916947] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 299.977963] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 299.988439] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 300.026112] kobject: 'loop4' (000000007201ae1e): kobject_uevent_env [ 300.032731] kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:03:58 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0xa6000000) 10:03:58 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x3, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 300.193002] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 300.199624] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:03:58 executing program 5: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:58 executing program 0 (fault-call:2 fault-nth:3): r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:58 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x7, 0x101, 0x8, 0x7, 0xc3c}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x7, 0x4}, 0xc) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:58 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x200800fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x6000, 0xc0, &(0x7f0000000600)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000500)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000540)={0x2, 0x5, "f254de27e0c6fa58dd66739bc816f71d75d3b8138bd23cb5c99b8a0255ecf421", 0xbf, 0x0, 0x5b, 0xb6, 0xa1}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x4}, [{0x2, 0x3, r1}, {0x2, 0x0, r2}, {0x2, 0x2, r3}], {0x4, 0x2}, [{0x8, 0x7, r4}, {0x8, 0x4, r5}], {0x10, 0x5}, {0x20, 0x3}}, 0x4c, 0x3) [ 300.237453] kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env [ 300.260350] kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:03:58 executing program 5: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:58 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0xa600000000000000) [ 300.304109] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 300.310595] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:03:58 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x4, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 300.369071] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 300.393262] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:03:58 executing program 1: clone(0x10100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='cmdline\x00') ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000000c0)={0x1, 0x8, 0x7, 0x7, 0xf7f0}) exit(0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}}, 0x80) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x9, 0x2, 0x8}, 0x59d}}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:58 executing program 5: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 300.431727] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 300.470392] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:03:58 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 300.508419] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 300.518761] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:03:58 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) [ 300.592398] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 300.604714] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:03:58 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 300.642457] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 300.660901] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:03:58 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) [ 300.714619] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 300.721132] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:03:58 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 300.788820] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 300.802309] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 300.838803] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 300.851368] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:03:59 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000080)) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:03:59 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x200800fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x6000, 0xc0, &(0x7f0000000600)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000500)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000540)={0x2, 0x5, "f254de27e0c6fa58dd66739bc816f71d75d3b8138bd23cb5c99b8a0255ecf421", 0xbf, 0x0, 0x5b, 0xb6, 0xa1}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x4}, [{0x2, 0x3, r1}, {0x2, 0x0, r2}, {0x2, 0x2, r3}], {0x4, 0x2}, [{0x8, 0x7, r4}, {0x8, 0x4, r5}], {0x10, 0x5}, {0x20, 0x3}}, 0x4c, 0x3) 10:03:59 executing program 5: syz_emit_ethernet(0x0, 0x0, 0x0) 10:03:59 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x2, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x2, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 300.882949] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 300.896373] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 300.912524] kobject: 'loop4' (000000007201ae1e): kobject_uevent_env [ 300.958261] kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 300.999093] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 301.024908] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 301.049955] kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env [ 301.058598] kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 301.074385] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 301.083259] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 301.094503] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 301.101107] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:03:59 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xb, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') lookup_dcookie(0x9, &(0x7f00000000c0)=""/179, 0xb3) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:03:59 executing program 5: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:59 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 10:03:59 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x3, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x541b, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:59 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x200800fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x6000, 0xc0, &(0x7f0000000600)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000500)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000540)={0x2, 0x5, "f254de27e0c6fa58dd66739bc816f71d75d3b8138bd23cb5c99b8a0255ecf421", 0xbf, 0x0, 0x5b, 0xb6, 0xa1}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x4}, [{0x2, 0x3, r1}, {0x2, 0x0, r2}, {0x2, 0x2, r3}], {0x4, 0x2}, [{0x8, 0x7, r4}, {0x8, 0x4, r5}], {0x10, 0x5}, {0x20, 0x3}}, 0x4c, 0x3) [ 301.244616] kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env [ 301.251080] kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:03:59 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x80000000c) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) [ 301.321514] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 301.331578] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:03:59 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x6, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x5421, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:59 executing program 5: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:59 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x3, 0x7, 0x100000001, 0x2, "c5fcab4269189c6b788610c315b255b6fa52bb738d2c3c9e83b1a26ab5b2919c"}) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xfffffffffffffdee}], 0x1fe, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000000c0)="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") [ 301.414917] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 301.421398] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:03:59 executing program 5: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 301.467719] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env 10:03:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x5450, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 301.519063] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:03:59 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x8, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 301.561965] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 301.586676] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:03:59 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x800, 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f00000000c0)=""/170, 0xaa}, &(0x7f0000000180), 0x11}, 0x20) 10:03:59 executing program 5: syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 10:03:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x5452, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 301.638199] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 301.652278] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 301.678452] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 301.709677] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 301.760286] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 301.769701] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 301.804545] kobject: 'loop4' (000000007201ae1e): kobject_uevent_env [ 301.811233] kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 301.831863] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 301.841747] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:03:59 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0xffffff88, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:03:59 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x200800fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x6000, 0xc0, &(0x7f0000000600)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000500)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)) fstat(r0, &(0x7f00000002c0)) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000540)={0x2, 0x5, "f254de27e0c6fa58dd66739bc816f71d75d3b8138bd23cb5c99b8a0255ecf421", 0xbf, 0x0, 0x5b, 0xb6, 0xa1}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) 10:03:59 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x5450, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:03:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x5460, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:00 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='t\xab\xab\xc0\x84', 0x1, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) ptrace(0x10, r1) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x602, 0x70bd27, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x387b}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8001}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) [ 301.852030] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 301.858751] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 301.994142] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 302.000639] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 302.058100] kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env [ 302.064760] kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 302.101922] kobject: 'loop4' (000000007201ae1e): kobject_uevent_env [ 302.108530] kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 302.216651] kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env [ 302.223115] kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:04:00 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) fcntl$setstatus(r0, 0x4, 0x40000) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:04:00 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:04:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x5450, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x40049409, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:00 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x177b2db8903a8f28) clone(0x10080000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='bdev\x00', 0x100000, 0x0) 10:04:00 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x200800fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x6000, 0xc0, &(0x7f0000000600)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000500)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)) fstat(r0, &(0x7f00000002c0)) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000540)={0x2, 0x5, "f254de27e0c6fa58dd66739bc816f71d75d3b8138bd23cb5c99b8a0255ecf421", 0xbf, 0x0, 0x5b, 0xb6, 0xa1}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) [ 302.382445] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 302.409459] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:04:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeb8, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:00 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x5, 0x0, 0x89) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) flistxattr(r0, &(0x7f0000000700)=""/4096, 0x1000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="6779400d4dbab429e712d243e455529e", 0x10) 10:04:00 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x5450, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:00 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x3, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 302.517655] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 302.529647] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 302.568243] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 302.604242] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:04:00 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x5450, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:00 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x4, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 302.624107] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 302.639016] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:04:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aec9, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:00 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) ioctl$FICLONE(r0, 0x40049409, r0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/133, 0x85}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000340)=""/234, 0xea}, {&(0x7f0000000180)=""/147, 0x93}], 0x5, 0x0) [ 302.670462] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 302.679204] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:04:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4020940d, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 302.736330] kobject: 'loop3' (00000000908879e6): kobject_uevent_env 10:04:00 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x6, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 302.784301] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 302.814619] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 302.828830] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 302.888055] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 302.901556] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:04:01 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x10200, 0x0) 10:04:01 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x5450, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:01 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x7, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:04:01 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x200800fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x6000, 0xc0, &(0x7f0000000600)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000500)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)) fstat(r0, &(0x7f00000002c0)) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000540)={0x2, 0x5, "f254de27e0c6fa58dd66739bc816f71d75d3b8138bd23cb5c99b8a0255ecf421", 0xbf, 0x0, 0x5b, 0xb6, 0xa1}) 10:04:01 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='coredump_filter ') exit(0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7, @mcast2, 0x8}], 0x1c) preadv(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/166, 0xfffffd33}], 0x20000001, 0x2) 10:04:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x402c5828, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 302.938988] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 302.956153] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:04:01 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x8, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:04:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x402c582a, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:01 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x5450, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 303.022539] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 303.041373] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 303.070959] kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env [ 303.088612] kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:04:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0xc0189436, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:01 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xb, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 303.114823] kobject: 'loop4' (000000007201ae1e): kobject_uevent_env [ 303.121302] kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:04:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x5450, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 303.163738] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 303.170217] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 303.194702] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 303.229811] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 303.264816] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 303.271291] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 303.302091] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 303.319372] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 303.338353] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 303.345900] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:04:01 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f00000000c0)=0xe000) 10:04:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0xc020660b, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:01 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x17, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:04:01 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x200800fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x6000, 0xc0, &(0x7f0000000600)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000500)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)) fstat(r0, &(0x7f00000002c0)) [ 303.495470] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 303.501949] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 303.543366] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 303.556696] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 303.582505] kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env [ 303.598197] kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 303.672490] kobject: 'loop4' (000000007201ae1e): kobject_uevent_env [ 303.681353] kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:04:01 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002dc0)={'vcan0\x00', 0x0}) recvfrom$packet(r0, &(0x7f0000000100)=""/17, 0x11, 0x1, &(0x7f0000002e00)={0x11, 0x17, r2, 0x1, 0x3de2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:04:01 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x5450, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:01 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x2c, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:04:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000002}) 10:04:01 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) fcntl$getflags(r0, 0x40a) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0xffffffffffffffb5) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_setup(0x401, &(0x7f0000000100)=0x0) r2 = syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0x0, 0x0) io_submit(r1, 0x8, &(0x7f0000000800)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0xf, 0x7, r0, &(0x7f0000000140)="4c5222ad98d2eb732fc49acfd186c48621f14c1f05f7a37dddebaea298423e4775c3daa4e6062b765a9b4274065283e475314fac7971be58e14d8e123234ee1c40dbc819df90147925f37ad454aaf482bebf7b403bbb0c5cb95f5f2eecba6e89b1c097bf12f21479240bd6e85938a68d97fe4147a13d0b7fa9724781d024a2000fc31123b6a179e9f77d33ef62315a2bbfac0be8b9fdc2a528a645c66819869d6e8aa951b8da408a5381f8ca162cbec0756f", 0xb2, 0xfffffffffffffff8, 0x0, 0x2, r0}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000280)="aef293dfc013bca3b174aa4529ea6889d43cd338a077ceda9f939f03e7818497e4aa022c4888f9021bb101fcdc148c25baedd1cd7205ce21", 0x38, 0x9, 0x0, 0x0, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x9, r0, &(0x7f0000000300)="3a3f6762b16c5d116e2dc27ffb5c4c89b23e15a0f8144195bb4d41f6f3b5bc75fdce6bd3968d85b48466f21da13ee8b2b5c71a37873877217e13fee0b1332fcaa8bb74594a06c7cc", 0x48, 0x2, 0x0, 0x1, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f00000003c0)="3e2d1943ce8c930685fcf92b98d31c3c09614bb865c42428b560f7632b55421ee283afc1d3f1e95d80c4324368c4", 0x2e, 0x9, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f0000000440)="ffe95904205b3c22c244c5c989db8e6be78edb478a9d6448d56f20f51ba5a9cad2ffd5e49f3e97b9403317e6b1641f5358b521ecfd3c69579513efe6064797f7c50da7092aa954d6f2d7c814b26bdd4ecb126f8fcf008e0a806be64762dac3f5ba2830aecf60618ef035c4cd2f", 0x6d, 0x80000001, 0x0, 0x3, r2}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x1, r0, &(0x7f0000000540)="020dfdcd84d95a24ba50fe711075ceff9b2e7ffb7b3b53e6d14d1163bdce2e2b532fe1df1bf2e80d9883b8259938fcd07881c2118e751e380c784355db7927e64f70f87e8b942ddd04b8cada1d56a52997c9d6056e814e3124198c21eca2c8f2155f9b2036f78613c304b891c55849ac161d6dbb84f9dd490f3df4d8ad92a3bef3e6e6c5d94dedb2218908c43f07d053ab07c94bb4c7b09284d0c27a0d4583", 0x9f, 0x5, 0x0, 0x0, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000640)="090e926769bbb229ff8dcb63d408b87b978f0d6d42c6b972ffc507759767a62ed375d7bac9ea622d09fc6ea78d", 0x2d, 0x7, 0x0, 0x0, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x100000001, r0, &(0x7f00000006c0)="8202c4c4927c58b34d31dc9661aaa7371a185f8dbe209dc93352b5adbd093f02913168d84dc11394cc0cbf0a58e16a69cfd9f35c87a35bda7aacda56adf99fe455589e1429a29fff95e593c32bdcae6aa87fb603b5acf102997b0d4d204de40c22200c354da49f0af970a1755eb495ad05cb2ea0aa03a07343554b21ca78eb4337b189108de4ce0b36207181afdfc755329f2a9d71156782806cf0944aef352eb68b1fa6b10e13480206e3d16e288ab8dff0a4aaec1f1423d4431e043c1afc9baecd4b5de33b17c531296ace892bff78f389695acfbc9793c3222c71b61836d9671a6bb1", 0xe4, 0x8, 0x0, 0x3, r0}]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000000c0)) 10:04:01 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x200800fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x6000, 0xc0, &(0x7f0000000600)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000500)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)) [ 303.767940] kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env [ 303.774654] kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 303.826389] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 303.832866] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:04:01 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) dup(r0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x5450, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:01 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x33, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:04:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000005}) [ 303.888778] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 303.914494] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:04:02 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x3a, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:04:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000006}) 10:04:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x5450, 0x0) [ 303.963535] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 303.989937] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 304.020399] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 304.049093] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 304.100732] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 304.151670] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 304.166237] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 304.172786] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 304.193059] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 304.207527] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 304.217990] kobject: 'loop4' (000000007201ae1e): kobject_uevent_env [ 304.225109] kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 304.290649] kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env [ 304.297523] kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:04:02 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) r1 = add_key(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="751a7652e24f77ecb8c84cb8bb6fa716ced9323dcde487c4dee91f9652c06ae167e0a59bd11e0fc3349184c221d4728179fa9b76efece4d4a7b8239bd1a9739c2e39e5b8a958890658489c677400abaf414fe3011110992a9d413703feae3f55194ee0eb94ecbf9560ba1104f25556180e29f00c1b3f8788be4c283a09c1b0ffcd34441c45bb26caefeaf0be3905fd9930f2e145f6538e8d394a93d39d8f34d93e91cb4402264c9109243951fc724106107ff8ab1a79e6dd5a0ca7ae1c709645b8f935c35954101ce5a790ed0c082b0ae892b0", 0xd3, 0x0) keyctl$invalidate(0x15, r1) 10:04:02 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x5c, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:04:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000002}) 10:04:02 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 10:04:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x100000001, 0x1) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:02 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x200800fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x6000, 0xc0, &(0x7f0000000600)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000500)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) 10:04:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000002}) [ 304.672975] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 304.694830] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 304.744397] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 304.750892] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:04:02 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x70, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:04:02 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000002}) 10:04:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 304.837189] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 304.849898] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:04:03 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x1, 0x8cf, 0xff, 0xffffffffffffffff, 0x16, 0x100, 0x5, 0x3, 0xafac, 0x1ff, 0x2, 0x7}) exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:04:03 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xfc, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 304.882652] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 304.921512] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:04:03 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000002}) 10:04:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) [ 304.971315] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 305.005743] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:04:03 executing program 1: r0 = socket(0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001700)={0x8, 0x0, [{0x1004, 0xfa, &(0x7f00000000c0)=""/250}, {0x4, 0x0, &(0x7f00000001c0)}, {0x3000, 0x10, &(0x7f0000000200)=""/16}, {0xf000, 0x89, &(0x7f0000000340)=""/137}, {0x10d000, 0x4e, &(0x7f0000000400)=""/78}, {0xf000, 0x1000, &(0x7f0000000700)=""/4096}, {0x6000, 0x3d, &(0x7f0000000480)=""/61}, {0x5000, 0x44, &(0x7f00000004c0)=""/68}]}) exit(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x7, 0x7, 0x684d, 0x6, 0x3}, 0x14) [ 305.036357] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 305.063086] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 305.115466] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 305.137612] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 305.165141] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 305.174194] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 305.194204] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 305.205305] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' 10:04:03 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x80000020102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:04:03 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x300, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:04:03 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000002}) 10:04:03 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x200800fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x6000, 0xc0, &(0x7f0000000600)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000500)) 10:04:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f00000001c0)="8234111a18493083a506e9e988bc6ec883a0d58c13376ae410a6d553bf39fcda68f0145b28c03f78b734c524a0b8dac412650eb430786ab8e70518bf21a6505dde0e0926bc0865") ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x1ff, 0x4}) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x5, 0x111242) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000100)=""/132) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) [ 305.216447] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 305.224150] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 305.239149] kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env [ 305.267685] kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:04:03 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x600, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:04:03 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000002}) 10:04:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r1, 0x1000}}, 0x10) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x13) r2 = dup(r0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) [ 305.318762] kobject: 'loop4' (000000007201ae1e): kobject_uevent_env [ 305.342437] kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' 10:04:03 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000002}) [ 305.377809] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 305.390018] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:04:03 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x700, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:04:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x3, 0x36}, {0x3ff, 0x1000}]}, 0x14, 0x3) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x20, 0x8040) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={r2, 0x54, "1607a215c0e5a7da8c61ba704b10500024117d782e447b5bf1b1e80eb540114e73a52f8a0eae59d4e9c5398efb1a165af57bfbbc9fb0732af63baa2b4c500054cc7d6aabc111d24fa004cef69c942fec6e274c01"}, &(0x7f0000000240)=0x5c) dup(r0) [ 305.464438] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 305.473321] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 305.584199] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 305.600441] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 305.625410] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 305.639969] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 305.650794] kobject: 'loop4' (000000007201ae1e): kobject_uevent_env [ 305.661555] kobject: 'loop4' (000000007201ae1e): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 305.671953] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 305.682694] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 305.743542] kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env [ 305.750174] kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' 10:04:03 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0xb00, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 10:04:03 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000002}) 10:04:03 executing program 4: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000050}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='p\x00\x00d\x00', @ANYRES16=r1, @ANYBLOB="000427bd7000fcdbdf250100000008000100000000000c00040005000000000000000c000200c7050000000000000c00080004000000000000000c00080009000000000000000c0008009d0e0000000000000c00050020000000000000000c0006000100000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x20, 0x30, 0xffffffff7fffffff, 0x2}, &(0x7f0000000240)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)={r2, 0x7ff}, &(0x7f00000002c0)=0x8) openat$cgroup_procs(r0, &(0x7f0000000640)='cgrup.threads\x00\x00v\xce2\\\x9e\xc2\x96\xbe\xe1\xb9\v4%\rn\xd8\xd6\'\x9fi\xee\xa8\xab\xc4\x84\x88&\xd9\x16\xe7*\xbe\xb0#\xcd\xb4\x99\x9ch\xb1R8jW3\xc7)\xa7\xf2y\f\x9e\xdf\xbc\r\x8c|\x12\xe6=\xcd\xd6V\r\xf0E\x9fX\x02)\xfd\xc4b\x1f\x00%\x1b\xe2\x1bC\xc49)\xf6\x1f\xb97\xcc\x95c\xd7/j\xf6o\xff\x06\x19~\xfe\xce\xc0\xd1\xab\xf2\xb6SVq\x13\x1dN\xddL\x95\xb6\xc6\x85\x8b\x91\xb6\x86\xd4+\xc4\x99B\xab\xcb\xda&WP\x8bt1ZT\x14S\x85\xf2\x8a\x8b)\xa6\x1dCO\xbd|\x02\x9e\xdcH\x00>h~3\x9b\xfd\xa9\xcd\xc7\xa5F\x04\x92\n\x0eq3:\x94\xeeC-\x8bR\x01\xbf\xf4\xb0E\x88.\xd6\xfb\xd9\xafu?8\xd1\xc2\xd5\xf0X\x82\ve\x04\xc4\x96\xba\x172\xc5', 0x2, 0x0) clone(0x80000020100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) 10:04:03 executing program 1: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000700)={0x1014, 0x16, 0x300, 0x70bd2b, 0x25dfdbff, {0x18}, [@generic="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"]}, 0x1014}}, 0xc000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) 10:04:03 executing program 2: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffffffffffff1b) clone(0x200800fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) statx(r0, &(0x7f00000005c0)='./file0\x00', 0x6000, 0xc0, &(0x7f0000000600)) 10:04:03 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000040)) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:04 executing program 3: syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x1700, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x2, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0x800e0000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) [ 305.908758] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 305.926186] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' 10:04:04 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4040, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x44}}, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x4d003e) r3 = dup(r2) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) 10:04:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) dup(r0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000002}) [ 305.984354] kobject: 'loop3' (00000000908879e6): kobject_uevent_env [ 305.993794] kobject: 'loop3' (00000000908879e6): fill_kobj_path: path = '/devices/virtual/block/loop3' 10:04:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xf4c565bfae3eb331, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cmdline\x00') exit(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000640)=""/166, 0xa6}], 0x1, 0x0) [ 306.027050] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 306.060301] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 306.105559] syz-executor4 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 306.130315] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 306.132353] CPU: 1 PID: 13152 Comm: syz-executor4 Not tainted 5.0.0-rc1+ #17 [ 306.143930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 306.153281] Call Trace: 10:04:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x101000, 0x40) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x40000, 0x0) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @empty}, 0x0, 0x0, 0x4, 0x4}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)="489b6a2952078c32abc19439d68aeaabcca13b2ec67fbb0865054211772f8f4ccfab2f455acb81aede42f85704ea4ed928b6db265aaec72635d8853365d084014b40097fb6764e271cc45f8f7d8368603f4b9c24356a78cf48bfad40d0d08d7e16bde6e019903645429b2fd1fa95439eb079f2ec794adc5751c622bd3e7d2ae52510bdb46d8c36704cb6f98b91f8727198c71ef3ea800ed9abbdc03260", 0x9d}], 0x1, &(0x7f00000003c0)=[{0xb8, 0x13f, 0x1, "f4cd99fd847e30fe3faf9cdcdfb1c0aaa3dc5d519c8d20956dcd0821f53a801057c5df0488b57ef772a34462f2baf57eb3db3bdd2919153a7b9e043f1e1af50a189de40b3db6b5220b4f13bdbcb79268c8a479e53282444a79340f5aa24a0bc91e797d2f238df702ebe1603ad2e856562194739d4273f82b12ff9e7af988153feaf7b3da9a28bbd78024ba748d67a3bc4dc0d070f8e514301d2ae526f206e09e5179e85997b5a04b42"}, {0x10, 0x12d, 0x0, "c4"}, {0x10, 0x6, 0xffffffff, '\n\n'}, {0x94, 0x10e, 0x3, "7712dd641dee7cdc88ac507db1a9522d7816c63256558be0b072c85b22321b77436eb8a84464c895c5d356fecd9a0fdfb0e55c7f6841b5760fa617370f6b0120a3cd3402e34202df7ad21254c1d5bafd6051425246667a712e3eb01a4f97c03433073c98df062fa575f9677970aa7a2c1ca1ce7854249bedf8363789e8684d87f6291e7b4304ba"}], 0x16c}, 0x4) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x100, 0x0) ioctl$EVIOCSFF(r3, 0x402c4580, &(0x7f0000000180)={0x56, 0x8001, 0x8, {0x1, 0x6}, {0x100000001}, @period={0x58, 0xb79, 0x20, 0x1, 0x4, {0x8000, 0x6, 0xd099, 0x6}, 0x3, &(0x7f0000000140)=[0x1, 0x100, 0x2]}}) r4 = dup(r0) fanotify_mark(r3, 0x42, 0x8, r4, &(0x7f0000000040)='./file0\x00') getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000080)=0x559) 10:04:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, 0x0) [ 306.154527] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 306.155878] dump_stack+0x1db/0x2d0 [ 306.155897] ? dump_stack_print_info.cold+0x20/0x20 [ 306.155913] ? perf_trace_lock+0x12f/0x750 [ 306.178230] dump_header+0x1e6/0x116c [ 306.182038] ? zap_class+0x690/0x690 [ 306.185768] ? pagefault_out_of_memory+0x1a1/0x1a1 [ 306.187533] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 306.190710] ? rcu_read_unlock+0x16/0x60 [ 306.190732] ? ___ratelimit+0x37c/0x686 [ 306.190750] ? lock_acquire+0x1db/0x570 [ 306.190767] ? ___ratelimit+0x16e/0x686 [ 306.205961] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 306.209143] ? trace_hardirqs_on+0xbd/0x310 [ 306.209160] ? kasan_check_read+0x11/0x20 [ 306.209176] ? ___ratelimit+0x37c/0x686 [ 306.209193] ? trace_hardirqs_off_caller+0x300/0x300 [ 306.222785] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 306.226903] ? do_raw_spin_trylock+0x270/0x270 [ 306.226921] ? trace_hardirqs_on_caller+0x310/0x310 [ 306.226949] ? lock_acquire+0x1db/0x570 [ 306.226985] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 306.227002] ? ___ratelimit+0xac/0x686 [ 306.239059] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 306.240196] ? idr_get_free+0xee0/0xee0 [ 306.240221] oom_kill_process.cold+0x10/0x9d4 [ 306.240253] ? cgroup_procs_next+0x70/0x70 [ 306.291326] ? _raw_spin_unlock_irq+0x5e/0x90 [ 306.295829] ? oom_badness+0xa50/0xa50 [ 306.299737] ? oom_evaluate_task+0x540/0x540 10:04:04 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000007c40)) recvmmsg(0xffffffffffffff9c, &(0x7f0000007a80)=[{{&(0x7f0000000040)=@rc, 0x80, &(0x7f0000001540)=[{&(0x7f0000000100)=""/233, 0xe9}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/71, 0x47}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/36, 0x24}], 0x7, &(0x7f0000001580)=""/216, 0xd8}, 0x149c}, {{&(0x7f0000001680)=@rc, 0x80, &(0x7f00000038c0)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/232, 0xe8}, {&(0x7f0000003800)=""/168, 0xa8}], 0x4}}, {{0x0, 0x0, &(0x7f0000003cc0)=[{&(0x7f0000003900)=""/151, 0x97}, {&(0x7f00000039c0)=""/131, 0x83}, {&(0x7f0000003a80)=""/113, 0x71}, {&(0x7f0000003b00)=""/88, 0x58}, {&(0x7f0000003b80)=""/4, 0x4}, {&(0x7f0000003bc0)=""/217, 0xd9}], 0x6, &(0x7f0000003d00)=""/113, 0x71}, 0x4}, {{&(0x7f0000003d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000005040)=[{&(0x7f0000003e00)=""/118, 0x76}, {&(0x7f0000003e80)=""/19, 0x13}, {&(0x7f0000003ec0)=""/204, 0xcc}, {&(0x7f0000003fc0)=""/4096, 0x1000}, {&(0x7f0000004fc0)=""/125, 0x7d}], 0x5, &(0x7f0000005080)=""/202, 0xca}, 0x2}, {{&(0x7f0000005180)=@sco, 0x80, &(0x7f0000006200)=[{&(0x7f0000005200)=""/4096, 0x1000}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000006480)=[{&(0x7f0000006240)=""/149, 0x95}, {&(0x7f0000006300)=""/164, 0xa4}, {&(0x7f00000063c0)=""/165, 0xa5}], 0x3, &(0x7f00000064c0)=""/223, 0xdf}, 0x7}, {{&(0x7f00000065c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000007980)=[{&(0x7f0000006640)=""/19, 0x13}, {&(0x7f0000006680)=""/91, 0x5b}, {&(0x7f0000006700)=""/157, 0x9d}, {&(0x7f00000067c0)=""/118, 0x76}, {&(0x7f0000006840)=""/4096, 0x1000}, {&(0x7f0000007840)=""/62, 0x3e}, {&(0x7f0000007880)=""/204, 0xcc}], 0x7, &(0x7f00000079c0)=""/154, 0x9a}, 0xda}], 0x7, 0x20, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000007b80)={0x0, 0x31ad}, &(0x7f0000007bc0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000007c00)={r2, 0x9, 0x2, [0x8, 0x3]}, 0xc) r3 = dup(r0) ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000000)={0x80000000f5f, 0x2000000013}) prctl$PR_GET_SECCOMP(0x15) [ 306.304165] ? mem_cgroup_iter_break+0x30/0x30 [ 306.308769] ? mutex_trylock+0x2d0/0x2d0 [ 306.312835] ? cgroup_mount+0xdd0/0xdd0 [ 306.316829] ? rcu_read_unlock_special+0x380/0x380 [ 306.321774] out_of_memory+0x885/0x1420 [ 306.325771] ? oom_killer_disable+0x340/0x340 [ 306.330279] ? mem_cgroup_unmark_under_oom+0x8d/0xb0 [ 306.335390] ? lock_acquire+0x1db/0x570 [ 306.339378] mem_cgroup_out_of_memory+0x160/0x210 [ 306.341135] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 306.344302] ? do_raw_spin_unlock+0xa0/0x330 10:04:04 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000002}) [ 306.344319] ? memcg_memory_event+0x40/0x40 [ 306.344335] ? do_raw_spin_trylock+0x270/0x270 [ 306.358988] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 306.359458] ? _raw_spin_unlock+0x2d/0x50 [ 306.377601] try_charge+0x12a9/0x19b0 [ 306.381423] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 306.384989] kobject: 'loop5' (00000000b669d385): kobject_uevent_env [ 306.386272] ? rcu_read_unlock_special+0x380/0x380 [ 306.386297] ? get_mem_cgroup_from_mm+0x1ea/0x420 [ 306.386314] ? get_mem_cgroup_from_page+0x190/0x190 [ 306.396154] kobject: 'loop5' (00000000b669d385): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 306.397638] mem_cgroup_try_charge+0x43a/0xdb0 [ 306.397656] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 306.427016] ? mem_cgroup_protected+0xa10/0xa10 [ 306.431704] ? shmem_getattr+0x2c0/0x2c0 [ 306.435802] ? trace_hardirqs_on+0xbd/0x310 [ 306.440137] ? kasan_check_read+0x11/0x20 [ 306.444301] ? trace_hardirqs_off_caller+0x300/0x300 [ 306.449429] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 306.454371] shmem_getpage_gfp+0xa85/0x4b70 [ 306.458718] ? shmem_add_to_page_cache+0x19a0/0x19a0 [ 306.463829] ? page_mapping+0x56d/0xa20 [ 306.467817] ? __page_mapcount+0x550/0x550 [ 306.472059] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 306.477615] ? __set_page_dirty_no_writeback+0x3a1/0x690 [ 306.483080] ? do_writepages+0x1a0/0x1a0 [ 306.487155] ? get_mctgt_type+0xf00/0xf00 [ 306.491315] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 306.496863] ? check_preemption_disabled+0x48/0x290 [ 306.499481] kobject: 'loop1' (0000000031e7016b): kobject_uevent_env [ 306.501890] ? kasan_check_write+0x14/0x20 [ 306.501909] ? up_read+0x212/0x2b0 [ 306.501931] ? do_writepages+0x1a0/0x1a0 [ 306.512894] kobject: 'loop1' (0000000031e7016b): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 306.516217] ? __writepage+0xe0/0xe0 [ 306.516235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 306.516260] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 306.516275] ? unlock_page+0x2b1/0x4a0 [ 306.516293] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 306.553919] ? balance_dirty_pages_ratelimited+0x1b0/0x2370 [ 306.559634] ? preempt_schedule+0x4b/0x60 [ 306.563797] ? balance_dirty_pages+0x3740/0x3740 [ 306.568566] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 306.574127] ? shmem_write_end+0x384/0xa40 [ 306.578381] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 306.583436] ? iov_iter_advance+0x354/0x1490 [ 306.587880] ? shmem_replace_page+0x1b10/0x1b10 [ 306.592559] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 306.598153] ? iov_iter_fault_in_readable+0x22c/0x450 [ 306.603376] shmem_write_begin+0x105/0x1e0 [ 306.607675] generic_perform_write+0x2a0/0x6b0 [ 306.612280] ? add_page_wait_queue+0x480/0x480 [ 306.616870] ? current_time+0x1b0/0x1b0 [ 306.620854] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 306.625880] ? generic_write_check_limits+0x291/0x380 [ 306.631083] __generic_file_write_iter+0x25e/0x630 [ 306.636041] ? mutex_trylock+0x2d0/0x2d0 [ 306.638616] kobject: 'loop2' (00000000a1f57ff7): kobject_uevent_env [ 306.640115] generic_file_write_iter+0x34e/0x6a0 [ 306.640137] ? __generic_file_write_iter+0x630/0x630 [ 306.640153] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 306.649977] kobject: 'loop2' (00000000a1f57ff7): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 306.651295] ? iov_iter_init+0xea/0x220 [ 306.651315] __vfs_write+0x764/0xb40 [ 306.651333] ? kernel_read+0x120/0x120 [ 306.679183] kobject: 'loop0' (00000000da8d66f9): kobject_uevent_env [ 306.682914] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 306.694834] ? rcu_sync_lockdep_assert+0xd/0xb0 [ 306.698269] kobject: 'loop0' (00000000da8d66f9): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 306.699506] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 306.699522] ? __sb_start_write+0x1ac/0x360 [ 306.699539] vfs_write+0x20c/0x580 [ 306.722352] ksys_write+0x105/0x260 [ 306.726008] ? __ia32_sys_read+0xb0/0xb0 [ 306.730107] ? trace_hardirqs_off_caller+0x300/0x300 [ 306.735228] ? __do_page_fault+0x3f1/0xd60 [ 306.739477] __ia32_sys_write+0x71/0xb0 [ 306.743453] do_fast_syscall_32+0x333/0xf98 [ 306.747780] ? do_int80_syscall_32+0x880/0x880 [ 306.752360] ? trace_hardirqs_off+0x310/0x310 [ 306.756840] ? syscall_return_slowpath+0x3b0/0x5f0 [ 306.761755] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 306.767279] ? prepare_exit_to_usermode+0x232/0x3b0 [ 306.772282] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 306.777151] entry_SYSENTER_compat+0x70/0x7f [ 306.781554] RIP: 0023:0xf7f6b869 [ 306.784901] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 9