[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 56.655125][ T26] audit: type=1800 audit(1573352074.039:25): pid=8705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 56.705228][ T26] audit: type=1800 audit(1573352074.039:26): pid=8705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 56.728165][ T26] audit: type=1800 audit(1573352074.039:27): pid=8705 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts. 2019/11/10 02:14:45 fuzzer started 2019/11/10 02:14:47 dialing manager at 10.128.0.26:40753 2019/11/10 02:14:47 syscalls: 2566 2019/11/10 02:14:47 code coverage: enabled 2019/11/10 02:14:47 comparison tracing: enabled 2019/11/10 02:14:47 extra coverage: enabled 2019/11/10 02:14:47 setuid sandbox: enabled 2019/11/10 02:14:47 namespace sandbox: enabled 2019/11/10 02:14:47 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/10 02:14:47 fault injection: enabled 2019/11/10 02:14:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/10 02:14:47 net packet injection: enabled 2019/11/10 02:14:47 net device setup: enabled 2019/11/10 02:14:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/10 02:14:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 02:17:22 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0x80045505, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x255, 0x0, 0x0}) 02:17:22 executing program 1: getpid() r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f000004bfe4)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) prctl$PR_SET_PTRACER(0x59616d61, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syzkaller login: [ 225.472684][ T8873] IPVS: ftp: loaded support on port[0] = 21 [ 225.646566][ T8873] chnl_net:caif_netlink_parms(): no params data found 02:17:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 225.745122][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.764016][ T8873] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.791982][ T8873] device bridge_slave_0 entered promiscuous mode [ 225.821265][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.828455][ T8873] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.837089][ T8876] IPVS: ftp: loaded support on port[0] = 21 [ 225.860363][ T8873] device bridge_slave_1 entered promiscuous mode [ 225.910749][ T8873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.941387][ T8873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 02:17:23 executing program 3: getpid() r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f000004bfe4)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) [ 225.985966][ T8873] team0: Port device team_slave_0 added [ 226.008253][ T8873] team0: Port device team_slave_1 added [ 226.028751][ T8878] IPVS: ftp: loaded support on port[0] = 21 [ 226.113423][ T8873] device hsr_slave_0 entered promiscuous mode [ 226.161634][ T8873] device hsr_slave_1 entered promiscuous mode 02:17:23 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7fb, 0x4) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x200000) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0xa0ff}], 0x4000000000000d0, 0x0) [ 226.238370][ T8880] IPVS: ftp: loaded support on port[0] = 21 [ 226.442591][ T8883] IPVS: ftp: loaded support on port[0] = 21 [ 226.453502][ T8876] chnl_net:caif_netlink_parms(): no params data found [ 226.539359][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.546660][ T8873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.554647][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.561779][ T8873] bridge0: port 1(bridge_slave_0) entered forwarding state 02:17:24 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) connect$inet6(r0, &(0x7f000004bfe4)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) [ 226.624134][ T8876] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.631719][ T8876] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.639469][ T8876] device bridge_slave_0 entered promiscuous mode [ 226.663086][ T2884] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.685162][ T2884] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.697279][ T8876] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.704724][ T8876] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.712977][ T8876] device bridge_slave_1 entered promiscuous mode [ 226.736091][ T8878] chnl_net:caif_netlink_parms(): no params data found [ 226.808990][ T8876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.820585][ T8876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.876163][ T8878] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.883830][ T8878] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.891911][ T8878] device bridge_slave_0 entered promiscuous mode [ 226.903677][ T8880] chnl_net:caif_netlink_parms(): no params data found [ 226.912160][ T8888] IPVS: ftp: loaded support on port[0] = 21 [ 226.927630][ T8876] team0: Port device team_slave_0 added [ 226.934172][ T8878] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.943801][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.951593][ T8878] device bridge_slave_1 entered promiscuous mode [ 226.976604][ T8878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.998910][ T8876] team0: Port device team_slave_1 added [ 227.019712][ T8878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.094014][ T8876] device hsr_slave_0 entered promiscuous mode [ 227.160532][ T8876] device hsr_slave_1 entered promiscuous mode [ 227.210607][ T8876] debugfs: Directory 'hsr0' with parent '/' already present! [ 227.228458][ T8880] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.235739][ T8880] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.243870][ T8880] device bridge_slave_0 entered promiscuous mode [ 227.271379][ T8873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.293212][ T8880] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.301469][ T8880] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.309241][ T8880] device bridge_slave_1 entered promiscuous mode [ 227.341076][ T8878] team0: Port device team_slave_0 added [ 227.352589][ T8883] chnl_net:caif_netlink_parms(): no params data found [ 227.378317][ T8878] team0: Port device team_slave_1 added [ 227.416908][ T8880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.427728][ T8880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.458990][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.468109][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 227.486994][ T8873] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.544808][ T8878] device hsr_slave_0 entered promiscuous mode [ 227.620735][ T8878] device hsr_slave_1 entered promiscuous mode [ 227.660674][ T8878] debugfs: Directory 'hsr0' with parent '/' already present! [ 227.668336][ T8883] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.677350][ T8883] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.685785][ T8883] device bridge_slave_0 entered promiscuous mode [ 227.728644][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 227.737921][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 227.746540][ T8885] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.753640][ T8885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.763657][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.772330][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 227.780882][ T8885] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.787932][ T8885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.795573][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 227.804729][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 227.813329][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 227.822096][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 227.830516][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 227.838982][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 227.847773][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 227.856398][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 227.865719][ T8883] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.873226][ T8883] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.881816][ T8883] device bridge_slave_1 entered promiscuous mode [ 227.895933][ T8880] team0: Port device team_slave_0 added [ 227.907797][ T8880] team0: Port device team_slave_1 added [ 227.922708][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 227.938643][ T8883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.964536][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 227.972964][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 228.006778][ T8883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.073894][ T8880] device hsr_slave_0 entered promiscuous mode [ 228.110660][ T8880] device hsr_slave_1 entered promiscuous mode [ 228.150431][ T8880] debugfs: Directory 'hsr0' with parent '/' already present! [ 228.160781][ T8873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 228.188367][ T8888] chnl_net:caif_netlink_parms(): no params data found [ 228.201908][ T8883] team0: Port device team_slave_0 added [ 228.209008][ T8883] team0: Port device team_slave_1 added [ 228.345123][ T8883] device hsr_slave_0 entered promiscuous mode [ 228.400895][ T8883] device hsr_slave_1 entered promiscuous mode [ 228.440409][ T8883] debugfs: Directory 'hsr0' with parent '/' already present! [ 228.461539][ T8888] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.468613][ T8888] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.476529][ T8888] device bridge_slave_0 entered promiscuous mode [ 228.485212][ T8888] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.492433][ T8888] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.500121][ T8888] device bridge_slave_1 entered promiscuous mode [ 228.546775][ T8888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.571426][ T8888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.611820][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.619241][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.648220][ T8888] team0: Port device team_slave_0 added [ 228.656073][ T8888] team0: Port device team_slave_1 added [ 228.683739][ T8873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.763650][ T8888] device hsr_slave_0 entered promiscuous mode [ 228.800680][ T8888] device hsr_slave_1 entered promiscuous mode [ 228.850421][ T8888] debugfs: Directory 'hsr0' with parent '/' already present! [ 228.893830][ T8876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.937937][ T8876] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.965912][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 228.977918][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.995196][ T8878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.049296][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.059481][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.073918][ T8885] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.081134][ T8885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.084588][ T8898] usb usb2: usbfs: interface 0 claimed by hub while 'syz-executor.0' sets config #0 [ 229.094766][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.107942][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.123786][ T8885] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.130941][ T8885] bridge0: port 2(bridge_slave_1) entered forwarding state 02:17:26 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x40, r2, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x40}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc22c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000506096768fe07072b0300370e000a0014000300450201070300001419001a00120002000e00010006000300"/57, 0x39}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000003c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0xfff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x6, 0x2}, 0x0, 0x0, &(0x7f0000000100)={0x9a829ee2, 0x8, 0x6, 0x7}, &(0x7f0000000140)=0x4355, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x100000000}}, 0x10) [ 229.144580][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.154548][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.168641][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.178680][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.193525][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.205825][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.217186][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.219879][ T8902] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 229.228553][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.242630][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.251321][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.259719][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.267729][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.278967][ T8883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.299754][ T8878] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.309637][ T8876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 229.326151][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.336068][ T2884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 02:17:26 executing program 0: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xc0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000000c0)={0xffffffff, 0x0, 'client0\x00', 0x8000000040000001, "33490f468608b7b4", "753e8cddd6fe614b97ebd1d0ed27205d3f33d61be150c657a65030abc78ae64a", 0x9, 0x40}) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) getegid() pipe(&(0x7f0000000340)) [ 229.354638][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.370964][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.382771][ T8885] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.389853][ T8885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.410937][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.419248][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.429481][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.454926][ T8883] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.476334][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.495929][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.505225][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.512357][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.552883][ T8880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.600524][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.609772][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.619638][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 229.628190][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 229.636298][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 229.645618][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 229.654490][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.661629][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.669753][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.678982][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.687554][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.694626][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.702941][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 229.711752][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 229.725390][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 229.730052][ C0] hrtimer: interrupt took 56012 ns [ 229.734289][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 229.765601][ T8876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.789996][ T8878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.819654][ T8878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.843402][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.859470][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 229.868736][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.885106][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.897558][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.909990][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.924979][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 229.935891][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 229.949612][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 229.960888][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 229.978040][ T8880] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.997759][ T8888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.026047][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.038485][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.058989][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.111870][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.119878][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.135796][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.146659][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.162417][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.176988][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.184130][ T8890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.198667][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.207723][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.222992][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.230079][ T8890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.241723][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.249226][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.299062][ T8878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.321075][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 02:17:27 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40040, 0x0) pipe(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/153, 0x99}], 0x3}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/120, 0x78}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) clone3(&(0x7f0000000600)={0x100800, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x0, &(0x7f0000000380)=""/94, 0x5e, &(0x7f00000005c0)}, 0x40) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000080)) r1 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) pipe(&(0x7f0000000080)) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, 0x0, &(0x7f0000000040)) socket$inet6_sctp(0xa, 0x0, 0x84) [ 230.346160][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.386602][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.395582][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.426139][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.446413][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.459241][ T8922] overlayfs: failed to resolve './file1': -2 [ 230.476028][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.502208][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.519257][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.538166][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.552724][ T8928] overlayfs: failed to resolve './file1': -2 [ 230.552757][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.554237][ T8883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 02:17:28 executing program 1: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x6000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201eeffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c3000000000000", 0x3b, 0x1c0}]) [ 230.598482][ T8888] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.643592][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.661098][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.669877][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 02:17:28 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmsg$key(r0, &(0x7f00000000c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) r6 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r7, 0xa, 0x12) fcntl$setownex(r7, 0xf, &(0x7f00000ff000)={0x0, r6}) writev(r7, &(0x7f00000005c0)=[{&(0x7f00000003c0)="6b4898476286ff85043f70d76171f429fe4b6050bde6324a4e754158ff5f3edf10d572a45bbe1f6bbbb56db216923ac4d28289e1c87b4bfc00c1fabf392156522b5c0f15e443eb88a3d5f7cc8ec59b979e8aac78f6ee68ff7c2c2390", 0x5c}, {&(0x7f0000000440)}, {&(0x7f0000000480)="f7336438d43ebccccee8f32543c7dbef9a59662fa03a8e2058256ee7c4ca1b05004a94b82ec1149dc9203e1bed3e594d282806abe640bea386d07d60be07837775473282365e941e49375cc90d951552598507064bc0ad1aa57be0b8d53f99eb1ece9e8eac4db6f190d93245f8157efe0dcef48d6c4db879345eaedd807c85fe69fe4d82181e", 0x86}, {&(0x7f0000000540)="7c181832f4a4a7ff4c73dc414a5f33ce9d682cd0e9a55a1b502c3194e07c8664ca5f5a8c552fb34472a0b9a7b76790c7bae132fb8bc44dc6a26e13cc3848fa345900061e0c5115949842a9677255b735", 0x50}], 0x4) recvmsg(r8, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r7, r8) tee(r5, r7, 0xf2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$apparmor_current(r1, 0x0, 0x0) accept4(r3, &(0x7f0000000340)=@isdn, &(0x7f0000000080)=0x80, 0x80000) [ 230.701077][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.714000][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.766206][ T8880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.785029][ T8880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.837090][ T8883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.922568][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.010818][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.019308][ T8907] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.026432][ T8907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.034989][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.042624][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.050111][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.059019][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.067793][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.076890][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.085970][ T8907] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.093104][ T8907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.101151][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.109913][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.120132][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.213571][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.235260][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.253096][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 231.260627][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 231.280661][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.289567][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.298757][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.307680][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.325406][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.352540][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 02:17:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000445}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x34, r1, 0x300, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x16, 0x10000, @udp='ugz1\x00\x00\x00\x00\x03'}}}, ["", "", "", "", "", ""]}, 0xff27}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000180)={0x3ff, 0x1, 0xb}) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x0, 0x2}}, 0x14) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x140002}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x28046081) write$9p(r2, &(0x7f0000001400)="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", 0x294) sendfile(r2, r3, 0x0, 0x10000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, 0x0) [ 231.360910][ T3607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.382678][ T8880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.390698][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.406018][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.442836][ T8888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 02:17:28 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0xfffffffd, 0xffffffff}, {0x8, 0x4}]}, 0x14, 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x20000000, 0x1, 0x0, @tid=0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={'dummy0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) [ 231.483847][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 231.495298][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 231.510153][ T8888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.643687][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 231.643702][ T26] audit: type=1804 audit(1573352249.029:31): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir827857602/syzkaller.DyUfIC/1/file0" dev="sda1" ino=16525 res=1 [ 231.676899][ T26] audit: type=1800 audit(1573352249.029:32): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16525 res=0 [ 231.802839][ T26] audit: type=1804 audit(1573352249.179:33): pid=8989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir827857602/syzkaller.DyUfIC/1/file0" dev="sda1" ino=16525 res=1 02:17:29 executing program 0: unshare(0x2000000) r0 = gettid() tkill(r0, 0x16) r1 = syz_open_procfs(r0, &(0x7f0000000000)='\x7f\x16I\x9d\xd8\x00\x00\x00\x00\xff\xff\xff\xeb\x00') preadv(r1, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xae, 0x0) 02:17:29 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180)=0x38, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socket$can_bcm(0x1d, 0x2, 0x2) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='efs\x00', 0xb90bddd57e446b36, &(0x7f0000000140)='}user\x00') 02:17:29 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7fb, 0x4) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x200000) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0xa0ff}], 0x4000000000000d0, 0x0) 02:17:29 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x2, 0x0) socket$inet(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, 0x0}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x32380, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r1, &(0x7f0000000240)=0x202, 0x4000000000dc) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x20000000) syz_open_dev$media(0x0, 0x7f, 0x246400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) 02:17:29 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180)=0x38, 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socket$can_bcm(0x1d, 0x2, 0x2) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='efs\x00', 0xb90bddd57e446b36, &(0x7f0000000140)='}user\x00') 02:17:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="12"]}) 02:17:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x7, 0x7981a854c3961ff) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000200)={0x6, 0x1, @raw_data=[0x42cd, 0xffffffff, 0x1000, 0x0, 0xd2, 0x100, 0x4, 0x7, 0x36a, 0x1ff, 0x7ff, 0x6, 0x80000000, 0xfffffffd, 0xfffffff7, 0x9]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/btrfs-control\x00', 0x80100, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x20000, 0x0) bind$rose(r4, &(0x7f0000000400)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6) getsockopt$inet6_buf(r3, 0x29, 0x44, &(0x7f0000000000)=""/250, &(0x7f0000000140)=0xfa) r5 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@fat=@sys_immutable='sys_immutable'}]}) [ 232.540686][ T9076] FAT-fs (loop3): bogus number of reserved sectors [ 232.573788][ T9076] FAT-fs (loop3): Can't find a valid FAT filesystem 02:17:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000020000001a000c000100626ff43459b57243ab3d877eb329681e4ce38abbbb52d66bdd79a7eec2b5517d6aac00"/64], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 232.734943][ T9092] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.776391][ T9094] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 02:17:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x4, 0x26, [], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=""/38}, &(0x7f0000000100)=0x78) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000180)=0x400) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newsa={0x10c, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@local}, {@in=@multicast1=0xe0000008, 0x0, 0x3c}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@multicast1}}]}, 0x10c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000340)={@my=0x0}) 02:17:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x1) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="006d256d00027920"], 0xda00) write$cgroup_int(r3, &(0x7f0000000200), 0x3fe00) 02:17:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") pipe(&(0x7f0000000000)) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4, 0x5e831, 0xffffffffffffffff, 0x0) 02:17:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffbe, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003b0e0000000000000000000164a7", @ANYRES32=0x0, @ANYBLOB="430200000000000008000a00", @ANYRES32=0x6, @ANYBLOB="000200b25a6c4c85c8d308000400c0a8ef500400"/31], 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000140)={0xf9a0000, 0x9, 0x800, [], &(0x7f0000000100)={0x990a72, 0x400, [], @p_u32=&(0x7f00000000c0)=0x5}}) [ 232.918549][ T9106] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.956268][ T9106] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 02:17:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x101, 0x101000) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000080)={0x947, 0xffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0x5af4c977b55a8b9c) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=""/97, 0x3a0}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:17:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40000040a06, 0x0) ioctl$int_in(r1, 0x800000c0045006, &(0x7f0000000000)=0x7b) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800000141042, 0x0) ftruncate(r2, 0x200006) sendfile(r0, r2, 0x0, 0x8000fffffffe) 02:17:32 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$KIOCSOUND(r0, 0x4b2f, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) write$FUSE_STATFS(r0, &(0x7f0000000140)={0x60, 0x0, 0x2, {{0xffff, 0x1000, 0x1, 0xffff, 0x100000001, 0x0, 0x401, 0x4}}}, 0x60) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000100)='wlan1securitymd5sum-^\x83\x00', 0x17, 0x3e74f6e0f16a3f4e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc1, 0x0, &(0x7f0000000140)) 02:17:32 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003700)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffe}}], 0xfffffddd}}], 0x2, 0x200508e3) r1 = socket$caif_seqpacket(0x25, 0x5, 0x3) flock(r1, 0x8) syz_init_net_socket$x25(0x9, 0x5, 0x0) 02:17:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x2, @null, @netrom={'nr', 0x0}, 0x8, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="2900000004000000000700000000000005000000000000007f00000000000000010000000000000000510e4753b27c3b7a16c80cc1549c4de42d88e5ddd05918f4ff22a4c26588d8ff063e44aec84fe5e8dfe0053b2363d615"], 0x29) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f00000001c0)={0x81, &(0x7f0000000140)}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000007000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee1) 02:17:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_ro(r4, 0xfffffffffffffffd, 0x0, 0x0) r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) recvmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000280)=""/209, 0xd1}, {&(0x7f0000000380)=""/212, 0xd4}, {&(0x7f0000000480)=""/122, 0x7a}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/233, 0xe9}], 0x6, &(0x7f0000000780)=""/159, 0x9f}, 0x2061) ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000700)=0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) [ 235.164224][ T9121] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 02:17:32 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000100)={0xff0, 0x20}) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) splice(r1, 0x0, r6, 0x0, 0x30005, 0x3) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) 02:17:32 executing program 3: r0 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) pipe(&(0x7f0000000700)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) r3 = getpgid(0x0) r4 = memfd_create(&(0x7f0000000140)='.\xe9\x00', 0x0) r5 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r6 = dup2(r5, r4) writev(r6, &(0x7f0000000040)=[{&(0x7f00000002c0)='3', 0x1}], 0x1) ppoll(&(0x7f0000000200)=[{r6}], 0x1, &(0x7f0000000280), 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100eb00000000000200", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00\x00', @ANYBLOB='\b\x00\x00', @ANYRES32, @ANYBLOB="080005115951c076757a2164ca8343141a694359b9c301bf24d95441febf5a16ae429194cf41f9773a21df3fbefdfd920f68e5e58ca390181d9c686c6f0806797ac4b7731b7f6de976e4e0d345ac1f83f37848b5967ec0775d6b112c47c6e95551477839c728d326f78e5d0799b1c02c3418b1a48e41d54f698cc38b60a6a0375079bff305c0f0bbeddd3edfffcfdc456e464d8c1a7da7b7b2d8a43ac3491716431f09760a1563fe6d0296d3c466fe2c062668338b9185831dd35125bdd22378d3cf071a878b7a063b2d46a938629ac3291d146d87e0fe731694a7c32dbaabe14569f75cb0e55047f247d758bba0b8d668926655aad9aa6f2bd7", @ANYBLOB], 0x8, 0x1) r8 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r9 = gettid() waitid(0x83b895581628fca4, r9, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESDEC=r9]], 0x8}}, 0x20004850) r10 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r11 = dup2(0xffffffffffffffff, r10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) r12 = gettid() r13 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r13, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r13, 0x227d, &(0x7f0000000780)) kcmp(r12, r9, 0x0, 0xffffffffffffffff, r13) ptrace$setopts(0x4206, r12, 0x0, 0x0) r14 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4}, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r12, r14, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r15}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r9, r11, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r15}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r15}, 0x29d) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r15}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r15}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r15}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r7, 0x0, 0x1, &(0x7f0000000080)='\x00', r15}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r15}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, r6, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00', r15}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)='bdevmd5sum@selinuxuser\x0e-em0lo{-em0&:%buser', r15}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r15}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x0, 0xf, &(0x7f0000000100)='/dev/dri/card#\x00', r15}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, r15}, 0x30) r17 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0xff, 0xae1d1, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, r16, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r18 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r18, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r17, 0x2405, r18) r19 = socket$inet(0x2, 0x4000000000000001, 0x0) sendfile(r17, r19, &(0x7f0000000000)=0xfec, 0x100000001) bind$inet(r19, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x7e) sendto$inet(r19, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r19, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x0) 02:17:33 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0xa1493c1701022a07) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3f}) r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x6, 0x400401) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x8a6c) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000900)) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000140), 0x4) add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0xab4) request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78e, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x20000a01c, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xf24e96747c77a445) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in=@dev, @in6=@local}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK(\x0f\xadG\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_timedsend(r2, &(0x7f0000000140)="9ed650a537ef2ebc0ae50130bd85c2b9a6b4bc1aa0e6b63d1180ba70d46d50339b4ca1b858a8043e8d9acaa4fd22f7322dc71346abc16937177fb30f94e679cc886d407380e85733587918daa1d7a894850d70456592e52703001c20c6096e9c85eeca161b5a2d3b6e1fee6e307066a3a768b4a20ec9461d8a3b2cfe8ee542d73eba6a2cad183fb0867621ec30b25d30b104d8fb829d8cd6aafbcb675f72f388e6a6eef1aa21c8f751062877", 0xac, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$vim2m(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/video35\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000500)={&(0x7f0000000540)=@nl=@unspec, 0x80, 0x0}, 0x0) 02:17:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x9c62aea2fb8b21a9, 0x208) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r2, 0x2081ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000280)='./bus\x00', 0x209) r4 = getpgid(0xffffffffffffffff) ptrace$peek(0x2, r4, &(0x7f00000001c0)) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='./bus/file0\x00', r8}, 0x10) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000240)=@bcast) io_setup(0x8, &(0x7f0000000180)=0x0) fcntl$setstatus(r6, 0x4, 0x46600) io_submit(r9, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 02:17:33 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000000)=""/71, 0x47) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x2, &(0x7f0000000100)={r2, 0x1, 0x22, @remote}, 0xc) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = gettid() clone(0x4200a400, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x7f, 0x7, 0x5, 0x1, 0x1}, 0x3c) r6 = socket$packet(0x11, 0x0, 0x300) r7 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$alg(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="f2f442812b00f313bccbc9b13db5f47d184abc005d362549341baa4e39ef38ca4b048c5e3b4a2adc7b4513e196a907bd4354dcacd812d3334e043267507651a3967a05d9cc58b4d580f7535278923a4099af13332390531ec1823ac8d065dd4a8823cf1bd3bd0ddabe28a40ca60dc2695a130419", 0x74}, {&(0x7f00000004c0)="8319326e774a9949663a9dc994ff547b85eb87c21134b778fa5a4333978c60be101270c66b2c7a17654b8169b5a45661ec14176c42906561299f40ef59b302fc56b302a137ad0530902d302a9b80b2d90abeb6ea056aca34308bbb405ce8998a91d1f7254a2e89b5184f4e145e8658446fbbba7e805eab6cc0f898808159abb8fec5f02951d7955cb459270064b9c7e089dde3152cb5aeaab98315e8c542f7cf3d04bdf60c918117169a710951cfec25a19143daf759ac5a6598fbf1db233c8f7f73e97e003c6b5a1d9eac591708b224dd99f32f1d6c984de76985a158dff7150653d15156a2e0904dff63cd91a2d9719b3de8c1ca", 0xf5}], 0x2, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x5bba3c4c402a2fbd}, 0x1) r8 = fcntl$dupfd(r6, 0x0, r5) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000000140)) accept4$llc(r3, &(0x7f00000003c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000400)=0x10, 0x80000) getsockopt$inet_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000180)=""/49, &(0x7f00000001c0)=0x31) wait4(0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x7f, 0x7, 0x5, 0x1, 0x1}, 0x3c) r10 = socket$packet(0x11, 0x10000000003, 0x300) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$sock_TIOCOUTQ(r11, 0x5411, 0x0) ioctl$KDSIGACCEPT(r11, 0x4b4e, 0x3e) recvmmsg(0xffffffffffffffff, &(0x7f00000064c0), 0x40000000000022a, 0x2, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x151, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) mkdirat$cgroup(r14, &(0x7f00000005c0)='syz0\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac14140ce9", 0x0, 0x9}, 0x28) [ 235.920288][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 235.926190][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 236.000309][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 236.006236][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 236.456786][ T9184] BPF:hdr_len not found [ 236.532034][ T9178] IPVS: ftp: loaded support on port[0] = 21 [ 236.561111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 236.567070][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 236.794945][ T9189] IPVS: ftp: loaded support on port[0] = 21 [ 236.880279][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 236.886157][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 237.200310][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 237.206128][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 237.440297][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 237.446156][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 238.000314][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 238.006129][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:17:35 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x4, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) fchmod(0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f00000000c0)={'stack ', 'vcan0\x00'}, 0x9d) write$apparmor_exec(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0) fstat(0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:17:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="c23ed34f0c753df2f46741b4b09eceae152a61a21c22d89a74bb6cab46d257dcc12cc819ca6ae180b393c62dc38060bb024ea3373f1b19e6ad"], 0x1) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x8}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x0, 0x800) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r4 = open(0x0, 0x100, 0x2) sendto$inet(r4, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf", 0x69, 0x0, 0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x3, 0x2) r11 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r11, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r12 = socket(0xa, 0x1, 0x0) r13 = dup(0xffffffffffffffff) write$cgroup_int(r13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', 0x0}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, r14}) fcntl$F_GET_RW_HINT(r10, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f00000002c0)={@remote, 0x0, r14}) getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r9, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000500)=0xfffffffffffffef6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:17:35 executing program 3: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4eb39e15a61f67432a500"/98], 0x58) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea1102000005000000", 0x29}], 0x1) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001a00), 0x5) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_int(r6, 0x0, 0x6, 0x0, 0x6b9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@loopback, @in6=@mcast2}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001ac0)={'nat\x00'}, &(0x7f0000000080)=0x54) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) r7 = fcntl$dupfd(r0, 0x0, r0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000580), &(0x7f00000001c0)=0x6e) bind$bt_rfcomm(r7, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff}}, 0xa) 02:17:35 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000100)={0xff0, 0x20}) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) splice(r1, 0x0, r6, 0x0, 0x30005, 0x3) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) 02:17:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x400, 0x8000) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000440)="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", {0x6, 0x3, 0x3631564e, 0x12b00ef4d301dd54, 0xa4eb, 0x6, 0x3, 0x2}}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x10000000003c) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000240)={0x0, {{0x2, 0x0, @remote}}}, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0xfd5c}], 0x1}, 0xc100) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002e00)="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", 0x27d}], 0x1}, 0x0) 02:17:35 executing program 2: fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r6 = dup2(r3, r5) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x7, 0x12, r7, 0x0) dup3(r6, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SCSI_IOCTL_STOP_UNIT(r9, 0x6) [ 238.222075][ T26] audit: type=1400 audit(1573352255.609:34): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="vcan0" pid=9194 comm="syz-executor.1" 02:17:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000200)='eth0ppp1\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000140)='<', 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r6, 0xa, 0x12) fcntl$setownex(r6, 0xf, &(0x7f00000ff000)={0x0, r5}) recvmsg(r7, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r6, r7) write(r7, &(0x7f00000002c0)="2a08675bb07e3f1f9dab18ceed6ea330996da40716f9cc1b8952b452237b3b2ca3b5cc68b5d095b62bc988c2473cc566d46340a25aede959f8e468a33627eb5251bc7356918e5d2fa5c4d75e19dbb5783339815d6072c4fe619e1a0b6f4babb2e3b378c467ea0a4070b5e2ec29a7b328416c4d2ddfe5a39da9cff8785f54e9a6a0517ebda197eeaf1f8297bf4ea19b4046d1b4f83a1f27608c157ab7961ba15cebb255537790da90ca88f86f93", 0xad) [ 238.279056][ T9202] netlink: 'syz-executor.3': attribute type 6 has an invalid length. 02:17:35 executing program 1: r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) syz_mount_image$xfs(&(0x7f0000000600)='xfs\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@allocsize={'allocsize', 0x3d, [0x36, 0x6d]}}]}) 02:17:35 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf000}, 0x334, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="009300000a000600aa2aaaaaaaaa0000"], 0x42e}}, 0x0) 02:17:36 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', @ifru_flags}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0xfe000) [ 238.606851][ T9220] XFS (loop1): Invalid superblock magic number 02:17:36 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRES64=0x0, @ANYBLOB="e1a1ee21e0270d26bce688977586e59c4cc2c22846866d0919baf55764e2328373896fd00f9dde0a5ac20588003f1ac899cc6b82346b16f7fec419d5706327f144f627bfcfeee8bda62150d1e98f322586495051", @ANYRESDEC=0x0]) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) eventfd2(0x81, 0x80001) renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f0000000600)) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000001500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7bd7699dee2aec6c5893618c7e1d3202dd68aff1dfa6cd86126681ebfa383320d249ff397efb445d0a4c1116b7b5de0d608ea7a75f6bb769a319def735becf", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$fuseblk(0x0, 0x0, &(0x7f0000000240)='fuseblk\x00', 0x100800, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:17:36 executing program 2: timer_create(0xa0dfb9af9a594a29, 0x0, &(0x7f0000000040)) [ 238.798963][ T9238] fuse: Bad value for 'fd' 02:17:36 executing program 3: fanotify_init(0x38, 0x0) [ 238.914928][ T9244] fuse: Unknown parameter '{×iî*ìlX“aŒ~2Ýh¯ñߦ͆fëú83 ÒIÿ9~ûD] [ 238.914928][ T9244] L·µÞ `Ž§§_k·i£Þ÷5¾Ï0x0000000000000006' 02:17:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0xa808) 02:17:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d623455e1ffb5ea3544438cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid'}}]}}) 02:17:36 executing program 0: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000100)={0xff0, 0x20}) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) splice(r1, 0x0, r6, 0x0, 0x30005, 0x3) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) 02:17:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x1}}) 02:17:36 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES64=0x0, @ANYBLOB="e1a1ee21e0270d26bce688977586e59c4cc2c22846866d0919baf55764e2328373896fd00f9dde0a5ac20588003f1ac899cc6b82346b16f7fec419d5706327f144f627bfcfeee8bda62150d1e98f322586495051", @ANYRESDEC=0x0]) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) eventfd2(0x81, 0x0) lstat(0x0, &(0x7f0000000600)) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000001500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7bd7699dee2aec6c5893618c7e1d3202dd68aff1dfa6cd86126681ebfa383320d249ff397efb445d0a4c1116b7b5de0d608ea7a75f6bb769a319def735becf", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$fuseblk(0x0, 0x0, &(0x7f0000000240)='fuseblk\x00', 0x100800, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:17:36 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000bccb280012000c000100766574680000000018000200fd00010000000000", @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_VF_PORTS={0x4}]}, 0x24}}, 0x0) 02:17:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) prctl$PR_SVE_GET_VL(0x33, 0x0) [ 239.379337][ T9274] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 02:17:36 executing program 2: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f626903653020776c616e305e6b657972696e672b2d242a33766d6e6574316370757365745e20707070302973656c696e6c8b202f6465762f6b766d0020637075616363742e73746174000a77a18cc636a39e00e4f092060ba3d5402856e550f154c60fe5c4f305e52c79c761e3594594ea75205ff60f6bb9e9736a3848357275df82a1b0"], 0x89) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:17:36 executing program 4: r0 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup3(r1, r0, 0x0) [ 239.477964][ T9281] fuse: Unknown parameter '{×iî*ìlX“aŒ~2Ýh¯ñߦ͆fëú83 ÒIÿ9~ûD] [ 239.477964][ T9281] L·µÞ `Ž§§_k·i£Þ÷5¾Ï0x0000000000000006' [ 239.553328][ T9253] fuse: Bad value for 'fd' [ 239.589024][ T9290] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 239.604615][ T9244] fuse: Unknown parameter '{×iî*ìlX“aŒ~2Ýh¯ñߦ͆fëú83 ÒIÿ9~ûD] [ 239.604615][ T9244] L·µÞ `Ž§§_k·i£Þ÷5¾Ï0x0000000000000006' [ 239.642709][ T9271] fuse: Unknown parameter '{×iî*ìlX“aŒ~2Ýh¯ñߦ͆fëú83 ÒIÿ9~ûD] [ 239.642709][ T9271] L·µÞ `Ž§§_k·i£Þ÷5¾Ï0x0000000000000006' 02:17:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) prctl$PR_SVE_GET_VL(0x33, 0x0) 02:17:37 executing program 4: perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8348}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/if_inet6\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x7fff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000000000000940000000000000057000000030080f99500000000000000bf8b49fc8b43aecb72873e3771b23dbfe298e4cab6670c62c95c76eecb239202ef07e61ecfe919fff8150dc762f5edbeb8c319a4186c576c2935cf431f422802a5f4ad5466e4238d4e30d89285b800bee79b3a6a"], &(0x7f0000003ff6)='OPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000028d242a2e5d0e57000000000000000000000000000000000000000002000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fef14011d3c3f3dd6b00"/136]}, 0x100) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) r6 = getpgrp(0x0) waitid(0x0, r6, &(0x7f00000002c0), 0x5, 0x0) ptrace$getregs(0xe, r6, 0x9, &(0x7f00000001c0)=""/68) getpgid(r6) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000000)) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r9 = socket(0xa, 0x3, 0x8) r10 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[]}}, 0x40) r11 = gettid() waitid(0x83b895581628fca4, r11, &(0x7f0000000040), 0x2, &(0x7f0000000480)) 02:17:37 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x3, &(0x7f0000000100)) openat(0xffffffffffffffff, 0x0, 0x20200, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000a80)="ad56b6cc0400fb8b65d8b4ac2ca35c66", 0x10) 02:17:37 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES64=0x0, @ANYBLOB="e1a1ee21e0270d26bce688977586e59c4cc2c22846866d0919baf55764e2328373896fd00f9dde0a5ac20588003f1ac899cc6b82346b16f7fec419d5706327f144f627bfcfeee8bda62150d1e98f322586495051", @ANYRESDEC=0x0]) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) eventfd2(0x81, 0x0) lstat(0x0, &(0x7f0000000600)) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000001500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7bd7699dee2aec6c5893618c7e1d3202dd68aff1dfa6cd86126681ebfa383320d249ff397efb445d0a4c1116b7b5de0d608ea7a75f6bb769a319def735becf", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$fuseblk(0x0, 0x0, &(0x7f0000000240)='fuseblk\x00', 0x100800, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:17:37 executing program 2: 02:17:37 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) listen(r0, 0x0) 02:17:37 executing program 2: 02:17:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) prctl$PR_SVE_GET_VL(0x33, 0x0) 02:17:37 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysinfo(0x0) tkill(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x6021, 0x0) 02:17:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::],0::6:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 02:17:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) prctl$PR_SVE_GET_VL(0x33, 0x0) 02:17:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 240.764207][ T9303] bridge0: port 3(gretap0) entered blocking state [ 240.778365][ T9303] bridge0: port 3(gretap0) entered disabled state [ 240.786597][ T9303] device gretap0 entered promiscuous mode [ 240.793662][ T9303] bridge0: port 3(gretap0) entered blocking state [ 240.800258][ T9303] bridge0: port 3(gretap0) entered forwarding state 02:17:38 executing program 4: 02:17:38 executing program 5: 02:17:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:38 executing program 2: r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000180)={0x0, 0x0, 0x1}, 0xc) 02:17:38 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES64=0x0, @ANYBLOB="e1a1ee21e0270d26bce688977586e59c4cc2c22846866d0919baf55764e2328373896fd00f9dde0a5ac20588003f1ac899cc6b82346b16f7fec419d5706327f144f627bfcfeee8bda62150d1e98f322586495051", @ANYRESDEC=0x0]) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) eventfd2(0x81, 0x0) lstat(0x0, &(0x7f0000000600)) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000001500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="7bd7699dee2aec6c5893618c7e1d3202dd68aff1dfa6cd86126681ebfa383320d249ff397efb445d0a4c1116b7b5de0d608ea7a75f6bb769a319def735becf", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mount$fuseblk(0x0, 0x0, &(0x7f0000000240)='fuseblk\x00', 0x100800, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000003c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:17:38 executing program 4: 02:17:38 executing program 4: 02:17:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:38 executing program 0: 02:17:38 executing program 2: 02:17:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:38 executing program 4: 02:17:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4188aea7, &(0x7f0000000080)) 02:17:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:38 executing program 2: 02:17:38 executing program 4: [ 243.134671][ T9379] IPVS: ftp: loaded support on port[0] = 21 [ 243.247334][ T9379] chnl_net:caif_netlink_parms(): no params data found [ 243.296794][ T9379] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.305323][ T9379] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.313935][ T9379] device bridge_slave_0 entered promiscuous mode [ 243.322902][ T9379] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.330044][ T9379] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.338665][ T9379] device bridge_slave_1 entered promiscuous mode [ 243.365430][ T9379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.377427][ T9379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.407353][ T9379] team0: Port device team_slave_0 added [ 243.415637][ T9379] team0: Port device team_slave_1 added [ 243.483591][ T9379] device hsr_slave_0 entered promiscuous mode [ 243.550610][ T9379] device hsr_slave_1 entered promiscuous mode [ 243.610488][ T9379] debugfs: Directory 'hsr0' with parent '/' already present! [ 243.640976][ T9382] IPVS: ftp: loaded support on port[0] = 21 [ 243.667260][ T9379] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.674431][ T9379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.681868][ T9379] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.688913][ T9379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.817906][ T9379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.876319][ T9382] chnl_net:caif_netlink_parms(): no params data found [ 243.890048][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.907944][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.917940][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.928425][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 243.952660][ T9379] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.027477][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.036942][ T8885] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.044070][ T8885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.060327][ T9382] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.067417][ T9382] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.086433][ T9382] device bridge_slave_0 entered promiscuous mode [ 244.101693][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.110234][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.117303][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.132385][ T9382] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.139479][ T9382] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.148438][ T9382] device bridge_slave_1 entered promiscuous mode [ 244.183795][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.193111][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.202033][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.211577][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.222349][ T9382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.236149][ T9379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.251431][ T9379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.260881][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.272042][ T9382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.299028][ T9382] team0: Port device team_slave_0 added [ 244.324121][ T9382] team0: Port device team_slave_1 added [ 244.413688][ T9382] device hsr_slave_0 entered promiscuous mode [ 244.451183][ T9382] device hsr_slave_1 entered promiscuous mode [ 244.510436][ T9382] debugfs: Directory 'hsr0' with parent '/' already present! [ 244.527948][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.535624][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.555515][ T9379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.609788][ T9382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.625612][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.635379][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.649644][ T9382] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.675507][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.694121][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.702744][ T8907] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.709812][ T8907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.737207][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.745492][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.762239][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.784517][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.791655][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.830721][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.840809][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.853042][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.856581][ T9390] fuse: Unknown parameter '{×iî*ìlX“aŒ~2Ýh¯ñߦ͆fëú83 ÒIÿ9~ûD] [ 244.856581][ T9390] L·µÞ `Ž§§_k·i£Þ÷5¾Ï0x0000000000000006' [ 244.862021][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.895470][ T9382] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.907671][ T9382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.925858][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.937569][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.946386][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.975037][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.993344][ T9382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.000891][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.008395][ T8907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 02:17:42 executing program 1: 02:17:42 executing program 0: 02:17:42 executing program 2: 02:17:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:42 executing program 4: 02:17:42 executing program 5: 02:17:43 executing program 2: 02:17:43 executing program 4: 02:17:43 executing program 5: 02:17:43 executing program 0: 02:17:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:43 executing program 1: getcwd(0x0, 0xffffffffffffffa7) 02:17:43 executing program 0: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="448a84011be2fd005c400d7b080000000080000000d6878da294fde6c5924d6383e74dabe8ffa8e650bb377984dddd1795b4a3a25ad358db87d8e3a03e2e6d49a1a8b60fd07d9b1931e333ea6939ae"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:17:43 executing program 4: pipe(&(0x7f0000000200)) socket$packet(0x11, 0x4000000000002, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[]}}, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x81) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r4, &(0x7f0000000d00), 0x400004e, 0x0) 02:17:43 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001340)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x3}, 0x0) 02:17:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:43 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000200)='eth0ppp1\x00', 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000140)='<', 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r6, 0xa, 0x12) fcntl$setownex(r6, 0xf, &(0x7f00000ff000)={0x0, r5}) recvmsg(r7, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r6, r7) write(r7, &(0x7f00000002c0)="2a08675bb07e3f1f9dab18ceed6ea330996da40716f9cc1b8952b452237b3b2ca3b5cc68b5d095b62bc988c2473cc566d46340a25aede959f8e468a33627eb5251bc7356918e5d2fa5c4d75e19dbb5783339815d6072c4fe619e1a0b6f4babb2e3b378c467ea0a4070b5e2ec29a7b328416c4d2ddfe5a39da9cff8785f54e9a6a0517ebda197eeaf1f8297bf4ea19b4046d1b4f83a1f27608c157ab7961ba15cebb255537790da90ca88f86f93", 0xad) [ 246.320307][ C0] net_ratelimit: 16 callbacks suppressed [ 246.320315][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 246.331847][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:17:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 246.400491][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 246.406305][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:17:43 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 246.720492][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 246.726375][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:17:44 executing program 0: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="646d6f64653d3078303030103030303130303030303030312c00619c50345f4c8835ae800c16c8bbfc2dc1a0d95699090710386b53a46d5afb32605d0e2c4aedb60c9c79b926a94ee0aa89f21df1dfa801b0c8e7fb30589863abf8a9d0929c947b1842c1283eb6b76bdb352de2c14140a04009883a8f049b2c723a3b5413fdf99c659780b32aa7e643f0fe3cecde961b1708028f6cb718b76aca3af40e5beb59275d369b09b6c24a1dfd01c78acfd54f996fd8aed07563aa961033a9b2aaa99c"]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000180)=0x81, 0x1) tkill(r1, 0x16) tgkill(0x0, r1, 0x3f) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xdb, 0x4) fsync(0xffffffffffffffff) r4 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r5, 0xa, 0x12) fcntl$setownex(r5, 0xf, &(0x7f00000ff000)={0x0, r4}) recvmsg(r6, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r5, r6) fsetxattr$security_evm(r6, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@sha1={0x1, "c3ef1e7ffc740209df3ac468a5eb63c37088239a"}, 0x15, 0x0) r7 = semget$private(0x0, 0x0, 0x2a0) semctl$IPC_RMID(r7, 0x0, 0x0) semop(r7, &(0x7f0000000140)=[{0x2, 0xba8, 0x800}, {0x4, 0x2, 0x2000}, {0x3, 0x6, 0x1800}, {0x2, 0x7f}, {0x2, 0x9, 0x3000}, {0x1, 0x8}, {0x1, 0x1, 0x800}, {0x0, 0x1, 0x1800}, {0x3, 0x2, 0x1000}], 0x9) r8 = creat(&(0x7f0000000100)='./file0\x00', 0x100) ioctl$VIDIOC_G_PRIORITY(r8, 0x80045643, 0x0) 02:17:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:44 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r2) r3 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f00000ff000)={0x0, r3}) r5 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r6, 0xa, 0x12) fcntl$setownex(r6, 0xf, &(0x7f00000ff000)={0x0, r5}) recvmsg(r7, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r6, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x2}) kcmp(r1, r3, 0x2, r7, r9) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="757070657264697266696c65302c776f726b6469723d2e2f66696c65315c00003e000000000003a3b094636315feff23c7b69bd4374f6b52c104200254be607556abef5500"/81]) 02:17:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 247.239455][ T9509] overlayfs: unrecognized mount option "upperdirfile0" or missing value 02:17:44 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={0x14, r3, 0x401}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x28, r3, 0x400, 0x70bd26, 0x0, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x28}}, 0x2000802c) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x2d4, r3, 0x228, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb74b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x95b8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37ab}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7164}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7de}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf28}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}]}, @TIPC_NLA_LINK={0x164, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffbff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfa2000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x82f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x39}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x182}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc249}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x64c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4004014}, 0x200088c8) 02:17:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000180)={0x0, 0x10000, 0x9, 0x800}) syz_open_procfs(0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x40, 0x6, 0xb7, 0x40, 0x0, 0x4c3, 0x80, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xba9, 0x0, @perf_bp, 0x40, 0x7, 0x5, 0x0, 0x1, 0x93, 0x3f}, 0x0, 0x4, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x10001) r4 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000800)=0xe8) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000840)={{{@in=@rand_addr=0x1, @in=@broadcast, 0x4e24, 0x4, 0x4e22, 0x0, 0xd, 0x20, 0x20, 0x1, r9, r11}, {0x6, 0x2, 0x1, 0x8, 0x61, 0x200, 0x8000, 0x3f}, {0x401, 0xffffffff, 0x80000001, 0x6}, 0x6, 0x6e6bbc, 0x8e454d0d9ea7b235, 0x0, 0x4e80ac202d51bf6e, 0x3}, {{@in=@remote, 0x4d2, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x3501, 0x0, 0x2, 0x37, 0x2, 0x3f, 0x7}}, 0xe8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) write(r13, &(0x7f0000000380)="96464c0cfcf4e00aeaf839897b935591a6f7cc7c73674103825646a0944d8d152bc571ad3d00a5e0739792994168", 0x2e) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000240)) r14 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r15, @in6={{0xa, 0x4e22, 0x7, @mcast2, 0x3}}, 0x4, 0x7, 0x3ff, 0x6, 0x90}, 0x98) dup3(0xffffffffffffffff, r14, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(0xffffffffffffffff, 0xc0044306, &(0x7f0000000280)=0x7) 02:17:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x46a, 0x2022c3) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000440)=0x7, 0x4) dup(r1) r3 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x3, 0xc) write(r4, &(0x7f0000000340)="1f0000000102ff40003b54c007110000f30501000b000200000000000100cf", 0x1f) r5 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mISDNtimer\x00', 0x42000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0406618, &(0x7f00000004c0)={{0x1, 0x0, @reserved="f12f251d275cf49fd9ac2793f1a2e5353e4f1e07642ef414b4626942d3c21458"}}) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000001b40)={r6}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r6, @in6={{0xa, 0x4e23, 0x3, @loopback, 0x6}}, 0xc76, 0x81}, &(0x7f0000000000)=0x90) r9 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000001b40)={r10}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000180)={r10, @in6={{0xa, 0x4e23, 0x400, @mcast2, 0x9}}, 0x5, 0x0, 0x6, 0x2}, &(0x7f0000000240)=0x98) fcntl$setlease(r0, 0x400, 0xe8ca9cd234029ba3) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={r8, 0x0, 0xfffffffb, 0x4, 0x3, 0x8, 0x1cc7, 0x7c73c8ea, {r11, @in={{0x2, 0x4e22, @broadcast}}, 0x1, 0x9, 0x4, 0x0, 0x9}}, &(0x7f0000000380)=0xb0) 02:17:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 247.847527][ T9508] overlayfs: unrecognized mount option "upperdirfile0" or missing value 02:17:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RLCREATE(r1, &(0x7f0000000080)={0x18, 0xf, 0x1, {{0x8, 0x1, 0x1}, 0x7}}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x2000}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r7 = dup(r0) syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, &(0x7f0000000280)="66b9d009000066b80000000066ba010000000f303a85f5ffb8c7000f00d866b97005000066b85c00000066ba000000000f30660f38dcc4660f1bfd650fc75d0c66b80500000066b9070001000f01d966b9020100c066b80030000066ba000000000f3066b8fe1d00000f23d00f21f866351000000e0f23f8", 0x78}], 0x1, 0x0, &(0x7f0000000440)=[@dstype0={0x6, 0x1}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x2, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4cb, 0x0, 0x0, 0x100000000000000], 0xf000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 248.071891][ T9533] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.5'. 02:17:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:47 executing program 4: syz_open_pts(0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="9d", 0x1}], 0x105e}, 0xc100) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000480)="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", 0xffe4}], 0x1) 02:17:47 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100)=0xffffffff, 0x4) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:17:47 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), &(0x7f0000000180)=0x10) recvmmsg(r0, &(0x7f0000001580)=[{{&(0x7f0000000340)=@can, 0x56, &(0x7f00000002c0), 0x0, &(0x7f0000000480)=""/72, 0x48}, 0x7}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000080)=""/248, 0xf3}, {&(0x7f0000001000)=""/108, 0x6c}], 0x2}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001140)=""/27, 0x1b}, {0x0}], 0x2, &(0x7f0000001340)=""/209, 0xd1}}], 0x3, 0x2, 0x0) 02:17:47 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x5, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) ppoll(&(0x7f0000000000)=[{r0, 0x8}, {0xffffffffffffffff, 0x20}, {r0, 0x124}, {r0, 0x140}, {r0, 0x4000}, {r0}], 0x6, &(0x7f0000000040), &(0x7f0000000080)={0x7}, 0x8) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0xc00, &(0x7f0000000400)="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"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r1 = inotify_init1(0x0) syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x8, 0x20000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) close(r2) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) dup2(r4, r4) r5 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e20, 0x3ff, @mcast1, 0x800}, 0x1c) dup3(r5, r4, 0x0) recvmmsg(r5, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000015c0)=""/248, 0xf8}], 0x1}}], 0x1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) 02:17:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000180)={'syzkaller0\x00', @ifru_flags=0xc198fa49bd7d60ff}) recvmmsg(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b80)=""/4, 0x4}], 0x1}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000140)) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_udp_int(r4, 0x11, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0x80000000, @ipv4={[], [], @broadcast}, 0x2}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x15}, 0xb1}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x2b1, @mcast2, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x401}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x7ff, @rand_addr="f241b8df85a1357ad2a4187d5743d2bb", 0x1a}], 0xdc) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x10021, 0x0) getsockopt$inet6_tcp_buf(r7, 0x6, 0xb, &(0x7f00000002c0)=""/218, &(0x7f00000003c0)=0xda) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000050d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 02:17:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x1c9c380}, 0x1, 0x5}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000000)=0x7) socket(0x10, 0x9000000803, 0x0) 02:17:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:47 executing program 1: symlink(&(0x7f0000000500)='.\x00', &(0x7f00000004c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="5b4ef159dd8d69085b67cd3b84f07a653a3a5d2c433a3a303a"], &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) 02:17:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 250.180644][ T9584] ptrace attach of "/root/syz-executor.0"[8873] was attempted by " °ÿ àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ \x07 !   \x0a    /dev/media# \x0c  @ [ 250.228863][ T9592] ptrace attach of "/root/syz-executor.0"[8873] was attempted by " °ÿ àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ \x07 !   \x0a    /dev/media# /dev/sequencer2 \x0c  \x0a N ÿÿ   @ 02:17:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:47 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100)=0xffffffff, 0x4) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:17:48 executing program 4: openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x6698, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400000000000000, 0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x4, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x0, 'syz0\x00'}) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={'sit0\x00', 0x300000000000}) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff}) getresuid(0x0, &(0x7f0000000200), 0x0) socket(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) stat(0x0, 0x0) r5 = socket$inet(0x2, 0xa, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f000064effb)="8907040000", 0x5) socket$inet(0x2, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f000064effb), 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x200003}, 0x10) 02:17:48 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00001000100000000000008273e81e4b8c7e61", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c0002000800010005000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x10aec61bc6caa7b3}}, 0x20}}, 0x0) 02:17:48 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x10001, 0x101000) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffff8, 0x880) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="ad6826077c5f253ac398ba285b4ef97f", 0x10) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={0x0}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sockstat\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f00000000c0), &(0x7f0000000140)=0x4) creat(0x0, 0x0) 02:17:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:48 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100)=0xffffffff, 0x4) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) [ 250.848868][ T9626] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) 02:17:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00 \x00', 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000100)=""/219, 0xdb, 0x40, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="4ef27f45294600000033086c0000000000000000010710051166010000003800000000000044090a000b00000800"/56], 0x9e) 02:17:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x2, 0xffffff}]}}, &(0x7f00000000c0)=""/190, 0x32, 0xbe, 0x1}, 0x20) 02:17:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) 02:17:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) 02:17:48 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000002400070500"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000007000100667100003400020008000c00000040b10800090000000000080003000002000008000b0000000000080001000000000008000700000000004c9fd92efb40c02c50c5af8eec939b0bba96de14ce758e1158d6c34e560ccd1f336ed8186f237409f851933d00fe4b89000000000000000000"], 0x60}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2000, 0x0) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000040)=0x3) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000100), 0x492492492492c46, 0x0) 02:17:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000040)={0x35, &(0x7f0000000000)="46c8e16ca62c24fc467e017a9e332d8fb9a549906c67b3823c84cc2efe0588cd95244fa670d170625b651d6f4f9bd77ef0ec763c15"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) 02:17:49 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100)=0xffffffff, 0x4) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:17:49 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="81e229b8d5c29ba71f6c6bae9c2220ab9f708fc696aa59aa95f88979c0acede157babe1a980551bcc4c5350cb49adfee49b7deb9ba2645c860d93a"], 0x1) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x8}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r4 = accept4$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x0, 0x800) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = open(0x0, 0x100, 0x2) sendto$inet(r5, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf", 0x69, 0x0, 0x0, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r7 = socket$inet6(0xa, 0x69a2fb3c19289d6b, 0x0) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$inet6(0xa, 0x3, 0x2) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r12, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r13 = socket(0xa, 0x1, 0x0) r14 = dup(0xffffffffffffffff) write$cgroup_int(r14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000740)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', 0x0}) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, r15}) fcntl$F_GET_RW_HINT(r11, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r15}) getsockopt$IP_VS_SO_GET_SERVICES(r11, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r10, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000500)=0xfffffffffffffef6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:17:49 executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) mount(&(0x7f0000001340)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000180)='./file0\x00', 0x0, 0x1001004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x409, &(0x7f0000000080)) 02:17:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, 0x0) 02:17:49 executing program 2: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x9, 0x0, 0x0, [], 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x6e}]}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f00000018c0)=""/4096) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$UHID_CREATE2(r6, &(0x7f0000000780)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1000, 0x20, 0x5, 0x6, 0x4876, 0x56, "a72f6c5a63e75a8fb2bb25a79efd2dcc4c1835572c7678477dc998d4516acbeddbf384f1d5a6799fc569192cba977756b969f546a376bf687e3e24de695c8bb9bbc719d5cdd4a4a267719e9a4344fb21602a62ceec1dfc6d43c3f3730fdeddccdff5b501bf2b6e0c6f09b92098e203b7beb1bc5899b1228da1e92a040cbf036274da6a77e59e64f2adaffa36deef22df6442ad35e15f4eb5042b00f468e6aeb9e5d7e5f26748716aa87cdf89edbec8200fd6ecdff0d05191c35bbb01e3226f232489191fb7da35517f0787f6d673b3b071dd86556c3e95e781f3c2b760be092a3aeb5d1e50ef2a0d897e579eb97272f571f13f57986a286be13d04d9cae2b04f058b91e11ed954f42cce3e1a2917245e8fe5a180486a1f9375970996c7eb23d510125cad6d84758752a1835b95c3495d9962eacbc3ac48ca89448f392c2e7719dfa8b855aefe41de7b3ef7bd61ba79f65c47e4f8386448307fa3a9bece2f4cffcaf8eba9c10093d303b1f375c6943714277398f915fe2bda9026b32112c13ba034ef5170b9083dd0f1e4396fe920974614b1d8ffceef22a4e57bd070c0ccb2c99569b07afa903ad2582a7a5eac69c09d1f7e83225511a5f37a7e59fa88a636a776246e5ace48096a9d933e6cba611d72b173c4c741f9f374d03b89faef7ce9e7c7436c9d4c93425d378cd96b902e7568d9f82b5298ff614e083d92535fa002e488cb224428669e760c5dbcfb31dede2df169c7f063a0cd0832bfc1db87f7ebe98192dfb912ff6485cab72d1648ffefb57afae0419e63cbfdf2267cf19664640c2b3fdb4c25fc190d5668469fa0c67354d8388290a0228e121160b298e5d0cc2125c8a247e092f4faeba44b47bbfcfb9817004f18203a47109d9b8645e091811208ab646d9f8f9df043aa526db98917f5092a35f4e67970bc0e15c3a3cb75d9520d2e86a5d472918916841614b4bcee12f3f8389c98f7fd7e954c9d893c89369f93d580434ec41e14fd339ef2dc8b5ef459337d070bf0d6aa53c7974b2bbec3924c1cebaa66a6eca023ca7268ea115c4d2975784efd9a494789378142523ee85b40beeb929a096a09cae8c7801128c011bb75ab131579f761d1c75f9f1ea00202b70a897eca98f14d0fb9b5984e3ba85dc608e74bf8a7e6e6788c6e8dd552292aa1d8193131c970557b4ac435630959d5fd6a9673b64d68fb4a5a421181501578e06a19a06af416bbe0507bdcb00a2e5c06c649eab200266a92f53b1233dfd20cab73aebd9d96c29ab220f71b0929ee1b75f2772719e8592735d2e37e9c30a2f79ec27fe3f32858ebfb06d2245d446b369af226be0a1ca3112dc042e54300bbb80bdea2fa9c2bca002f89c1631d739e5d122bce9641799eae3ab054b1b4182c92e3aaa3371049c1c88f8d37816bc204d843251bb99a884bd11cf43b33359cdaf2b7daf073de386ca17103952dac12dc08dac3e140a43ffde48824e24f2647cf373629cf7a5b1ee395f410331a013c13b4767cd2cb77be0dc18899b3a51437226fa033a634df3b051d7352f8febc4abb0222cd2ab131921778920e9d23d665ede1a020afbeda54c37458065673ef607e06e2a75b7c4038fd487aa22c02d49bf3b0eee5805ce91685f021bf0b841223954c068cb54c216893b5c02e128d7f6d35195a503f9d2433f5af8f7c7183440f847b2f20532005813b694cad9eb8f52a6590ff3c390651ff168eb67808fee13e99d2b95bf6c235e43c679bb6cea1f49f86a60977996d25df6ae2588d1d0d3bcb0d36bc199f8ab08005d0de533002f645151206cacbef2c2c1261553308efef23afcdeaef77886adbb602ed0e8dd1b7e2b26fdd5a072f05c254fa182716bfdb853b286ab331db6b31c9375d8c5b5fd8c5ce5fd062273871635f308cfa029db671854be51981a3ce28828f55f4954a3da4a6fbc10d5fc5bb9b9ce160598eae4b9777a8564c34c438d1b6953cb8a67414f16335106c26251532850c01303b7a3e7cf9b9b8d6317904d0fdfe7c904de0d63b4d37241fbde61591bd0fff84647596d9423384f1c4f5ea8c2f3f0ad28df3d45a8764e649c1bd141c3c1cbac78a4ec224866c574827ec067769a884f28b3bddb34b454567199359f77eee8893d1d8cbe2bbfb99809fb3557f069fb53c0bb93eddc2acf83cfc92b3086c01d6b1778e47617baf042c89d50ccf3d3f2297184cf0aadcbaac8cea14b434dce68caf72ab45563fc59babf048a9a3718eab6dd8cad707181fd30eea41242cf959c5940dc721dd9d1184eb1cc1c0bd357b25c72d373a90633c26d58c5fdb3bcaf492ea22415d19ac80bea34e0305b880250643a8b5f61bceadd226c68fe31c67aba670d2a7b027a6d9b2e2379de422f30da6b5d54fb260ec99ed5f0a10b409ee7051758f0a2b913e70044fd0ee792d0a4f1e9da83adb84bbe35434af9e4aae01884560467d5352616a0c41c602f61165b7bee6ca5eeab6d47552d7a511038c678b688f769e5f72ff51d1fbb43afcedac3e1d9a20514501fc154cd81dc3e64b2f961b27c050c8c259f2cd4c5c0214ee72b9af74696db8adf27bec3e33dad4225ef4b82a95f98b8a7c9515a34f1ff8f19c789c5b51664bcbfc483d341916271486ca1cc87a1496e53dd53872999bc22afcd8acf697030c36efa4dc4fdb48edd21f8baf2eb71c5bea5e4d2c9d5ef73b923eb80320bcda2410898adac5d253c659b3984c1c02843a32443960030131c1ad53c43701cfaa6d7e87763cd91ba90143538008a8538bc138acd1b36e02d93937984364e6c0ccafd18c007d63148b8a160f6aa9ac4cf4d1522d123088f8e87000443e40ecd45a6fb68871d63267db347b1e67e7f96108dbe3708d4c8350a9e1008be41bb6704cd9aca924708fe1cacbb9fcacc38210b72a8834810710ce0850158a3968a81a94ab50273f3c8e09711f510a2d8039c32c913e1a49c3132b39513ecbe2e6446573add6cfc2fd2e37a91776e0240b6d331c4906c795c9dce76f952db33b062782b9f15991361135054ca42f2cd3892484de6588e6f4d16525e7182b124122c77aa8c637a40ada16b1132c1878ca6875cc013063d52436cb0e7cf737e85e0525e7da8b525117474b45265ebb06195944c8f0870b900c61589bdb6637bf794836e08e1c2474d2a740cede14042b2b2d87281de65b514ba3cc6719440a3b15ae5262420fa0ffff38f618dc04d7abebae1294848215903a540dd04bfe2889c41cbd491369c77c5dec579405b3cf70dc59aac09cdd181dad73417e5bf7d6091b496cbceb3ce56c89b5b6af18b7529dd09aae266de60cbb3381039000838408c9134b98ade266b46c2168242ec5b8c933725ce2c5e6ad27a1bdb1683396c4b5febf2cbf781e461c136ee7a0cebac4c3cf62c6784b7b4b4c5e826e381a3b16e8db48f2913d8c5703d332043ffa0a761fcb6bb8c1063243cdbaad2a36a904c8901425b9dc17cc2dac12594fe135907d01042780397ebfc9278a8ae0e607515b93b30ff048d52777af6c5c3da189ae85c26ea7ff523b787a72a1700637097152bc2f4cea614c2e6fe62c11761f2e73f7a38832b0d69c7554d960033928d989589ce3ec7dbd01030a8bcc146fb7d28f51a8916d70490b4b169930cbef30ce3c4c12d5c319776f6d69189b1188cd09710640b3c896608e3d69f79c11ae9e2019fc90debc6e0995246e7d9165e8dec47ba2ebf0c37454739052f400f07212052f509ce4e9e3a9bc718fd198319e7b34ed93707980cfe3e90152c723243ceff0e445fd2c787c5a239ca28b88ed8ce0576b464369140b1f237ca6a1c7e65d3d9038d5590610d12c6edc0105cae9e4d34d20e5ed9b8258d6261e94c276ee40bf766344b9082ca9392bd751ff39bf902d8a367d2e1cd794cfad5e0e6b80d18225b9b4c0c6e53622a819731c854cb821196421e91d24a519eb91b003941cf81ff217655c56a9ad1a8a62efc76c21ac486086959071f528b56e450c9317ed24b04b1d094fcaf1c84dfe652fc0e940709ace45d26878405dec375dcbbfb5bb6779a21114ad1cef052ad9702f3d693092298aa2f8c5e73ef150f38caab4a9d29f3534ddec056607ae0d88bd3a0db0e1578477c5d5a02df58faa7f86d48e3d45d9affa730af6aebae53cba1fcf6ddb7ddad355a743811597db9eea412f57d60c8b7d8c64db740f57b4acb801893013c2300a8c03480208cb63f296121b04a3c27c51176912d6e3acc742d1f46c3ba7315d8e0f7a3b26131bcea4f4b57724b082a8f8ab68a11e58760f69d15b0562e19e84107c2f30d38c319ef729da5c41d63276eecb1e2cb2fe42de8131b8be5d16ed6cd955839567607d29e7984a2c1751f702924fb1e1294380e6708b96bcbbff732ac539f9a3cbbd72f11b8876e0a1615947a8a440988e97c42bbe3965cdb1ecc63187a71509b7354e9fdcc74ec5099e6d6abb0314fb94a9d4bcae51f7973581be425608c32e9597d477f718d4d4d43d7bd08752b411e875f10f0619ecf0ec2a4fcea6b96b7a4ba9765146cbf889c709ed2b79f46fa3d360d206e5330fb0ade93bf56a420806c665d3cb092049547d3003344310bb54e4e7f2af0caf08a2ed9cd461f88605fd824f637bab2bd247345ecb6e4d7ff3bf38538b9829c8905802ac9d0e894f17afe5876d822e8c4e02a62ac8fcc2a0b50489da9c03ca6505dc620cbf174a3cec031a4e819ab5a74f4c81d3052e2b50b8c74e6f8d2663136f9b2c511187301d862e10461b15b51eeaa5283cd0f64f7fedba69b1f4959934fc9265ee197b610cc629b5b33cdd1650e96962cde4e5249e0d716060e3682a3fb715312a4ab5ca4198a46c8ad18a2bf45e8aae22a56f8d741112f9865f21765d4895bd14ae169fcd241c8929d2dd4763e5aca6a891c870b8cd18963aafa02ab7fa36f3f79c16b61cec358a125122fa71ddc35a7f887129482f0d6dce13e154c75a56045e8887ac08e65b82da769c2e938397df3276845b6b91fbab3d35a036cbfb4023b1389fc3f4c275d4d02e2a836af7e82e0f381b9aed2a8bbf3c3c193b30167f15685bd388c5e9b80d553d8f99dc810a7f2488112fb34ec2e7c615c36ca9138af4b331943da58bdeda693e311b188a934caefa093398bea486875584e710234d87c6c0e1727fafc1469b4febbe73913d69976508467f397828f792bd0ecf0f477f4f3abe3aa73375d2dd8aca01746bce67282ddd057b23c1e8ed704215c2b11989224d6ba88617ddd06b777aaaec3deaf6165c56badf65b3b44e549116ad3196986cd9187086c2844de5da8c68797c04d560625719cb1781de5fcf0074f109134518c1df79ed77c4a441460afa289b2e94802f0fda611aced173ea7cb61b8470c12e001d3dc7e5dda5228e7c6c2e54c34910ddb294339796d5a6d7135d921aa5d16a05a35ea3f4f0f192084539848593af189d9ee3431ace9fff04493ea17e6ea65486809834b1d1124a42c1ef3ef148e9c0217e133165c431660268faac708d40e9bc83584a47a42cf30984113513c9774fc283822883389be39e1a51c34ff34929afaf45338353c6a99247655e1c911b857e650ef26e81e45f04edde7110972079b05dfb8ba93307030225600068d9565a189dea9541818ec40110aea67ea2d81091bd6380091a66f02c6ae2001693647d52fdb77ef822e5314e04cb1f8fae2e20152c99b16f830bafe9faf4d27cb735ea874f548b00704b0363bc6842be58434296cfdcff7da3f7a45131e09cc72a1852f771d50be07c1855c3b833676447bbe627"}, 0x1118) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup2(r8, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:17:49 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0}) r1 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r2, 0xa, 0x2f) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) sched_setscheduler(r1, 0x5, &(0x7f0000000040)=0xe1) 02:17:49 executing program 3 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:49 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100)=0xffffffff, 0x4) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:17:49 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x9}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x0, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000640)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x3, 0x4e20, 0x8}}}}}}, 0x0) [ 252.190895][ T9702] FAULT_INJECTION: forcing a failure. [ 252.190895][ T9702] name failslab, interval 1, probability 0, space 0, times 1 [ 252.225532][ T9702] CPU: 1 PID: 9702 Comm: syz-executor.3 Not tainted 5.4.0-rc6-next-20191108 #0 [ 252.234519][ T9702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.244588][ T9702] Call Trace: [ 252.248011][ T9702] dump_stack+0x197/0x210 [ 252.252433][ T9702] should_fail.cold+0xa/0x15 [ 252.257017][ T9702] ? fault_create_debugfs_attr+0x180/0x180 [ 252.262813][ T9702] ? ___might_sleep+0x163/0x2c0 [ 252.267654][ T9702] __should_failslab+0x121/0x190 [ 252.272577][ T9702] should_failslab+0x9/0x14 [ 252.277064][ T9702] __kmalloc+0x2e0/0x770 [ 252.281291][ T9702] ? mark_held_locks+0xf0/0xf0 [ 252.286034][ T9702] ? mark_lock+0xc2/0x1220 [ 252.290526][ T9702] ? _parse_integer+0x190/0x190 [ 252.295430][ T9702] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 252.301145][ T9702] tomoyo_realpath_from_path+0xcd/0x7b0 [ 252.306673][ T9702] ? tomoyo_path_number_perm+0x193/0x520 [ 252.312294][ T9702] tomoyo_path_number_perm+0x1dd/0x520 [ 252.317748][ T9702] ? tomoyo_path_number_perm+0x193/0x520 [ 252.323375][ T9702] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 252.329163][ T9702] ? __f_unlock_pos+0x19/0x20 [ 252.333933][ T9702] ? __fget+0x37f/0x550 [ 252.338075][ T9702] ? ksys_dup3+0x3e0/0x3e0 [ 252.342474][ T9702] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 252.348008][ T9702] tomoyo_file_ioctl+0x23/0x30 [ 252.352817][ T9702] security_file_ioctl+0x77/0xc0 [ 252.357739][ T9702] ksys_ioctl+0x57/0xd0 [ 252.361879][ T9702] __x64_sys_ioctl+0x73/0xb0 [ 252.366454][ T9702] do_syscall_64+0xfa/0x760 [ 252.371008][ T9702] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.376882][ T9702] RIP: 0033:0x45a219 [ 252.380759][ T9702] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.400343][ T9702] RSP: 002b:00007fbf49c0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.408737][ T9702] RAX: ffffffffffffffda RBX: 00007fbf49c0bc90 RCX: 000000000045a219 [ 252.416703][ T9702] RDX: 0000000020000040 RSI: 00000000c008ae09 RDI: 0000000000000004 [ 252.424655][ T9702] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 252.432609][ T9702] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf49c0c6d4 [ 252.440561][ T9702] R13: 00000000004c362a R14: 00000000004d78b8 R15: 0000000000000005 02:17:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4048000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000002c0)) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000240)=0xc) syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) getegid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000440)=0xc) getresgid(0x0, &(0x7f00000004c0), &(0x7f0000000500)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000240)) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r6, 0xa, 0x12) fcntl$setownex(r6, 0xf, &(0x7f00000ff000)={0x0, r5}) recvmsg(r7, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r6, r7) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX]) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) dup(0xffffffffffffffff) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=@fragment, 0x8) [ 252.520000][ T9702] ERROR: Out of memory at tomoyo_realpath_from_path. 02:17:49 executing program 3 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 252.757442][ T9719] FAULT_INJECTION: forcing a failure. [ 252.757442][ T9719] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 252.770698][ T9719] CPU: 0 PID: 9719 Comm: syz-executor.3 Not tainted 5.4.0-rc6-next-20191108 #0 [ 252.779634][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.789704][ T9719] Call Trace: [ 252.793018][ T9719] dump_stack+0x197/0x210 [ 252.797371][ T9719] should_fail.cold+0xa/0x15 [ 252.801975][ T9719] ? _raw_spin_unlock_irq+0x23/0x80 [ 252.807190][ T9719] ? fault_create_debugfs_attr+0x180/0x180 [ 252.813004][ T9719] ? trace_hardirqs_on+0x67/0x240 [ 252.818034][ T9719] ? __kasan_check_read+0x11/0x20 [ 252.823074][ T9719] should_fail_alloc_page+0x50/0x60 [ 252.828279][ T9719] __alloc_pages_nodemask+0x1a1/0x910 [ 252.833661][ T9719] ? __alloc_pages_slowpath+0x2900/0x2900 [ 252.839382][ T9719] ? __kasan_check_read+0x11/0x20 [ 252.844413][ T9719] ? fault_create_debugfs_attr+0x180/0x180 [ 252.850222][ T9719] cache_grow_begin+0x90/0xd00 [ 252.854990][ T9719] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 252.860706][ T9719] ? trace_hardirqs_off+0x62/0x240 [ 252.865832][ T9719] __kmalloc+0x6b2/0x770 [ 252.870082][ T9719] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 252.875804][ T9719] tomoyo_realpath_from_path+0xcd/0x7b0 [ 252.881358][ T9719] tomoyo_path_number_perm+0x1dd/0x520 [ 252.886814][ T9719] ? tomoyo_path_number_perm+0x193/0x520 [ 252.892448][ T9719] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 252.898248][ T9719] ? __fget+0x35d/0x550 [ 252.902436][ T9719] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 252.907899][ T9719] ? __this_cpu_preempt_check+0x35/0x190 [ 252.913532][ T9719] ? retint_kernel+0x2b/0x2b [ 252.918395][ T9719] tomoyo_file_ioctl+0x23/0x30 [ 252.923164][ T9719] security_file_ioctl+0x77/0xc0 [ 252.928103][ T9719] ksys_ioctl+0x57/0xd0 [ 252.932263][ T9719] __x64_sys_ioctl+0x73/0xb0 [ 252.936864][ T9719] do_syscall_64+0xfa/0x760 [ 252.941509][ T9719] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.947944][ T9719] RIP: 0033:0x45a219 [ 252.951846][ T9719] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.971451][ T9719] RSP: 002b:00007fbf49c0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.979869][ T9719] RAX: ffffffffffffffda RBX: 00007fbf49c0bc90 RCX: 000000000045a219 [ 252.987852][ T9719] RDX: 0000000020000040 RSI: 00000000c008ae09 RDI: 0000000000000004 [ 252.995829][ T9719] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 253.003906][ T9719] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf49c0c6d4 [ 253.011881][ T9719] R13: 00000000004c362a R14: 00000000004d78b8 R15: 0000000000000005 02:17:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000140)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000240)=""/159, &(0x7f0000000100)=0x9f) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x101000, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000000c0)="b64c4f") ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00', 0x200}) ioctl$UI_DEV_CREATE(r0, 0x5501) 02:17:50 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x101000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0xab9dbbbb351372c0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000240)={0x2, r1}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) r5 = dup2(r4, 0xffffffffffffffff) ioctl$GIO_FONTX(r5, 0x4b6b, &(0x7f00000000c0)=""/201) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0xd, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @local}}}, &(0x7f0000002ffc)=0x98) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x32, 0xffffffffffffffff, 0x0) close(r2) 02:17:50 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100)=0xffffffff, 0x4) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:17:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[], 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000400)=ANY=[@ANYBLOB="81e229b8d5c29ba71f6c6bae9c2220ab9f708fc696aa59aa95f88979c0acede157babe1a980551bcc4c5350cb49adfee49b7deb9ba2645c860d93a"], 0x1) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x8}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) r4 = accept4$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, 0x0, 0x800) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r5 = open(0x0, 0x100, 0x2) sendto$inet(r5, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf", 0x69, 0x0, 0x0, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r7 = socket$inet6(0xa, 0x69a2fb3c19289d6b, 0x0) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$inet6(0xa, 0x3, 0x2) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r12, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) r13 = socket(0xa, 0x1, 0x0) r14 = dup(0xffffffffffffffff) write$cgroup_int(r14, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r14, 0x29, 0x22, &(0x7f0000000740)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0xe8) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', 0x0}) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, r15}) fcntl$F_GET_RW_HINT(r11, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r15}) getsockopt$IP_VS_SO_GET_SERVICES(r11, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r10, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@empty}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000500)=0xfffffffffffffef6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:17:50 executing program 3 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 253.463628][ T9729] FAULT_INJECTION: forcing a failure. [ 253.463628][ T9729] name failslab, interval 1, probability 0, space 0, times 0 02:17:50 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100)=0xffffffff, 0x4) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:17:50 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40040, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x0, 0x2, {0x0, 0x4}}, 0x20) r2 = open(0x0, 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @remote}}, 0x24) r3 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x4) r4 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001b40)={r5}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000300)={r5, @in6={{0xa, 0x4e21, 0x9, @loopback, 0x7fffffff}}, [0x6, 0x7a, 0x40, 0x7, 0x81, 0x7, 0x0, 0x75, 0x0, 0x100000000, 0x27, 0xf38, 0x9, 0xa3, 0x5]}, &(0x7f0000000400)=0x100) ftruncate(r3, 0x1000000) socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000000c0), &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0xc, 0xbdff, 0x0, 0xd84, 0x7, 0x0, 0x10001, 0x80000000}, &(0x7f0000000440)=0x20) get_robust_list(0x0, &(0x7f0000000180)=&(0x7f0000000140)={&(0x7f0000000080)}, &(0x7f0000000200)=0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r3, &(0x7f00000000c0)=0xf18001, 0xeefffdef) [ 253.511588][ T9738] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 253.544716][ T9740] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 253.628477][ T9729] CPU: 1 PID: 9729 Comm: syz-executor.3 Not tainted 5.4.0-rc6-next-20191108 #0 [ 253.637465][ T9729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.647532][ T9729] Call Trace: [ 253.650842][ T9729] dump_stack+0x197/0x210 [ 253.655205][ T9729] should_fail.cold+0xa/0x15 [ 253.659809][ T9729] ? fault_create_debugfs_attr+0x180/0x180 [ 253.659832][ T9729] ? ___might_sleep+0x163/0x2c0 [ 253.659854][ T9729] __should_failslab+0x121/0x190 [ 253.675416][ T9729] should_failslab+0x9/0x14 [ 253.675434][ T9729] kmem_cache_alloc_node_trace+0x274/0x750 [ 253.675451][ T9729] ? find_held_lock+0x35/0x130 [ 253.675473][ T9729] __get_vm_area_node+0x12b/0x370 [ 253.695928][ T9729] __vmalloc_node_range+0xd2/0x790 [ 253.701086][ T9729] ? kvm_dev_ioctl_get_cpuid+0x13a/0xb47 [ 253.706735][ T9729] ? kvm_dev_ioctl_get_cpuid+0x13a/0xb47 [ 253.712381][ T9729] vzalloc+0x6b/0x90 [ 253.716288][ T9729] ? kvm_dev_ioctl_get_cpuid+0x13a/0xb47 [ 253.721930][ T9729] kvm_dev_ioctl_get_cpuid+0x13a/0xb47 [ 253.727404][ T9729] ? kvm_vcpu_ioctl_get_cpuid2+0x1c0/0x1c0 [ 253.733227][ T9729] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 253.739476][ T9729] ? _copy_from_user+0x12c/0x1a0 [ 253.744429][ T9729] kvm_arch_dev_ioctl+0x300/0x4b0 [ 253.749467][ T9729] ? kvm_vm_ioctl_check_extension+0x4d0/0x4d0 [ 253.754627][ T9748] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 253.755540][ T9729] ? kvm_debugfs_release+0x90/0x90 [ 253.755561][ T9729] ? kvm_debugfs_release+0x90/0x90 [ 253.755574][ T9729] kvm_dev_ioctl+0x132/0x1610 [ 253.755595][ T9729] ? kvm_debugfs_release+0x90/0x90 [ 253.783791][ T9729] ? kvm_debugfs_release+0x90/0x90 [ 253.785804][ T9748] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 253.788916][ T9729] do_vfs_ioctl+0x977/0x14e0 [ 253.788937][ T9729] ? compat_ioctl_preallocate+0x220/0x220 [ 253.788957][ T9729] ? __fget+0x37f/0x550 [ 253.811458][ T9729] ? ksys_dup3+0x3e0/0x3e0 [ 253.815888][ T9729] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 253.822148][ T9729] ? fput_many+0x12c/0x1a0 [ 253.826582][ T9729] ? tomoyo_file_ioctl+0x23/0x30 [ 253.831532][ T9729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.837792][ T9729] ? security_file_ioctl+0x8d/0xc0 [ 253.842928][ T9729] ksys_ioctl+0xab/0xd0 [ 253.847103][ T9729] __x64_sys_ioctl+0x73/0xb0 [ 253.851706][ T9729] do_syscall_64+0xfa/0x760 [ 253.856226][ T9729] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.862147][ T9729] RIP: 0033:0x45a219 [ 253.866054][ T9729] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 253.885765][ T9729] RSP: 002b:00007fbf49c0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.894194][ T9729] RAX: ffffffffffffffda RBX: 00007fbf49c0bc90 RCX: 000000000045a219 [ 253.902186][ T9729] RDX: 0000000020000040 RSI: 00000000c008ae09 RDI: 0000000000000004 [ 253.910172][ T9729] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 253.918155][ T9729] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf49c0c6d4 02:17:51 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x68000) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0xfd7f, &(0x7f0000000100)={&(0x7f00000002c0)={0x24, 0x3, 0x8, 0x319, 0x0, 0x0, {}, [@nested={0x8, 0x2, [@generic="cf"]}, @typed={0x8, 0x3, @fd}]}, 0x24}}, 0x0) 02:17:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4048000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000002c0)) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000240)=0xc) syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"]) getegid() stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000440)=0xc) getresgid(0x0, &(0x7f00000004c0), &(0x7f0000000500)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000240)) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r6, 0xa, 0x12) fcntl$setownex(r6, 0xf, &(0x7f00000ff000)={0x0, r5}) recvmsg(r7, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r6, r7) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) syz_mount_image$hfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX]) getresgid(&(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) dup(0xffffffffffffffff) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=@fragment, 0x8) [ 253.926142][ T9729] R13: 00000000004c362a R14: 00000000004d78b8 R15: 0000000000000005 [ 253.987761][ T9729] syz-executor.3: vmalloc: allocation failure: 3200 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 254.025134][ T9729] CPU: 1 PID: 9729 Comm: syz-executor.3 Not tainted 5.4.0-rc6-next-20191108 #0 [ 254.043219][ T9729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.043225][ T9729] Call Trace: [ 254.043248][ T9729] dump_stack+0x197/0x210 [ 254.043268][ T9729] warn_alloc.cold+0x87/0x164 [ 254.043294][ T9729] ? zone_watermark_ok_safe+0x260/0x260 [ 254.043317][ T9729] ? __get_vm_area_node+0x2bb/0x370 [ 254.056771][ T9729] __vmalloc_node_range+0x455/0x790 [ 254.056795][ T9729] ? kvm_dev_ioctl_get_cpuid+0x13a/0xb47 [ 254.056815][ T9729] vzalloc+0x6b/0x90 [ 254.081710][ T9729] ? kvm_dev_ioctl_get_cpuid+0x13a/0xb47 [ 254.081726][ T9729] kvm_dev_ioctl_get_cpuid+0x13a/0xb47 [ 254.081746][ T9729] ? kvm_vcpu_ioctl_get_cpuid2+0x1c0/0x1c0 [ 254.081764][ T9729] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 254.081778][ T9729] ? _copy_from_user+0x12c/0x1a0 [ 254.081800][ T9729] kvm_arch_dev_ioctl+0x300/0x4b0 [ 254.081815][ T9729] ? kvm_vm_ioctl_check_extension+0x4d0/0x4d0 [ 254.081836][ T9729] ? kvm_debugfs_release+0x90/0x90 [ 254.081853][ T9729] ? kvm_debugfs_release+0x90/0x90 [ 254.081866][ T9729] kvm_dev_ioctl+0x132/0x1610 [ 254.081885][ T9729] ? kvm_debugfs_release+0x90/0x90 [ 254.091398][ T9729] ? kvm_debugfs_release+0x90/0x90 [ 254.091416][ T9729] do_vfs_ioctl+0x977/0x14e0 [ 254.091435][ T9729] ? compat_ioctl_preallocate+0x220/0x220 [ 254.091448][ T9729] ? __fget+0x37f/0x550 [ 254.091466][ T9729] ? ksys_dup3+0x3e0/0x3e0 [ 254.091477][ T9729] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 254.091496][ T9729] ? fput_many+0x12c/0x1a0 [ 254.185097][ T9729] ? tomoyo_file_ioctl+0x23/0x30 [ 254.190052][ T9729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 254.196306][ T9729] ? security_file_ioctl+0x8d/0xc0 [ 254.201448][ T9729] ksys_ioctl+0xab/0xd0 [ 254.205611][ T9729] __x64_sys_ioctl+0x73/0xb0 [ 254.210392][ T9729] do_syscall_64+0xfa/0x760 [ 254.214909][ T9729] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 254.220798][ T9729] RIP: 0033:0x45a219 [ 254.224698][ T9729] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 254.244306][ T9729] RSP: 002b:00007fbf49c0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.244320][ T9729] RAX: ffffffffffffffda RBX: 00007fbf49c0bc90 RCX: 000000000045a219 [ 254.244327][ T9729] RDX: 0000000020000040 RSI: 00000000c008ae09 RDI: 0000000000000004 [ 254.244334][ T9729] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 254.244342][ T9729] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf49c0c6d4 02:17:51 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100)=0xffffffff, 0x4) dup(r1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:17:51 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000100)=0xffffffff, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:17:51 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8937, &(0x7f0000000080)='ip6tnl0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000000), 0x4) 02:17:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='\x00\xaeC\xae\xc4\x05\xa9\xbd~\xfb\xd3\x81\xff\x9c\xf1\xcc\xfe:4\x01\x01\x01\x00w\xa7\x04~\\\xd4Y\x04\xaf^\xc6\xf2\x98\"\xa0\xa1\x04\xaf\x81\x00ov0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PIO_SCRNMAP(r5, 0x4b41, &(0x7f0000000380)="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") r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfffffe1f, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x40008}}, 0x20}}, 0x0) [ 254.244349][ T9729] R13: 00000000004c362a R14: 00000000004d78b8 R15: 0000000000000005 02:17:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getgid() setfsgid(r1) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 02:17:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getgid() setfsgid(r1) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 254.542547][ T9729] Mem-Info: [ 254.548268][ T9729] active_anon:109893 inactive_anon:7548 isolated_anon:0 [ 254.548268][ T9729] active_file:12258 inactive_file:33016 isolated_file:0 [ 254.548268][ T9729] unevictable:1536 dirty:835 writeback:0 unstable:0 [ 254.548268][ T9729] slab_reclaimable:11647 slab_unreclaimable:97713 [ 254.548268][ T9729] mapped:59022 shmem:289 pagetables:1120 bounce:0 [ 254.548268][ T9729] free:1255671 free_pcp:660 free_cma:0 [ 254.599790][ T9729] Node 0 active_anon:437440kB inactive_anon:30192kB active_file:48888kB inactive_file:132064kB unevictable:6144kB isolated(anon):0kB isolated(file):0kB mapped:235988kB dirty:3336kB writeback:0kB shmem:1156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 71680kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 254.639414][ T9729] Node 1 active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 254.717371][ T9729] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 254.788088][ T9729] lowmem_reserve[]: 0 2547 2548 2548 [ 254.840613][ T9729] Node 0 DMA32 free:1245260kB min:36184kB low:45228kB high:54272kB active_anon:426800kB inactive_anon:30192kB active_file:47840kB inactive_file:132012kB unevictable:6144kB writepending:3368kB present:3129332kB managed:2611892kB mlocked:6144kB kernel_stack:7616kB pagetables:4304kB bounce:0kB free_pcp:2680kB local_pcp:1332kB free_cma:0kB [ 254.883574][ T9729] lowmem_reserve[]: 0 0 1 1 [ 254.903555][ T9729] Node 0 Normal free:20kB min:16kB low:20kB high:24kB active_anon:16kB inactive_anon:0kB active_file:1048kB inactive_file:88kB unevictable:0kB writepending:8kB present:786432kB managed:1172kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 254.976682][ T9729] lowmem_reserve[]: 0 0 0 0 [ 254.992981][ T9729] Node 1 Normal free:3775760kB min:53684kB low:67104kB high:80524kB active_anon:0kB inactive_anon:0kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870244kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 255.025248][ T9729] lowmem_reserve[]: 0 0 0 0 [ 255.029822][ T9729] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 255.045377][ T9729] Node 0 DMA32: 1744*4kB (UME) 2651*8kB (UME) 986*16kB (UME) 306*32kB (UME) 89*64kB (UME) 21*128kB (UM) 6*256kB (UME) 5*512kB (UME) 13*1024kB (UM) 3*2048kB (UM) 283*4096kB (M) = 1244856kB [ 255.064358][ T9729] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 255.077073][ T9729] Node 1 Normal: 2*4kB (E) 52*8kB (UME) 180*16kB (UME) 97*32kB (UME) 30*64kB (UM) 19*128kB (UM) 3*256kB (U) 4*512kB (U) 2*1024kB (UM) 2*2048kB (UM) 917*4096kB (ME) = 3775752kB [ 255.095899][ T9729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 255.105705][ T9729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 255.115032][ T9729] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 02:17:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae09, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getgid() setfsgid(r1) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) 02:17:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x101, 0x0, 0x7, 0x0, {0x4, 0x0, 0x0, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, "c34d888a52725f26c327cb694da53ce546e1e089c37c009039f72fdd0c848ef0"}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f00000001c0)=0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) semctl$IPC_RMID(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 02:17:52 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000100)=0xffffffff, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:17:52 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"}) r6 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x840) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xfd}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000100)={r7, 0x100, 0x0, 0x1, 0x7}, &(0x7f0000000280)=0x18) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = dup3(r3, r4, 0x0) ioctl$KVM_SET_SREGS(r5, 0x8004ae98, &(0x7f0000000140)) dup2(r8, r5) 02:17:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/kcm\x00\b\x00') mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0)='9p\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e733d756e69782c7375626a5f757365723dd9b82c736d5d636b6673666c6b6f723d2c00"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$kcm(0x29, 0x0, 0x0) sendfile(r3, r0, 0x0, 0xffff7ffc) r4 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001b40)={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r5, 0xff0e}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000004c0)={'TPROXY\x00'}, &(0x7f0000000500)=0x1e) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r9, 0x40485404, &(0x7f0000000440)={{0xffffffffffffffff, 0x0, 0x7, 0x1, 0x7fffffff}, 0x400, 0x6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000000540)=@req={0x4, 0x800, 0x8, 0x200}, 0x10) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000380)={0x3, 0x0, [{0x0, 0xf6, &(0x7f00000001c0)=""/246}, {0x5000, 0xb, &(0x7f0000000140)=""/11}, {0x1, 0x91, &(0x7f00000002c0)=""/145}]}) [ 255.124619][ T9729] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 255.133972][ T9729] 45572 total pagecache pages [ 255.138669][ T9729] 0 pages in swap cache [ 255.142953][ T9729] Swap cache stats: add 0, delete 0, find 0/0 [ 255.149024][ T9729] Free swap = 0kB [ 255.152800][ T9729] Total swap = 0kB [ 255.156541][ T9729] 1965979 pages RAM [ 255.160476][ T9729] 0 pages HighMem/MovableOnly [ 255.165149][ T9729] 341175 pages reserved [ 255.169292][ T9729] 0 pages cma reserved 02:17:52 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:17:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x41c1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)={0xc3, 0x7, 0x1, "bb8dc23b02b81a1d9e3557ca1c0b7eb5746829d50ef4d9746df148d8aa077b103097c4615ee55f9ed05573b2cae82ad1a95de7ab417591e248d6cd9581b7f76e0dbb0e97aa78b1fe2e788a6be2f5ca8b4ea34ccc900bfb6f2ffed0492619e8aa2c7f051af6fdd522a14152bffb95f6b99dfdd3106a310e51dc301f69da61d31f9e585e312af270832d00c50567fbd803f216b273478c6aee5213d54a1db6a42ed99e19a04558e282efd7011be3bae1dd2a4f9836f5dd618e4045910284afdb345be506"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x2) ioctl$KDADDIO(r3, 0x4b34, 0x5) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d40)={0xfffffffffffffffe, 0x0, 0x0}, 0x0) 02:17:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x91002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000004f80)={0x0, 0x0, &(0x7f00000027c0)=[{0x0}, {&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x3, &(0x7f0000004fc0)=ANY=[@ANYBLOB, @ANYPTR, @ANYPTR, @ANYBLOB, @ANYPTR=&(0x7f0000003d40)=ANY=[@ANYBLOB], @ANYBLOB="00100000", @ANYRES32=0x0, @ANYPTR, @ANYBLOB="040000000000000008000000"], 0x34}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f00000014c0)) msgsnd(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x1, 0x0) msgctl$IPC_RMID(r2, 0x0) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(r1, 0x0, 0x0, 0x4) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) [ 255.303145][ T9036] device bridge_slave_1 left promiscuous mode [ 255.310265][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state 02:17:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x2, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 255.395073][ T9036] device bridge_slave_0 left promiscuous mode [ 255.419896][ T9036] bridge0: port 1(bridge_slave_0) entered disabled state 02:17:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x10, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:53 executing program 0: mknod(&(0x7f0000000100)='./file0\x00', 0x800000000000744, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x9, 0x42, 0x0, 0x601973dfc2c8373c, 0x4, 0x20, 0x3, 0x8001, 0x0, 0x271, 0x121a, 0xd44, 0xffffffff, 0x2000, 0x11, 0x45}}) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000024c0)=[&(0x7f0000000c00)='&\x00', &(0x7f0000001a80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001c80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<\xbaC\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9dB_A\xec>k*\x13\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac']) [ 255.533250][ T26] audit: type=1800 audit(1573352272.919:35): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16499 res=0 02:17:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x227d, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x2405, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 258.101292][ T9036] device hsr_slave_0 left promiscuous mode [ 258.131007][ T9036] device hsr_slave_1 left promiscuous mode [ 258.197282][ T9036] team0 (unregistering): Port device team_slave_1 removed [ 258.213525][ T9036] team0 (unregistering): Port device team_slave_0 removed [ 258.227885][ T9036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.276118][ T9036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.395505][ T9036] bond0 (unregistering): Released all slaves 02:17:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80002, 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0xff, 0x7fff, 0x3, 0xc5b4, 0x3f, 0x7f, 0x8, 0x6a, 0x401, 0x7ff, 0x5, 0x2, 0xb6, 0x5, 0x100000001, 0x6], 0x6000, 0x249500}) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000005680)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000000c0)={0x1d, r10}, 0x10) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r5, 0x0}]) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)={[{0x2425, 0x3, 0x5, 0x6, 0x6, 0x7f, 0x9, 0xba, 0x0, 0x3f, 0x7, 0x8c, 0x6}, {0x1, 0x5, 0x1f, 0x5, 0x1f, 0x5, 0x75, 0x9, 0x40, 0x1, 0x1, 0x9, 0x8001}, {0x2, 0x8f, 0x5, 0x4, 0x99, 0x20, 0x7f, 0xd, 0x8, 0x6, 0x2, 0x22, 0x3}], 0x10001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) shmget$private(0x0, 0x3000, 0x20, &(0x7f000000d000/0x3000)=nil) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:17:56 executing program 1: getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x6a0000, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000300), 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) unshare(0x40000000) 02:17:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4c00, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:56 executing program 2: mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8, 0x0, 0xef7a76ae68bcc808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0xd15c, @loopback, 0x1}, 0x1c) r2 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) fcntl$lock(r2, 0x0, &(0x7f0000027000)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000001c0), 0x4) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/nfsfs\x00') r5 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r6, 0xa, 0x12) fcntl$setownex(r6, 0xf, &(0x7f00000ff000)={0x0, r5}) recvmsg(r7, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r6, r7) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000300)=@buf={0x1000, &(0x7f00000007c0)="df03ec491897b952299d18c6408d2147430ac2eb29036071733cc5685f1d3f85edf21b2d2cc1b1ccb555f33d87d315403fa1bc428a24fee7e77523f40d7cf142b8eb6cbbd21164551f56501ac62ac618d862bd560265a94dc5c07944871326787a6a018b0540e96fd64ac2b6521651b2d900d8357d0fdbe722c3b56124ae5fcd2a5c0f535ff5edc5450d0d28c753508b2f692016ad628eb0197456c19c5efdf2c7f2b91d9922afec1888c699ff9eb1f3abb97ecd2554984cde8f64d1f3b7bb7b056bbeffc677afbfaebd9d6cc7dbbe4b8585b5a6df7d6b2d32ba55ce6e8f40bda0911e5d2e564ca34b02fc7908ec47436a075d472f1555a90a596f4160271b316febf10f2b717a443667ebde1e6e12e756369e94399b6c8e5ed1dee35ce29cafac77ce13f476a0ed15880512ea09181bada2afc4fcefcd83ef954e3cb4ecf28eeb6a38c868f261aadc96df14dc9159411def1f4002d274deabad7a90bc548fe70be7edb8d3c9442efdd600c71694c77466d054f29b73b3f9b9a3fcdb15caa4bb10ff218bff612ec6d718f519cb7908325be64a095ca4eb55d51f5d50196fc2f912ad71d84fd1201232b082269a160f3fdf22ee07e8bfffec4c9557beadea55e6480c6977917d393157d7db21e075b6271ff472f03a854d271a3ebc8025dbf4c392e1128b1b508f21044f87581510371c6a2bc5f4bc83819b920d295637372b7ca55d54ba8cbfdb891e0dba62214978f6d314761e01174d93ea97a107bdf386db25c36aa247a6a694a6865643740b19eacebbae7b6961d21a09158f1e36a1cda557362bcfdbeb1131773340f39aed63d68deab187c47f37668b19c524b5f3113845093938d8bc249d7bc374bb1edd9bd2f1cdd317bb333bb76ac33e60e45519b56782fe80b44c3f694fade183af2b0ae35ccc41abb0fe49153cfa0d0295bcbbc11ec7a21d1bc0fa0aac263a247adf879b5ccf03733df91fe5d2abf40a39c18e8aa9e0adf347d12fd6360e4caad4ff9d2fe72141e6866c645bf50c38ffd04043e1842e47d1e5274a9234276684d47667232db3f7bfeda901a8955b1024b61203ff0f23495f176c6f9a2358a728f4e92bd735232a790e240bb91883dfad19ddc57d6191133c96b1d7fc51880469e37c3f0c60da6a491fb2d4d84efc55c4d2b4c9ba7cec19ddd1b5051e1d058f970b7ee438acb57d5be531951c8be775a01bb51fd3c27ffaddf83ec46ece76f7e492c7da686fe49e72d4444a826f5aa6d09dbb8d4749bfe1c78e5c21514070d5296afc70c7571747fa7081cf2ffe9eea966fa1baf64e9494aa9e12a825ab1b0fea93eefed8b03d07a4ef8f9ea5b827b7f77809c692824a88d63d81271cbcd3720a9e0035f55afed34867facbe87933ea617479baad2e08ad4148b4333b74ea260379d9729ec7ce38a376d17d20b2927780f3976f79d19e8b47910ebc33581881aa3ac651e321fd2b311f1758bb2f7b1754134ad074e49e9abcf647566390f4a5bf23d004e471d4814ec1e3d8f13a0e082a44d740d2ed7366859aaed3d928d6546ad50ad133e642e1d5605351972b465bc7cf37fa8995016f091ac0bbb32a454a96ea93acf3e7389efcf546d2ae06707db5d819a3002bd987e5197bd9f109c69d1adcb7a65c02f83b4a2961772a66cf8f0bca37a2c7fe83e623e682b247623f928483d37847e1ff1b5929d678333e713fc4dda52743e2e976df61132d1a682ce2d5d514dbb7605661440a793992dffb34575fb8b59c77587e8795a7641a965bb6998d7f5c167970b45d3f91ca703681ecbbc0349a90666aeb536370dc2a47ecb6f25f7a32cb49d512c940b0f38ede4d22ba6cc950fbc3cef172034eed8eca7b26ec53b079b795268521295aa34b6fc9f475ff66b18913b8a667750b760d18a192dda0acfb6d86e533542f9b57693438fa0b7cd909e1572fa2f841d0ed74f0d36f50b0fa0e2fadc07a7d2e2679d43709f36473af100d85fb7434adcc4223360ad96031172504db9523a698ee5427ed5e8b6fcfa67123481cd50d002e7f942ff6679a89af704f7c7cdecb557b9e3d2ed7dfad3aa3a63ac6dbdd1397ed4447aa3655d28cb80d9628815c4b24ab969d740ffd7f91635b2577421df0a02bca7a02b5259e53d0800db3be52ef0865d662b980f1263b4776abaa0e1b536fe7b6758c466b80aabe0c4bce6e0edae302159451fee42ffb250db516d1ac504b68cdb0625158c1bba1beaaf99717596dce3767c2b5dd9b650d5da8bf4267ced55c96173596cd6d4f720579574b5b1c39f32c289f8f2186740f25cd0c112dc462ebceb081b6e335d1cebc2ade8261c110998b1df00728829a806ef2ce477c70c585890ac8dcc91734789481e20749351885bd7c313f341e3871ea1377411abd556bc77cfe42c96179a1d9586529f1356151c6abda8bbd36d283390650ec86f98b102fc983786eca41e6968e7365d7d259699b4ab727eb2eeb30b83970af6776c6fe9d9f631129d93737bf5e1db38d46521756314a91c1f0d6f6987e919ae23871bbac39a14b0475fab38e57abc567442ae81bf5e7cb0a4926d202ef35444d6fee111c7ec133d3b943d7dd6e0b7815b6c985faadac96a8b879713e3603781eac00d1e9cdc2784f6a1bc223d71974a0a65fa0cdcd9922518ea1e9026be3439fbf8d151d731556828001a7db6fa21edb6e74567aadfda4704ffe22c97ff8d0f5640ffd28569917f47b33143703185469a5cb68d0f9d4bc52c97de601a83a886ebf418e92d61ec41cd5ca33df70f9aa954958add5fcb5f84d453a83823187082233054ec6b67f4adb6d30e1b3e6c6ca69b52005e466d377dce17a51f31c89e899849f9b8dd25591881d46113493ce9356ff641a268bfeef81f87fa95a077af3c18d74d1ab8627b22c4a9f464615fa6f6537b40ff9db1081f93e19a0ee553388d8ff326f30c52b3d9e970134682a70918f721b84ae918dbeb3641c9ffc55b02968b6e294fffc62d135fc88f97ff2f555672711d734a24db49f8ab1916dcee534c80f8e1615591304a2fc4cae34d0d9f21d83c1a3a96e71f9857da50e5df2404e6e26d64206dcfe56652cf1bdcdc217102962334665ea0c76b2598990bcf74580223f02627f058fa12aa13b836059f395a5a8b26eb732663f4a91e5f000eb82266ef735275d56b2982e1f13f6ad60b4e9c932cd916cb7bda7cd76ee9fd4812e423b2f3aaa10ad439c8e115a0ed3d623d21db20a5c18be118aafc08f3024abd5e951ab6b2c9724cdc750fb995901c0316c2822df3a7d8611e4e8ffced84c96018069f147e4d97c537f4c3a25af2f62ba0a5b3269cebae8ec176b89c7ba6dd9dad7085670b82312a2b697ea9cdbfd1a083d6fbacd38c54a8e23c10bf32178108cd78ed8e2be10d6ee522a993e40e918934d79f2f8a90cfd241e4ec9ce4f9e691527620b94dd216aa245b3c955837c686a560538abd0efb272a70edf9e2ff4d03b35bd2a341c1327635be1cd1cad68d56be62781dfcf2f1927e12fcc8b3dee449c935532bdd0e1cc88e8c04b39c05fa3095d94e34eafd45bfb23e82c42dd76a630a94dd930f5e805ceb223008a25a2edd697e807980aa3e46a95660bf75bb60d5e92915f409d3236822e5f7af46ea11d556a33aa5940294c1d1b0d8a7e1b8a89c9549f2e71a5f0fcd0ed5219e082bf13616b368af72c4bacf33061c68b19cbb84a548ffacdf6a00f797535b19afb4e3c6d30d66d719643220124af1793f7e3780dcacbe48c79beecfcba6e61523936737ff20e43e8db992158e790433a2d951ca16b4cab61296e383ac3b550fd377a0efba59a7e90436eaf2955aacf6952d82d91d20ce8ccabcd5184a7a397d91d22e926a25dcf0168bf61dc02e6935f8a7b4d0a34f5b598f528421dcade7c7ac00ec837ba1616d5673e53c60e65665a96b3a0f278846a25548bd3b2614fdaea0fa08db65a0c812095e0f47c800cad91471ce86df8d6ea69181033869437a18e58b4aaa3033a44cdf7cf9875cdbf446af5592343c46268d1b796dbe54b3a21802b7c3f7292866cc0dd5caea49d6440b8b504ed569d9a703407d98e498142bbd55fefef8a68069a57e5b4b2992936c4e1bfa62325bedc419908bb11e9521f497094b714e536ecaa1e0900d0d1e4b93d399fcf37f4e9e45627c258eda0a421b6f3698f5027fc9eb57a1b115b4fa54c7d0a6a1054e604fb0a37b4561166c04046ab666de16b018dda2092f55b7545b396b8522dafc1b57b3f8d113fadb3069c24d348a20f9a8326ee5fa4f24d616c93accc192a24ef99c6aaf4f7d2e09979d8bbe9d7ff1df6f7b12f3b1407fe7bc041ee0adee0dbc37484409e34bd434f5e4e285af91d88ce947ab6b998313815b660c2df7d9c513df836f714afc458803619f805ca986381d8a8b018a61292fece787dfef6d1ade8c06cb762a8e32a60c79eee665ba2da853ea4327ad8ec4324af8d3a178c6d4d811cc74637891c37e1f9a32b3382dcfc8e59683582c255d82cf7dc9e65fb1d816984655e500f06d0bd24fe9abff9b231a22a73db82726e4c1e016aadcfbf21daa5b6f76bab1b2b8bd18456e77859a77d84bc716ca17ad6583615d8d33d8edf7bab36e51953df7ff115e3a605cfeec5ada1cff8641b263397944449d6526965447ae72f8817cedc2c1016bc91e3462725ca8a1856ed63a6fb364349410ec10590ef02df7edb08668ca61e581a0b2cc7077e204386a95d95994636f1aeb2d64627bcc44a12abe2db4f02f333db83ee46d30b540f0c5f53038a67e69c748fb86a8adc0543ce05a47ac5f34ea8628c9f838808f4418c4c429d5fab6d742f36834410d25c290d4b8a0c73d85b511c92cc361151bb61953e07229205a13d0e208ca620c1f1c239ec189e3a2367185dc9e23a9013eff1253cacbeaa6e2164b74fc3e608ce3d9aa8e35b01b8ce60bd3f0dbeaeac42ab504e5160cdc5b4074938a71f7dcc3c60fe0b755c8cc0aa565f4968f5a3c4b198e0042354b051d6cf20e0a49f25b996852620267314d33bb6fa3c3fe2ba8c41199ca9a4292a2cd25d93c7fcf49a0e2ac6944f0a43750dbc768af4a87ba270927cdd0010d064dbd15ab5106c38db88bcf960d197e80b49a0e25ac5f655e5e1abe3b3a9b79d2f3cbb96a0fff4ad12366dd1fe030331339c043fa2854c8ed560828d347ee20da3f585343cb2406d7a47fd8c35e0c00a86edbdfa95cf28540b13a54d12e2a57cc2222a391e319a2e1d740a87b375450260a3c81e9a43d8b8f027f969a1dae0ffab9d089be417539b8f235080a754ce1fd71f720d10cb12f19d6c46726f1580cf9f25685b9ad4cc7a0c2fc90af288d86d98aebe58327cbb831c0b26a49680ceca35b9b787f4c44486760c4917f631132a246e75d469dfd957d0c8e30a60a89395bf32d5a663c9fb61bc5f42388448c4cfb4fbb128450c20a3721fcb9b3336cae19cab23944ac88387f64ea6779631e08fc17abf785f85fe32e57c58b55e7bf8cb809f8deab8ad2f5c9960c8da6ccb7894ca4053772784461cd2dcc08528ec66aa2c6ae04d80b047511fc563620c108749994a13dd4f47de0874f9674012df3d56a3cc23afa848a56f7cc8d7ef5fbdc581cbc5155d14a11fe00228c8199312c8488dc789649229fb4243cd2c3c37a77f5ac49eebb1fe71b6d7249817920cf3966c7f838ce63c474e570270c86f7fbb9f8d437881ba782ca0028c5deb2a9f318ffaff9d4ffc66530961a4ddfce8de82996c055920d0e4bea67f168afc3a3c32ddd2d49390da8cb8a3c05f9f"}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x200}) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1000, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6820003a41b5ff7f0000000000009ddf3cfd3e24c4fcab130ff8d4716eb759817d2631de7b1a8eafa2c29b0010ad38f810c224280c60df0f6e50d58563e13f9d205265f1034b947ba732700e3a5072ebb363b9eea174f5abe587eb246ba4c9eebc80ba9130f3c74a64cd5332fc3d8146e1e566caf0899c3324c447b21e8ef40806fdc16c3e4910907f86d2fcbaf04801bc8e80475d98b7ece1120504b22a9018", @ANYRES16=r12, @ANYBLOB="05000000000000000000010000000000000009410000004c001800000f0062726f6164636173742d6c696e6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000005500911da859e73acdc7b8d815acefb9ad8ddec86c9dee3fb1ea1fa1ba5e753753c1c94b176c67fd3aa919d4d73dff"], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r10, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r12, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20001880) unshare(0x40000000) 02:17:56 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000080)=0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:17:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00004de80000299f5949053c992cff7f0000e44c2982408560c1f4eb69d031a341b4323e21d1057201b94c0a2e15bf59abd10d57b7acae5c6a9d7ed24ff46007d4994f29c192ac45c18278416305a671741a1c5530b1625d3c9ad54656b447dc4794dcebba5727096bc4abd54349fde0c287f7133422538c4c258ee708"], 0x48}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x3e7, &(0x7f0000000080)={&(0x7f0000000b00)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) 02:17:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4c01, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 258.782975][ T9853] IPVS: ftp: loaded support on port[0] = 21 02:17:56 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:17:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x5421, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 258.880154][ T9864] IPVS: ftp: loaded support on port[0] = 21 02:17:56 executing program 0: r0 = open(0x0, 0x282600, 0x2) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video0\x00', 0x2, 0x0) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x3d31, &(0x7f0000000200)=0xa000000000000005) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000500)) ptrace$setopts(0xffffffffffffffff, 0x0, 0x10001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) setpriority(0x0, r1, 0x100) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r2) setpgid(0x0, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f00000005c0)='/dev#\x00\x00\x00\a\x00', 0x0, 0x0) gettid() r3 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x0, 0x182) r4 = gettid() kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r3) r5 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r6, 0xa, 0x12) fcntl$setownex(r6, 0xf, &(0x7f00000ff000)={0x0, r5}) recvmsg(r7, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r6, r7) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='bond_slave_1\x00', 0x10) setpgid(r4, 0xffffffffffffffff) open(&(0x7f0000000180)='./file0\x00', 0xc4, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000580)='wlan1\x00', &(0x7f0000000640)='wlan1\x00'], &(0x7f0000000780)=[&(0x7f0000000540)='wlan1\x00', &(0x7f00000002c0)='proc\x00']) [ 258.982802][ T9865] kvm: emulating exchange as write 02:17:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x5450, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:17:56 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x5451, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:03 executing program 1: iopl(0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x180, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=""/7) 02:18:03 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r0, 0x26) syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000040)='./file0\x00', 0xb0c3, 0x3, &(0x7f0000000240)=[{&(0x7f0000000080)="b47e908134f927905e0f19d620e8a6aba4b8fc56fd0aa420802230c5350c5606c62c2f6d627c89c43a29366548c148660be271dc454d3f023912ce8f334a397daa746acd30209dd645ecfec2f50dcc8dd3435ec8a9177bd99223c706b18a40b7f9799b3f4a1d8d4853c1b9e9be5c", 0x6e, 0x4}, {&(0x7f0000000100)="19518bf79bd690f72684a99bdb7322a5e43c4f9e7f5ea82865c3969f9fc011d076fed348f7c6bcf6c14ff0aa161bddb9317de638bbf1ebb6c2d4e30d23602bba255b62184a5212121cb5b9d3f30759b0126748e18922a16f5b2849e08dca071c1efe832cf710c5e00815f0429710da458f990f094646b4a62dc37c2794e899e8d312eb7bc7cf", 0x86, 0x4}, {&(0x7f00000001c0)="ca3b2c499fe28e9729d68b6eeb3271166d14b167e8764cffa49a07fc09a3ca206a414912734784f9b10885e7d985076bf859166eefaa6aa388dbe876a4474e339049bf92e9fc0fb1", 0x48, 0x1}], 0x2080, &(0x7f00000002c0)={[{@errors_remount='errors=remount-ro'}, {@namecase='namecase=1'}, {@errors_continue='errors=continue'}], [{@func={'func', 0x3d, 'FILE_MMAP'}}]}) recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}}], 0x3ba, 0x11100, 0x0) 02:18:03 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000000)=""/43, 0x2b}, {&(0x7f0000000240)=""/35, 0x23}], 0x2, &(0x7f00000002c0)=""/231, 0xe7}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000400)) r4 = socket(0x731d4ef4e18689f1, 0x3, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000000180)={0xffff, {{0xa, 0x4e24, 0x101, @mcast1, 0x4}}}, 0x88) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000025c0)=ANY=[@ANYBLOB="18000000000000001001000001000000770000000bdf00409330b3e7d8aa94129a373d62c292b8c6ed127caa87f75478759207d10604ec95ff7bcb0d6b9b125ec85a366abe4f50111f0a03dbd1b4dea05a8b5b29e84e4fadaa6ebe736427e44dc6505d24234826a267f75c743db965041c09c59047f7f794fdffff80b6d724c8f356b5c28affffffffff8193b1a5c3438495d929ce2f1ae893afaf3f05d32d0bfa67b3da43ab981313e755223886b180a269917db5430ef9aec071e44cd19cb18e4e0528acd13471f44d80d21ed5de4b4ca31f4269a88115bece676d0fbf165b08c35178e5989379cc9df9e121a95731d088d6"], 0x18, 0x4800000000000000}}], 0x1, 0x0) 02:18:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_init() openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x10240, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x6, 0x420800) inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x40000000d0000005) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0xa400295c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') dup2(r3, r4) 02:18:03 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x5452, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:03 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0xec7cdea1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000840)={0x0, 0x0, 0x30}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x10000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200840}, 0xfffffe0b, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r4, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040e2}, 0x80) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0xdb300f4d8e55842e, 0xa, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001b40)={r7}, 0x8) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f00000001c0)={0x7, 0x0, 0x3fe6, 0x80000, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000500000002000000000000000700000000000000010001000000000005000000000000000000000000000000000000000000000000000000000000006bf00000020000000600000000000000ad0a0000000000008000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/817]) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={r7, 0x10000}, 0x8) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0xb) 02:18:03 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="0200680000fc010000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700690000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x16f, 0x1a0}]) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x401, 0x40000) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000180)={0x9, 0x8, 0x0, [{0x9, 0x6, 0x2, 0x7, 0x7f, 0x1, 0x7}, {0x4, 0x8000, 0x0, 0x31, 0x6, 0x6, 0x1}, {0x200, 0x7, 0x5, 0xe1, 0x8, 0x1f, 0x4}, {0x100, 0x6, 0x7f, 0xff, 0xeb, 0x31, 0x7}, {0x10000, 0x9, 0x4, 0x1, 0x1, 0x9, 0xff}, {0x400, 0x6, 0x9, 0x45, 0x7, 0x2}, {0x0, 0xddfc, 0x96, 0x9, 0x8, 0x4, 0xf9}, {0x7, 0xb17f, 0x65ff, 0x9, 0x9, 0x0, 0x20}]}) 02:18:03 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:03 executing program 1: r0 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b3b000)=0x3f) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x400, 0x0) bind$netrom(r3, &(0x7f0000000180)={{0x3, @null, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) recvmsg(r2, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000040)=0x2, &(0x7f0000000100)=0x2) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x112) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x52000}]}) 02:18:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x5460, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:03 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) [ 266.553144][ T9935] loop4: p1 < > p4 [ 266.563305][ T9935] loop4: partition table partially beyond EOD, truncated [ 266.588792][ T9935] loop4: p1 size 2 extends beyond EOD, truncated 02:18:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x6364, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:04 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:04 executing program 2: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x28d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x7, 0x3, 0x0, 0x7f, 0x0, 0x1, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x7f}, 0x100, 0x8, 0x39, 0x5, 0x347bcf74, 0x1f, 0x4}, r3, 0xe, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r4 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r5, 0x208200) sendfile(r0, r4, 0x0, 0x8000fffffffe) [ 266.696261][ T9935] loop4: p4 start 1854537728 is beyond EOD, truncated 02:18:04 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0xcb, 0xfa00, {0x2, &(0x7f00000000c0), 0x2, 0x6}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x16, &(0x7f0000000100)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000040)={'ipddp0\x00', {0x2, 0x4e21, @multicast1}}) ptrace(0x10, r0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x2000, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000180)="585ccbc4ed83b836c1a6474914dc55a9446147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748cb27c9aca8a8e7f7b2b84d9569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef5801551df4f084c9aac6ab4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d326a678a8d2725561f6110fd7b06f90b5474cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d000000000000", 0xc0, r3) r5 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000400)="2ce50881275068987054374fa6928ba29bde6001074ffadb937b071eae6081601fca3ddb4f62", 0x26, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r5, r4, r5}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000280)={'sm3-generic\x00'}}) r6 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000180)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r6) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000140)='\x00', 0x1, r6) keyctl$reject(0x13, r5, 0x8, 0x6, r6) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r9, 0xa, 0x12) fcntl$setownex(r9, 0xf, &(0x7f00000ff000)={0x0, r8}) recvmsg(r10, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r9, r10) r11 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r12, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r12, 0xa, 0x12) fcntl$setownex(r12, 0xf, &(0x7f00000ff000)={0x0, r11}) recvmsg(r13, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r12, r13) getsockopt$bt_hci(r12, 0x0, 0x0, &(0x7f0000000600)=""/160, &(0x7f0000000340)=0xa0) connect(r7, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r14 = gettid() sendmmsg$unix(r7, &(0x7f0000003f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="0000000000010000008f5a25dfe17a4a3e2cfd85087e581d7ce0569fc214b3091c763745853411d38524bafd55b9f9f4d734ef399b2976fcdc2a51454f97ef2ece61d88e2ede1b1c8361f99e481fae3ee01326d135b80144e4f067e9cdbf8d253f847448a64067340c7fd58c9a9aadff4a9ffb9ab571b3c91e151a82673dfa206125c63a64c53e18", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x50}], 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') 02:18:04 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x8912, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:04 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x8012, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x5, 0x8, 0x1, 'queue1\x00', 0x10001}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x40031, 0xffffffffffffffff, 0x0) 02:18:04 executing program 1: semget$private(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x80) inotify_rm_watch(0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f0000000740)=0x8000, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) setsockopt$packet_int(r4, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000080), 0x3be) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r3, &(0x7f0000000640)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r3, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x1, 0x3, 0x1, 0xf8, 0x0, 0x7, 0x80000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0x9, 0x100000000}, 0x200, 0x2, 0x2, 0x8, 0xdd, 0x5, 0x622a}, r8, 0xe, r10, 0x2) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) 02:18:04 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x8933, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10004, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000100)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.advise\x00') pipe(&(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000280)={@dev={0xfe, 0x80, [], 0x1c}, r3}, 0x14) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) write$P9_RWALK(r4, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r4, r5) finit_module(0xffffffffffffffff, &(0x7f0000000500)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00', 0x1) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x14) fallocate(r1, 0x0, 0x0, 0x2000002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fchmodat(r7, &(0x7f0000000080)='./file0\x00', 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r8, 0x0) write$P9_RWALK(r8, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r9 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r8, r9) sendfile(r2, r1, &(0x7f0000000340), 0x0) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000140)={0x9, 0x2, 0x3}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x0, 0x8}) 02:18:05 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x89a2, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 267.851359][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 267.858868][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:18:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200), {0x8001}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, @bridge_slave={{0x14, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, [@IFLA_BRPORT_GUARD={0x8}]}}}]}, 0x44}}, 0x0) [ 268.080361][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 268.086219][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:18:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae00, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 268.400273][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 268.406184][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 268.480293][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 268.486159][ C1] protocol 88fb is buggy, dev hsr_slave_1 02:18:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae01, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 268.707693][T10051] [ 268.720593][T10051] ============================= [ 268.733470][T10051] WARNING: suspicious RCU usage [ 268.757559][T10051] 5.4.0-rc6-next-20191108 #0 Not tainted [ 268.786077][T10051] ----------------------------- [ 268.800268][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 268.806123][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 268.821489][T10051] include/linux/kvm_host.h:534 suspicious rcu_dereference_check() usage! [ 268.860406][T10051] [ 268.860406][T10051] other info that might help us debug this: [ 268.860406][T10051] [ 268.890466][T10051] [ 268.890466][T10051] rcu_scheduler_active = 2, debug_locks = 1 [ 268.913360][T10051] no locks held by syz-executor.3/10051. [ 268.928201][T10042] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 268.944772][T10051] [ 268.944772][T10051] stack backtrace: 02:18:06 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) [ 268.958855][T10052] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 269.030524][T10051] CPU: 0 PID: 10051 Comm: syz-executor.3 Not tainted 5.4.0-rc6-next-20191108 #0 [ 269.039607][T10051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.049674][T10051] Call Trace: [ 269.052986][T10051] dump_stack+0x197/0x210 [ 269.057345][T10051] lockdep_rcu_suspicious+0x153/0x15d [ 269.062730][T10051] kvm_dev_ioctl+0x100c/0x1610 [ 269.067519][T10051] ? kvm_debugfs_release+0x90/0x90 [ 269.072657][T10051] ? kvm_debugfs_release+0x90/0x90 [ 269.077783][T10051] do_vfs_ioctl+0x977/0x14e0 [ 269.082399][T10051] ? compat_ioctl_preallocate+0x220/0x220 [ 269.088153][T10051] ? __fget+0x37f/0x550 [ 269.092331][T10051] ? ksys_dup3+0x3e0/0x3e0 [ 269.096768][T10051] ? nsecs_to_jiffies+0x30/0x30 [ 269.101734][T10051] ? tomoyo_file_ioctl+0x23/0x30 [ 269.106694][T10051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.112951][T10051] ? security_file_ioctl+0x8d/0xc0 [ 269.118261][T10051] ksys_ioctl+0xab/0xd0 [ 269.122440][T10051] __x64_sys_ioctl+0x73/0xb0 02:18:06 executing program 2: r0 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100005070000000000000000000000002cce91c331137b88ea5922ef4d8c9daad36c2be20de6f86eeeb270778634197ec2765dea5210cfb7bd85d5b7a3212faebee79dcbecb1de5680ea48cc737fd1af59d35c3def45ba17971f5c37e759acc4aa2ffb35501fd531a48ad73a46f45b632c586ef0f8fed1a5e454acfa6ec2d82bbe15a22d4fd1bf90db50abf40dd71d8b2001d5efeacf7a18f9fdc63da62250de0da592b1b189bf7e0b5bc32083aa3343882c0cec0dcf3140efad0c795ede7d8f6170963dcfd1a7a6d76732ba1923cf2ee1697e2d9ecde9a8ade62dd89fd37753c920efb387b04d06bb3132ff54870272b91f", @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c000100626f6e640000000004000200"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000000180)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@remote, @in6=@loopback, 0x4e20, 0x0, 0x4e20, 0x2, 0xa, 0xa0, 0x8aba2919e7caf638, 0x84, r8, r11}, {0x79632510, 0x5, 0x9, 0x1, 0x1, 0x100000001, 0x9, 0x8}, {0x100000001, 0xf6e, 0x50816abb, 0x10000}, 0x204, 0x6e6bbf, 0x0, 0x7861830b4c63bdbb, 0x6}, {{@in6=@mcast1, 0x4d5, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff, 0x3, 0x2, 0x1, 0x7, 0x4, 0x8e9}}, 0xe8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000000)=0x5) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x140202, 0x0) r13 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40405) dup2(r13, r12) socketpair$unix(0x1, 0x1, 0x0, 0x0) r14 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r14, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) r15 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000940)={r16, @in={{0x2, 0x4e23, @multicast2}}, 0x2, 0x7, 0x0, 0x0, 0x2}, 0x0) r17 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r17, 0x84, 0x76, &(0x7f0000001b40)={r18}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000080)={r18, 0x0, &(0x7f0000000180)}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r14, 0x84, 0x71, 0x0, &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x33) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(0x0, r19, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000003c0)={0x1, r19}) clock_gettime(0x0, &(0x7f0000000500)) socket$nl_route(0x10, 0x3, 0x0) [ 269.127062][T10051] do_syscall_64+0xfa/0x760 [ 269.131593][T10051] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.137535][T10051] RIP: 0033:0x45a219 [ 269.141449][T10051] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.161089][T10051] RSP: 002b:00007fbf49c0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.169517][T10051] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 02:18:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3810c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='/jstat\x00\xc6S\x81\xb4z\xae\xdf*\xf5\xc8\xaf4#\xfcA\x89\x1b\xd2\xa3\xc5m\x8c\x88\xe2\x9b\xadC\xf1\xda\x90n\x85_\xf1\x82\xde\x04\"~\xdc\xbb\xc2\xb1\xdf\x8f\x18\x0e\x15\x8e\x8a\xbdD,\xc0I\xcf\xfd\xa00\xff\'xu\xee\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf52\x14M\x16q\xa6\xcd\xf5\x06\x9e[\xdd\xcf%\xcd\x7f#\x95kJ\x82\xdf\x90\x0f^\xb5v;O\xe8\xccqr\x96-%\x90\xb2\xdc\xa2\xa10\x8c8%A\xb0S\x19M\x90\'\xd8>\xe7\xba.2\x80\x85\x7f\x8f\x9fc\xfc\x90\xba\xe9Y\xc6\xe6px\xbf\x97\xe6\x15\xbf\xd9@\x99\x14\x95\x8a\xad\xcf\xb3ysT<`\xd85&\xe5\xc2g\xf7\xdf\xa5K\xd5$\xcc\x96q\xde\xddfQ\x992+\xda\xde\xe1%\xa3[@\xb7\xbe\f\a0\x1fC\x9a~\xdf\xa2o\xa9\x82w\xc8\a\x8b\x02\xe2\ab\x91\xc37\x87\xc5\x8b\x0e\xab\xbc9(\x8f\xc1\x05\t@\x9d\xe1\b\xf5\xca&\xa8\xc8\xe1\xaf\xb7\v*\x95i\xcf\x8fL\xdbmN\x97\xeb\x7f\xdf$\x1d\xee\x16\x0e`qa\x833\xcc\v\x0e\x8b\xc6\xa1z\v}`EP\xfd\x14\x9a\xd0x\xff\xe5Lc\x92\xfb\xa2\x90\x15\xa3\xaeswL\xd1,\x9c\x0e\xd2Q\xa7\xcf\x84=q-', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000200), &(0x7f0000000380)=0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d623455e1ffb5ea3544438cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) r4 = getegid() chown(0x0, 0x0, r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user='access=user'}, {@dfltgid={'dfltgid', 0x3d, r4}}, {@afid={'afid', 0x3d, 0x200}}, {@loose='loose'}, {@afid={'afid', 0x3d, 0x2}}, {@aname={'aname', 0x3d, '9p\x00'}}]}}) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f0000000740)={0x0, 0xfb, 0x4c, 0x0, 0x0, "3535612161354c0fb81a15fda9d281b4", "a4d60b5094548af077bcabee2adf4e35466eba17e1aaac20f41178deca0e6663f5edc458c3cbe8b58dd2d47817d51c61f4bdc7d839a191"}, 0x4c, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x705}, 0x20}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x40000, 0x0) [ 269.172478][T10055] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 269.177493][T10051] RDX: 0000000020000040 RSI: 000000000000ae01 RDI: 0000000000000004 [ 269.177504][T10051] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 269.177511][T10051] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf49c0c6d4 [ 269.177520][T10051] R13: 00000000004c362a R14: 00000000004d78b8 R15: 00000000ffffffff 02:18:06 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl(r0, 0x6, &(0x7f0000000180)="338fabe5dce5434f188241417b447c31089ff873a95dceb2845b921bdf8a34afd748f3db87219992a694e46c5178273d780dc62af2998503560c265fcd95f96afec0e270026208ce9bc9bd4ef5d72895fb5749e95283f8fb902edaccc27b7387e9cbcd7a92f892ae59a7cc5fa7d607b35c092247554aae83a40c7149a7dd5f5fbbee2b4811201eb40eb83ac66ec046d22fffc9739029facee4d4f11203a96b631ac84e24c6c2ed9de6061b78d9a81f05b9690478ffd5e06ce63be92308a3abe6318e") bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) setresuid(r2, r4, r6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10) r7 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0xffff, 0x8000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) renameat(r7, &(0x7f0000000340)='./file0\x00', r8, &(0x7f0000000440)='./file0\x00') r9 = accept$alg(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x20) recvmmsg(r9, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xfd40}], 0x1, 0x0, 0xffffff62}}], 0xdc, 0x0, 0x0) [ 269.350403][T10051] [ 269.352930][T10051] ============================= [ 269.357958][T10051] WARNING: suspicious RCU usage 02:18:06 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) [ 269.438917][T10051] 5.4.0-rc6-next-20191108 #0 Not tainted 02:18:07 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl(r0, 0x6, &(0x7f0000000180)="338fabe5dce5434f188241417b447c31089ff873a95dceb2845b921bdf8a34afd748f3db87219992a694e46c5178273d780dc62af2998503560c265fcd95f96afec0e270026208ce9bc9bd4ef5d72895fb5749e95283f8fb902edaccc27b7387e9cbcd7a92f892ae59a7cc5fa7d607b35c092247554aae83a40c7149a7dd5f5fbbee2b4811201eb40eb83ac66ec046d22fffc9739029facee4d4f11203a96b631ac84e24c6c2ed9de6061b78d9a81f05b9690478ffd5e06ce63be92308a3abe6318e") bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) setresuid(r2, r4, r6) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000013c0)="ab553fec94248c32e27d04000000288a", 0x10) r7 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0xffff, 0x8000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x200, 0x0) renameat(r7, &(0x7f0000000340)='./file0\x00', r8, &(0x7f0000000440)='./file0\x00') r9 = accept$alg(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x1}}, 0x20) recvmmsg(r9, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xfd40}], 0x1, 0x0, 0xffffff62}}], 0xdc, 0x0, 0x0) 02:18:07 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) [ 269.670058][T10051] ----------------------------- [ 269.676614][T10051] include/linux/kvm_host.h:629 suspicious rcu_dereference_check() usage! [ 269.685835][T10051] [ 269.685835][T10051] other info that might help us debug this: [ 269.685835][T10051] [ 269.697109][T10051] [ 269.697109][T10051] rcu_scheduler_active = 2, debug_locks = 1 [ 269.707117][T10051] no locks held by syz-executor.3/10051. [ 269.715297][T10051] [ 269.715297][T10051] stack backtrace: [ 269.750340][T10051] CPU: 0 PID: 10051 Comm: syz-executor.3 Not tainted 5.4.0-rc6-next-20191108 #0 [ 269.759409][T10051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.769491][T10051] Call Trace: [ 269.772804][T10051] dump_stack+0x197/0x210 [ 269.777156][T10051] lockdep_rcu_suspicious+0x153/0x15d [ 269.782550][T10051] kvm_dev_ioctl+0x116c/0x1610 [ 269.787359][T10051] ? kvm_debugfs_release+0x90/0x90 [ 269.792501][T10051] ? kvm_debugfs_release+0x90/0x90 [ 269.797636][T10051] do_vfs_ioctl+0x977/0x14e0 [ 269.802258][T10051] ? compat_ioctl_preallocate+0x220/0x220 [ 269.808438][T10051] ? __fget+0x37f/0x550 [ 269.812653][T10051] ? ksys_dup3+0x3e0/0x3e0 [ 269.817278][T10051] ? nsecs_to_jiffies+0x30/0x30 [ 269.822346][T10051] ? tomoyo_file_ioctl+0x23/0x30 [ 269.827494][T10051] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.833959][T10051] ? security_file_ioctl+0x8d/0xc0 [ 269.839109][T10051] ksys_ioctl+0xab/0xd0 [ 269.843310][T10051] __x64_sys_ioctl+0x73/0xb0 02:18:07 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:07 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x7, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000000c0)={0x100, 0x0, 0x10001, 0xa9}) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000004c0), 0x0) getrandom(&(0x7f0000000280)=""/113, 0x71, 0x3) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000400)={0x4, 0x7}) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000080)) set_mempolicy(0x2, &(0x7f0000000040)=0x5c9, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x3f, 0x0, 0x1000, 0xc324}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) readv(r3, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) 02:18:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7fff, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, @in6={0xa, 0x4e20, 0xb, @local, 0x8}, @in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0x2a0}], 0x48) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x1c) listen(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) [ 269.848109][T10051] do_syscall_64+0xfa/0x760 [ 269.852694][T10051] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.858605][T10051] RIP: 0033:0x45a219 [ 269.862563][T10051] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.883945][T10051] RSP: 002b:00007fbf49c0bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.892461][T10051] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 269.903781][T10051] RDX: 0000000020000040 RSI: 000000000000ae01 RDI: 0000000000000004 [ 269.912934][T10051] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 269.921045][T10051] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf49c0c6d4 [ 269.929290][T10051] R13: 00000000004c362a R14: 00000000004d78b8 R15: 00000000ffffffff 02:18:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae03, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:07 executing program 0: r0 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r1, 0xa, 0x12) fcntl$setownex(r1, 0xf, &(0x7f00000ff000)={0x0, r0}) recvmsg(r2, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r1, r2) r3 = accept4(r2, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x80000) sendmmsg$nfc_llcp(r3, &(0x7f0000001040)=[{&(0x7f0000000180)={0x27, 0x1, 0x1, 0x6, 0x1, 0x6, "a2ab07f38c09ac53cabc35646b97a3405d5458eef3ec48552e9c8063878ad3efead808b86c43ae4f724fcc7956535b9427e2d7bb87e664a48ad0be0029e008", 0x37}, 0x60, &(0x7f0000000740)=[{&(0x7f0000000200)="54993e33636e6a0d963576d2a9053d0e76c1a79805aaabc92079a1e603a58ad50893e0cc0791a75cadb931723066418f71f97609be3cc10ba72755d8b8f56457affbd996848555be1f78ebf1064e5e73b0b6049082143a4bc13115d0724e0fa0c5ad6dad5c118d6f1f8c2e595431899a4376ee78", 0x74}, {&(0x7f0000000280)="0b6f169bc288d9fb098c486a415412c7544f0633ef20ce695230ade4386b789c9b9de6e717797d7e8404bb486ef569ae114efff709705b475ac167060600be8f2a486e1fe3badc23ff7cb3cd9d7aac2fe9d5be440c1256165c7e19694bdf4b73ff5f776a051c624b064756160acdbe57b4b572a5af78faac3158701afa283c35baa42e566b2c4a4a6f96ba9f9dad9327f6077bca8c3e66e77d854158ef08f8cab171470686db499ef0ca030869d5b9e21927d860beba456c65740e81495afe734cb87a09f36bdd79fdb8e13d4366840dd2374b5fd043d6450c2910ff38d6c175", 0xe0}, {&(0x7f0000000380)="0bb64efe74d2cd9f75c22207c710d2678a9822d9e566f5970b2e150cb16f04972aa1f4303e6bfc86b90276c93ce742f9ace5862b910c2a0277cf5d77b39518d9e3bf39b8d51c38ef34611759a3f1b211eb846f03c66fc7e5cb1be8c2f63efd4d06a3859c9dbb40a5375c617cb93f215629a015e285ca65767ba50e74ae7a7acf04ccaf2c55b4dac0519d92a475041b63dddff8f380cf4cfd1c487665a9ea621c675d3cadcee439c2c50dbebf1e91bf19edf6ee", 0xb3}, {0xfffffffffffffffe}, {&(0x7f0000000440)="1f5ce04f3e2fea948476df09221ce2f0d9fc2f664d23a064344fdb0ae61e54528ddb58bf91ebd2931c0e0e2c9538deca61dcdd82e04a073f616d97f5ae38fee1c145118312418637671fcf784b9aa6684362a641cf0be2da86b5bb8b0ceb9474387a6dcdd1e789734d8d3dacafedf9d56412c0bd695f2836095b0836c0af65738f783e37d4e30f98d164daea8241080398fb55b335d20e04cbea0e972c85d23d7fb77651a46423c8e15ed27fa38b1c3592282d763216ca2ba75bd40e36e0322f1ef6a042882956bd18b17a10eb1213d0b8cfb7d5c8fd81adbe249a187f8661bff8bc152f3f12eb027a565d7677848a956b12b12577", 0xf5}, {&(0x7f0000000540)="26d7b984088f4b3fc8c6cc4eea66ffdffda7d212287b5b91929a09103914ed2ea197ccf566a1354c3bb947a365ac9a0a6a51b126112d756a5c5b9ab073465d77439509bb5deda9f8c58a19123d85795eab8eb7e16545f39e7e", 0x59}, {&(0x7f00000000c0)="7a1abd50c3a686b7f6d0dcff574b5b71f34053e86061fe597cd7ee9cdd0d334fe7f8bfe93108d3aa1223fc7a1ebf10330921da3129743881", 0x38}, {&(0x7f00000005c0)="a2b7f6fc4c0a0c2e6e69153a20f7ac51073c6fbdca6098861aba19e8836af92548ffa1be3d6177ccad600437b8e599232863a834dfe537adf5cd9c8c127a3366eb3194bfdd29cb2202a39fdd0b1c16148aa016476b6be1d7656df8dd7035b77596211015b820f223d687ea5923e53f6a56b154d5a8637445f0fdab74563f4835839c2942858e0cbd297f128958dd8ef2", 0x90}, {&(0x7f0000000680)="0eb78bb4e3f1fa50c422aa406187e9ce5dbca7811077ea634431f55d2a91b3d2c0449ad563c5d58042d79f97af6f06844a37a4fd9f67549ab7b689293a13fb5fbe176864ae42c7a3b0a8d3d8c1b5fb87b2a89593a588373b6ce478d12a7b7836cdc53bb98cdcf7403568e2f1ee5e57fc41f17e11603b9fc16ae6ba325952e7c8790e8d9143968e398d85bb9d149469e3b08cd643730ccf76a5f56efe6e5ec36c", 0xa0}], 0x9, &(0x7f0000000800)={0x80, 0x3a, 0x4, "873a23659d3e0e6db650d5d24cc2dfa7f56370cc94c03964f4667e8a604d251aad85f5c97c3d7ae5a34f7c8f0af607f4f44d9761ba1d44ba05345a69fdaf0274fc7fdeca07be2ea0ec4bd2baab37717753793c6bcaafe4c9d5dbf922756bf05eaaa6ef76d7b50c61a216956843a80b"}, 0x80, 0x4000000}, {&(0x7f0000000880)={0x27, 0x0, 0x0, 0x2, 0x4, 0x0, "dc9c0f27acdf31e4bbccad046ff82b55924fd9939916490924fd6f432b1854309e10d9e9627d12ed3b86d713e7410c9930d07101fb93568ce9b3e8700e7e76", 0x37}, 0x60, &(0x7f0000000f80)=[{&(0x7f0000000900)="f3", 0x1}, {&(0x7f0000000940)="063d14f08356979c6ce0c455a3cd292bd36ececf22cd5c9b4c6cf7bc5689e4d41d220e47c30aa2598d464b576fbf1940972b895706c452825eec5fbdd7a0efa7cd09a19e810c9e2c561c42c02a15c4949fbc38fff9041c50f4960cd4c332e9f11a096c124e96d22ad8a4b4beb03e6c246d88d7e535de9d5da9e738199596d1e66c74b8053f8c7f7affc0ed5ae1b88d71cf9af4059dfb1ea2216a59b81e90f2690b74286bbefb20d7a4e9790e5cac81742c3511e543939b6d73a1775761405bce5bae98808a6e23bbf26cbcbcfaac0e478d9f9eb64357aa900ecbccffd29965a78873", 0xe2}, {&(0x7f0000000a40)="db3c7eef59975782176f5e0650b3d89a2a06fbf03833a8b37b155ec4a6810c2cf966c0cc3780d76957d78da9a9edbdc45c174d98f4926cea3673b1630fdab347f3f7d8148339bcf80f15c0cc5d57772ab4f901b08a883cd5", 0x58}, {&(0x7f0000000ac0)="df58967011391ea46927656e4b68e38536079726591f2132953acccf966d88d06315622e6ef8737a1361059cf8ae1d042cb8ba54b82c065a64fc0a52fdbeac2274435b23a7158693c01ab4cddacefac64deafe18", 0x54}, {&(0x7f0000000b40)="2cfff48a69985c9d30c14b2afffca5ef12efb8cc14d6624af89e65de261ac16f1d5682b480cd8a4c6ebffef0bc1cb50befe7af0c4207450a31a955d00eeb7acdce61e1e39371070eb15e2208e15f4f5704d40dc86ace661def76d04ddad1d9ced2225451d0940646f9fb9455fe3f85017e30c20b67465858b16dec53603d11b4326ed0a67802bfea26673d420306cd8015bcdb1fabc11ad4838b4c7158c5342f7eaf276b7bc8", 0xa6}, {&(0x7f0000000c00)="31cd58eacdb69eacea219907b3cdf02b1e36fc669cbf0af66529295997964aeac34bf71b7df0bc8e135a8f6f9cbf995c3f31e584fccb93c0e60a1d5c25dd823a263a007e5e5b8693a1b0537a1116ff444efd9a62e8f997e57f20d78c6dc976c8d0ee898025f190fd4842b4b57f5cf03dedfa4b230418f5e4a9fb8d8f46c05365020b772cbdedeb47c20a4164bf39afbaf797e3259bba12b5d720c9a2d9d82c77a5625b109a6bf5cc8f4f3bc54cff79de4b5328a5dc7df1796e2ec6e6fac1cf28649f3c0bd5f1b072bc9b63ad7c167b732e0c7a9892dbf27420a71a6ca8a226b35f066cddcf61", 0xe6}, {&(0x7f0000000d00)="2a8ca125110777c505f3865bb15e8ee089dbf24426c25df7a967ca3401b31ed8477fed9237f04636e5a5f215d4b18ee51dca4c82c92bb4d29f42285f027fd72de60193b06e23f493b008bc78943d5482a5c779a60f71fd6b1ae52d77f4a4a74320c6166b3b9d4f977eb12b32575d371e29ed28fb306bde9ce46eac9b069e010ce58f22f4504faccf6815e2a04723263715114a23082c54534f28ba1b779208", 0x9f}, {&(0x7f0000000dc0)="863e64c4801ebd5f3059c3475043cc5c3e236c5b23fd52bb8b3a214ed3cf8beda470d39f7961a47bad744198f5c01ab8d321e92f3a2a7652244bcc90e0323a439c4944ba6e8d42c557cc450e07f5701c3038c9853b721fc9974d9dcada242cea21b2b2d3d009301557589c2f2f8782befea834c26699cde652d5b3b6339ca9f3aa586216382e448438a302d4d573291714f4d831ecdb8ce4", 0x98}, {&(0x7f0000000e80)="53e150f08510a4da7a99a02500803a1334eda8d35e03", 0x16}, {&(0x7f0000000ec0)="8a31d6b40f89f8aafa30a25089947b93fd4adc72aa61a67254cfae9b8ea7ac21cf1cef697fe2d0044759b730a0f5eb5c8915984b0a6ba6fd042a353e26b83f3b12f7c78492d35cd53780c785ad0abc646c8538d42485af377912630bbd63c19eeabb1e3bbe8cdf56e80097476e5522b0aa2198b4a484d206cdf4a7175a6ee69b6f68eb25a19e053ee13774cf382f11271c34769a56", 0x95}], 0xa, 0x0, 0x0, 0x84000}], 0x2, 0x810) fanotify_init(0x0, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$vsock_stream(r5, &(0x7f00000010c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) syz_mount_image$iso9660(&(0x7f0000000100)='iso9660\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x808, &(0x7f00000027c0)={[{@gid={'gid'}}]}) 02:18:07 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae01, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:07 executing program 2: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0xfffffffffffffcc1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000180)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0xc0, r1) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000140)='\x00', 0x1, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000040)='logon\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x8, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) 02:18:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae04, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:07 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000500000009000000020b000000"], &(0x7f00000004c0)='syzkaller\x00', 0x10000, 0x55, &(0x7f0000000100)=""/85, 0x40f00, 0x1, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x20009, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x4, 0xdbe, 0x3}, 0x10}, 0x70) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x774468b019806ddf) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r1, 0x0, 0x0, 0xb6, &(0x7f0000001900), &(0x7f0000001940)=""/182, 0x1f, 0x0, 0x20, 0x0, &(0x7f0000001a40)="cd86a517ec73229bc447d1537edd04138b6208cd02d61a0817ba04080737e3e4", 0x0}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000480)={0x1, 0x1, {0x9, 0x1d, 0x2, 0x12, 0x2, 0xfffffff9, 0x5, 0x13e, 0xffffffffffffffff}}) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000400)=0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00'}) r5 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x0, 0x10) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x100) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @local}) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@int=0x7, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_subtree(r1, &(0x7f0000003080)={[{0x2b, 'memory'}, {0x0, 'cpu'}, {0x2b, 'pids'}, {0x2b, 'io'}, {0x2b, 'io'}, {0x2d, 'cpu'}]}, 0x20) openat$cgroup_ro(r6, 0x0, 0x2761, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000340), &(0x7f00000003c0)=0x3c9) 02:18:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae07, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 270.422588][T10120] ISOFS: Unable to identify CD-ROM format. 02:18:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae08, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 270.612802][T10126] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 02:18:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae41, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xae80, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x400454ca, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 271.127489][T10120] ISOFS: Unable to identify CD-ROM format. 02:18:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) accept$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$unix(r3, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) [ 271.412944][T10137] device team0 entered promiscuous mode [ 271.452157][T10137] device team_slave_0 entered promiscuous mode [ 271.467947][T10137] device team_slave_1 entered promiscuous mode [ 271.529757][T10137] 8021q: adding VLAN 0 to HW filter on device team0 02:18:09 executing program 0: syz_read_part_table(0x8, 0x0, &(0x7f0000000200)) 02:18:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x40049409, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:09 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4008ae06, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 271.824468][T10130] device team0 left promiscuous mode [ 271.832208][T10130] device team_slave_0 left promiscuous mode [ 271.839732][T10130] device team_slave_1 left promiscuous mode 02:18:09 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) chroot(&(0x7f0000000080)='./file0\x00') chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') link(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000280)='./bus\x00') pipe(0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) [ 272.086353][T10160] mkiss: ax0: crc mode is auto. 02:18:09 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x40186366, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 272.185913][T10165] mkiss: ax1: crc mode is auto. 02:18:09 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$FS_IOC_GETFLAGS(r1, 0xb701, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r3, 0xa, 0x12) fcntl$setownex(r3, 0xf, &(0x7f00000ff000)={0x0, r2}) recvmsg(r4, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r3, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') r7 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') sendfile(0xffffffffffffffff, r7, 0x0, 0x1) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000001, 0x20010, r3, 0x4b172000) 02:18:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001b40)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={r5, 0x792, 0x2}, 0x8) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10) close(r1) 02:18:09 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4020940d, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4020ae46, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x800454d2, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:10 executing program 5: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:10 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x0, 0x1}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}}], 0x40000000000002e, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000580)={[{0x9, 0x0, 0x5, 0x2, 0x20, 0x81, 0x8, 0x26, 0xff, 0x4, 0x8, 0x3, 0x3}, {0x8, 0x1ff, 0x1, 0x7, 0x2, 0x4, 0xff, 0x1, 0x13, 0x1, 0x0, 0x6, 0x1}, {0x3f, 0x226, 0x8, 0x4, 0x3, 0x80, 0x6, 0x5, 0x5, 0x0, 0x3f, 0x20, 0x7fffffff}], 0x7fff}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000300)={0xd000, 0x10000}) execveat(r8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f00000001c0)='5#)\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)='@securitykeyringsecurity$\x9cvboxnet0\'lo]ppp1@-ppp1\':\x00', &(0x7f0000000280)='*vboxnet1,\x00'], 0x400) 02:18:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000001b40)={r5}, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000000)={r5, 0x792, 0x2}, 0x8) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10) close(r1) 02:18:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x80086301, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:10 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x8008ae9d, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:11 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x6b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff1821, 0x0, 0x0, 0x7e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x71cff475, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open_tree(r2, &(0x7f00000000c0)='./file0\x00', 0x8001) 02:18:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc0045878, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:11 executing program 5: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:11 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x0, 0x1}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}}], 0x40000000000002e, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000580)={[{0x9, 0x0, 0x5, 0x2, 0x20, 0x81, 0x8, 0x26, 0xff, 0x4, 0x8, 0x3, 0x3}, {0x8, 0x1ff, 0x1, 0x7, 0x2, 0x4, 0xff, 0x1, 0x13, 0x1, 0x0, 0x6, 0x1}, {0x3f, 0x226, 0x8, 0x4, 0x3, 0x80, 0x6, 0x5, 0x5, 0x0, 0x3f, 0x20, 0x7fffffff}], 0x7fff}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000300)={0xd000, 0x10000}) execveat(r8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f00000001c0)='5#)\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)='@securitykeyringsecurity$\x9cvboxnet0\'lo]ppp1@-ppp1\':\x00', &(0x7f0000000280)='*vboxnet1,\x00'], 0x400) 02:18:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc0045878, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:12 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f00000000c0)) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x50000, 0x0) openat$cgroup(r5, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x80000000}, &(0x7f00000004c0)=0x8) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0x5, 0x7, 0x20, 0x47, 0x8b, 0x71}, 0x1}, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000000380)={0x4, 0xfffff800, 0x9, 0x100, 0x4, 0x80000001}) ioctl$KVM_ASSIGN_DEV_IRQ(r4, 0x4040ae70, &(0x7f0000000080)={0x20, 0x6, 0xe77, 0x10f}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, &(0x7f0000000280)=0x1, &(0x7f00000002c0)=0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESHEX=0x0], &(0x7f0000003580)=""/4096, 0xffe4, 0x1000, 0x8}, 0xff46) 02:18:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)=0x9ae3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x6, 0x100, 0x7}) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x1) dup3(r3, r0, 0x0) 02:18:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae0a, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:12 executing program 2: accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000340)={0x7}, 0x7) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) write(r2, &(0x7f0000001840)="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", 0xfffffffffffffec6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r6 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x400000) waitid$P_PIDFD(0x3, r6, &(0x7f0000000380), 0x40000001, 0x0) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000240)) preadv(r5, &(0x7f0000000a00)=[{&(0x7f0000001a00)=""/4096, 0x1000}], 0x1, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) msgget(0x3, 0x7ef34562c8e1f0d6) socket$inet6_tcp(0xa, 0x1, 0x0) getrandom(&(0x7f0000000640)=""/4096, 0x1000, 0x2) msgsnd(0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x800) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, {0x0, 0xf7, 0x4, 0x7}, 0x6}, 0xa) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=r11, @ANYBLOB="000000000000000014140002"], 0x34}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0xc01, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0xfffffffffffffcf1}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x9) accept4$packet(r4, &(0x7f0000001640)={0x11, 0x0, 0x0}, &(0x7f00000004c0)=0x10, 0x81800) ioctl$sock_inet6_SIOCADDRT(r7, 0x89a0, &(0x7f00000005c0)={@mcast2, @remote, @remote, 0x6, 0x0, 0x9, 0x100, 0x0, 0x42, r15}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:18:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae02, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:12 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141002, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) write$P9_RWALK(r1, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x2dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c00, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x7fffffff, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r3, &(0x7f0000000040)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, &(0x7f00000000c0)=0x80, 0x1c00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ENDIAN(r6, 0x4008af13, &(0x7f0000000100)={0x2, 0x3}) r7 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCNOTTY(r7, 0x5422) dup2(r0, r2) 02:18:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae03, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x0, 0x1}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}}], 0x40000000000002e, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000580)={[{0x9, 0x0, 0x5, 0x2, 0x20, 0x81, 0x8, 0x26, 0xff, 0x4, 0x8, 0x3, 0x3}, {0x8, 0x1ff, 0x1, 0x7, 0x2, 0x4, 0xff, 0x1, 0x13, 0x1, 0x0, 0x6, 0x1}, {0x3f, 0x226, 0x8, 0x4, 0x3, 0x80, 0x6, 0x5, 0x5, 0x0, 0x3f, 0x20, 0x7fffffff}], 0x7fff}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000300)={0xd000, 0x10000}) execveat(r8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f00000001c0)='5#)\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)='@securitykeyringsecurity$\x9cvboxnet0\'lo]ppp1@-ppp1\':\x00', &(0x7f0000000280)='*vboxnet1,\x00'], 0x400) 02:18:12 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) [ 275.342576][T10317] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 02:18:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae04, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:13 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae05, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:13 executing program 1: ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x3cd, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) socket(0x0, 0x3, 0x0) fcntl$getown(r1, 0x9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001a40)={"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"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000005580)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000002fc0)=')', 0x1}], 0x1}, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = dup2(0xffffffffffffffff, r5) write$vnet(r6, 0x0, 0x0) ioctl$RTC_VL_CLR(r6, 0x7014) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) 02:18:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae06, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x0, 0x1}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}}], 0x40000000000002e, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000580)={[{0x9, 0x0, 0x5, 0x2, 0x20, 0x81, 0x8, 0x26, 0xff, 0x4, 0x8, 0x3, 0x3}, {0x8, 0x1ff, 0x1, 0x7, 0x2, 0x4, 0xff, 0x1, 0x13, 0x1, 0x0, 0x6, 0x1}, {0x3f, 0x226, 0x8, 0x4, 0x3, 0x80, 0x6, 0x5, 0x5, 0x0, 0x3f, 0x20, 0x7fffffff}], 0x7fff}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000300)={0xd000, 0x10000}) execveat(r8, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f00000001c0)='5#)\x00'], &(0x7f00000002c0)=[&(0x7f0000000240)='@securitykeyringsecurity$\x9cvboxnet0\'lo]ppp1@-ppp1\':\x00', &(0x7f0000000280)='*vboxnet1,\x00'], 0x400) 02:18:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_open_pts(0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f00000004c0)) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12020008}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x6958f17674b28964}, 0xc010) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xffffff8d}], 0x1c) openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x800, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 02:18:13 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000040)={0x9, @remote={[], 0x2}}, 0x12) r1 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000b3b000)=0x3) fcntl$setsig(r2, 0xa, 0x12) fcntl$setownex(r2, 0xf, &(0x7f00000ff000)={0x0, r1}) recvmsg(r3, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r2, r3) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x43e000) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x89e8, 0x0) 02:18:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae07, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:13 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sysfs$1(0x1, &(0x7f0000000140)='eth0keyring\':eth1+\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KIOCSOUND(r4, 0x4b2f, 0x9) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0xe1) 02:18:13 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:13 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae08, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f000087fff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000b3b000)=0x3f) fcntl$setsig(r5, 0xa, 0x12) fcntl$setownex(r5, 0xf, &(0x7f00000ff000)={0x0, r4}) recvmsg(r6, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r5, r6) ioctl$LOOP_SET_FD(r3, 0x4c00, r6) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x33, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xfffffd5a) 02:18:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae0a, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x0, 0x1}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}}], 0x40000000000002e, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000580)={[{0x9, 0x0, 0x5, 0x2, 0x20, 0x81, 0x8, 0x26, 0xff, 0x4, 0x8, 0x3, 0x3}, {0x8, 0x1ff, 0x1, 0x7, 0x2, 0x4, 0xff, 0x1, 0x13, 0x1, 0x0, 0x6, 0x1}, {0x3f, 0x226, 0x8, 0x4, 0x3, 0x80, 0x6, 0x5, 0x5, 0x0, 0x3f, 0x20, 0x7fffffff}], 0x7fff}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000300)={0xd000, 0x10000}) 02:18:14 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae0b, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000180)="66b9800000c00f326635008000000f30baf80c66b88879da8a66efbafc0c66ed660f3881ba80a866b9160b00000f3266b93806000066b85400000066ba000000000f302a150f3804969aef0f01c20f84c600bad104b80098ef", 0x59}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$can_raw(r4, &(0x7f0000000040), 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0xffffff87) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, 0x0, &(0x7f0000000080)) 02:18:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae0c, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae0d, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:14 executing program 1: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x2c0300, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x5, 0x80, 0x6, 0x6, 0x0, 0x4, 0x2008, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x2600, 0x6, 0x0, 0x6, 0x200, 0xca}, 0x0, 0xc, r0, 0x1) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1, 0x0) write$P9_RRENAME(r1, &(0x7f0000000140)={0x7}, 0x7) msgget$private(0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00\x00\x00t'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 02:18:14 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae0e, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x0, 0x1}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}}], 0x40000000000002e, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="5b2d27070000003100000000870000000023877143741e327db0955ab57708ad6126e45b400c9fff2e0da020e61738b8d40844fe313fe1998a44800000000000000065705c5dba6c8f0cb3a1035d9bcfc82566f73a8052b349fd51149f6fead8aefa4d6d95d35f128a578d6ec23de355564340e7a8942a5745c6d814058b1d4a3b0d1aeacaa02fc7f58444ceb6d2653ec66cbe828d83938053e0db0c47f8223b00bda75701ca7cc4b0387bc2ca33bbc69fca6974194ca4cb14ea4c10d9511bf8d6d08bda5dc327334e04c8ea9496562757d706336b543d87907067b2b6b3011f8605e4f231f962ff5f966597110aff41cd5463744bf9e3a1addab589ef6b6b287c66663f68f34abf73959a5b49535b72e0d9b0f8ca397df6ddce7b7ddde71524a3ce4f46aab0f6827024a88c52b0b2eb6cfdbdd7b7d3b8546bcce02fc4beaeefc805d33c07157fa62777885ee8b3e24cbbbc8145a2b9c37680e615c5e9d8b4a0147d5e2926beb5de76ff1654ebb226ea77e12121037e491f79d9948056803ca9b7436f13966d496d6ed7f7fac1b63ddca53c04556043daf587ebeb1c51bd9c7f1b3b594d62bd2c255b3a89fe8a469d936f7dde8b3c1a02ef87a0dbf188a035a4536983fa0000000000000000"], 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000580)={[{0x9, 0x0, 0x5, 0x2, 0x20, 0x81, 0x8, 0x26, 0xff, 0x4, 0x8, 0x3, 0x3}, {0x8, 0x1ff, 0x1, 0x7, 0x2, 0x4, 0xff, 0x1, 0x13, 0x1, 0x0, 0x6, 0x1}, {0x3f, 0x226, 0x8, 0x4, 0x3, 0x80, 0x6, 0x5, 0x5, 0x0, 0x3f, 0x20, 0x7fffffff}], 0x7fff}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000300)={0xd000, 0x10000}) [ 277.483713][T10429] bond0: (slave bond_slave_1): Releasing backup interface 02:18:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x0, 0x1}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}}], 0x40000000000002e, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="5b2d27070000003100000000870000000023877143741e327db0955ab57708ad6126e45b400c9fff2e0da020e61738b8d40844fe313fe1998a44800000000000000065705c5dba6c8f0cb3a1035d9bcfc82566f73a8052b349fd51149f6fead8aefa4d6d95d35f128a578d6ec23de355564340e7a8942a5745c6d814058b1d4a3b0d1aeacaa02fc7f58444ceb6d2653ec66cbe828d83938053e0db0c47f8223b00bda75701ca7cc4b0387bc2ca33bbc69fca6974194ca4cb14ea4c10d9511bf8d6d08bda5dc327334e04c8ea9496562757d706336b543d87907067b2b6b3011f8605e4f231f962ff5f966597110aff41cd5463744bf9e3a1addab589ef6b6b287c66663f68f34abf73959a5b49535b72e0d9b0f8ca397df6ddce7b7ddde71524a3ce4f46aab0f6827024a88c52b0b2eb6cfdbdd7b7d3b8546bcce02fc4beaeefc805d33c07157fa62777885ee8b3e24cbbbc8145a2b9c37680e615c5e9d8b4a0147d5e2926beb5de76ff1654ebb226ea77e12121037e491f79d9948056803ca9b7436f13966d496d6ed7f7fac1b63ddca53c04556043daf587ebeb1c51bd9c7f1b3b594d62bd2c255b3a89fe8a469d936f7dde8b3c1a02ef87a0dbf188a035a4536983fa0000000000000000"], 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000580)={[{0x9, 0x0, 0x5, 0x2, 0x20, 0x81, 0x8, 0x26, 0xff, 0x4, 0x8, 0x3, 0x3}, {0x8, 0x1ff, 0x1, 0x7, 0x2, 0x4, 0xff, 0x1, 0x13, 0x1, 0x0, 0x6, 0x1}, {0x3f, 0x226, 0x8, 0x4, 0x3, 0x80, 0x6, 0x5, 0x5, 0x0, 0x3f, 0x20, 0x7fffffff}], 0x7fff}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000300)={0xd000, 0x10000}) 02:18:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae10, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:15 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0xffffffff}}) 02:18:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae11, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae12, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae50, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae88, &(0x7f0000000040)={0x2fe7feae96fe104e}) 02:18:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc0189436, &(0x7f0000000040)={0x2fe7feae96fe104e}) [ 278.481311][T10434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.529265][T10460] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 278.623406][T10459] bond0: (slave bond_slave_1): Releasing backup interface