[ 93.273894] audit: type=1800 audit(1547865687.328:25): pid=10132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 93.293081] audit: type=1800 audit(1547865687.328:26): pid=10132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 93.312556] audit: type=1800 audit(1547865687.348:27): pid=10132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 94.583518] sshd (10196) used greatest stack depth: 53296 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.248' (ECDSA) to the list of known hosts. 2019/01/19 02:41:43 fuzzer started 2019/01/19 02:41:48 dialing manager at 10.128.0.26:42073 2019/01/19 02:41:48 syscalls: 1 2019/01/19 02:41:48 code coverage: enabled 2019/01/19 02:41:48 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/01/19 02:41:48 extra coverage: extra coverage is not supported by the kernel 2019/01/19 02:41:48 setuid sandbox: enabled 2019/01/19 02:41:48 namespace sandbox: enabled 2019/01/19 02:41:48 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/19 02:41:48 fault injection: enabled 2019/01/19 02:41:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/19 02:41:48 net packet injection: enabled 2019/01/19 02:41:48 net device setup: enabled 02:44:37 executing program 0: syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000800)) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@del={0x100, 0x11, 0x0, 0x0, 0x0, {{'drbg_pr_ctr_aes192\x00'}}, [{0x8, 0x1, 0x5}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x315}, {0x8, 0x1, 0x7fff}]}, 0x100}}, 0x0) syzkaller login: [ 284.055413] IPVS: ftp: loaded support on port[0] = 21 [ 284.224288] chnl_net:caif_netlink_parms(): no params data found [ 284.309055] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.315847] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.324595] device bridge_slave_0 entered promiscuous mode [ 284.334546] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.341057] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.349788] device bridge_slave_1 entered promiscuous mode [ 284.387354] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 284.399563] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 284.433824] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 284.442799] team0: Port device team_slave_0 added [ 284.450296] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 284.459024] team0: Port device team_slave_1 added [ 284.466956] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 284.475888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 284.667307] device hsr_slave_0 entered promiscuous mode [ 284.922504] device hsr_slave_1 entered promiscuous mode [ 285.073897] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 285.081637] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 285.114128] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.120710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.128082] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.134723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.227432] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.236625] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.261015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.275419] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 285.288365] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 285.295793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.303603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.321160] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 285.327755] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.341345] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 285.349804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.358493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.367202] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.373750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.393948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 285.401201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.410145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.419963] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.426580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.444183] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 285.458474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 285.466211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.475619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.492029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 285.504210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 285.519049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 285.526261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.535439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.544356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.554163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.563220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.571801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.585158] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 285.592310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.600648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.609514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.627754] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 285.633928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.660645] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 285.680840] 8021q: adding VLAN 0 to HW filter on device batadv0 02:44:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioprio_set$uid(0x3, 0x0, 0x2001) 02:44:40 executing program 0: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f0000000000)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) 02:44:40 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000000022, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000003c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) 02:44:40 executing program 0: setresuid(0x0, 0xee01, 0x0) setpriority(0x2, 0x0, 0x0) 02:44:40 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000000}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x1ff) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 286.432681] hrtimer: interrupt took 26072 ns 02:44:41 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x80) mq_timedreceive(r0, &(0x7f00000001c0)=""/171, 0xab, 0x9, &(0x7f0000000280)={0x0, 0x989680}) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x40000, 0x0) personality(0x5200007) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f0000000300)="c9db323f544cfd24466ba27265f4c3dd9ee0ad9f14e8fe335f1875a2c554cc21190a471e5946778829b6cd2922189244092248a71ed57d8e95ece12a0593e7621e96105d831697f2cecab49b229aa5ecc966b6b32f0e94089a086d4238c51e5a97c45396159942bc29958fb9a0f602b97f0fa9949d7a5b704ac04362f418fb8766e0aa18fe648c3aa207ad891263d56298fced7f69bf9d2a0aea770504cfd4b75fa5a28a839b575828970a8c251f69a9c47e52644c70cc1d22", &(0x7f00000003c0)="9d302aee33abbd0b522a3d403dcb6a2f2c53374733606fa682b6e91fb2151b4f8a48bee594ec28770b78abce557b2492bd968b68b329cbb5d9975fb08f6ddb895cf70232f9178a7d80616b6ccd106c500d497cf8a6a5c96abdd7466f6d888f2f72dfbd7b44a0c7250597c213d573834b207d3f31eee32d8c02412e9966b7d453af026ba2e63d09d905528445f27a", 0x1}, 0x20) io_setup(0x6, &(0x7f00000004c0)=0x0) io_getevents(r2, 0xf6d, 0x4, &(0x7f0000000500)=[{}, {}, {}, {}], &(0x7f0000000580)={0x0, 0x1c9c380}) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f00000005c0)=0xfbde) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000680)={0x5, 0x1, 0x80, 0x7412, 0x0}, &(0x7f00000006c0)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000700)={r3, 0x9}, &(0x7f0000000740)=0x8) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) write$FUSE_POLL(r0, &(0x7f0000000780)={0x18, 0x0, 0x8}, 0x18) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000a) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f00000007c0)={0x1f, 0x5, 0x8, 0x207}) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, r4, 0x809, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100000001}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x93e3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd4d0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000a00)="ce211432949d41e6754621c545741f4f1ee4cf893aaea17aeb2f18bb7d956994f27e1231f63ecb44404766f606f7cac1bd23c258afb02b123f3bd2df00b561b0fba985982eba44fac9a7f3f5d47758c02e63afed5fc78021dc3347444f21bc001ea1e40729fbdd297e64d4ec92c34009f0495ba5b3b68cc6ea955a6c46e7e4cd4cafb228e7540b9acbdf1cca9f6774cd3999b726052e6c97cb6b704234337f21af75d8b1475c11bc8b9f62797d965ae96c0604ea0c9e667e3e0d33e5aec665f073cd6f8b4c0b4a2e45a1d3048f0c35de8b172fba4b3d1465fb6d6c0883e23082da6d03aee75f29a14028edbda73cf693c56e") fcntl$addseals(r0, 0x409, 0x3) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000b00)={'veth0_to_hsr\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}}) r5 = getgid() getgroups(0x1, &(0x7f0000000b40)=[r5]) 02:44:41 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000400) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bond0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'ip6erspan0\x00'}}) r4 = dup3(r1, r0, 0x80000) accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000240)={@local, 0x3c, r5}) 02:44:41 executing program 0: mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000011000/0x2000)=nil, &(0x7f0000011000/0x3000)=nil, 0x2000}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) r3 = syz_open_procfs(r2, &(0x7f0000000080)='fdinfo/3\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 287.765793] IPVS: ftp: loaded support on port[0] = 21 [ 287.937227] chnl_net:caif_netlink_parms(): no params data found [ 288.018597] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.025986] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.034424] device bridge_slave_0 entered promiscuous mode [ 288.044891] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.051398] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.059990] device bridge_slave_1 entered promiscuous mode [ 288.098246] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 288.110249] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 288.144183] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 288.153040] team0: Port device team_slave_0 added [ 288.159613] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 288.168345] team0: Port device team_slave_1 added [ 288.175855] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 288.184679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 288.258314] device hsr_slave_0 entered promiscuous mode 02:44:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) write(r2, &(0x7f0000000000)="7f", 0x1) close(r1) close(r0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2, 0x100}, {r0, 0x2000}, {r0, 0x6}], 0x3, &(0x7f0000000140)={r3, r4+30000000}, &(0x7f0000000180)={0x80000000}, 0x8) [ 288.413178] device hsr_slave_1 entered promiscuous mode [ 288.453815] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 288.461565] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 288.512971] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.519625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.527077] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.533731] bridge0: port 1(bridge_slave_0) entered forwarding state 02:44:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @empty}}, 0x1c) write(r2, &(0x7f0000000000)="7f", 0x1) close(r1) close(r0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r2, 0x100}, {r0, 0x2000}, {r0, 0x6}], 0x3, &(0x7f0000000140)={r3, r4+30000000}, &(0x7f0000000180)={0x80000000}, 0x8) [ 288.686574] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 288.693551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.717570] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 288.750240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.760347] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.776472] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.794574] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 288.826763] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 288.833144] 8021q: adding VLAN 0 to HW filter on device team0 02:44:42 executing program 0: mlockall(0x1) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x200, 0x0) r2 = geteuid() r3 = getegid() fchownat(r1, &(0x7f0000000540)='./file0\x00', r2, r3, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0x9c, 0x121200) ioctl$VT_WAITACTIVE(r6, 0x5607) r7 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x6, 0x40000) recvfrom$inet(r7, &(0x7f00000002c0)=""/87, 0x57, 0x2040, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10) r8 = dup3(r4, r4, 0x80000) syz_open_dev$dmmidi(&(0x7f0000000580)='/dev/dmmidi#\x00', 0x1, 0x801) r9 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f00000001c0)={0x1, 0x40, r9, 0x0, r10, 0x0, 0x200, 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000340)={0x0, 0x80000001}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000003c0)={r11, @in={{0x2, 0x4e23, @rand_addr=0x1}}}, &(0x7f0000000480)=0x84) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="2300000052008134dfcab07e108c4b301c9f41321a7b045acf75e58b423c2792ee7306", 0x23}], 0x1}, 0x0) [ 288.868221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.877518] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.884126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.953815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.962577] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.969077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.990431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 288.998794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.008111] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.022742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 289.034379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 289.042424] netlink: 15 bytes leftover after parsing attributes in process `syz-executor0'. [ 289.051025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.061405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.077833] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 289.091456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 289.100771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.109406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.118451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.127185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.142923] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 02:44:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000100)=0xfffffffffffffffd, 0x4) [ 289.149061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 289.172643] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 289.226644] 8021q: adding VLAN 0 to HW filter on device batadv0 02:44:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0xffed) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) 02:44:43 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800000000006) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2, 0x1000, 0xffffffffffffffff, 0x400, 0x9, 0x1, 0x1, 0x393, 0xd0, 0x5}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x2, 0x3}, 0x20) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000240)=""/184) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000200)={@empty, 0x58, r1}) close(r0) 02:44:43 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x41, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x5, 0x2) r2 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc040564a, &(0x7f00000000c0)={0x0, 0x0, {0x3008}}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x400000000000002}) 02:44:43 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {0x77359400}}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0xd, 0x3, 0x7, {0x1000, 0x7, 0x7, 0x5}}) r4 = dup(0xffffffffffffff9c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r5 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x200000) sync_file_range(r5, 0x7ff, 0x7, 0x3) 02:44:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r0}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x9d, 0x102) [ 289.810117] mmap: syz-executor0 (10371) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 02:44:43 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {0x77359400}}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0xd, 0x3, 0x7, {0x1000, 0x7, 0x7, 0x5}}) r4 = dup(0xffffffffffffff9c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r5 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x200000) sync_file_range(r5, 0x7ff, 0x7, 0x3) 02:44:44 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {0x77359400}}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0xd, 0x3, 0x7, {0x1000, 0x7, 0x7, 0x5}}) r4 = dup(0xffffffffffffff9c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r5 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x200000) sync_file_range(r5, 0x7ff, 0x7, 0x3) 02:44:44 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x400000000000012, 0x0, @thr={&(0x7f0000000280), &(0x7f0000000180)}}, &(0x7f0000000040)) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x6, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000005c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000500), 0x3, {0xa, 0x4e20, 0x341958a3, @remote, 0x8}, r2}}, 0x38) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000100)) syz_open_dev$sndmidi(&(0x7f00000006c0)='/dev/snd/midiC#D#\x00', 0x8, 0x80080) r3 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r3, 0x0) accept(r3, &(0x7f0000000480)=@ethernet={0x0, @local}, &(0x7f0000000080)=0x80) timer_settime(0x0, 0x1, &(0x7f0000000640)={{}, {0x77359400}}, &(0x7f0000000680)) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x24, 0x1, @tid=r0}, &(0x7f00000001c0)) 02:44:44 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {0x77359400}}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0xd, 0x3, 0x7, {0x1000, 0x7, 0x7, 0x5}}) r4 = dup(0xffffffffffffff9c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r5 = syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x200000) sync_file_range(r5, 0x7ff, 0x7, 0x3) 02:44:44 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x400000000000012, 0x0, @thr={&(0x7f0000000280), &(0x7f0000000180)}}, &(0x7f0000000040)) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x6, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000005c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000500), 0x3, {0xa, 0x4e20, 0x341958a3, @remote, 0x8}, r2}}, 0x38) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000100)) syz_open_dev$sndmidi(&(0x7f00000006c0)='/dev/snd/midiC#D#\x00', 0x8, 0x80080) r3 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r3, 0x0) accept(r3, &(0x7f0000000480)=@ethernet={0x0, @local}, &(0x7f0000000080)=0x80) timer_settime(0x0, 0x1, &(0x7f0000000640)={{}, {0x77359400}}, &(0x7f0000000680)) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x24, 0x1, @tid=r0}, &(0x7f00000001c0)) 02:44:44 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {0x77359400}}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0xd, 0x3, 0x7, {0x1000, 0x7, 0x7, 0x5}}) r4 = dup(0xffffffffffffff9c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x200000) 02:44:44 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x400000000000012, 0x0, @thr={&(0x7f0000000280), &(0x7f0000000180)}}, &(0x7f0000000040)) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x6, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000005c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000500), 0x3, {0xa, 0x4e20, 0x341958a3, @remote, 0x8}, r2}}, 0x38) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000100)) syz_open_dev$sndmidi(&(0x7f00000006c0)='/dev/snd/midiC#D#\x00', 0x8, 0x80080) r3 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r3, 0x0) accept(r3, &(0x7f0000000480)=@ethernet={0x0, @local}, &(0x7f0000000080)=0x80) timer_settime(0x0, 0x1, &(0x7f0000000640)={{}, {0x77359400}}, &(0x7f0000000680)) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x24, 0x1, @tid=r0}, &(0x7f00000001c0)) 02:44:44 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {0x77359400}}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0xd, 0x3, 0x7, {0x1000, 0x7, 0x7, 0x5}}) r4 = dup(0xffffffffffffff9c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:44 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140), 0x1000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) r3 = getpgrp(r2) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0x0, 0x6, {{0xeb, 0xc9d, 0x1, r3}}}, 0x28) ptrace$getregset(0x4204, r2, 0x200, &(0x7f0000000200)={&(0x7f0000000180)=""/29, 0x1d}) write$FUSE_ENTRY(r0, &(0x7f0000001040)={0xffffffffffffff6a, 0x0, 0x2, {0x20000000007, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}}, 0x90) r4 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xfffffffffffff000, 0xc0081) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 02:44:44 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {0x77359400}}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0xd, 0x3, 0x7, {0x1000, 0x7, 0x7, 0x5}}) r4 = dup(0xffffffffffffff9c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000042d2000507000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000800050000000000"], 0x2c}}, 0x0) 02:44:45 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {0x77359400}}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0xd, 0x3, 0x7, {0x1000, 0x7, 0x7, 0x5}}) r4 = dup(0xffffffffffffff9c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:45 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {0x77359400}}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0xd, 0x3, 0x7, {0x1000, 0x7, 0x7, 0x5}}) r4 = dup(0xffffffffffffff9c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:45 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote, 0x0, 0xff}, 0x0, @in6}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x14, 0x0, 0x0, 0x800, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x400300, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0xfa) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r1, &(0x7f000000a040)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/12, 0xc}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000480)=""/211, 0xd3}], 0x3, &(0x7f0000000340)=""/60, 0x3c, 0x200}, 0x80000001}, {{0x0, 0x0, &(0x7f0000000bc0), 0x0, &(0x7f0000002340)=""/4096, 0x1000}}], 0x2, 0x0, &(0x7f000000a2c0)={0x77359400}) sendmsg$key(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 02:44:45 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {0x77359400}}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0xd, 0x3, 0x7, {0x1000, 0x7, 0x7, 0x5}}) r4 = dup(0xffffffffffffff9c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0x6) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:45 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {0x77359400}}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0xd, 0x3, 0x7, {0x1000, 0x7, 0x7, 0x5}}) dup(0xffffffffffffff9c) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:45 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {0x77359400}}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000180)={0xd, 0x3, 0x7, {0x1000, 0x7, 0x7, 0x5}}) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:45 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r2, r3/1000+10000}, {0x77359400}}) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast2, @in=@remote}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0x2ea) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r1, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0), 0x8) 02:44:45 executing program 1: link(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00') perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x400042, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f00000000c0)='./file0/file0\x00') 02:44:45 executing program 0: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r1, r2/1000+10000}, {0x77359400}}) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:45 executing program 0: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r1, r2/1000+10000}, {0x77359400}}) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:46 executing program 1: r0 = socket(0x10, 0x803, 0x5) sendto(r0, &(0x7f0000000040)="120000001600e70d017b00020000008e1584", 0x1a1, 0x10, 0x0, 0xfffffdd8) recvmmsg(r0, &(0x7f0000007980)=[{{0x0, 0xd311d39f07cd234, 0x0, 0x100000107, 0x0, 0xffffffffffffff65}}], 0x0, 0x10002, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x10000) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000140)={0x2, 0x4, @name="a9cb9caba1a01d0af50f1f194212cec20f00f478183f55a3a9837643772fc568"}) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x9, 0x99, 0x6, 0x7f, 0x7, 0x100000000, 0x7, 0x1, 0x9b, 0x7fffffff, 0x10001}, 0xb) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x90, @empty, 0x3}, 0x1c) 02:44:46 executing program 0: shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{r1, r2/1000+10000}, {0x77359400}}) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:46 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:46 executing program 1: r0 = eventfd(0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x183200, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x200, 0xc, 0x2}) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580), 0x8) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000380)="ee238135aea770aca8", 0x9}], 0x1) 02:44:46 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x80000, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:46 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:46 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:46 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:46 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:46 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:47 executing program 0 (fault-call:2 fault-nth:0): shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 293.064338] FAULT_INJECTION: forcing a failure. [ 293.064338] name failslab, interval 1, probability 0, space 0, times 1 [ 293.075888] CPU: 0 PID: 10485 Comm: syz-executor0 Not tainted 5.0.0-rc1+ #7 [ 293.083024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.092654] Call Trace: [ 293.095359] dump_stack+0x173/0x1d0 [ 293.099055] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 293.104328] should_fail+0xa19/0xb20 [ 293.108134] __should_failslab+0x278/0x2a0 [ 293.112503] should_failslab+0x29/0x70 [ 293.116448] kmem_cache_alloc+0xff/0xb60 [ 293.120561] ? vm_area_dup+0x65/0x1a0 [ 293.124411] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 293.129901] ? kstrtoull+0x76e/0x7e0 [ 293.133685] vm_area_dup+0x65/0x1a0 [ 293.137400] __split_vma+0x1cf/0xb40 [ 293.141187] split_vma+0x10f/0x170 [ 293.144787] mlock_fixup+0xb97/0xd40 [ 293.148609] apply_vma_lock_flags+0x43b/0x6a0 [ 293.153186] __se_sys_munlock+0x14e/0x1b0 [ 293.157425] __x64_sys_munlock+0x3e/0x60 [ 293.161534] do_syscall_64+0xbc/0xf0 [ 293.165378] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 293.170635] RIP: 0033:0x458099 [ 293.173883] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.192863] RSP: 002b:00007f0fdcde7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000096 [ 293.200627] RAX: ffffffffffffffda RBX: 00007f0fdcde7c90 RCX: 0000000000458099 [ 293.207935] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffd000 [ 293.215260] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 293.222571] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0fdcde86d4 [ 293.229899] R13: 00000000004c3f5c R14: 00000000004d7090 R15: 0000000000000003 02:44:47 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) accept(0xffffffffffffff9c, &(0x7f0000000300)=@nfc, &(0x7f0000000000)=0x80) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x70) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0xca) ioctl$BLKFRASET(r1, 0x1264, &(0x7f00000000c0)=0x7c61) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FIBMAP(r0, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8010, r0, 0xfffffffffffffffc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) lseek(0xffffffffffffffff, 0x0, 0x7) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0xff}, 0xa, @in6, 0x0, 0x1, 0x0, 0xdffffffffffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000a80)=[{{&(0x7f0000000100)=@in={0x2, 0xc67a}, 0x80, 0x0}}], 0x1, 0x0) 02:44:47 executing program 0 (fault-call:2 fault-nth:1): shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:47 executing program 1: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='/\x00\x00e\x00\x00\x00\x00\x00\x00') fcntl$setstatus(r1, 0x4, 0x46000) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 02:44:47 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:47 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:47 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x42) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x3e9000) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x2}}, 0x18) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="b10b938e", 0x4}], 0x1}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0xe2b, 0x4) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 02:44:47 executing program 2: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x3, 0xfff, 0xd68, 0x3a5, 0x8}) syz_emit_ethernet(0xf1, &(0x7f00000000c0)={@random="1e1e261929bb", @empty, [{[], {0x8100, 0x20, 0x1ff}}], {@ipx={0x8137, {0xffff, 0xdf, 0x7f, 0x11, {@current, @random="e4a499786fba", 0x8}, {@broadcast, @random="0c30a0865b6e", 0x80000000}, "cbaa7dcd49233b0e09aa4e5186e871c46d38a1d429f41268614b5905868e2b3b3e61da7587da127e35bc3c2c166b42dc755ee3dde5d3e7f58befb130eaad420d86e24f3b29758e352eecc17bdb9a8ade2e634684ab4926029a49d38dab5c0cd124f14f83d8671be6068835d34fdbf676ef13b837c2736af2a4bd4bec0ae78a1503c1ce7a722532e27c73733a3e12b1a82d101a6249aa0c7a7a14b34dd57f843b0441cd9ec5d837a7e71326f048fea3dfc956bcbbd990e0795ce058f39e844fc85e"}}}}, &(0x7f00000001c0)={0x0, 0x1, [0x666, 0xdad, 0xba4, 0x194]}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x0, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000240)=0x3, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x329, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x101, 0x0, 0x81, 0x2c8}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000000) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000003c0)=r1) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) write$input_event(r1, &(0x7f0000000440)={{r3, r4/1000+10000}, 0x3, 0x8001}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0xffffffffffffffff, r1, 0x0, 0x4, &(0x7f0000000480)='\xc9lo\x00', 0xffffffffffffffff}, 0x30) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) kcmp(r5, r6, 0x7, r1, r1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000580)={0x0, 0x3, 0x5, [0x1, 0x7, 0x1800000000, 0x9, 0x0]}, &(0x7f00000005c0)=0x12) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000600)={r7, 0x4}, &(0x7f0000000640)=0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000680)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x7ff, 0x0, "4dfd4a54200f9fe6d41d4b22fd0cab59909c77cc7c08e9c606a5f8b13299fe05728058bcd340abab2a7b2fec62577500020ac64da4ac717cb13a58265b2fda2180c038e09a284de091e5721728a3c3bf"}, 0xd8) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000780)={{0xb3, 0x8, 0x10001, 0x7fffffff}, 'syz1\x00', 0x3b}) accept$alg(r1, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000800)='nbd\x00') r9 = syz_open_dev$sndpcmp(&(0x7f0000000840)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000900)={r7, 0x74, &(0x7f0000000880)=[@in6={0xa, 0x4e20, 0x8, @local, 0x7}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x2}, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x1}]}, &(0x7f0000000940)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000980)={r8, 0x6}, 0x8) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) select(0x40, &(0x7f00000009c0)={0xe0000, 0x2, 0x0, 0x2, 0xe2, 0xffff, 0x800, 0xd831}, &(0x7f0000000a00)={0x7b, 0x7, 0x0, 0x100000000, 0xff, 0x80000000, 0xfd4, 0x101}, &(0x7f0000000a40)={0x40, 0x2, 0x6, 0xbf92, 0x7fff, 0x7fff, 0x6, 0x4}, &(0x7f0000000ac0)={r11, r12/1000+30000}) ioctl$FICLONE(r9, 0x40049409, r1) ioctl$RTC_WIE_ON(r9, 0x700f) ioctl$SG_GET_LOW_DMA(r9, 0x227a, &(0x7f0000000b00)) ioctl$KVM_ASSIGN_SET_MSIX_NR(r9, 0x4008ae73, &(0x7f0000000b40)={0x7ff, 0xa7}) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000b80)) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000bc0)={r10, 0x400000000, 0x800, 0x1}, &(0x7f0000000c00)=0x10) 02:44:47 executing program 0: r0 = shmget(0x3, 0x2000, 0x1120, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x40000) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000080)={{0x4, @name="8a615fe1f3a2c0dacf622f2be92f78a3f64ce2aae1fa8fb4e0992bd8cc3720c7"}, 0x8, 0x5fc8, 0x5196}) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioctl$NBD_DISCONNECT(r1, 0xab08) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='4`\x00') munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:47 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x60) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x800, 0x101}, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9e6) socketpair(0x22, 0x2, 0x10, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x60) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) [ 294.029470] delete_channel: no stack [ 294.033469] delete_channel: no stack [ 294.059408] delete_channel: no stack [ 294.063369] delete_channel: no stack 02:44:48 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = getpgrp(0xffffffffffffffff) ptrace$getenv(0x4201, r2, 0x2, &(0x7f00000000c0)) dup3(r0, r1, 0x80000) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000040)={0x3, 0x2, [{0x9, 0x0, 0x9}, {0x9, 0x0, 0x20000000000000}, {0x800, 0x0, 0x1f}]}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:48 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x60) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x7, 0x800, 0x101}, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9e6) socketpair(0x22, 0x2, 0x10, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000180), &(0x7f0000000200)=0x60) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) 02:44:48 executing program 0: prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180)) shmget(0x1, 0x3000, 0x1080, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'bridge_slave_1\x00', 0x2}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x4082) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000080)={{0x8001, 0x4}, 'port0\x00', 0x10, 0x40000, 0x8, 0x8f, 0x9, 0xdd5, 0xac, 0x0, 0x7, 0x2}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) fcntl$setpipe(r2, 0x407, 0x4) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f00000001c0)=0x400) [ 294.316276] delete_channel: no stack [ 294.320210] delete_channel: no stack 02:44:48 executing program 1: timerfd_gettime(0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x27, @rand_addr="184a2e8a54873e6205b7b09d8ad82a72", 0x1}], 0x1c) 02:44:48 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, [], &(0x7f0000000100)={0x98f909, 0xfffffffffffffffd, [], @p_u32=&(0x7f0000000040)}}) [ 294.619998] IPVS: ftp: loaded support on port[0] = 21 02:44:48 executing program 1: open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x0, 0x2}]}, 0x18, 0x0) clone(0x2102001dfd, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)=':\x00', &(0x7f00000000c0)='y\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)='security.capability\x00'], 0x0) 02:44:48 executing program 1: eventfd2(0xffffffffffff0001, 0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24242, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x800) accept$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000480)=@alg, &(0x7f0000000500)=0x80, 0x80000) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x48, 0x10a40) r2 = dup3(r1, r0, 0x80000) openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r3, &(0x7f0000f13000)={0xa, 0x0, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x7c721d3af6f0052f) [ 294.978193] bridge0: port 2(bridge_slave_1) entered disabled state 02:44:49 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x54001012, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000000, 0x412000) accept$alg(r1, 0x0, 0x0) 02:44:49 executing program 1: eventfd2(0xffffffffffff0001, 0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24242, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x800) accept$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000480)=@alg, &(0x7f0000000500)=0x80, 0x80000) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x48, 0x10a40) r2 = dup3(r1, r0, 0x80000) openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r3, &(0x7f0000f13000)={0xa, 0x0, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x7c721d3af6f0052f) [ 295.192023] chnl_net:caif_netlink_parms(): no params data found [ 295.351047] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.357747] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.366219] device bridge_slave_0 entered promiscuous mode [ 295.409884] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.416603] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.425168] device bridge_slave_1 entered promiscuous mode [ 295.479036] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 295.525834] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 295.577734] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 295.586563] team0: Port device team_slave_0 added [ 295.593106] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 295.602037] team0: Port device team_slave_1 added [ 295.608358] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 295.617405] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 295.756576] device hsr_slave_0 entered promiscuous mode [ 295.892298] device hsr_slave_1 entered promiscuous mode [ 296.053038] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 296.075793] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 296.107215] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 296.190515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.203935] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 296.218314] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 296.226655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.234560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.253289] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 296.259506] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.279943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 296.288919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.297832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.306327] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.312941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.325639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.340878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 296.348961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.358644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.367280] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.373841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.391638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 296.405658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 296.412993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.422455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.438268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 296.448112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.457624] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 296.474937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 296.488810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 296.496782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 296.505282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 296.514356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 296.523892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 296.532308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 296.553493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 296.561216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 296.570062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 296.590127] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 296.597158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.626089] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 296.651148] 8021q: adding VLAN 0 to HW filter on device batadv0 02:44:50 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:50 executing program 1: eventfd2(0xffffffffffff0001, 0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24242, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x800) accept$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000480)=@alg, &(0x7f0000000500)=0x80, 0x80000) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x48, 0x10a40) r2 = dup3(r1, r0, 0x80000) openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r3, &(0x7f0000f13000)={0xa, 0x0, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x7c721d3af6f0052f) 02:44:50 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xe6, 0x4401) recvmmsg(r1, &(0x7f0000005780)=[{{&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000000140)=""/160, 0xa0}], 0x2, &(0x7f0000000240)=""/140, 0x8c}, 0x8}, {{&(0x7f0000000300)=@generic, 0x80, &(0x7f0000001500)=[{&(0x7f0000000380)=""/15, 0xf}, {&(0x7f00000003c0)=""/228, 0xe4}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/49, 0x31}], 0x4, &(0x7f0000001540)=""/231, 0xe7}, 0x3}, {{&(0x7f0000001640)=@nfc, 0x80, &(0x7f0000002700)=[{&(0x7f00000016c0)=""/37, 0x25}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2, &(0x7f0000002740)=""/240, 0xf0}, 0x4}, {{&(0x7f0000002840)=@nl, 0x80, &(0x7f0000002980)=[{&(0x7f00000028c0)=""/59, 0x3b}, {&(0x7f0000002900)=""/62, 0x3e}, {&(0x7f0000002940)=""/17, 0x11}], 0x3, &(0x7f00000029c0)=""/200, 0xc8}, 0x4a82}, {{&(0x7f0000002ac0)=@hci, 0x80, &(0x7f0000003b40)=[{&(0x7f0000002b40)=""/4096, 0x1000}], 0x1}, 0x9}, {{&(0x7f0000003b80)=@ipx, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003c00)=""/118, 0x76}], 0x1, &(0x7f0000003cc0)=""/34, 0x22}, 0x3}, {{&(0x7f0000003d00)=@rc, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003d80)=""/83, 0x53}, {&(0x7f0000003e00)=""/56, 0x38}], 0x2, &(0x7f0000003e80)=""/67, 0x43}, 0x2}, {{&(0x7f0000003f00)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004340)=[{&(0x7f0000003f80)=""/220, 0xdc}, {&(0x7f0000004080)=""/112, 0x70}, {&(0x7f0000004100)=""/173, 0xad}, {&(0x7f00000041c0)=""/164, 0xa4}, {&(0x7f0000004280)=""/181, 0xb5}], 0x5, &(0x7f00000043c0)=""/195, 0xc3}, 0x57}, {{&(0x7f00000044c0)=@xdp, 0x80, &(0x7f0000005640)=[{&(0x7f0000004540)=""/65, 0x41}, {&(0x7f00000045c0)=""/4096, 0x1000}, {&(0x7f00000055c0)=""/82, 0x52}], 0x3, &(0x7f0000005680)=""/254, 0xfe}, 0x2}], 0x9, 0x2, &(0x7f00000059c0)={0x77359400}) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0) 02:44:51 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/163) mlock(&(0x7f0000ff6000/0x8000)=nil, 0x8000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000100)={0x5, 0x2}) getsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000140)=""/19, &(0x7f0000000180)=0x13) 02:44:51 executing program 2: unshare(0x20020400) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{}, {}], 0xac, 0x0) 02:44:51 executing program 1: eventfd2(0xffffffffffff0001, 0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x24242, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x800) accept$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000480)=@alg, &(0x7f0000000500)=0x80, 0x80000) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x48, 0x10a40) r2 = dup3(r1, r0, 0x80000) openat$cgroup_type(r2, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r3, &(0x7f0000f13000)={0xa, 0x0, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, 0x7c721d3af6f0052f) 02:44:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f00000001c0)=0xb9) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000300)) keyctl$get_persistent(0x3, r2, 0x0) request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, r1) 02:44:51 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0xffffffffffffffbe) write$binfmt_elf64(r1, &(0x7f0000001240)=ANY=[@ANYPTR], 0x8) splice(r0, 0x0, r3, 0x0, 0xffffbfffff7fffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x5) 02:44:51 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) r0 = shmget(0x3, 0x1000, 0x540000a3, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0xffc) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:51 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x11, @local}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/201, &(0x7f0000000100)=0xc9) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x40001, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000180)={0x0, 0xffffffff7fffffff, 0x1, 0x1ff}) 02:44:51 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x13, 0x2, 0x9, 0xd, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x1, 0x7, 0x0, 0x6e6bc0, 0x8, {0x6, 0x32, 0x65ee, 0xfffffffffffffff9, 0x0, 0x9, 0x0, @in6=@mcast2, @in=@local}}, @sadb_x_sa2={0x2, 0x13, 0x100, 0x0, 0x0, 0x70bd2d}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e24}]}, 0x68}}, 0x80c5) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x8000000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r2, 0x3}}, 0x18) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f00000000c0)='erofs\x00', 0x0, 0x0) 02:44:51 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) [ 297.712284] IPVS: Scheduler module ip_vs_ not found [ 297.717595] IPVS: length: 201 != 8 02:44:51 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) socket$kcm(0x29, 0x5, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) [ 297.790197] IPVS: Scheduler module ip_vs_ not found [ 297.805719] IPVS: length: 201 != 8 02:44:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000740)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') ftruncate(r2, 0x1000) ioctl$TCSBRK(r2, 0x5409, 0xffffffff80000000) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40008}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffff5f, 0x4002) timer_create(0x6, &(0x7f0000000380)={0x0, 0x2, 0x4, @thr={&(0x7f0000000280)="fc56c6451e07bdb2e4deb82850d515f3d3dc1d07a2a6490ec17f97bc2a2d3d408e15c6a8e60c14e330a6bffe3e8bc44884f7c7110d53222eba3da1404487844cd135e5afefca86a2c01456", &(0x7f0000000300)="e61c5501a1561a548ab98b53a1e0a4b5c8e7e7c78902fbf8b3a9f8b0286d6d62de62ec09aad8d5641e84e63a03dd6e073289a9555a0d27205ddd858aca7f231c19467f4fa1430ef334e5d899c6e1b94c4d5adf1a5d5ca21a5540b1d497a322aac6649af8de418f0d811619951140a0c4e1c6cf"}}, &(0x7f00000003c0)=0x0) timer_gettime(r5, &(0x7f0000000400)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r6, 0x5, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x80) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000009c0)=@filter={'filter\x00', 0xe, 0x2, 0x298, [0x0, 0x20000700, 0x200007f0, 0x20000820], 0x0, &(0x7f00000006c0), &(0x7f0000000b00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000110000006000000000017465716c30000000000000000000000064756d6d793000000000000000000000697036746e6c300000000000000000006e657464657673696d30000000000000000000000000ffff00ffff0029fa9d8ae0d4ffffffff00ff00007000000070000000c00000004c4544000000000000000000000000000000000000000000000000000000000028f149162800000073797a3000000000000000860c000000000000000000000000000001e7000000080000000000001000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000000000004000000890d766c616e300000000000000000000000626373683000000000000000000000006c61706230000000000000000000000073797a5f74756e000000000000000000000000000000ff00000000ffaaaaaaaaaaaa00ff00ffffff00007000000018010000480100004e464c4f47b2cc894ab0c6b0be2cd32b170000000000000000000000000000000000000000000000000000005000000000000000030000002d0c12000000000080abb61e965a6bf679baeb8b29439b367cb9365beaeb0536aaf03650d878e7e6e73c71f42a74bb1df16d9b1a2d29902d4925c799d0e897831b5174a9e5b98df100000000434c41535349465900000000000000000000000000000000000000000000000008000000000000000000000000000000434f4e4e5345434d41524b00000000000000000000000000000000010000000008000000000000000100000000000000333f341de66cec1cc1747425ea2f898af234d084db46f8b228a65c4f1c6ee84a4ad896b1ee83c14e593b4bf5035a030f535b67d10de2a19b24537575e5c47a35c9c7dc80af"]}, 0x361) r7 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, r2, 0x0, 0x18, &(0x7f0000000600)='/dev/infiniband/rdma_cm\x00', 0xffffffffffffffff}, 0x30) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r0, &(0x7f0000000680)={r2, r1, 0xa44}) poll(&(0x7f0000000700)=[{r1, 0x80}], 0x1, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000a40)={0x0, 0xcf8}, &(0x7f0000000a80)=0x8) socket$bt_cmtp(0x1f, 0x3, 0x5) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000ac0)={0x2, 0x2, 0x8, 0x4, r10}, 0x10) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000440)={0xb, 0x10, 0xfa00, {0x0, r9}}, 0x18) 02:44:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x11, @local}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/201, &(0x7f0000000100)=0xc9) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x40001, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000180)={0x0, 0xffffffff7fffffff, 0x1, 0x1ff}) 02:44:52 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/keycreate\x00') preadv(r1, &(0x7f0000001200)=[{&(0x7f0000000100)=""/218, 0xda}], 0x1, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000200)={0x0, r0}) [ 298.102373] IPVS: Scheduler module ip_vs_ not found [ 298.134162] IPVS: length: 201 != 8 02:44:52 executing program 2: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x4) setsockopt$inet6_int(r1, 0x29, 0x6, &(0x7f00000000c0), 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000400004e20}, 0x1c) 02:44:52 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:52 executing program 2: unshare(0x2000400) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000000)=0x741) 02:44:52 executing program 0: r0 = shmget$private(0x0, 0x2000, 0x78000010, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f00000001c0)=""/210) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffc000/0x3000)=nil) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x80) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e22, 0xebc, @local, 0x5}, {0xa, 0x4e22, 0x8, @loopback, 0x100}, 0x69bd, [0x5, 0x8, 0x3, 0x400, 0xffffffffffffffff, 0x4, 0x7, 0x10001]}, 0x5c) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x1, 0x3, 0xffff, 0xefa, 0x2, 0x18}) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x1f33495a) utimensat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) 02:44:52 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000000100)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x24004000}, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') r2 = memfd_create(&(0x7f0000001900)='team0\x00', 0x6) io_setup(0x7ff, &(0x7f0000001ec0)=0x0) io_submit(r3, 0x1, &(0x7f0000002900)=[&(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000001f00)="ff", 0x1}]) getsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000140)=""/213, &(0x7f0000000000)=0xd5) sendfile(r0, r1, 0x0, 0x100000001) 02:44:52 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) r0 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000fff000/0x1000)=nil, 0x2000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:52 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf0\x02\x00\xf5\xab\xfb\x98E\xf9\xe1\x98Y\xc9i2\x06\xf2\xc6\v\x00\x00\x00\a\x19\xe1\xd6n\x97\x01#\xd8\x93\xd9t\xe5\xb9\xc3(Vw\xb2\x13\x98#\xe5P\f\x92\xab[\x94\xda:}\xe1\x9f\x06;\xb7e\xb0+\xd5\xb6`\xfb\x7f\xa8\x98\xc6\xf5\xc66\x9c?60h\xd1\n\xf83\xf6G[\xbe\x8byg%[\x17v\a\xba\x10\x0flFTq\x822\xdb\xdad\xaa\x1fi\xcf\x9a\xb5\xb3\xea>\xd64R\xb7\xeb\xd3|\x9d\xaefN2.\b\xad\x8f`)\xfe\x8f\xd0\xb3Lq\x17H\x04q\xae\xca\n?\xc9\xec\xeb(P\x9c\xa8\xa8>O\x8b\x85\x13\x18\b\xbc\\\xfbL\xc2N\x19\x01v\x9c\bL\b\'\x12\xb4pfkm\xdd\xf7L\xedi9s\xba\x1d\xed\x8b') preadv(r0, &(0x7f0000000040), 0x0, 0x3ffffffffffffd) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x82000, 0x0) 02:44:53 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x80, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8800, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4) accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x1c) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 02:44:53 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000380)={0x0, 0xa7}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)={r1, 0x10001, 0x9, [0xfff, 0x1ff, 0xffffffff, 0x2, 0xfffffffffffffff7, 0x4, 0x29, 0x3, 0x3ff]}, 0x1a) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x3c, &(0x7f0000000140)={&(0x7f0000000400)=@gettfilter={0x24, 0x2e, 0x1}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0xfffffffffffeffff, 0x6100) write$P9_RSYMLINK(r3, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x0, 0x1, 0x2}}, 0x14) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x2}, 0x0) recvmsg(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) write$P9_RREADDIR(r3, &(0x7f00000001c0)={0x68, 0x29, 0x2, {0x4, [{{0x10, 0x1, 0x3}, 0x100000001, 0x4, 0x7, './file0'}, {{0x0, 0x1, 0x8}, 0x9, 0x4, 0x7, './file0'}, {{0x0, 0x0, 0x4}, 0x8, 0x7c29ab4e, 0x7, './file0'}]}}, 0x68) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 02:44:53 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x20800, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x100000001, 0xbc}) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = getpgrp(0xffffffffffffffff) move_pages(r1, 0x2, &(0x7f0000000000)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x0], 0x6) 02:44:53 executing program 1: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @bt={0xae, 0x4, 0x39a, 0xb4e, 0x0, 0xffffffffffffff93, 0x2, 0xa}}) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) 02:44:53 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0xff, 0x0, 0x7538, 0x1, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x20080, 0x8}, &(0x7f0000000240)=0x90) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = getpid() ptrace$peek(0x1, r2, &(0x7f0000000080)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) r4 = shmget$private(0x0, 0x4000, 0x1800, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000280)=""/49) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 02:44:53 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x0) r1 = semget(0x3, 0x0, 0x601) semop(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x1800}, {0x3, 0x200, 0x1000}, {0x3, 0x9, 0x800}, {0x0, 0x4, 0x1800}, {0x7, 0x3f, 0x800}, {0x1, 0x1, 0x800}, {0x3, 0x3, 0x800}], 0x7) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000040)=0x8) 02:44:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) r1 = fcntl$getown(r0, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000800)=r1) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000061c1f36100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3020fce10f823dbde37b2a270c5c0cd1d67310429c350696c695dc7f4c6cb5ce4a22cd074f539f17e8b238b2a74f644b135872a8e030e87519fd0d38f71f39a967a67f0a2aa6dd27c818b19cc600ae0f5df055580d98cb00b2fd6dd73b455c329b7ba4342c485f500000003e096d23d70d6223ba5948395431f2bf2a2"], 0x678) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'batadv0\x00', {0x2, 0x4e23, @multicast2}}) 02:44:53 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffd000/0x3000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:53 executing program 2: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0xff, 0x0, 0x7538, 0x1, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x20080, 0x8}, &(0x7f0000000240)=0x90) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r2 = getpid() ptrace$peek(0x1, r2, &(0x7f0000000080)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) r4 = shmget$private(0x0, 0x4000, 0x1800, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000280)=""/49) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 02:44:53 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0x108, 0x3, {"76a7d5b8c169b3d3359f5767f6789cd1e80699484df553f938100d17c8cf011de8fe7191b4dc89bfb9f48476b114216e2d6480169d25bc228d518f706e0b4d962763057bbe6d466f71fabdbe59185bed8ad39dcf081f7e7c69b506a0e2cf9c0900ac3bc6c30222a9fc8743c5f53db3d0712f3cc441462952e676dac9ea381f49f8a62f3fe5bbdbc80ac620d0c6345868c72f8c459c7e32d6f6a628129033d10dbaab68e303c5f61809caf423411a17564a13775146a9829d9f1a4cd648088747665c86008636b69ca9f504cdc13254913e2ac67b961962c3e7ec3436c9c03af8e53926d23af4e670e60e88240d08"}}, {0x0, "27ca7908a1a74301f646ab97e249e4ac9d7e3f60594ca7359f72ab09622bd65dcd5b6046bf05313405e8413f5553862ab204689ea0525c3434edf44cf871dfd535dfd82bc281aa3675ffcc0d7d77d4b86c34b79e545e188bf2e6b0a2b31eb4b1f5e69e93dd8f616a54"}}, &(0x7f0000000380)=""/39, 0x173, 0x27, 0x1}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000400)={0x0, r1, 0x3, 0x8, 0xe89, 0x80000001}) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r2 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80, 0x800) pwrite64(r2, &(0x7f0000000140)="3380c851b481541b0c553ae6b2d2e106e4e43062522bd877077f8f36c00d1c64f28f50fa20eea970fcab196baa7cd43671b50c513a70cdf0aac4b62d7d041ca40ad457b00f04a358c07df8d604fc709e8ede296f9912edb2924fff225595e8ba9e23a848ab436b3831604d506c4c7c8e6ad0739869010c3daaf4d5317de5b4759d6a45c746571723366031e1969c", 0x8e, 0x0) fsetxattr$security_smack_transmute(r2, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x3) [ 299.943241] protocol 88fb is buggy, dev hsr_slave_0 [ 299.949035] protocol 88fb is buggy, dev hsr_slave_1 02:44:54 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000e95fe0)={@rand_addr, 0xdda0, 0x0, 0x0, 0x4}, 0x20) dup3(r0, r1, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2000, 0x0) 02:44:54 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) tkill(r0, 0x29) munlock(&(0x7f0000ff1000/0xe000)=nil, 0xe000) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x19, 0x1, "46d1df1fb645aacffc77fc9da094f64106465847bb564dcd6407bd1aaccd933b939c057981aa406291301e8836e68354c7f99f79b43aa41094153567c06fc895", "167170bb642ef25170e42c87c22eff34cb9313724c0d2a59cb9f5ffc91639609", [0x7, 0x1]}) [ 300.136890] syz-executor1 (10681) used greatest stack depth: 52936 bytes left 02:44:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x7ff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) r3 = dup3(r1, r2, 0x80001) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000040), 0x4) dup3(r3, r1, 0x80000) shutdown(r1, 0x1) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$search(0xa, r4, &(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x0}, r5) keyctl$get_keyring_id(0x0, r5, 0x2) 02:44:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x40, 0x7, 0x8}, 0x10) recvfrom(r2, &(0x7f0000000000)=""/23, 0x17, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f00000020c0)=""/181, 0xb5}], 0x1}}], 0x1, 0x0, 0x0) close(r2) close(r1) 02:44:54 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x280, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r1, 0x67, "a2bb39", "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"}}, 0x110) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) 02:44:54 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:44:54 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) [ 300.613346] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 02:44:54 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x90000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x400, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000080)={0xafb, r1, 0x10000, 0x3}) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="fc577fc4cbca7c90a959786bdff72a9fcc65de6d4d37f5a919045455152ca172e68b1664d65555e5cf88d9e5e4e4412e96a7a9ce2e663f95f19441bdb534d7d79d2fbc11051b971263462a407cd8a21e26744f879a7eabe0da350c2dfa81518fb134d7") 02:44:54 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:44:55 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x15690, 0x10000) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0xcc, 0x400) 02:44:55 executing program 3: setrlimit(0xc, &(0x7f0000000000)={0x6, 0x6}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x2, 0x9, 0x5, 0x2}, {0x7, 0x6635, 0x8, 0x100000000}, {0x12d8, 0x1, 0x6, 0x5f6d}, {0x0, 0xbb93, 0x1, 0x7}]}, 0x10) r1 = semget$private(0x0, 0x4, 0x100) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100)=0x7ff, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x428, 0x2000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r4, 0x3}, &(0x7f0000000240)=0x8) statx(r0, &(0x7f0000000280)='./file0\x00', 0x2100, 0x7ff, &(0x7f00000002c0)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000003c0)={0x0, @rand_addr, @multicast1}, &(0x7f0000000400)=0xc) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000440), &(0x7f0000000480)=0x4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000004c0)={r5, 0x1, 0xff, 0x2, 0x0, 0x6}, 0x14) r6 = accept(r3, &(0x7f0000000500)=@hci, &(0x7f0000000580)=0x80) ioctl$VHOST_SET_VRING_ENDIAN(r6, 0x4008af13, &(0x7f00000005c0)={0x1, 0x1}) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000000600)={0x3b, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 'dh\x00', 0x14, 0x1ff, 0x3e}, 0x2c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000640)={r5, 0x4}, 0x8) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000680)=""/247, &(0x7f0000000780)=0xf7) pwrite64(r6, &(0x7f00000007c0)="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", 0x1000, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000017c0)=""/193) semctl$SEM_STAT(r1, 0x3, 0x12, &(0x7f00000018c0)=""/56) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000001940)={0x34, 0x0, &(0x7f0000001900)}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000001980)={0x0, 0x0, [], @raw_data=[0x6, 0x7ff, 0x8, 0x7, 0x10000, 0x3, 0xff, 0x101, 0x5, 0x0, 0x6, 0x0, 0x80000000, 0x4, 0x7f, 0x9, 0x9, 0x0, 0x1800000000000000, 0xffff, 0x7, 0x7f, 0x4, 0xffffffff, 0x5, 0x7fc, 0x200, 0x9, 0xffffffffffffffff, 0x5, 0x2, 0x1]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000001a40)) setsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000001ac0)="b4e3bc1c24439fd8618c6594e795b0894ea54e564fc3a01e5d4e121850776b5eb8de1bb35f0176e159e537c0a3347283534e6c3ba71facffe6d45001c31b7d3022fccf99ab492c77c080c569ee3b4c4bbd4133ec8d1f6146491f951f65bcb84d911cdb03b395bbfd4866e7e8d460259d9fe76384f1b75fb04fe403b85438df1275eb0bda50d8c4012edecfe2139923c860a90681927df7fe1400b67a557b2b773b263f6d55159d45dc25efdd73c2ee11bcf0dbb425b79acdee8300337e914a1c5ae4f039d9195871d3abcba446", 0xcd) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001c00)={0x1, 0x0, [{0x3000, 0x9, &(0x7f0000001bc0)=""/9}]}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000001c40), &(0x7f0000001c80)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001cc0)={r5, 0x0, 0x4}, &(0x7f0000001d00)=0x8) write$binfmt_script(r0, &(0x7f0000001d40)={'#! ', './file0', [{0x20, 'proc'}], 0xa, "6f98858aa0805f718033454c8997861136a0053f5b6820efe4de8390e70d1ffc087513f9c8dd3095b7c88f65b5d86688dc44ae647851b992dc4fc5e2e094126f99f7b943a60a978358e19d864e9df2f561bd373dafa208d7113b7c4d4dbb7e295bc52f07ee8d240b3ca6f4aaec89209da8616221bcab37cb32663802ca0a3bf92478151f7abe9e3825855633ae31487c09351cfa595d3686d57ab49894af93375789b5bb9f8855cc0843ebb07c529213582f2c3458fefa38ffd5836576b5dae4e1f166e160de7ba28019962a25b4ca8a41f07e8a8749fb194e7d7cbbf0bc7525517f"}, 0xf2) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000001e40)={{{@in, @in6=@remote}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000001f40)=0xe8) 02:44:55 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:44:55 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 02:44:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x200000) 02:44:55 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x19, 0x101000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x4) syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x2, 0x2) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'\x00\x00\x00\x00\x00\x00\f\x9b\xbd\x00', 0xb8e4}) 02:44:55 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:44:55 executing program 1: mprotect(&(0x7f000020c000/0x4000)=nil, 0x4000, 0x100000000004) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x0, 0x0, &(0x7f0000000000)=0xa4) 02:44:55 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x101}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='GPL\x00', 0x800, 0xb0, &(0x7f0000000280)=""/176}, 0x48) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, r3) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='ipddp0\x00') 02:44:55 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) r0 = mq_open(&(0x7f0000000140)='/dev/usbmon#\x00', 0xb739611a503e6a91, 0x7, &(0x7f0000000180)={0x0, 0xffffffff, 0x7, 0xe6f, 0x3, 0x101, 0x60b, 0x5}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x4}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000, r1}) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000001c0), 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x7fff, 0x0, 0x10001, 0x2}) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:56 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@random={'trusted.', '/proc/capi/capi20\x00'}) eventfd(0x4a2) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x100, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20004}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe0, r1, 0x511, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff7fffffff}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xece}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xea}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1909}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8005}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', r0}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1, 0x0, &(0x7f0000013000)=0xfffffffffffffdb9) 02:44:56 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) [ 302.176995] IPVS: ftp: loaded support on port[0] = 21 02:44:56 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x12000, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$input_event(r0, &(0x7f0000000080)={{r1, r2/1000+30000}, 0x4, 0xa7fe, 0xfffffffffffffff9}, 0x18) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x20080) sendto(r3, &(0x7f0000000180)="20ea73de96003ce34ae68cba9bf8d064b8dfbad32b406ac1f009a7b959bc47b81b0fc7d1f920dd1e365ec6a3fe24f1d4319a72b9bc23a21f98daecb25ded23caf89e43c9ff9cb2e444020eb7a7ce40ec0134254c366291bd", 0x58, 0x4, &(0x7f0000000200)=@ethernet={0x306, @random="285daffcb4b0"}, 0x80) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) [ 302.517261] chnl_net:caif_netlink_parms(): no params data found [ 302.621312] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.627962] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.636394] device bridge_slave_0 entered promiscuous mode [ 302.647091] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.653796] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.662288] device bridge_slave_1 entered promiscuous mode [ 302.700545] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 302.713611] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 302.746988] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 302.755864] team0: Port device team_slave_0 added [ 302.764229] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 302.772988] team0: Port device team_slave_1 added [ 302.779293] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 302.789522] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 302.916654] device hsr_slave_0 entered promiscuous mode [ 303.092297] device hsr_slave_1 entered promiscuous mode [ 303.253116] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 303.260642] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 303.293562] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.300177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.307391] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.313958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.415094] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 303.421186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.436935] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 303.452427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.464379] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.472944] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.486853] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 303.504471] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 303.510558] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.529096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 303.537942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.546743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.556405] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.562976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.580704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 303.588618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.597513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.605931] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.612538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.632606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 303.639589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.656160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 303.665220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.680625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 303.689645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.699457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.710653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.726069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 303.734029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.743390] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.760454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 303.767625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.776407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.795757] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 303.804592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.814065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.830887] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 303.837044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.869394] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 303.892478] 8021q: adding VLAN 0 to HW filter on device batadv0 02:44:58 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8, 0x105043) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}, 0x2) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000000180)={@local}, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}}, 0x0, 0x0, 0x0, "55244f4c4e9f4d6d51dfce3265d209d1730a0f0146b5c1fac39f74da4f15d00f3ec3aefe4ecd22000000002323b8d1707d7b991f0534478b8ecbc4d5ade9bb5ef10180ffe9866fc332f61000"}, 0x2a6) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWALK(r1, &(0x7f0000000140)={0x23, 0x6f, 0x2, {0x2, [{0x20, 0x2, 0x2}, {0x0, 0x4}]}}, 0x23) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x280600, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r0, r2, 0x0) 02:44:58 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000000), 0x10) close(r1) 02:44:58 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 02:44:58 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:44:58 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x40001) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x1, {0x2f4, 0x1, 0x80, 0xd2}}) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0xfffffffffffeffff}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000006c0)={r1, 0x1000, "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"}, &(0x7f0000001700)=0x1008) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @remote}}, [0x4, 0x8, 0x7a022e78, 0xfffffffffffffe00, 0x3f, 0x0, 0x3, 0x6, 0x0, 0x7, 0x3ff, 0x20, 0x5, 0x3, 0x400]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x80000001, 0x20}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x400000000000}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0xc4, "ab10e77c936b61efe0070c20b0e2658c9cfab92637b0347283ae397b974e775df008c3d8872f19fb6d19b4c8f1a9b3d5c051c083aa43093eff84ac3c0c7ca2141945aa30b3057fd8d8fc6658d67a237815dd0a1df93d20be02552c423d3c10a390dd434d291db279a9e8f7a7d69853b0a9e30f72e27fdd5ac868f0dfe84f1030544ce6adc433d9e24845af7e0e54f0ac1c63bd4fd7180017323e46051f12739eea22e493582e28f10abae4ea4b1323b41132f8a933c2e639672bc603e61f740f675ac930"}, &(0x7f0000000540)=0xcc) sendmmsg$inet_sctp(r0, &(0x7f0000000680)=[{&(0x7f0000000080)=@in={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="aa0c0cfa0183d01fa5deb58a6481ad97ac2a11d028b1873edc649c05f99b3fca61eec720498c5114476acfe777508ef07fe13aa472e440fbd9e9fc68dbb9ae3a96ce23728dee688b7d11cd", 0x4b}], 0x1, &(0x7f0000000580)=[@authinfo={0x18, 0x84, 0x6, {0xe08}}, @init={0x18, 0x84, 0x0, {0x42, 0x40000000000, 0x3, 0xfff}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x9, 0x8000, 0x89f3, 0x10000, 0x2, 0x52, 0x4, r2}}, @sndrcv={0x30, 0x84, 0x1, {0xc03, 0xfe7, 0x1, 0x81, 0x33, 0x0, 0x9, 0x1, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0x85, 0x200, 0x1, 0x5, 0x800000000000000, 0x85, 0xfffffffffffffffa, r4}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x8, 0x2, 0x339, r5}}], 0xf8, 0x20000000}], 0x1, 0x4000040) 02:44:59 executing program 3: syz_emit_ethernet(0x19, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @local, [{[], {0x8100, 0xa77, 0x9, 0x1}}], {@canfd={0xd, {{0x4, 0x5, 0x5f5a, 0x3ae4}, 0x2, 0x2, 0x0, 0x0, "6f42993fd6c21452bedf5fad622b4dad3f224c551e9edcd3c32bead3140d188d73710eceb15b7b358c6674c0a36a22dd426356ffe6ed70802608fd6912c64b13"}}}}, &(0x7f0000000100)={0x0, 0x0, [0x3, 0x0, 0x0, 0x4]}) 02:44:59 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:44:59 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x6) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000001c0)={0x7, 0x0, [], {0x0, @reserved}}) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x8001004000000016) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 02:44:59 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7ff, 0x8000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x8000, 0x8) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000180)={r0, r0, 0x784423d6, 0x6e, &(0x7f0000000100)="df37360e603257e259690985b960eabf0b28412dc4cf90e321d5af78d96180efd3467666b6b37a790da8106813803032a4d9588cc2b7b5ac70aa15e0037fc041a0674dfd830d379b9b0a7c2011f3eeb9aded223b4e2ffef6a7aa6788185d910fbb3f985784d3e2a0547aedfa8cb9", 0x7ff, 0x80, 0x0, 0x5, 0x1000, 0x1, 0x0, 'syz0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x40000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:59 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x7fd, 0x4) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000000)=0x800000f736, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x4e24}, 0x10) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f00000000c0)=0x9, 0x4) recvmsg(r1, &(0x7f00005b7000)={0x0, 0x0, 0x0}, 0x2020) 02:44:59 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'gretap0\x00', 0x4800}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0xff, 0x80000000}, &(0x7f0000000140)=0x8) ioctl$NBD_DISCONNECT(r0, 0xab08) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:44:59 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:44:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\xb2\x1d\xbe\v\x8e\t\x1b\xeb\xc9\x02\x12m\x88\x84\a\xc5;\x84\xed\xf3*-4\xbf%v\xf0\xa9\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) flistxattr(r1, &(0x7f00000001c0)=""/159, 0x9f) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) 02:44:59 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x101, 0x40) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x5f45) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) 02:44:59 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:00 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10080, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:00 executing program 0: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:00 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:00 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0xfffffffffffff930}, &(0x7f0000000140)=0x8) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x80000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:04 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x5, 0xcca, 0x7fff, 0x80000001, 0x52, 0x8, 0x8, 0x2}}) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x0) 02:45:04 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x400000080000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x40, 0x401000000, 0x7, 0x4, 0xf}}) 02:45:04 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:04 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4001) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:04 executing program 4: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x8, 0x400000) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x7999c50a, @remote, 0x14}, 0x1c) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000380)) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000003c0)=r0) r2 = socket(0x10, 0x8000f, 0x5) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000400)=0x3ff) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x30) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000440)) write$vhci(r0, &(0x7f0000000480)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000004c0)={0xffffffff, 0xc8, 0x101, 0x10001}, 0x8) fcntl$getflags(r1, 0x3) getsockname$packet(r0, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001980)=0x14) bind$can_raw(r2, &(0x7f00000019c0)={0x1d, r3}, 0x10) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000001a00)={0x2}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000001a40)) llistxattr(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)=""/105, 0x69) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000001b40)) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000001b80)=0x7) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000001bc0)) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000001c00)=0x2) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000001c40)=0x2) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000001c80)) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001d00)={&(0x7f0000001cc0)='./file0/file0\x00', r0}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d80)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001f00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0xec, r4, 0x30a, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xd8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8412}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf3c}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000002340)='/dev/audio\x00', 0x4600, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000002380), &(0x7f00000023c0)=0x4) 02:45:04 executing program 3: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00') r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000040)) ioctl$VT_RELDISP(r0, 0xb702) 02:45:04 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x2, 0x40000000000004, 0x14, 0x1, 0x3}, 0x2c) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000340)={0x20, 0xfffffffffffffffe, 0x6, 0x7000000000000, 0x100000000, 0xffff}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x1, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/184, 0xb8}, {&(0x7f0000000100)=""/249, 0xf9}], 0x2, &(0x7f0000000240)=""/60, 0x3c}, 0x22) 02:45:05 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:05 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x200840, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) r2 = getegid() fchown(r0, r1, r2) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) sysfs$2(0x2, 0x10000, &(0x7f0000000000)=""/151) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="b423acdb96f7280686f1d2fdc1ca", @ANYRES16=r4, @ANYBLOB="020028bd7000fedbdf25020000004800030008000800040000001400060000000000000000000000ffff7f00000114000600fe80000000000000000000000000002514000200627269646765300000000000000000000800060047070000"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:05 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)) r0 = epoll_create(0x6) r1 = socket$packet(0x11, 0x6, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x14}) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000140)={0x80}, 0x0, 0x0) 02:45:05 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf0\x02\x00\xf5\xab\xfb\x98E\xf9\xe1\x98Y\xc9i2\x06\xf2\xc6\v\x00\x00\x00\a\x19\xe1\xd6n\x97\x01#\xd8\x93\xd9t\xe5\xb9\xc3(Vw\xb2\x13\x98#\xe5P\f\x92\xab[\x94\xda:}\xfd\x9f\x06;\xb7T\xb0+\xd5\xb6`\xfb\x7f\xa8\x98\xc6\xf5\xc66\x9c?60h\xd1\n\xf83\xf6G[\xbe\x8byg%[\x17v\a\xba\x10\x0flFTq\x822\xdb\xdad\xaa\x1fi\xcf\x9a\xb5\xb3\xea>\xd64R\xb7\xeb\xd3|\x9d\xaefN2.\b\xad\x8f])\xfe\x8f\xd0\xb3Lq\x17H\x04q\xae\xca\n?\xc9\xec\xeb(P\x9c\xa8\xa8>\xef)\x85\x13\x18H\xbc\\\xfbL\xc2NL\xedi9s\xba\x1d\xed\x8b]\xc1ub(\tc\xa5\xc8\x19\nUg-\xbaA\x83\xed?}\x83M\xde+\x1e\xf2\x1az\xcd\xbbc\x88\xdc`\xd9\bx\x1fKGJ#\x9e\x1c\xf1\xc6\xddE\x01\xa8\x00\x00\x00\x00\x00\x00\xb7o\x11\xbctr\xa3,\xa0\xd3\x82@Db\xdf\xc0K\x03G\xf1;~\x8b\x97OxA\x9eI\xed3-{\x99p\xd2@\x90\xc8\x91wq\x0f\xbbh\x17s\x98/KFd\xae\xdevg\x11t\x03\x84\xd5u<\x7f\x11~^\xe5\x1b\xef$\xb7#\xa8D\xb89K&\x03\xf3\xc3K\x8e\x01.\x1d\x8dKC\xfa\x91pT(\xb2nv\xd0\xa0\x19dq\xc4x\x8a\xbasK\xc5_\xb00+\tW\x8d\xdd\xcaQ\xf1\xdf\"\xa6\xa5\xafJT\xd9.\x83\xdb\xf4\xd1\xb9\x9f=\xbe;&\x86\x86\xe1\x82\xe74h8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) 02:45:05 executing program 0: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f00000000c0)=0x7) 02:45:05 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80807, 0x2) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000001c0)={0x7, {{0xa, 0x4e24, 0x7, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}, 0x2}}}, 0x88) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="0c00000000000000000000000000aa43"], 0xc}}], 0xb, 0x0) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000280)="9fd372825aaa159cb9bd006a6d5481d06f572363c89e72690e40708761841a2564498da90785e226a5288881025a92c4db1cc3aa1dcabe4bb1088f7d1b098e472d588920cf5741029ea321210ae8c822f680b0aec6b6d66b8501e1c12f29ee3d98a197239ab388a3a71fb7ce1179849bddc7c91303b608e52e96247471549b2b2ef23704e6373b2a315c2804601e94df7bea9d9b3c70ab54a4fcf76baeb6eacb2cf106e17a21fd4aba90eab491287818ac1014ad", 0xb4, 0xfffffffffffffffa) r3 = request_key(&(0x7f0000000340)='.dead\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='\xd3\x00', 0xfffffffffffffffa) r4 = semget$private(0x0, 0x2, 0x200) semctl$SETVAL(r4, 0x2, 0x10, &(0x7f0000000400)=0x3) keyctl$negate(0xd, r2, 0xfff, r3) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e22, 0xf46e, @dev={0xfe, 0x80, [], 0x2b}, 0x101}, {0xa, 0x4e22, 0x3, @mcast2, 0xe8}, 0x8, [0x7, 0x0, 0x5, 0x80, 0x8, 0xfffffffffffffc00, 0x5, 0x627dadb1]}, 0x5c) 02:45:05 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:05 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 311.870480] IPVS: ftp: loaded support on port[0] = 21 02:45:06 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000e00000/0x200000)=nil, 0x200000) [ 312.305024] chnl_net:caif_netlink_parms(): no params data found [ 312.424392] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.430924] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.439724] device bridge_slave_0 entered promiscuous mode [ 312.449470] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.456143] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.464624] device bridge_slave_1 entered promiscuous mode [ 312.499539] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 312.511532] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 312.543114] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 312.552033] team0: Port device team_slave_0 added [ 312.558804] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 312.567783] team0: Port device team_slave_1 added [ 312.574689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 312.583853] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 312.666988] device hsr_slave_0 entered promiscuous mode [ 312.732803] device hsr_slave_1 entered promiscuous mode [ 312.775343] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 312.783173] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 312.818223] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.824839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.832118] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.838661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.943535] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 312.949659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.967551] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 312.986465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.998923] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.008172] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.023301] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 313.044145] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 313.050237] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.069447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.077806] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.084496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.123666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.132496] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.138972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.156676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.177429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.186504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.200471] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 313.209072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.218121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.234260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 313.241626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.250807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.265065] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 313.271214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.306841] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 313.331383] 8021q: adding VLAN 0 to HW filter on device batadv0 02:45:07 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000002ff0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmsg$rds(r0, &(0x7f0000000a00)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000140300000c0000000000000000000010180000000000000014010000010000000000000000000000"], 0x30}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x42, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000040)={{0x94b, 0xe95, 0x101, 0x101, 0x401, 0x7a}}) 02:45:07 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:07 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x11, &(0x7f0000000100)={0x2}, 0x8) r3 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x20) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000240)="24785f082a5e5ca482e7d0c93b0ee449ff1b228a64544036654cabf96f861df95a79a0b08028e1fb30463edd2f7548a4a066d2b966ffc46aa71813d54d3ebe7b51273365b4fd378bd15036ac4584bbe7fe8c7c0338e3fd68b9eb7c5659220c8c5e9d13b06c29cc2d70054a0002e88d1875732d142aa0524e7ad702536dde3b3dbfb356b0a4113aa3a7e1838cea8428083a548eb5698ecfd8bc61fa745f58054a1fbdafbd361ad716cd1c9035232efea63598e770d25833dad382c2b83e9c23d42fe0b06f9d3c01a06e207d4e304ab8f6a96d38bae4fece09cb99ff5fa59e542a59f5d045ab65f19894a6e6b55f5c5d34da") ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) close(r0) 02:45:07 executing program 3: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) r1 = mq_open(&(0x7f0000000000)='keyring\x00', 0x1, 0x90, &(0x7f0000000040)={0x7, 0x2, 0x800000000000, 0x5, 0x5, 0x401, 0x8, 0x7fffffff}) mq_timedsend(r1, &(0x7f0000000100)="e59941f3cfc8fb93182b1a17dc20d15947efc694e3afc9019f26ed49fc6fab2385b12f5a0ab200691f5f76a1820a4473b9ac067a954979", 0x37, 0x2, &(0x7f0000000140)={0x0, 0x1c9c380}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0xfffffffffffffffb) 02:45:07 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x54001000, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x405ffc) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) 02:45:08 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x8, {0x0, 0x6}}, 0x20) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:08 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) getsockname(r0, 0x0, &(0x7f0000000080)) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000040)) 02:45:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0xffffffff, @rand_addr="6b42fde84848a39cbeb9eba3fc8a3053", 0xcf3}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x7b, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000000)=0xb0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000280)) 02:45:08 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0xfffffffffffffe01, 0x3}) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x1, 0x0) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000090607031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 02:45:08 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4200, 0x0) r1 = dup(0xffffffffffffff9c) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000080)={r1, 0x9}) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x127c00, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) 02:45:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x68, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x1f, @mcast1, 0x7}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x7, @rand_addr="f7357307626f96d5856c08a595a2ba34", 0x2da}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e20, @multicast1}]}, &(0x7f00000001c0)=0x10) shutdown(r0, 0x2000000000000002) getpeername(r0, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000300)=0x80) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x101000, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000240)=0x6c05, 0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1}, 0x8) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x8, 0x100}]}, 0xc, 0x3) 02:45:08 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) keyctl$dh_compute(0x17, &(0x7f0000000080), &(0x7f00000000c0)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000040)={'poly1305-generic\x00'}, &(0x7f0000000000)}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), 0x4) 02:45:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x7, &(0x7f0000000080)=[{0x2, 0x7, 0x1, 0xff}, {0x9, 0x401, 0x200, 0x1}, {0x1, 0x10000, 0xa642, 0x9}, {0x4, 0x3, 0x7, 0xffff}, {0x9, 0x0, 0x8, 0x40}, {0x5, 0x7627, 0xff3, 0xffffffff}, {0x42, 0x7, 0x0, 0x5}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000010000000000001c340000ffff"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x0, [0x485, 0xfffffffffffffffc]}) 02:45:08 executing program 0: r0 = shmget(0x2, 0x3000, 0x17, &(0x7f0000ff9000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x406002) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:08 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) [ 314.674082] sctp: [Deprecated]: syz-executor3 (pid 11076) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.674082] Use struct sctp_sack_info instead 02:45:08 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101100, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000080)={0xf000, 0x2000, 0xadd8, 0xf13c, 0x6}) prctl$PR_GET_UNALIGN(0x5, &(0x7f00000000c0)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)) name_to_handle_at(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0xe4, 0x0, "ed52a9b2ccae3ab8111cd5628c89c566e261a197206b24c96df7555f4a4e14446104bf2e9814d390fc26480092f7ac441287a4045fa7adf4ad3b576281e6383ca049d791f604668afd756aafc5bbd9825970ee863ef161b5ff12f99c8f9adcb40cdb3e9651e92ee4a891f7f341646da84f0775b4011c7fe05e33bc930e0a2416103e6c962e01511f61c4c0257c1114f9c0cb86d1ed2397bbe5ff708f2df51436f81420864295c6a8e8c8916d4af97fd5333b8fcf05ed54589a2e32a8397ec3a666f5369fb561ca2f7fb2b32af252d2bf6664a2cd0114feab78d205fc"}, &(0x7f0000000280), 0x400) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000002c0)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000380)={0x7, &(0x7f0000000340)=[0x7, 0x1, 0x9, 0x8c, 0x80000001, 0x80000000, 0x1]}) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000003c0)) signalfd4(r0, &(0x7f0000000400)={0x4}, 0x8, 0x80000) prctl$PR_SVE_GET_VL(0x33, 0x1f3f9) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000440)='/dev/video1\x00', 0x2, 0x0) prctl$PR_GET_FP_MODE(0x2e) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000480)=0x9, 0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000004c0)={{&(0x7f0000ff9000/0x6000)=nil, 0x6000}, 0x1}) umount2(&(0x7f0000000500)='./file0\x00', 0x1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000540)=0x2, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000640)={@pppoe={0x18, 0x0, {0x4, @broadcast, 'syzkaller1\x00'}}, {&(0x7f0000000580)=""/117, 0x75}, &(0x7f0000000600), 0x1}, 0xa0) symlinkat(&(0x7f0000000700)='./file0\x00', r0, &(0x7f0000000740)='./file0\x00') ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000780)) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f00000007c0)={[{0x3, 0x3, 0x1, 0x6c, 0xfffffffffffffff8, 0x401, 0x3, 0xffffffff7fffffff, 0x7, 0x2, 0x40, 0x3, 0x17f}, {0x7fff, 0x1000, 0x9d, 0x9, 0x0, 0x8, 0x7a3, 0x6c, 0x1000000000000, 0x832e, 0x2, 0x7, 0x4}, {0x3, 0x40, 0x1f, 0x6, 0x101, 0x3, 0x40000000, 0x0, 0x3, 0x5, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}], 0x80}) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000880)={0x0, 0x7f, 0x7, &(0x7f0000000840)=0x101}) bind$alg(r0, &(0x7f00000008c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000940), &(0x7f0000000980)=0x4) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000a00)={0x1ff, &(0x7f00000009c0)="3377292d69a2941beb1af07cdaa4d65ad97840"}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000a40)={'broute\x00'}, &(0x7f0000000ac0)=0x78) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000b00)=0x7) ioctl$NBD_CLEAR_QUE(r0, 0xab05) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000b40)=0x8) ioctl$int_in(r0, 0x5452, &(0x7f0000000b80)=0x6) [ 314.828935] sctp: [Deprecated]: syz-executor3 (pid 11088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.828935] Use struct sctp_sack_info instead 02:45:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x8, 0x209e20, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000080)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000)="c7", 0x0}, 0x18) 02:45:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(r1, 0x0, 0x0, 0x20003ffc, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, 0x0, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) 02:45:09 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e20, 0x2e, @empty, 0x80}, {0xa, 0x4e22, 0x1000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, 0x5, [0xc9c9, 0x6, 0x4, 0x7, 0x7, 0x1, 0x4, 0x9]}, 0x5c) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = syz_open_dev$usb(&(0x7f0000001780)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffff3b, 0x800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000017c0)={0x0, 0x6}, &(0x7f0000001800)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000001840)={r2, 0x81}, &(0x7f0000001880)=0x8) socket$inet6_udplite(0xa, 0x2, 0x88) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x3, 0x4, 0x4000000004, 0x800000a350, 0x4, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 02:45:09 executing program 2: r0 = socket$inet(0x2, 0x2, 0x7) dup(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 02:45:09 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x405ffd) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = shmget(0x1, 0x4000, 0x1000000000000200, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4fff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x410842, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000340)={0x5, &(0x7f0000000040)=[{}, {}, {}, {}, {}]}) 02:45:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x200) 02:45:09 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) 02:45:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x48}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) 02:45:09 executing program 0: r0 = shmget(0x3, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4001) shmdt(r1) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x406000) getresgid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000080)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x51d200, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000100)=0x400) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) shmget(0x3, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil) [ 316.212082] IPVS: ftp: loaded support on port[0] = 21 [ 316.323403] chnl_net:caif_netlink_parms(): no params data found [ 316.375808] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.382353] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.390231] device bridge_slave_0 entered promiscuous mode [ 316.398910] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.405506] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.413629] device bridge_slave_1 entered promiscuous mode [ 316.440407] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 316.451304] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 316.476471] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 316.484490] team0: Port device team_slave_0 added [ 316.490686] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 316.499290] team0: Port device team_slave_1 added [ 316.505259] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 316.513905] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 316.596090] device hsr_slave_0 entered promiscuous mode [ 316.652598] device hsr_slave_1 entered promiscuous mode [ 316.692923] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 316.700191] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 316.737412] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.744016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.751133] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.757754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.816840] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 316.823033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.834410] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 316.845199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.854887] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.863449] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.872039] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 316.886424] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 316.892587] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.905108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.913295] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.919691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.934001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.942532] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.948994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.975690] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.985313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.003417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.023489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.031656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.045940] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 317.052060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.073561] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 317.088441] 8021q: adding VLAN 0 to HW filter on device batadv0 02:45:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x0) 02:45:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000000140)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:11 executing program 2: socket$inet(0x2, 0x2, 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x8, 0x209e20, 0x4}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000080)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x2c) 02:45:11 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:11 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000380)=""/250, 0xfa) 02:45:11 executing program 0: r0 = shmget$private(0x0, 0x1000, 0x1080, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000180)={0x52, 0x9, 0x4, {0xfffffffffffffe01, 0x19c19848}, {0xffff, 0x44}, @period={0x5a, 0x8, 0x7c, 0x800, 0x2, {0x1, 0x9, 0x9, 0x8}, 0x1, &(0x7f0000000140)=[0xffff]}}) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000000c0)={0x7fffffff, 0x2, 0x4, 0x400, 0x1, [{0x100000001, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x200}]}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000000)={0x10, 0x4, {0x57, 0x1000, 0x517e, {0x0, 0x7fffffff}, {0x9, 0x9}, @ramp={0x80000000, 0x1, {0x8, 0x2e, 0x0, 0x5}}}, {0x52, 0x0, 0x0, {0x81, 0x9}, {0x400, 0xffffffffffff0001}, @rumble={0x4, 0x84}}}) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000000140)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca) unlink(&(0x7f00000001c0)='./file0\x00') clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x82, 0x6d, 0x20000000000001}, 0x2c) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) 02:45:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:11 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1300}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000280)={0x0, 0x4000000000088, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x10e15}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000300)={0x0, @time={0x0, 0x989680}, 0x0, {}, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000600)={0x0, 0x2, 'client0\x00', 0x0, "f53f0094036c6c00", "63f91a3c787b91ec03f9fd428f0172e2c149b83499973de883ddba09a57dcc0e", 0x3}) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x101002, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000b40)={0x6, 0xfff, 0x2, 'queue0\x00'}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000b00)) syz_open_dev$sndpcmc(0x0, 0x4, 0x40) process_vm_writev(0x0, &(0x7f00000007c0)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000240)) 02:45:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000000140)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:11 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406002) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:12 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000000140)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:12 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) sendmsg$key(r0, &(0x7f0000001a40)={0x400000000000000, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000004002000000000020009004000f40a000000000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) lsetxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x10400) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, 0x0) 02:45:12 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:12 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="ffffffff00000000000000000000000000000000330000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcf75b0717b13bc900000000000000000000000000000a00000000000000000000004c001400736861310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0) 02:45:12 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc0405519, &(0x7f0000000140)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:13 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'ip6_vti0\x00', 0x2000}) r2 = socket$inet6(0xa, 0x1000000008002, 0x20) ioctl(r0, 0x8910, &(0x7f0000000080)="15") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\'', 0x1ff) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000640)={0x2, 0x0, @multicast2}, &(0x7f0000000980)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e20, 0x3, @remote, 0x40}}, 0x0, 0x8, 0x169, 0x3}, &(0x7f0000000b00)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000001f80)=ANY=[@ANYRES64=r3], 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000009c0)='fou\x00') pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000300)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f0000000580)=""/183, 0xb7}, {&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f0000000b80)=""/143, 0x8f}, {&(0x7f0000000c40)=""/4096, 0x1000}], 0x5}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f0000000380), 0x10) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000002c0)={0x0, 0x7, 0x8, 0x40003}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000780)={0x0, 'dummy0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f00000008c0)={{0x67, @dev={0xac, 0x14, 0x14, 0x1e}, 0x4e21, 0x0, 'wrr\x00', 0x6, 0x4, 0x2}, {@loopback, 0x4e22, 0x2000, 0x7, 0xde, 0x80000001}}, 0x44) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20000002}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x0, &(0x7f0000000200)}, 0x10) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000540)={0x8, 0x5, 0x6, 0x7ff, 0x7}) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000940)) read(r4, &(0x7f0000000640), 0x0) close(r0) getpeername(r0, &(0x7f00000001c0)=@pptp, &(0x7f0000000400)=0x80) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x40000002, 0xc00000000000000}) 02:45:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:13 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0xa00, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:13 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000000480), 0xc13) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1c, 0x0, 0x0, 0x7}}, 0x50) 02:45:13 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc0405519, &(0x7f0000000140)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:13 executing program 3: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) sendmsg$key(r0, &(0x7f0000001a40)={0x400000000000000, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c0000000004002000000000020009004000f40a000000000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0) exit(0x0) lsetxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) r1 = syz_open_dev$vcsa(0x0, 0x0, 0x10400) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, 0x0) 02:45:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:45:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x1c, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc80000000025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd0160ec941a3de45387daf7b1ac786d0e8a75e8904655faf6f2bc6cc487d93a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffffffffffff4116893616105829576914e70bfeb59800f97c97644ab8a7"}) 02:45:13 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:13 executing program 1: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc0405519, &(0x7f0000000140)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:13 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x501) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socket$inet_sctp(0x2, 0x0, 0x84) r0 = shmget(0x2, 0x2000, 0x402, &(0x7f0000ffd000/0x2000)=nil) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x40) openat$cgroup_ro(r1, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) 02:45:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'nr0\x01\x00\x00\xdf\xcf\x00', 0x3001}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000e00)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') close(r0) 02:45:13 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:14 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000000140)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x80400, 0x0) syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x8000, 0xfffffffffffffffd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000940)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0x482) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_create(0x0, 0x0, &(0x7f0000000b00)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040), 0x1) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) r3 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) setuid(0xee01) ioctl$NBD_SET_SOCK(r3, 0x1269, 0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)) r4 = mq_open(&(0x7f00000003c0)='\aoj9\xbc\xf6u=w\x0e\xecuWOA\xe8\x85\x02^;\x8f\x9c\xd2a\xc1c\x1f8h\x84\x9ej2#\xe3g\xdd\x13\xedI\xdc\xa1\xfc1\xe5\x01VZ.\xfbD\x7f.\xbb\x99\xdb\xb7\xef\xbe\x1c\xc9\xb6\x17g\xff\xec\xf4\xe8lD{\xa8\x04\x0f\x8f\b\x8e\xf9ln\x90\xca\xf1\x97\xb6[\x14})\v\xeeU\x14o\x1b1fV\xbf\r\xa51zhq\x10\v\xf5\xb1g\x9c\x1c\x83b\xd3\xa3\xd7\xb9\xeb\xf9\xc0\xd1\x15\xf1\xa3\x8a^\xbe\x12\x97\xc8lf\x95\x9e \x00\x00\x00\x00\x00\x00\x00\x0er\x05\x1d\xd8\xaa\xf5\xd4\xc0\xd0\x80,\x05V\xe46/9x\xd5P\xd1v\'?\x1d|\xe5\xe2\xe9\x7fy|\x1f\xb47d\x10\x8c\xcc\x91\x82\x925\xeb\xe8\x88\"\x96B\xec\x9c\xa8\xa7\x7fr$\xb4\xa0', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x5}) mq_timedsend(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r4, 0x0, 0x0, 0x0, 0x0) unshare(0x0) pread64(0xffffffffffffffff, &(0x7f0000000540)=""/25, 0x19, 0x80000000000) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 02:45:14 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:14 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x50402, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000040)={0x0, 0xdd4, 0x0, 0x0, 0xfffffffffffffff7, 0x5b, 0x800, 0x81, 0x1, 0x0, 0x0, 0xfff, 0x0, 0x401, 0x4, 0x9, 0x10001, 0x0, 0x20}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:14 executing program 4: r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003006f360000000000003800000000000000e8ff0000000020000100000001040000000000000300000000000000000000000012000003000000000000000000000000000000"], 0x58) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 02:45:14 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x30) 02:45:14 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000000140)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:14 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000100)=""/241) lookup_dcookie(0x1, &(0x7f0000000000)=""/172, 0xac) 02:45:14 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x10, 0x4, 0x4, 0x2}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x97, 0xede, 0x82}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000005340)={0x5, 0x9, &(0x7f0000000080)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000000)='syzkaller\x00', 0x1ff, 0xfec7, &(0x7f00000002c0)=""/129}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0x50, &(0x7f0000000440)}, 0x10) 02:45:14 executing program 1: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000000140)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:14 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x3, 0x2}, 0x10}}, 0x0) 02:45:14 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x10000) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:15 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc0405519, &(0x7f0000000140)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mount(&(0x7f0000000900)=ANY=[@ANYBLOB="2f6465762f6eaa006c623002"], 0x0, 0x0, 0x220008, &(0x7f00000009c0)='N&.security%\\\x00') setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0x2710}}, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x800010b, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="ffffffff00000000000000000000000000000000330000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcf75b0717b13bc900000000000000000000000000000a00000000000000000000004c001400736861310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0) 02:45:15 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xbdc0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8c000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0xc00, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x7a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:17 executing program 3: add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000)={'\x02\x00'}, &(0x7f0000000100), 0x90, 0xfffffffffffffffb) 02:45:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:17 executing program 4: mknod(&(0x7f0000000100)='./file0\x00', 0x103f, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init() inotify_rm_watch(0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) clone(0x8002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) tkill(r0, 0x1000000000014) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r1, &(0x7f0000000240)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '$vmnet1^+'}, 0x35, 0x0) 02:45:17 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc0405519, &(0x7f0000000140)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:17 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendfile(r0, r1, 0x0, 0x8001) 02:45:17 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2882, 0x240000) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x200) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80040, 0x0) munlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) [ 323.729184] syz-executor5 (11395): /proc/11395/oom_adj is deprecated, please use /proc/11395/oom_score_adj instead. 02:45:17 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc0405519, &(0x7f0000000140)={{0xc, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) [ 323.792714] dns_resolver: Unsupported server list version (0) [ 323.820167] ptrace attach of "/root/syz-executor4"[11396] was attempted by "/root/syz-executor4"[11401] 02:45:17 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getpgrp(0xffffffffffffffff) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) link(0x0, &(0x7f00000001c0)='./bus\x00') ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) pwritev(0xffffffffffffffff, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x0) fallocate(r1, 0x11, 0x0, 0x100000001) 02:45:17 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ff4000/0x9000)=nil, 0x9000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) [ 323.855616] dns_resolver: Unsupported server list version (0) 02:45:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@gettaction={0x18, 0x32, 0x329, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 02:45:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='ns\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)) syz_open_pts(r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) fstat(r1, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x7, &(0x7f0000000040)={0x0, 0x0}) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x4000000) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:45:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, 0x0) 02:45:18 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'dummy0\x00', @local}) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x402, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) [ 324.311452] tc_dump_action: action bad kind 02:45:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@gettaction={0x20, 0x32, 0x329, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) 02:45:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x20000400000037, 0x0, 0xffffffffffffffff}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000025c0)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 02:45:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, 0x0) 02:45:18 executing program 0: r0 = shmget(0x1, 0x1000, 0x1018, &(0x7f0000ffc000/0x1000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x5ffe) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) close(r1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x440600, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=0x0) tkill(r3, 0x5) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0)={0x7}) write$FUSE_IOCTL(r2, &(0x7f00000001c0)={0x20, 0x0, 0x6, {0x9, 0x4, 0xa07e}}, 0x20) sendto$isdn(r2, &(0x7f0000000100)={0x3, 0xfffffffffffffffc, "debe3fa274363be47d4b678fbc143a29c94ba8b7001404c02416267fbe8c9a4521e12c6c46c7627382c255c5cea1ada3b4667c0e2bbb21da44484e24"}, 0x44, 0x0, &(0x7f0000000180)={0x22, 0x0, 0x7, 0x1, 0x4}, 0x6) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000040)=""/16, &(0x7f0000000080)=0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000280)=0x10) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) 02:45:18 executing program 4: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x40000000000002, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003180)={&(0x7f0000003040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0xffffffffffffff25, &(0x7f0000003100), 0x0, &(0x7f0000003140)=""/29, 0x1d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000200)=@sco, 0x26c, &(0x7f0000002b80), 0x218, &(0x7f00000076c0)=""/156, 0xfffffffffffffe11, 0xfffffffffffffffa}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) recvmsg$kcm(r0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 02:45:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, 0x0) 02:45:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:18 executing program 5: prlimit64(0x0, 0xf, &(0x7f0000000040)={0xe99, 0x9}, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000100)=0x7) ioctl$KDENABIO(r0, 0x4b36) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000140)={0x2, 0x0, @remote}, &(0x7f0000000180)=0x10) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000001c0)={@multicast1, @remote}, &(0x7f0000000200)=0xc) ioctl$TCSBRK(r0, 0x5409, 0x4) prctl$PR_SVE_GET_VL(0x33, 0x4348) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000002c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x8) r2 = dup2(r0, r0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000300)={0x1, 0x1, 0x8, 0x0, 0xf1}, 0xc) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000440)={@empty, @local}, &(0x7f0000000480)=0xc) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f00000004c0)) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000500)={'HL\x00'}, &(0x7f0000000540)=0x1e) openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x10402, 0x0) r3 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$reject(0x13, 0x0, 0x9, 0x0, r3) timer_create(0x1, &(0x7f0000000700)={0x0, 0x28}, &(0x7f0000000740)) ioctl$TIOCCONS(r0, 0x541d) ioctl$TCSETS(r2, 0x5402, &(0x7f00000008c0)={0x10001, 0x1ff, 0x7, 0x3ff, 0x5, 0x0, 0x7, 0x7, 0x4, 0x3ff, 0x100000000, 0x8}) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x80000001) [ 324.935551] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. [ 324.944608] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. [ 325.083529] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. [ 325.148663] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. [ 325.215847] netlink: 3290 bytes leftover after parsing attributes in process `syz-executor4'. 02:45:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x200000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0, 0x108010, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x1, 'L'}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x5, {0x8, 0x9}, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:45:19 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x80000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, &(0x7f00000001c0)=0x10) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000080)=0x80) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000200)) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000140)="392bea92022adf98abee178b3dec56b00a8a61912afa0ab90eb46c171876d6bcf951486d3d9cc52a010000013955526c8a5242e7", 0x34) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x2000, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 02:45:19 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1f"], 0x1) close(r0) 02:45:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) fallocate(r0, 0x11, 0x0, 0x100000001) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 02:45:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:19 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 02:45:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000214fd4)={0x3, 0x4, 0x4000000004, 0x800000a350, 0x4, 0xffffffffffffffff, 0x0, [0x305f, 0xa]}, 0x2c) 02:45:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:20 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x537, 0x4}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x5f4, 0x7}, &(0x7f00000002c0)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000300)={r1, 0x1ff, 0x80000001, 0x4, 0x8, 0x8000000000, 0x3092, 0x1ff, {r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}, 0x1000, 0x200, 0x6, 0xfd8, 0x8}}, &(0x7f00000003c0)=0xb0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000040)={0x1000000000000000, 0xd000, 0x80, 0x0, 0x2}) 02:45:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ff4000/0xc000)=nil, 0xc000}, &(0x7f0000000240)=0x10) 02:45:20 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1f"], 0x1) close(r0) 02:45:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 02:45:20 executing program 4: clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x1}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 02:45:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:20 executing program 0: r0 = shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmat(r0, &(0x7f0000ffd000/0x3000)=nil, 0x1000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ff7000/0x9000)=nil, 0x9000) epoll_create1(0x80000) [ 326.362222] ptrace attach of "/root/syz-executor4"[11532] was attempted by "/root/syz-executor4"[11533] 02:45:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x80400, 0x0) syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x8000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000940)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0x482) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_create(0x7, &(0x7f0000000b40)={0x0, 0x11, 0x3}, &(0x7f0000000b00)) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r1, 0x4) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040), 0x1) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) setuid(0xee01) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0x1269, 0xffffffffffffffff) ioctl$int_in(r2, 0x5421, &(0x7f0000000900)) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) r3 = mq_open(&(0x7f00000003c0)='\aoj9\xbc\xf6u=w\x0e\xecuWOA\xe8\x85\x02^;\x8f\x9c\xd2a\xc1c\x1f8h\x84\x9ej2#\xe3g\xdd\x13\xedI\xdc\xa1\xfc1\xe5\x01VZ.\xfbD\x7f.\xbb\x99\xdb\xb7\xef\xbe\x1c\xc9\xb6\x17g\xff\xec\xf4\xe8lD{\xa8\x04\x0f\x8f\b\x8e\xf9ln\x90\xca\xf1\x97\xb6[\x14})\v\xeeU\x14o\x1b1fV\xbf\r\xa51zhq\x10\v\xf5\xb1g\x9c\x1c\x83b\xd3\xa3\xd7\xb9\xeb\xf9\xc0\xd1\x15\xf1\xa3\x8a^\xbe\x12\x97\xc8lf\x95\x9e \x00\x00\x00\x00\x00\x00\x00\x0er\x05\x1d\xd8\xaa\xf5\xd4\xc0\xd0\x80,\x05V\xe46/9x\xd5P\xd1v\'?\x1d|\xe5\xe2\xe9\x7fy|\x1f\xb47d\x10\x8c\xcc\x91\x82\x925\xeb\xe8\x88\"\x96B\xec\x9c\xa8\xa7\x7fr$\xb4\xa0', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x5}) mq_timedsend(r3, &(0x7f0000000080), 0x0, 0x8, 0x0) mq_timedreceive(r3, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000540)=""/25, 0x19, 0x80000000000) sendto$inet(r2, &(0x7f00004b3fff), 0x0, 0x0, 0x0, 0x0) [ 326.511346] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:45:20 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 02:45:20 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1f"], 0x1) close(r0) 02:45:20 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x10, r0, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:20 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000)='threaded\xff', 0xfffffd1e) 02:45:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:21 executing program 4: r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00002f7000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000380)={0xa0000000}) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) 02:45:21 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000000000)="6e92d7418c2fbe707ddb8bc15c7db003f65e54bf47936dabbdc976c162bd1d20183a4f66c7997be3ed5978193a1aa3319c4db67c53026f93a2caf09c236276142cd5fc48ee4410dd5989fab3bb1d009ca401259e1e4a3daaa3799237f20c3fa4b2c37a426482addd3267676dc45c4cab2e5fcbe605d9c57888bd47442784c52b4631188cc2bd90c5af6bffd23718a9441bf5da2c1dd16f812831c0f8e6772bb3922d50112ab56239960a2904f83d82c53756b1027cf107e9870422ab64bdc6ec32e884747aa1e967bf76729456158581fac1125ed8ec8ac2f93e22bb654b920e9cacbb17245c65") shmctl$SHM_UNLOCK(r0, 0xc) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="66baa000ec410f2267440f20c03501000000440f22c0c74424004e000000c744240200000000ff2c24b919020000b8405c0000ba000000000f30c442bdab7baa0f07469cc48209a76b4866b8ff008ec0", 0x50}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 02:45:21 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") write$binfmt_elf32(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1f"], 0x1) close(r0) 02:45:21 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x80400, 0x0) syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x8000, 0xfffffffffffffffd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1}, {0x0}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_create(0x7, &(0x7f0000000b40)={0x0, 0x11, 0x3}, &(0x7f0000000b00)) openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040), 0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10) r1 = syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0) setuid(0xee01) ioctl$NBD_SET_SOCK(r1, 0x1269, 0xffffffffffffffff) ioctl$int_in(r0, 0x5421, &(0x7f0000000900)) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x8, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000540)=""/25, 0x19, 0x80000000000) sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 02:45:21 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x1ff, 0xa7, [], &(0x7f0000000040)=0x8}) 02:45:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x2da, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) mount(&(0x7f0000000900)=ANY=[@ANYBLOB='/dev/n'], 0x0, 0x0, 0x220008, &(0x7f00000009c0)='N&.security%\\\x00') setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0x2710}}, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x800010b, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="ffffffff00000000000000000000000000000000330000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dcf75b0717b13bc900000000000000000000000000000a00000000000000000000004c001400736861310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1}}, 0x0) 02:45:21 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000440)='net/arp\x00') r2 = dup3(r1, r0, 0x0) read(r2, &(0x7f0000000000)=""/97, 0x61) 02:45:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0) 02:45:21 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x8cd, 0x200) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffde8, 0x810) bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 02:45:21 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") close(r0) 02:45:22 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 02:45:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) fallocate(r0, 0x11, 0x0, 0x100000001) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 02:45:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, 0x0, 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.origin\x00') 02:45:22 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000340)=""/190) 02:45:22 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) socket$tipc(0x1e, 0x2, 0x0) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0xe54, 0x4) 02:45:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 02:45:22 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") close(r0) 02:45:22 executing program 1: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e0000002b00812de41ae087185082cf0124b0eba06ec4000141000000000017000800000059a27a1f5ba7721b8980ee5cb8c77f", 0x34}], 0x1}, 0x0) 02:45:22 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000500)={0x0, {0x0, 0x0, 0x0, 0x1ff}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) bind(r1, &(0x7f0000000540)=@l2={0x1f, 0x7, {0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x2, 0x8000}, 0x80) getitimer(0x2, &(0x7f0000000380)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='lp\x00', 0x3) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, &(0x7f0000000440)) sendto$inet6(r2, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x401104000000016) r4 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000200)={0x1, r2}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180), &(0x7f0000000300)=0x8) 02:45:22 executing program 0: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x406000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200000, 0x0) bind(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x2, @local, 'bridge0\x00'}}, 0x80) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 02:45:22 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") close(r0) [ 328.712529] ================================================================== [ 328.719959] BUG: KMSAN: uninit-value in strlen+0x3b/0xa0 [ 328.725445] CPU: 1 PID: 11649 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 328.732548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.741933] Call Trace: [ 328.744549] dump_stack+0x173/0x1d0 [ 328.748211] kmsan_report+0x12e/0x2a0 [ 328.752047] __msan_warning+0x82/0xf0 [ 328.755876] strlen+0x3b/0xa0 [ 328.759070] tipc_nl_compat_bearer_enable+0x22a/0x830 [ 328.764339] ? tipc_nl_compat_dumpit+0x820/0x820 [ 328.769171] tipc_nl_compat_doit+0x3aa/0xaf0 [ 328.773598] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 328.778842] tipc_nl_compat_recv+0x14d1/0x2750 [ 328.783529] ? tipc_nl_bearer_disable+0xb0/0xb0 [ 328.788224] ? tipc_nl_compat_dumpit+0x820/0x820 [ 328.793008] ? tipc_netlink_compat_stop+0x40/0x40 [ 328.797899] genl_rcv_msg+0x185f/0x1a60 [ 328.801954] netlink_rcv_skb+0x431/0x620 [ 328.806030] ? genl_unbind+0x390/0x390 [ 328.809952] genl_rcv+0x63/0x80 [ 328.813273] netlink_unicast+0xf3e/0x1020 [ 328.817483] netlink_sendmsg+0x127f/0x1300 [ 328.821824] ___sys_sendmsg+0xdb9/0x11b0 [ 328.825931] ? netlink_getsockopt+0x1460/0x1460 [ 328.830650] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 328.835864] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 328.841248] ? __fget_light+0x6e1/0x750 [ 328.845269] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 328.850510] __se_sys_sendmsg+0x305/0x460 [ 328.854730] __x64_sys_sendmsg+0x4a/0x70 [ 328.858810] do_syscall_64+0xbc/0xf0 [ 328.862548] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 328.867746] RIP: 0033:0x458099 [ 328.870947] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.889855] RSP: 002b:00007f96d048ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.897577] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 328.904898] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 328.912172] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 328.919455] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f96d048b6d4 [ 328.926731] R13: 00000000004c5590 R14: 00000000004d91c0 R15: 00000000ffffffff [ 328.934059] [ 328.935688] Uninit was created at: [ 328.939254] kmsan_internal_poison_shadow+0x92/0x150 [ 328.944379] kmsan_kmalloc+0xa6/0x130 [ 328.948217] kmsan_slab_alloc+0xe/0x10 [ 328.952130] __kmalloc_node_track_caller+0xe9e/0xff0 [ 328.957246] __alloc_skb+0x309/0xa20 [ 328.960976] netlink_sendmsg+0xb82/0x1300 [ 328.965157] ___sys_sendmsg+0xdb9/0x11b0 [ 328.969234] __se_sys_sendmsg+0x305/0x460 [ 328.973394] __x64_sys_sendmsg+0x4a/0x70 [ 328.977475] do_syscall_64+0xbc/0xf0 [ 328.981209] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 328.986403] ================================================================== [ 328.993763] Disabling lock debugging due to kernel taint [ 328.999228] Kernel panic - not syncing: panic_on_warn set ... [ 329.005149] CPU: 1 PID: 11649 Comm: syz-executor1 Tainted: G B 5.0.0-rc1+ #7 [ 329.013645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.023017] Call Trace: [ 329.025627] dump_stack+0x173/0x1d0 [ 329.029284] panic+0x3d1/0xb01 [ 329.032544] kmsan_report+0x293/0x2a0 [ 329.036373] __msan_warning+0x82/0xf0 [ 329.040201] strlen+0x3b/0xa0 [ 329.043337] tipc_nl_compat_bearer_enable+0x22a/0x830 [ 329.048570] ? tipc_nl_compat_dumpit+0x820/0x820 [ 329.053348] tipc_nl_compat_doit+0x3aa/0xaf0 [ 329.057783] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 329.063036] tipc_nl_compat_recv+0x14d1/0x2750 [ 329.067671] ? tipc_nl_bearer_disable+0xb0/0xb0 [ 329.072369] ? tipc_nl_compat_dumpit+0x820/0x820 [ 329.077158] ? tipc_netlink_compat_stop+0x40/0x40 [ 329.082018] genl_rcv_msg+0x185f/0x1a60 [ 329.086231] netlink_rcv_skb+0x431/0x620 [ 329.090305] ? genl_unbind+0x390/0x390 [ 329.094235] genl_rcv+0x63/0x80 [ 329.097556] netlink_unicast+0xf3e/0x1020 [ 329.101779] netlink_sendmsg+0x127f/0x1300 [ 329.106068] ___sys_sendmsg+0xdb9/0x11b0 [ 329.110175] ? netlink_getsockopt+0x1460/0x1460 [ 329.114874] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 329.120095] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 329.125483] ? __fget_light+0x6e1/0x750 [ 329.129496] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 329.134709] __se_sys_sendmsg+0x305/0x460 [ 329.138914] __x64_sys_sendmsg+0x4a/0x70 [ 329.142994] do_syscall_64+0xbc/0xf0 [ 329.146735] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 329.151937] RIP: 0033:0x458099 [ 329.155147] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 329.174061] RSP: 002b:00007f96d048ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.181786] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 329.189062] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 329.196367] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 329.203661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f96d048b6d4 [ 329.210956] R13: 00000000004c5590 R14: 00000000004d91c0 R15: 00000000ffffffff [ 329.219731] Kernel Offset: disabled [ 329.223361] Rebooting in 86400 seconds..