us\x00', 0x1141042, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="000400005c9341f632a56c6e8f6fb627f0614a9eff20cc0f164b8287b5622f0fff", @ANYRES16=r2, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind(r0, &(0x7f0000000040)=@ll={0x11, 0xf7, r3, 0x1, 0xdf64}, 0x80) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) [ 283.777138][T14359] FAULT_INJECTION: forcing a failure. [ 283.777138][T14359] name failslab, interval 1, probability 0, space 0, times 0 [ 283.790015][T14359] CPU: 0 PID: 14359 Comm: syz-executor.5 Not tainted 5.1.0+ #1 [ 283.797625][T14359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.807915][T14359] Call Trace: [ 283.811309][T14359] dump_stack+0x191/0x1f0 [ 283.815737][T14359] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 283.821726][T14359] should_fail+0xa82/0xaa0 [ 283.826234][T14359] __should_failslab+0x25f/0x280 [ 283.831249][T14359] should_failslab+0x29/0x70 [ 283.835920][T14359] __kmalloc_node_track_caller+0x1c1/0xf30 [ 283.841803][T14359] ? kmsan_slab_alloc+0xe/0x10 [ 283.846631][T14359] ? __kmalloc_node_track_caller+0xcba/0xf30 [ 283.852672][T14359] ? __alloc_skb+0x306/0xa10 [ 283.857319][T14359] ? rtmsg_ifinfo_build_skb+0x150/0x400 [ 283.862950][T14359] ? unregister_netdevice_queue+0x593/0xab0 [ 283.868902][T14359] ? ppp_release+0x1f8/0x2f0 [ 283.873616][T14359] ? netlink_trim+0x398/0x400 [ 283.878365][T14359] ? netlink_trim+0x398/0x400 [ 283.883101][T14359] pskb_expand_head+0x21c/0x1a30 [ 283.888141][T14359] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 283.894093][T14359] netlink_trim+0x398/0x400 [ 283.898660][T14359] netlink_broadcast_filtered+0x14d/0x1c10 [ 283.904576][T14359] ? __wake_up_common+0x127/0xa00 [ 283.909692][T14359] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 283.915672][T14359] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 283.921903][T14359] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 283.927881][T14359] nlmsg_notify+0x22a/0x3b0 [ 283.932556][T14359] rtmsg_ifinfo_send+0xed/0x120 [ 283.937480][T14359] rollback_registered_many+0x199c/0x2210 [ 283.943282][T14359] unregister_netdevice_queue+0x593/0xab0 [ 283.949078][T14359] ppp_release+0x1f8/0x2f0 [ 283.953547][T14359] ? ppp_open+0xc0/0xc0 [ 283.957773][T14359] __fput+0x4d1/0xbc0 [ 283.961826][T14359] ____fput+0x37/0x40 [ 283.965858][T14359] ? fput_many+0x2a0/0x2a0 [ 283.970325][T14359] task_work_run+0x22e/0x2a0 [ 283.975001][T14359] prepare_exit_to_usermode+0x31d/0x420 [ 283.980614][T14359] syscall_return_slowpath+0x90/0x5c0 [ 283.986130][T14359] ? __se_sys_dup2+0x9f/0x2c0 [ 283.990980][T14359] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 283.996993][T14359] do_syscall_64+0xe2/0xf0 [ 284.001498][T14359] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 284.007459][T14359] RIP: 0033:0x459279 [ 284.011738][T14359] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 284.031498][T14359] RSP: 002b:00007f197562ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 284.040018][T14359] RAX: 0000000000000004 RBX: 00007f197562ac90 RCX: 0000000000459279 [ 284.048057][T14359] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 284.056197][T14359] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 284.064398][T14359] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f197562b6d4 [ 284.072417][T14359] R13: 00000000004bf878 R14: 00000000004d0e28 R15: 0000000000000005 19:56:44 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:56:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101200, 0x0) r2 = fcntl$getown(r0, 0x9) sched_setattr(r2, &(0x7f0000000080)={0x30, 0x3, 0x1, 0x30, 0x2, 0x7ba9, 0x1, 0x681}, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:44 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = msgget(0x3, 0x44) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000c40)=""/4096) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) r4 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x7, 0x1) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x200001, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x4c0000, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x8000, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000000800)='/dev/usbmon#\x00', 0x100000004, 0x80041) r9 = syz_open_dev$dspn(&(0x7f0000000ac0)='/dev/dsp#\x00', 0x9, 0x105000) io_submit(r3, 0xa, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x7fff, r2, &(0x7f0000000040)="ed07f964945d585d6d255246b3264461ad7e492d0441be08b156499d7c358abb2cf9a20501f3b6c533", 0x29, 0xfffffffffffffff9, 0x0, 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xa, 0x0, r2, &(0x7f0000000100)="657b358b91c478bfae873d162624f9", 0xf, 0x9, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xd, 0x3, r0, &(0x7f0000000340)="832afcb8d6e5de82bac2db05f0a33c4f3d7b24fde7ae0aee66b58e10099ecef4ebf1a73c247c695755fc1284316e279b32f6a166fbd55d32fe023bf7e5058e05d8b68270", 0x44, 0x4, 0x0, 0x2, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f00000003c0)="d23a53584075257030d7c83a99fca86ad6f8c58b9445d2", 0x17, 0x3, 0x0, 0x3, r5}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x4, r2, &(0x7f00000004c0)="acc45ec485f7e4f3f356c725f5abc5d3edfa9e9272288618d4aa3078810508a993dcb4b2fb2983fdec30792b925c45e4d04da92c72d3adfc60f855806bebc8d456330ebde4b14b90a329922043592e64a730a3186b34349e76cd08f48703ddbcc3967d1d6454722482", 0x69, 0xe55, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x3, r0, &(0x7f0000000580)="3b173de34474bc20dbf48ad8706617a24b27c58a4bca3fb81cade6612f989000e1016afdd13863641dabc5c66b389636415c", 0x32, 0x3d9, 0x0, 0x2, r6}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x6e, r0, &(0x7f0000000640)="90acb8e7ee322eed9c4cc5c794be3a3d2916a923e110fcb7893d588f65516d4d93b77b05acef17f31e9951810a2e4acdca303fc036b0109af5ff54f5c4fa9b3face1307d90a4e901709c4d80e0ecb2a2e225e3aaa511c6e70720fe9d3b6a49b56dfc9a03595ce9dec44936f9a97ac2e42813f80fec5797620161e0baf1ce1f4ef6ef619719d20ae83ec9113b4137e2714e2ca284a930bab764de0407659a536bcba932982f2e8829ff306dd7faca2d700248623b37d8fb2520d14062d1f5ba55fc44244e9455aa141552382022dc1a78d5830bfd22d4b716e51fe087cab6", 0xde, 0x400, 0x0, 0x0, r7}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x7, 0x7fffffff, r2, &(0x7f00000007c0)="550fe47fd91ce3a1e369623b57a39b9db6f8c5f645e3f760f6a73ae9693b611db6ffe42f4a24d7b19529b5500d1188700af1d4a5da4aa46f3dfa08", 0x3b, 0x81, 0x0, 0x3, r8}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x3, 0xff, r2, &(0x7f0000000880)="16d12df5fb586dffbac91c064ed6124c4227d54fda59834047d40ec40bc891540ff0e75cedeff3320cf44c19d2fdd4c316fd48ae51b1910c2718c80a2bedb09974f2d487a1e5b8aedfbb93eb8cce581c545484787105ea61ee899abbf15789ddadf2d116cf9d3f416feaf906c9685b506a7a3ca108c6d667bcb75d79dba489af79b5ae041e1bffc6c8a91cfb7001089c0f9a6cc805abc96b4425abb1d067c0c6355702f545ae71ade482e4d3600c8f0600bb62bd8b627d7a2ea25284370e37e87e7cc405dc", 0xc5, 0xffffffff, 0x0, 0x3}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x9, 0x6, r0, &(0x7f0000000a00)="1ee6addb18eafd6db7eb914c60bc87719cf74117543d593bb731120096582441f1a56afd85e4af23af0029a33bcaeb08dc3cffe6ac42427bca13d5f4c3ed29048c55b0b192c4ab3e673cdaa2961531d7f6bfe4c3bbcb37fbe6eabcfa467a23b3cb6488d78f5dbd28cd301ba89dd7f3b4a2d8e366ba1eb6343e6a3f243857deea32d4c461721c76040c570780b08f9b8c7daffa2212b4497f4406a21a4232", 0x9e, 0x20, 0x0, 0x3, r9}]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="4879cee3c363fcce", @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d3430303030301f3030303030303030303030343030302c757365725f6964a600", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r10 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r0, r10, 0x0, 0x8000fffffffe) 19:56:44 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x7ff, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000040)=0x400000) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) ioctl$VT_ACTIVATE(r1, 0x5606, 0x7ff) sendfile(r0, r3, 0x0, 0x8000fffffffe) 19:56:44 executing program 5 (fault-call:6 fault-nth:7): r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) [ 284.518350][T14397] FAULT_INJECTION: forcing a failure. [ 284.518350][T14397] name failslab, interval 1, probability 0, space 0, times 0 [ 284.531305][T14397] CPU: 1 PID: 14397 Comm: syz-executor.5 Not tainted 5.1.0+ #1 [ 284.539001][T14397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.549130][T14397] Call Trace: [ 284.552518][T14397] dump_stack+0x191/0x1f0 [ 284.556944][T14397] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 284.562904][T14397] should_fail+0xa82/0xaa0 [ 284.567397][T14397] __should_failslab+0x25f/0x280 [ 284.572399][T14397] should_failslab+0x29/0x70 [ 284.577048][T14397] kmem_cache_alloc_trace+0xf7/0xae0 [ 284.582652][T14397] ? kobject_uevent_env+0x4ff/0x2760 [ 284.588014][T14397] kobject_uevent_env+0x4ff/0x2760 [ 284.593227][T14397] kobject_uevent+0x6f/0x80 [ 284.597799][T14397] kobject_put+0x272/0x480 [ 284.602384][T14397] net_rx_queue_update_kobjects+0x7b5/0x880 [ 284.608382][T14397] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 284.614573][T14397] ? refcount_inc_checked+0x206/0x290 [ 284.620059][T14397] netdev_unregister_kobject+0x1a7/0x2b0 [ 284.626684][T14397] rollback_registered_many+0x1b82/0x2210 [ 284.634922][T14397] unregister_netdevice_queue+0x593/0xab0 [ 284.640743][T14397] ppp_release+0x1f8/0x2f0 [ 284.645236][T14397] ? ppp_open+0xc0/0xc0 [ 284.649555][T14397] __fput+0x4d1/0xbc0 [ 284.653668][T14397] ____fput+0x37/0x40 [ 284.657712][T14397] ? fput_many+0x2a0/0x2a0 [ 284.662202][T14397] task_work_run+0x22e/0x2a0 [ 284.666881][T14397] prepare_exit_to_usermode+0x31d/0x420 [ 284.672707][T14397] syscall_return_slowpath+0x90/0x5c0 [ 284.678147][T14397] ? __se_sys_dup2+0x9f/0x2c0 [ 284.682917][T14397] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 284.688890][T14397] do_syscall_64+0xe2/0xf0 [ 284.693533][T14397] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 284.699495][T14397] RIP: 0033:0x459279 [ 284.703493][T14397] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 284.723173][T14397] RSP: 002b:00007f197562ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 284.733266][T14397] RAX: 0000000000000004 RBX: 00007f197562ac90 RCX: 0000000000459279 [ 284.741487][T14397] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 284.749636][T14397] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 284.757808][T14397] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f197562b6d4 19:56:44 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e20, 0x4, @mcast2, 0x76000d3c}, r1}}, 0x38) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x9}}, 0x20) [ 284.765861][T14397] R13: 00000000004bf878 R14: 00000000004d0e28 R15: 0000000000000005 19:56:44 executing program 3: socket$inet6(0xa, 0x401000000801, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendfile(r0, r1, 0x0, 0xc000fffffffe) openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000000)='veth1_to_team\x00', 0xeb15, 0xfff, 0x4}) 19:56:44 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x73, @dev={0xac, 0x14, 0x14, 0x15}, 0x4e21, 0x2, 'nq\x00', 0x8, 0x63, 0x79}, 0x2c) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) geteuid() r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303034303030303d000000f6fa66187000"/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) 19:56:44 executing program 5 (fault-call:6 fault-nth:8): r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000100)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000002c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) r5 = getgid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000480)=0x0) r7 = geteuid() getgroups(0xa, &(0x7f00000004c0)=[0xffffffffffffffff, 0xee01, 0xee00, 0xee01, 0xee01, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) r9 = syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0x8, 0x80) r10 = fcntl$getown(r1, 0x9) getresuid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f0000000740)) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f00000001c0)) getresgid(&(0x7f0000000780)=0x0, &(0x7f00000007c0), &(0x7f0000000800)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={0xffffffffffffffff, r1, 0x0, 0xa, &(0x7f0000000840)='mime_type\x00'}, 0x30) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000e80)={0x10001, 0x1, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={0x0}, &(0x7f00000009c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000b00)=0xe8) fstat(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = gettid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000bc0)={{{@in=@multicast2, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000cc0)=0xe8) r21 = getegid() sendmsg$unix(r1, &(0x7f0000000e40)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0), 0x0, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x30, 0x1, 0x1, [r1, r1, r1, r0, r1, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {r19, r20, r21}}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r1]}}], 0x130, 0x20000000}, 0x40) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 19:56:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) prctl$PR_GET_TIMERSLACK(0x1e) r2 = socket$can_bcm(0x1d, 0x2, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) close(r2) syncfs(r2) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffffffffc00, &(0x7f0000000080)=0xa3}) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000100)={0x6, 0xe700000000, 0x2}) 19:56:45 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 19:56:45 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) r3 = getuid() stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000100)={0xa0, 0x19, 0x1, {0x4, {0x18, 0x3, 0x3}, 0x108, r3, r4, 0x4, 0x8, 0x3, 0xfff, 0x2, 0xffffffff, 0x5, 0x7b, 0x5, 0x0, 0x7ff, 0x5, 0xfffffffffffffff7, 0x1, 0x4}}, 0xa0) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 285.127918][T14422] FAULT_INJECTION: forcing a failure. [ 285.127918][T14422] name failslab, interval 1, probability 0, space 0, times 0 [ 285.140800][T14422] CPU: 0 PID: 14422 Comm: syz-executor.5 Not tainted 5.1.0+ #1 [ 285.148397][T14422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.158508][T14422] Call Trace: [ 285.161918][T14422] dump_stack+0x191/0x1f0 [ 285.166457][T14422] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 285.172437][T14422] should_fail+0xa82/0xaa0 [ 285.176931][T14422] __should_failslab+0x25f/0x280 [ 285.182024][T14422] should_failslab+0x29/0x70 [ 285.186688][T14422] __kmalloc+0xae/0x3a0 [ 285.190920][T14422] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 285.197108][T14422] ? kzalloc+0x7c/0xe0 [ 285.201248][T14422] kzalloc+0x7c/0xe0 [ 285.205249][T14422] kobject_get_path+0x1f7/0x450 [ 285.210281][T14422] kobject_uevent_env+0x580/0x2760 [ 285.215623][T14422] kobject_uevent+0x6f/0x80 [ 285.220229][T14422] kobject_put+0x272/0x480 [ 285.224736][T14422] net_rx_queue_update_kobjects+0x7b5/0x880 [ 285.231081][T14422] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 285.237213][T14422] ? refcount_inc_checked+0x206/0x290 [ 285.242673][T14422] netdev_unregister_kobject+0x1a7/0x2b0 [ 285.248377][T14422] rollback_registered_many+0x1b82/0x2210 [ 285.254183][T14422] unregister_netdevice_queue+0x593/0xab0 [ 285.260292][T14422] ppp_release+0x1f8/0x2f0 [ 285.264800][T14422] ? ppp_open+0xc0/0xc0 [ 285.269019][T14422] __fput+0x4d1/0xbc0 [ 285.273081][T14422] ____fput+0x37/0x40 [ 285.277208][T14422] ? fput_many+0x2a0/0x2a0 [ 285.281702][T14422] task_work_run+0x22e/0x2a0 [ 285.286375][T14422] prepare_exit_to_usermode+0x31d/0x420 [ 285.291989][T14422] syscall_return_slowpath+0x90/0x5c0 [ 285.297523][T14422] ? __se_sys_dup2+0x9f/0x2c0 [ 285.302289][T14422] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 285.308269][T14422] do_syscall_64+0xe2/0xf0 [ 285.312768][T14422] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 285.318721][T14422] RIP: 0033:0x459279 [ 285.322690][T14422] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 285.342447][T14422] RSP: 002b:00007f197562ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 285.350942][T14422] RAX: 0000000000000004 RBX: 00007f197562ac90 RCX: 0000000000459279 [ 285.359045][T14422] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 285.367075][T14422] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 19:56:45 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x500802, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000040)=0x100) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x6) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 285.375105][T14422] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f197562b6d4 [ 285.383131][T14422] R13: 00000000004bf878 R14: 00000000004d0e28 R15: 0000000000000005 19:56:45 executing program 5 (fault-call:6 fault-nth:9): r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:45 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_dccp_int(r1, 0x21, 0x7, &(0x7f0000000080)=0x9, 0x4) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000100)) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000040)=[0x3], 0x1, 0x3f, 0x2, 0x1, 0xe955, 0x5ab, {0x1, 0x200, 0x2, 0xfffffffffffffffb, 0x956, 0x0, 0x20, 0x101, 0xdcc, 0x3, 0x5, 0x0, 0x400000, 0x100000000, "7d850f7b0cf65a7e4d49ec9cb1f38bbf26f62df09a27926348fcc7cf84898586"}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) 19:56:45 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = dup(r0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x71a7, 0x9, 0x1f, 0x1}, {0x1, 0xfff, 0x8001, 0xbfc}]}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) bind$can_raw(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) unshare(0x600) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x2000000000000009) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r0, r4, 0x0, 0x8000fffffffe) [ 285.688485][T14455] FAULT_INJECTION: forcing a failure. [ 285.688485][T14455] name failslab, interval 1, probability 0, space 0, times 0 [ 285.701380][T14455] CPU: 0 PID: 14455 Comm: syz-executor.5 Not tainted 5.1.0+ #1 [ 285.709157][T14455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.719270][T14455] Call Trace: [ 285.722668][T14455] dump_stack+0x191/0x1f0 [ 285.727087][T14455] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 285.733154][T14455] should_fail+0xa82/0xaa0 [ 285.737750][T14455] __should_failslab+0x25f/0x280 [ 285.742785][T14455] should_failslab+0x29/0x70 [ 285.747455][T14455] kmem_cache_alloc_node+0xf4/0xbe0 [ 285.752739][T14455] ? __alloc_skb+0x215/0xa10 [ 285.757419][T14455] __alloc_skb+0x215/0xa10 [ 285.761952][T14455] ? kmsan_get_shadow_origin_ptr+0x61/0x470 [ 285.767929][T14455] alloc_uevent_skb+0x14c/0x470 [ 285.772868][T14455] kobject_uevent_env+0x1609/0x2760 [ 285.778178][T14455] kobject_uevent+0x6f/0x80 [ 285.782762][T14455] kobject_put+0x272/0x480 [ 285.787278][T14455] net_rx_queue_update_kobjects+0x7b5/0x880 [ 285.793273][T14455] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 285.799407][T14455] ? refcount_inc_checked+0x206/0x290 [ 285.804894][T14455] netdev_unregister_kobject+0x1a7/0x2b0 [ 285.810634][T14455] rollback_registered_many+0x1b82/0x2210 [ 285.816457][T14455] unregister_netdevice_queue+0x593/0xab0 [ 285.822276][T14455] ppp_release+0x1f8/0x2f0 [ 285.826778][T14455] ? ppp_open+0xc0/0xc0 [ 285.831020][T14455] __fput+0x4d1/0xbc0 [ 285.835099][T14455] ____fput+0x37/0x40 [ 285.839153][T14455] ? fput_many+0x2a0/0x2a0 [ 285.843647][T14455] task_work_run+0x22e/0x2a0 [ 285.848325][T14455] prepare_exit_to_usermode+0x31d/0x420 [ 285.853968][T14455] syscall_return_slowpath+0x90/0x5c0 [ 285.859441][T14455] ? __se_sys_dup2+0x9f/0x2c0 [ 285.864227][T14455] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 285.870201][T14455] do_syscall_64+0xe2/0xf0 [ 285.874686][T14455] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 285.880661][T14455] RIP: 0033:0x459279 19:56:45 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x1bf, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x100000106}}, 0x20) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0xfffffffffffffffa}, &(0x7f0000000300)=0x8) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000000)={0x80000000, 0x1, 0xc14, 0x453, 0xfffffffffffffffb, 0xffff, 0x5}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={r3, 0xc111}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0xf7ff, 0xfa00, {{}, {0xa, 0x0, 0x4, @mcast1}, r1}}, 0xffffffffffffff08) [ 285.884627][T14455] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 285.904297][T14455] RSP: 002b:00007f197562ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 285.912795][T14455] RAX: 0000000000000004 RBX: 00007f197562ac90 RCX: 0000000000459279 [ 285.920820][T14455] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 285.928840][T14455] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 19:56:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x111100, 0x0) getsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) bind$xdp(r1, &(0x7f0000000400)={0x2c, 0x5, r2, 0x1, 0xffffffffffffff9c}, 0x10) [ 285.936870][T14455] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f197562b6d4 [ 285.944892][T14455] R13: 00000000004bf878 R14: 00000000004d0e28 R15: 0000000000000005 19:56:46 executing program 3: r0 = socket$inet6(0xa, 0x800, 0x4000000000000005) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x8, 0x3, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffff00}) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000000)=0x3) 19:56:46 executing program 5 (fault-call:6 fault-nth:10): r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = dup2(r0, r0) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000380)=0x20, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r2, 0x3}, &(0x7f0000000100)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x111, 0x3}}, 0x20) prctl$PR_SET_FPEMU(0xa, 0x1) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [{0x20, ',+vmnet1eth0}^-\',selfppp1-proc'}, {0x20, '/dev/infiniband/rdma_cm\x00'}, {0x20, '/dev/infiniband/rdma_cm\x00'}, {}, {0x20, '/dev/infiniband/rdma_cm\x00'}, {0x20, '+'}, {0x20, '/dev/infiniband/rdma_cm\x00'}, {0x20, '/dev/infiniband/rdma_cm\x00'}], 0xa, "37000859b166f8c10ece3d431b147d7c1eb099d7fdf4cc4958d61708152bbe5dc5089057269984617f75955da45cb490840f7c140ebfccbc96bac66c891daca480bf13a34903cc90d1bf803a70a4a6db44860dba67a9db70b2"}, 0x103) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x8, 0xfa00, {{0xa, 0x0, 0xfffffffffffffffe, @loopback}, {0xa, 0x0, 0x0, @empty}, r3, 0x81}}, 0xfffffffffffffebe) [ 286.249076][T14493] FAULT_INJECTION: forcing a failure. [ 286.249076][T14493] name failslab, interval 1, probability 0, space 0, times 0 [ 286.262205][T14493] CPU: 1 PID: 14493 Comm: syz-executor.5 Not tainted 5.1.0+ #1 [ 286.270031][T14493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.280257][T14493] Call Trace: [ 286.283671][T14493] dump_stack+0x191/0x1f0 [ 286.288116][T14493] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 286.294210][T14493] should_fail+0xa82/0xaa0 [ 286.298757][T14493] __should_failslab+0x25f/0x280 [ 286.303797][T14493] should_failslab+0x29/0x70 [ 286.308523][T14493] __kmalloc_node_track_caller+0x1c1/0xf30 [ 286.314460][T14493] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 286.320642][T14493] ? kmem_cache_alloc_node+0x1aa/0xbe0 [ 286.326561][T14493] ? alloc_uevent_skb+0x14c/0x470 [ 286.331704][T14493] ? alloc_uevent_skb+0x14c/0x470 [ 286.336833][T14493] __alloc_skb+0x306/0xa10 [ 286.341343][T14493] ? alloc_uevent_skb+0x14c/0x470 [ 286.346511][T14493] alloc_uevent_skb+0x14c/0x470 [ 286.351488][T14493] kobject_uevent_env+0x1609/0x2760 [ 286.356828][T14493] kobject_uevent+0x6f/0x80 [ 286.361451][T14493] kobject_put+0x272/0x480 [ 286.365991][T14493] net_rx_queue_update_kobjects+0x7b5/0x880 [ 286.372023][T14493] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 286.378227][T14493] ? refcount_inc_checked+0x206/0x290 [ 286.383820][T14493] netdev_unregister_kobject+0x1a7/0x2b0 [ 286.389598][T14493] rollback_registered_many+0x1b82/0x2210 [ 286.395453][T14493] unregister_netdevice_queue+0x593/0xab0 [ 286.401294][T14493] ppp_release+0x1f8/0x2f0 [ 286.405800][T14493] ? ppp_open+0xc0/0xc0 [ 286.410041][T14493] __fput+0x4d1/0xbc0 [ 286.414142][T14493] ____fput+0x37/0x40 [ 286.418205][T14493] ? fput_many+0x2a0/0x2a0 [ 286.422701][T14493] task_work_run+0x22e/0x2a0 [ 286.427471][T14493] prepare_exit_to_usermode+0x31d/0x420 [ 286.433131][T14493] syscall_return_slowpath+0x90/0x5c0 [ 286.438867][T14493] ? __se_sys_dup2+0x9f/0x2c0 [ 286.443656][T14493] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 286.449684][T14493] do_syscall_64+0xe2/0xf0 [ 286.454203][T14493] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 286.460187][T14493] RIP: 0033:0x459279 [ 286.464144][T14493] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 286.483814][T14493] RSP: 002b:00007f197562ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 286.492300][T14493] RAX: 0000000000000004 RBX: 00007f197562ac90 RCX: 0000000000459279 [ 286.500350][T14493] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 286.508413][T14493] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 286.516632][T14493] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f197562b6d4 [ 286.524672][T14493] R13: 00000000004bf878 R14: 00000000004d0e28 R15: 0000000000000005 19:56:46 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 19:56:46 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0ec4a5", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) write$FUSE_POLL(r2, &(0x7f0000000000)={0x18, 0x0, 0x7, {0x101}}, 0x18) 19:56:46 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8001, 0x28) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000040)={@remote, @remote, @initdev}, &(0x7f0000000080)=0xc) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:56:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = gettid() waitid(0x0, r1, &(0x7f0000000300), 0x80000000, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x19, 0xfa00, {{}, {0xa, 0x0, 0xecc, @ipv4={[], [], @rand_addr=0x5}}, 0xffffffffffffffff, 0x10000}}, 0x48) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:getty_log_t:s0\x00', 0x21, 0x1) 19:56:46 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) socketpair(0x10, 0xb, 0x80, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @loopback}, &(0x7f0000000080)=0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x60000, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:56:46 executing program 5 (fault-call:6 fault-nth:11): r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:46 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r2, r2, 0x0, 0x800100000000) 19:56:46 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) r2 = dup2(r0, r0) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name, &(0x7f0000000200)=0x10, 0x80000) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000002c0)={r3, 0x401}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @ipv4={[], [], @loopback}, 0x4}, {0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, [], 0x10}, 0x2000}, r1, 0x1ff}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000400)={0xc, 0x8, 0xfa00, {&(0x7f00000006c0)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x400000, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x28000, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000380)=0x81, &(0x7f00000003c0)=0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:56:46 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x8, 0x8001, 0x9, 0x8ec, 0xfffffffffffffffd, 0x9, 0x80, {0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x6, 0x401, 0xfffffffffffffffe, 0x3ff, 0xdde}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={r2, 0xffffffffffff0001, 0x1000, "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"}, 0x1008) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) [ 286.974281][T14533] FAULT_INJECTION: forcing a failure. [ 286.974281][T14533] name failslab, interval 1, probability 0, space 0, times 0 [ 286.987227][T14533] CPU: 1 PID: 14533 Comm: syz-executor.5 Not tainted 5.1.0+ #1 [ 286.994827][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.004933][T14533] Call Trace: [ 287.008319][T14533] dump_stack+0x191/0x1f0 [ 287.012758][T14533] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 287.018732][T14533] should_fail+0xa82/0xaa0 [ 287.023238][T14533] __should_failslab+0x25f/0x280 [ 287.028282][T14533] should_failslab+0x29/0x70 [ 287.032952][T14533] kmem_cache_alloc_trace+0xf7/0xae0 [ 287.038333][T14533] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 287.044303][T14533] ? kobject_uevent_env+0x4ff/0x2760 [ 287.049681][T14533] kobject_uevent_env+0x4ff/0x2760 [ 287.054907][T14533] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 287.061091][T14533] kobject_uevent+0x6f/0x80 [ 287.065671][T14533] kobject_put+0x272/0x480 [ 287.070174][T14533] netdev_queue_update_kobjects+0x71c/0x770 [ 287.076144][T14533] ? refcount_inc_checked+0x206/0x290 [ 287.081616][T14533] netdev_unregister_kobject+0x1e3/0x2b0 [ 287.087343][T14533] rollback_registered_many+0x1b82/0x2210 [ 287.093280][T14533] unregister_netdevice_queue+0x593/0xab0 [ 287.099103][T14533] ppp_release+0x1f8/0x2f0 [ 287.103680][T14533] ? ppp_open+0xc0/0xc0 [ 287.107919][T14533] __fput+0x4d1/0xbc0 [ 287.111975][T14533] ____fput+0x37/0x40 [ 287.116033][T14533] ? fput_many+0x2a0/0x2a0 [ 287.120770][T14533] task_work_run+0x22e/0x2a0 [ 287.125457][T14533] prepare_exit_to_usermode+0x31d/0x420 [ 287.131078][T14533] syscall_return_slowpath+0x90/0x5c0 [ 287.136601][T14533] ? __se_sys_dup2+0x9f/0x2c0 [ 287.141355][T14533] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 287.147327][T14533] do_syscall_64+0xe2/0xf0 [ 287.151813][T14533] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 287.157753][T14533] RIP: 0033:0x459279 [ 287.161709][T14533] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.181431][T14533] RSP: 002b:00007f197562ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 287.189946][T14533] RAX: 0000000000000004 RBX: 00007f197562ac90 RCX: 0000000000459279 [ 287.198073][T14533] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 287.206103][T14533] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 287.214119][T14533] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f197562b6d4 19:56:47 executing program 3: ppoll(&(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080)={0x6}, 0x8) r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:56:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) socket$packet(0x11, 0x3, 0x300) [ 287.222145][T14533] R13: 00000000004bf878 R14: 00000000004d0e28 R15: 0000000000000005 19:56:47 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000002c0)) sendfile(r0, r1, 0x0, 0x8000fdfffffe) 19:56:47 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 19:56:47 executing program 5 (fault-call:6 fault-nth:12): r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:47 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff65, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) [ 287.592207][T14565] FAULT_INJECTION: forcing a failure. [ 287.592207][T14565] name failslab, interval 1, probability 0, space 0, times 0 [ 287.605069][T14565] CPU: 1 PID: 14565 Comm: syz-executor.5 Not tainted 5.1.0+ #1 [ 287.612780][T14565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.622997][T14565] Call Trace: [ 287.626410][T14565] dump_stack+0x191/0x1f0 [ 287.630874][T14565] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 287.636859][T14565] should_fail+0xa82/0xaa0 [ 287.641382][T14565] __should_failslab+0x25f/0x280 [ 287.646427][T14565] should_failslab+0x29/0x70 [ 287.651118][T14565] __kmalloc+0xae/0x3a0 [ 287.655368][T14565] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 287.661507][T14565] ? kzalloc+0x7c/0xe0 [ 287.665658][T14565] kzalloc+0x7c/0xe0 [ 287.669637][T14565] kobject_get_path+0x1f7/0x450 [ 287.674582][T14565] kobject_uevent_env+0x580/0x2760 [ 287.679787][T14565] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 287.685963][T14565] kobject_uevent+0x6f/0x80 [ 287.690539][T14565] kobject_put+0x272/0x480 [ 287.695108][T14565] netdev_queue_update_kobjects+0x71c/0x770 [ 287.701112][T14565] ? refcount_inc_checked+0x206/0x290 [ 287.706581][T14565] netdev_unregister_kobject+0x1e3/0x2b0 [ 287.713818][T14565] rollback_registered_many+0x1b82/0x2210 [ 287.719652][T14565] unregister_netdevice_queue+0x593/0xab0 [ 287.725467][T14565] ppp_release+0x1f8/0x2f0 [ 287.730518][T14565] ? ppp_open+0xc0/0xc0 [ 287.734749][T14565] __fput+0x4d1/0xbc0 [ 287.738818][T14565] ____fput+0x37/0x40 [ 287.742870][T14565] ? fput_many+0x2a0/0x2a0 [ 287.747372][T14565] task_work_run+0x22e/0x2a0 [ 287.752043][T14565] prepare_exit_to_usermode+0x31d/0x420 [ 287.757684][T14565] syscall_return_slowpath+0x90/0x5c0 [ 287.763118][T14565] ? __se_sys_dup2+0x9f/0x2c0 [ 287.767961][T14565] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 287.773921][T14565] do_syscall_64+0xe2/0xf0 [ 287.778404][T14565] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 287.784339][T14565] RIP: 0033:0x459279 [ 287.788292][T14565] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.807975][T14565] RSP: 002b:00007f197562ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 287.816477][T14565] RAX: 0000000000000004 RBX: 00007f197562ac90 RCX: 0000000000459279 [ 287.824545][T14565] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 287.832564][T14565] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 19:56:47 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa010000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ad010000", @ANYRES16=r2, @ANYBLOB="000229bd7000fcdbdf250d000000300001002c00040014000100f0ff4d22e000000200000000000000001400020002004e23ac1e01010000000000000000100007000c0003000700000000000000280002000800010008000000040004000800010000010000080001000800000004000400040004002c000900080001000b6614000100ff0300000800020008000000080002000400000008000100070000006c00050014000200080001001400000008000400ff0100003c000200080002000900000008a9040000010000080002002000000008000400e00400000800030000000000080002000200000008000300072700000800010069620000080001006962000008eb0100657468002c0006000800010001000000080001000100010004000200040002000400020004000200040002000400020034000200080001001c1f000004000400080002002800000008000100185100000400040008000100020000000800020004000000f458eb14000900080001000000000008000200090000000400090010000600040002000400020004000200789b833c62f1363d6ac583f895c929160a10fb2fc2b3cd3bf9bc1a51fb073cb34983b28ab11760473dcf3fbd8f90f9832466ff05dda7462f413525f11c8703d078120000cbc3d3a6a78cb2f37d63bae5ef11c2e91bcd52b09a077f473647b3c102443852d006cf0551159e82da184c831b"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x40) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0xfffffffffffffce8, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0xfffffffffffffe9c) [ 287.840585][T14565] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f197562b6d4 [ 287.848605][T14565] R13: 00000000004bf878 R14: 00000000004d0e28 R15: 0000000000000005 19:56:48 executing program 3: r0 = socket$inet6(0xa, 0xa, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:56:48 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:56:48 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) vmsplice(r0, &(0x7f0000000840)=[{&(0x7f0000000000)="b16d9511f3f8a7acf8dd1ca16b0fcb9fe14fbe7cd274443e408a700be3e28df0de29640ec6d59ebae9005ece5161df14546f1cdffed47b8d468306b77fc48cf7bdb33393351900b2412035ccb9f5664108f3d360f91d526d643a789f6dc746c9a1dc9493b3c545a49d7b05e9b80598c48b6d960caf9792664ba7a398e312ce81191d47d75c3ffd4d16bfe9fc", 0x8c}, {&(0x7f0000000440)="41e37b2745e00311aaaa7d68d01a2990386ba959b07b48164c4ea02140305ff64f43c4fbd840189808849113dc33d6c41b7e3473d806d0a4ebc44839b9c443b56a13be20fa20b892768e67cd240a68bd2d73158d5c2a2f71eb5cbb137543ac89b82cf75a64df56788b1d0d08204dc3fe1adc53ab417fa643b0ff498125f30985faf05a91b6912d78a60f32911fb4e56e39b23fdc0584e3cfdd1dde7d73c75d160e57eb90813b79cceca84a8b11f278fffb77bb6215e377bfac3628770cc617b10d63ca19d6892f7f1923a42308bdb540a0ceadcf88c074a111a674377070625ff50afcd705a9961f", 0xe8}, {&(0x7f0000000100)="fe36ad24bc2fedb7ca93a4d723f8b6cee8fde5b7972ad6c1208b13ae0e010cde6c875c2f324b79b7f7959d2b5497d9caa72974c9883966156676ebf332e2a814d327ef", 0x43}, {&(0x7f0000000340)="d6441b5f21aa3684ca41a68baf4ed179da0c966daf4312874c3194fc7f3c3dae2bcbbd2ed807bc23bfc2986f73d1e206e5c2be7655946c8c0c0c8a568ed699134b2bcf5dae34b860f02cd1ad9beeda7b45af85fbc93f56431b39443d8f82e828e06da1d4bebf42119170d9fd0e58ab2d634c0f0644ce0b7fb455b628a795d7e1e8e238e744d429491e45cfc5c54041d9e1c62a324ce6d7561f2087", 0x9b}, {&(0x7f0000000540)="a4637af9dc0ccf30dc78f740458f17895522ef8d2aa2fd04b3e19b177f1b53fd523e1e6f0a9ddb475109e9a41250978c38119e0997c9671f65697cbd8568c171ae54de0a5455a514614f2242aa257dc3713b3f4d18f0b3f098b8d1526a14f0ba922a15fba81a3b3197cf5daefd8c2c876f07096c50caf6b410822b6ed98a9d7ecfea9621e3f3acad912846352e03d7677d202a53109d31eab167a12793b29803094daf3f7339be6ce0ba2c2e", 0xac}, {&(0x7f0000000600)="8526dcd746031075473c3df1030804845f0a59b0b9888ccb6d2a1b8b54f3088145edfce60168c28c5035d0785f95e465cb861e43f1a83935b5b9673bc8cbfad5304d03d84347173ebc60465627661c89c35a1e2c8c08a9d88f96d69fa1467b40a9a694bd0caf6e3947d7ecaa895ffa7486c20762cc93af85cde2d0bf188a4778690ca929aef14616a834f95374b605c89788b0cd011e7a4127cc9b92f3c94c80737f121ff8e1dd85242e84f3464a68dbbd633fe90ed6", 0xb6}, {&(0x7f00000006c0)="013f2c09c2da7750af9d27ec0151b05b1add135ce4abb0e9b75cbed300f4a219acc750146cbf4134a8a6acb7adf7a1baae9d07b3bd8b320ab3f7d721e9aec886818b324850077c213d706216b55f2cf04e89cfff", 0x54}, {&(0x7f0000000740)="3120fc21f2a525baabcb077f988fb85355d9e465472637cfddf5774c20517245bff418c7a32f41c94974f49311ce08b547d26be00167fecda142c674c61f59d16e44992ea8a0f54bf61d507327d4010b633fa0ceb287d2e92ed2b20fe4dfd5fd29d287025fe0", 0x66}, {&(0x7f00000007c0)="58685d84866d531fb3265371d3d77d914d9626764132dc4f4af48c6296351b3ff1533f22397b450a706976f7336b60187debbb192aeef825d6f90bfc04b00e619d25c539d562f130e053cc14b1d3dd18369d56ac2415d8c98ece0d318adc990264038126ad7c38e9fb5666569d671407822884d57c2d31f08987b000", 0x7c}, {&(0x7f0000000180)="030ad1e0b2d93a4ea445f244", 0xc}], 0xa, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0000a7d3c3fff0023a2b", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:56:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:48 executing program 5 (fault-call:6 fault-nth:13): r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) [ 288.179198][T14600] FAULT_INJECTION: forcing a failure. [ 288.179198][T14600] name failslab, interval 1, probability 0, space 0, times 0 [ 288.193207][T14600] CPU: 0 PID: 14600 Comm: syz-executor.5 Not tainted 5.1.0+ #1 [ 288.200910][T14600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.211198][T14600] Call Trace: [ 288.214606][T14600] dump_stack+0x191/0x1f0 [ 288.219026][T14600] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 288.225019][T14600] should_fail+0xa82/0xaa0 [ 288.229521][T14600] __should_failslab+0x25f/0x280 [ 288.234540][T14600] should_failslab+0x29/0x70 [ 288.239217][T14600] kmem_cache_alloc_node+0xf4/0xbe0 [ 288.244503][T14600] ? __alloc_skb+0x215/0xa10 [ 288.249188][T14600] __alloc_skb+0x215/0xa10 [ 288.253701][T14600] ? kmsan_get_shadow_origin_ptr+0x61/0x470 [ 288.259672][T14600] alloc_uevent_skb+0x14c/0x470 [ 288.264622][T14600] kobject_uevent_env+0x1609/0x2760 [ 288.270013][T14600] kobject_uevent+0x6f/0x80 [ 288.274596][T14600] kobject_put+0x272/0x480 [ 288.279107][T14600] netdev_queue_update_kobjects+0x71c/0x770 [ 288.285168][T14600] ? refcount_inc_checked+0x206/0x290 [ 288.290650][T14600] netdev_unregister_kobject+0x1e3/0x2b0 [ 288.296375][T14600] rollback_registered_many+0x1b82/0x2210 [ 288.302190][T14600] unregister_netdevice_queue+0x593/0xab0 [ 288.307988][T14600] ppp_release+0x1f8/0x2f0 [ 288.312585][T14600] ? ppp_open+0xc0/0xc0 [ 288.316834][T14600] __fput+0x4d1/0xbc0 [ 288.321944][T14600] ____fput+0x37/0x40 [ 288.325998][T14600] ? fput_many+0x2a0/0x2a0 [ 288.330483][T14600] task_work_run+0x22e/0x2a0 [ 288.335155][T14600] prepare_exit_to_usermode+0x31d/0x420 [ 288.340778][T14600] syscall_return_slowpath+0x90/0x5c0 [ 288.346219][T14600] ? __se_sys_dup2+0x9f/0x2c0 [ 288.350983][T14600] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 288.356955][T14600] do_syscall_64+0xe2/0xf0 [ 288.361427][T14600] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 288.367362][T14600] RIP: 0033:0x459279 [ 288.371313][T14600] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.390979][T14600] RSP: 002b:00007f197562ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 288.399479][T14600] RAX: 0000000000000004 RBX: 00007f197562ac90 RCX: 0000000000459279 [ 288.407502][T14600] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 288.415523][T14600] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 19:56:48 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000100)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x14a}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000140)={0x91, r3}) [ 288.423546][T14600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f197562b6d4 [ 288.431572][T14600] R13: 00000000004bf878 R14: 00000000004d0e28 R15: 0000000000000005 19:56:48 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x4, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:48 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0, 0x0) pwritev(r1, 0x0, 0xfffffffffffffdd7, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xff3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}}}, 0x84) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) sendfile(r0, r3, 0x0, 0x8000fffffffe) 19:56:48 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000000)={0x1, 0x7f, 0x2, @broadcast, 'sit0\x00'}) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000040)={0x8, 0x4, 0x16, 0xf, 0x3, 0x8, 0x4, 0x15f, 0x1}) 19:56:48 executing program 5 (fault-call:6 fault-nth:14): r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x81, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r2, &(0x7f0000000040)='\x00', &(0x7f0000000100)={{r3, r4/1000+10000}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:48 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) tee(r1, r1, 0x765d92c9, 0x9) ftruncate(r0, 0x2008202) sendfile(r0, r2, 0x0, 0x8000fffffffe) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) 19:56:48 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x500, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000200)={@local, 0x0}, &(0x7f0000000340)=0x14) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x1d, r2}, 0x10, &(0x7f00000003c0)={&(0x7f0000000440)={0x2, 0x800, 0x4, {0x0, 0x7530}, {}, {0x2, 0x1, 0x4, 0x6}, 0x1, @canfd={{0x3, 0x6ace949d, 0x4b8, 0x3}, 0x2d, 0x1, 0x0, 0x0, "330b451ef87efb79aacffe6d4e7e4b4284a7c481cbd8c9c6cb0fcbfa6e4fa74a267f41f64f7c518a3acda9ff026cd791946b26bcf4e62a99bb504faacb349286"}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x40080) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl(r0, 0x8000, &(0x7f0000000000)="86477aa53fc23fa0289df57fa10bfaf7ef1d8d02946a989eb99405bb6b3ef7e64d47ae25334ae8b43842205fc436a0c0e8f6b6e1f39d7fe573b87dfe78a184cdfbb877372c7514c09ac85785d1de8fe0a2151c4e22fda1b003a87f91de91773a88fe172a1ab5f8b1e42f011bc977f0a0a06c5ba077d49172ac7340") r4 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r0, r4, 0x0, 0x8000fffffffe) [ 288.942839][T14651] FAULT_INJECTION: forcing a failure. [ 288.942839][T14651] name failslab, interval 1, probability 0, space 0, times 0 [ 288.955772][T14651] CPU: 1 PID: 14651 Comm: syz-executor.5 Not tainted 5.1.0+ #1 [ 288.963382][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.973486][T14651] Call Trace: [ 288.976894][T14651] dump_stack+0x191/0x1f0 [ 288.981323][T14651] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 288.987289][T14651] should_fail+0xa82/0xaa0 [ 288.991793][T14651] __should_failslab+0x25f/0x280 [ 288.996901][T14651] should_failslab+0x29/0x70 [ 289.001594][T14651] __kmalloc_node_track_caller+0x1c1/0xf30 [ 289.007493][T14651] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 289.013903][T14651] ? kmem_cache_alloc_node+0x1aa/0xbe0 [ 289.019443][T14651] ? alloc_uevent_skb+0x14c/0x470 [ 289.024733][T14651] ? alloc_uevent_skb+0x14c/0x470 [ 289.029825][T14651] __alloc_skb+0x306/0xa10 [ 289.034306][T14651] ? alloc_uevent_skb+0x14c/0x470 [ 289.039418][T14651] alloc_uevent_skb+0x14c/0x470 [ 289.044353][T14651] kobject_uevent_env+0x1609/0x2760 [ 289.049657][T14651] kobject_uevent+0x6f/0x80 [ 289.054235][T14651] kobject_put+0x272/0x480 [ 289.058741][T14651] netdev_queue_update_kobjects+0x71c/0x770 [ 289.064717][T14651] ? refcount_inc_checked+0x206/0x290 [ 289.070197][T14651] netdev_unregister_kobject+0x1e3/0x2b0 [ 289.075911][T14651] rollback_registered_many+0x1b82/0x2210 [ 289.081899][T14651] unregister_netdevice_queue+0x593/0xab0 [ 289.087706][T14651] ppp_release+0x1f8/0x2f0 [ 289.092275][T14651] ? ppp_open+0xc0/0xc0 [ 289.096504][T14651] __fput+0x4d1/0xbc0 [ 289.100567][T14651] ____fput+0x37/0x40 [ 289.104610][T14651] ? fput_many+0x2a0/0x2a0 [ 289.109087][T14651] task_work_run+0x22e/0x2a0 [ 289.113754][T14651] prepare_exit_to_usermode+0x31d/0x420 [ 289.119362][T14651] syscall_return_slowpath+0x90/0x5c0 [ 289.124803][T14651] ? __se_sys_dup2+0x9f/0x2c0 [ 289.129557][T14651] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 289.135523][T14651] do_syscall_64+0xe2/0xf0 [ 289.140002][T14651] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 289.145938][T14651] RIP: 0033:0x459279 [ 289.149884][T14651] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.170092][T14651] RSP: 002b:00007f197562ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 289.178658][T14651] RAX: 0000000000000004 RBX: 00007f197562ac90 RCX: 0000000000459279 19:56:49 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x9, 0x2}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in={{0x2, 0x4e24, @multicast2}}, 0x4, 0x1f, 0x5, 0x6, 0x80}, 0x98) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24}, {0xa, 0x0, 0x0, @local}, r3, 0x1}}, 0x48) 19:56:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000000)={0x0, 0x1, [0xfffffffffffff754, 0xffffffffffff0001, 0x8, 0x0, 0xfffffffffffffffb, 0x5, 0x872b, 0x80000000]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0xffffffffffffffff}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x92}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e23, 0x3, @local, 0x1f}}}, 0x84) [ 289.186707][T14651] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 289.194742][T14651] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 289.202770][T14651] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f197562b6d4 [ 289.210792][T14651] R13: 00000000004bf878 R14: 00000000004d0e28 R15: 0000000000000005 19:56:49 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0xfff, 0x3}, &(0x7f00000000c0)=0x8) 19:56:49 executing program 5 (fault-call:6 fault-nth:15): r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:49 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:49 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x40000000000003) 19:56:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x10, 0x4}}, 0x14) 19:56:49 executing program 3: close(0xffffffffffffffff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x42000, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x800, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) ftruncate(r1, 0x2007fff) sendfile(0xffffffffffffffff, r1, 0x0, 0x8000fffffffe) 19:56:49 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4000, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0xf23, 0xdcd, 0x3ff}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) [ 289.728346][T14684] FAULT_INJECTION: forcing a failure. [ 289.728346][T14684] name failslab, interval 1, probability 0, space 0, times 0 [ 289.741747][T14684] CPU: 1 PID: 14684 Comm: syz-executor.5 Not tainted 5.1.0+ #1 [ 289.749361][T14684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 289.759479][T14684] Call Trace: [ 289.762867][T14684] dump_stack+0x191/0x1f0 [ 289.767286][T14684] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 289.773268][T14684] should_fail+0xa82/0xaa0 [ 289.777785][T14684] __should_failslab+0x25f/0x280 [ 289.782807][T14684] should_failslab+0x29/0x70 [ 289.787463][T14684] kmem_cache_alloc_trace+0xf7/0xae0 [ 289.792818][T14684] ? kobject_uevent_env+0x4ff/0x2760 [ 289.798182][T14684] kobject_uevent_env+0x4ff/0x2760 [ 289.803392][T14684] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 289.809521][T14684] kobject_uevent+0x6f/0x80 [ 289.814188][T14684] device_del+0x1e45/0x1f60 [ 289.818788][T14684] netdev_unregister_kobject+0x240/0x2b0 [ 289.824494][T14684] rollback_registered_many+0x1b82/0x2210 [ 289.830395][T14684] unregister_netdevice_queue+0x593/0xab0 [ 289.836192][T14684] ppp_release+0x1f8/0x2f0 [ 289.840662][T14684] ? ppp_open+0xc0/0xc0 [ 289.844960][T14684] __fput+0x4d1/0xbc0 [ 289.849016][T14684] ____fput+0x37/0x40 [ 289.853059][T14684] ? fput_many+0x2a0/0x2a0 [ 289.857530][T14684] task_work_run+0x22e/0x2a0 [ 289.862199][T14684] prepare_exit_to_usermode+0x31d/0x420 [ 289.867811][T14684] syscall_return_slowpath+0x90/0x5c0 [ 289.873236][T14684] ? __se_sys_dup2+0x9f/0x2c0 [ 289.877988][T14684] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 289.884025][T14684] do_syscall_64+0xe2/0xf0 [ 289.888504][T14684] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 289.894434][T14684] RIP: 0033:0x459279 [ 289.898383][T14684] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 289.918210][T14684] RSP: 002b:00007f197562ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 19:56:49 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) signalfd(r0, &(0x7f0000000000)={0xffffffffffffffff}, 0x8) [ 289.926698][T14684] RAX: 0000000000000004 RBX: 00007f197562ac90 RCX: 0000000000459279 [ 289.934707][T14684] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 289.942728][T14684] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 289.950734][T14684] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f197562b6d4 [ 289.958744][T14684] R13: 00000000004bf878 R14: 00000000004d0e28 R15: 0000000000000005 19:56:50 executing program 3: arch_prctl$ARCH_SET_GS(0x1001, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x122, @time={0x77359400}, 0x5, {0x9379, 0x7}, 0x401, 0x1, 0x1c9a5b72}) r1 = socket$inet6(0xa, 0x401000000801, 0x0) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) socket$vsock_dgram(0x28, 0x2, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:56:50 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffff8) 19:56:50 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000140)) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) dup2(r1, r1) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x100000001, 0x8, 0x3}, 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) 19:56:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xffffffffffffff00, 0x14000) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000100)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, {0x306, @local}, 0x22, {0x2, 0x4e24, @local}, 'team0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffff80, 0x98000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000400)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vcan0\x00', r3}) 19:56:50 executing program 5 (fault-call:6 fault-nth:16): r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:50 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) r1 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$TCGETS2(r2, 0x802c542a, &(0x7f0000000000)) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 290.466586][T14742] FAULT_INJECTION: forcing a failure. [ 290.466586][T14742] name failslab, interval 1, probability 0, space 0, times 0 [ 290.479778][T14742] CPU: 1 PID: 14742 Comm: syz-executor.5 Not tainted 5.1.0+ #1 [ 290.487387][T14742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.497490][T14742] Call Trace: [ 290.500864][T14742] dump_stack+0x191/0x1f0 [ 290.505275][T14742] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 290.511247][T14742] should_fail+0xa82/0xaa0 [ 290.515755][T14742] __should_failslab+0x25f/0x280 [ 290.520770][T14742] should_failslab+0x29/0x70 [ 290.525426][T14742] __kmalloc+0xae/0x3a0 [ 290.529662][T14742] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 290.535796][T14742] ? kzalloc+0x7c/0xe0 [ 290.540091][T14742] kzalloc+0x7c/0xe0 [ 290.544069][T14742] kobject_get_path+0x1f7/0x450 [ 290.549008][T14742] kobject_uevent_env+0x580/0x2760 [ 290.554335][T14742] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 290.560469][T14742] kobject_uevent+0x6f/0x80 [ 290.565040][T14742] device_del+0x1e45/0x1f60 [ 290.569636][T14742] netdev_unregister_kobject+0x240/0x2b0 [ 290.575358][T14742] rollback_registered_many+0x1b82/0x2210 [ 290.581163][T14742] unregister_netdevice_queue+0x593/0xab0 [ 290.586968][T14742] ppp_release+0x1f8/0x2f0 [ 290.591450][T14742] ? ppp_open+0xc0/0xc0 [ 290.595763][T14742] __fput+0x4d1/0xbc0 [ 290.600014][T14742] ____fput+0x37/0x40 [ 290.604152][T14742] ? fput_many+0x2a0/0x2a0 [ 290.608630][T14742] task_work_run+0x22e/0x2a0 [ 290.613295][T14742] prepare_exit_to_usermode+0x31d/0x420 [ 290.618914][T14742] syscall_return_slowpath+0x90/0x5c0 [ 290.625337][T14742] ? __se_sys_dup2+0x9f/0x2c0 [ 290.633241][T14742] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 290.639297][T14742] do_syscall_64+0xe2/0xf0 [ 290.643786][T14742] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 290.649738][T14742] RIP: 0033:0x459279 [ 290.653801][T14742] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 290.673562][T14742] RSP: 002b:00007f197562ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 290.682063][T14742] RAX: 0000000000000004 RBX: 00007f197562ac90 RCX: 0000000000459279 [ 290.690119][T14742] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 290.698158][T14742] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 290.706196][T14742] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f197562b6d4 [ 290.714318][T14742] R13: 00000000004bf878 R14: 00000000004d0e28 R15: 0000000000000005 19:56:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:50 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) prctl$PR_SET_TSC(0x1a, 0x3) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write(r0, &(0x7f0000000100)="16252f71ad32be6c66653ce50c57a07348af3d74744b3c315796bc65276df72d652f602fac54696f9f7cf3eab15b0684c80cf1af79b1bf2016760b9f8d20dc09d516b91522170fa773482e32e9d346ca9d25ae767eb9ff0af9c5a6b347b1afc05fd1b455b3cbdd175a23999ecf60", 0x6e) r2 = request_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='&:\x00', 0xfffffffffffffffe) keyctl$revoke(0x3, r2) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2180, 0x0) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000040)=0xff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x5fb3, @empty, 0x3}, r1}}, 0x30) 19:56:50 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="33064ddf9764dfc0c8a354fa7881ffa751f1266b27ffe47fbbaef04fd59c9c03c951432bd7652720e54fd8b970c35cddcc22303df0ff040cca0f6ba3efaa006d7152726f37713711a18050f4ff2d", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000040)='./file1\x00', 0x13d, 0xa0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:56:50 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x100, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000018c0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0x415) getresgid(&(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)=0x0) lstat(&(0x7f0000001bc0)='./bus\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001c80), &(0x7f0000001cc0), &(0x7f0000001d00)=0x0) lstat(&(0x7f0000001d40)='./bus\x00', &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() stat(&(0x7f0000001e00)='./bus/file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001ec0)='./bus\x00', &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000001f80)=[r5, r6, r7, r8, r9, r10, r11]) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getgid() fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) timer_create(0x0, &(0x7f0000001a40)={0x0, 0x3f, 0x3, @thr={&(0x7f00000002c0)="abc7f9b15034bc7bb70f32753e7ff47e8ed18bcf4d8db5d30b09133013217b922c9eac2edf384a17f5f48023799d9d619aa821c5af45da3765f1b31f6905c0045a41a8346b8c1d9b4eccb4d95b91c9a1256c198bd9244511527f01895d3193932413bca2fe6b1fa7567c23d376851773c0339cc5e750381762e157f3ebed3da5ea20e35e911ba8fd48fddf4f1c5b6c1539545a94fe7bc2dd503cf8d63affd2a8cc97298e354e03f4c10f9df349c52e5baa3978dcd8cfa197ea7afa6f4e6c5e44815306902d1db9b8c5e380461ce4c05298058d9a63736e27439814995e0494", &(0x7f00000019c0)="6c840f7130fa258ebcaf6bf5fc032fac65a7d337e9374becd8cc031c2a6e998249eb27ef1d972cf8dd6e393b4083be49b210df11eadffd1d095ab11eebb961cf55bf9b49e047c0365cbea5b5974664754c6139105d03e9c5"}}, &(0x7f0000001a80)=0x0) timer_gettime(r18, &(0x7f0000001ac0)) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001840)=@broute={'broute\x00', 0x20, 0x5, 0x1116, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f0000000040), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x1, 0xf6, 'team0\x00', 'gre0\x00', 'syz_tun\x00', 'bond_slave_1\x00', @remote, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0xae, 0x156, 0x186, [@owner={'owner\x00', 0x18, {{r3, r4, r12, r13, 0x3, 0x4}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x5}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x3, 0x5, 0x0, 0x0, "3e478f1ebc34dbd6db82a145e5c7c0d497802f01983be1280c43493a2c3ebe8b0f05d55b9d938d5e645f6038dca1c06d2d01a59661aaf459f40d69c981da818f"}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x5, 0x21, 0x88fb, 'veth1_to_team\x00', 'veth0_to_bond\x00', 'team_slave_0\x00', 'erspan0\x00', @link_local, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @dev={[], 0x12}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0x886, 0x8b6, 0x8e6, [@u32={'u32\x00', 0x7c0, {{[{[{0x80000000000, 0x1}, {0x8, 0x2}, {0x5}, {0x1}, {0x1, 0x3}, {0xfa, 0x3}, {0x10000, 0x3}, {0x100000000, 0x3}, {0x2, 0x3}, {0x7, 0x3}, {0x6, 0x1}], [{0x5, 0x9}, {0x200, 0x1}, {0x5, 0x3}, {0x7ff, 0x7}, {0x1, 0xffffffffffffff81}, {0x8, 0x101}, {0x10001, 0x8001}, {0x8, 0x9}, {0x1000, 0x2}, {0x7, 0x2}, {0x3, 0xfffffffffffffffb}], 0x1, 0x2}, {[{0x3}, {0x74b3, 0x2}, {0xb6, 0x3}, {0x4b3f, 0x3}, {0x101, 0x3}, {0x1, 0x2}, {0x7ff, 0x3}, {}, {0x4}, {0x86, 0x1}, {0x2, 0x1}], [{0x8, 0x800}, {0xfffffffffffffff8, 0x8000}, {0x5e3c, 0x7}, {0x67a4, 0x4}, {0x1f, 0x45b}, {0xc267, 0x10000}, {0x1, 0x2}, {0x1, 0x8}, {0x8, 0xfffffffffffffffb}, {0x8001, 0xfffffffffffffffc}, {0x10100000000, 0x4}], 0x1, 0x2}, {[{0x8, 0x3}, {0x1000, 0x1}, {0x0, 0x3}, {0x56, 0x3}, {0x0, 0x3}, {0x6, 0x3}, {0x200}, {0x7}, {0x2}, {0x0, 0xb6022c0e34b586f0}, {0x1f11, 0x2}], [{0x8, 0x1}, {0x7, 0x6}, {0x6, 0x4}, {0x7fffffff, 0x4}, {0x5, 0x1f}, {0xfffffffffffffffb, 0x40}, {}, {0x0, 0x8}, {0x0, 0x6}, {0x1, 0x1be4}, {0x101, 0x1}], 0x8, 0xa}, {[{0x4}, {}, {0x8}, {0x534b, 0x1}, {0x10000, 0x3}, {0x4, 0x1}, {0x10001, 0x1}, {0x6, 0x2}, {0x0, 0x1}, {}, {0x7, 0x3}], [{0x8, 0x3}, {0x8, 0x8}, {0x7, 0x10001}, {0x2, 0x8741}, {0x400, 0x8}, {0x6, 0x100}, {0x7f, 0x3}, {0x8db3, 0x9}, {0x10000, 0x9}, {0x2}, {0x7, 0xffff}], 0x6, 0x2}, {[{0x4, 0x3}, {0x7ec9, 0x3}, {0xffff, 0x2}, {0x4, 0x2}, {0x50}, {0xa46, 0x1}, {0x968b, 0x1}, {0x80}, {0x400, 0x2}, {0x1, 0x3}, {0x4}], [{0x985}, {0xe61}, {0x22, 0x100000000}, {0x200, 0x96}, {0x0, 0xc46b}, {0x80000000, 0x3ff}, {0x9, 0x8}, {0x8, 0x5}, {0x98, 0x5}, {0x40, 0x6}, {0x2, 0x200}], 0xa}, {[{0x4, 0x1}, {0x8, 0x3}, {0x8}, {0x5, 0x1}, {0x2, 0x2}, {0x5, 0x3}, {0x7, 0x3}, {0xb7d7, 0x3}, {0x5, 0x3}, {0x8001}, {0x6926, 0x3}], [{0x3, 0x9}, {0xffffffff, 0x5}, {0x9, 0xff}, {0x0, 0xd1}, {0x7, 0x4}, {0x1000, 0x8}, {0x1f, 0xffffffffffffff38}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x40}, {0x7, 0x3}], 0xb, 0x4}, {[{0x508}, {0x2, 0x3}, {0x7, 0x3}, {0x20, 0x1}, {0x396, 0x3}, {0x6, 0x2}, {0xff}, {0x2, 0x3}, {0x5}, {0xa258}, {0x8, 0x3}], [{0x4, 0x80000000}, {0x7}, {0xffffffffffffc6de, 0x7}, {0x1, 0x8000}, {0xaad, 0x1}, {0x1ff, 0xfffffffffffffe01}, {0xff, 0x10001}, {0xbb5a, 0x200}, {0x1, 0x10000}, {0xfff, 0x100000001}, {0x7, 0x3f}], 0x5, 0x8}, {[{0x7ff, 0x1}, {0x7, 0x3}, {0x100000001, 0x3}, {0x1bff, 0x2}, {0x0, 0x2}, {0x7, 0x3}, {0x5, 0x3}, {0x2, 0x1}, {0x81, 0x3}, {0x1, 0x2}], [{0x7, 0x1}, {0x9, 0xfffffffffffffffe}, {0x7}, {0x6, 0x1f}, {0x6, 0x1}, {0x40, 0x9c7d}, {}, {0xee, 0x4}, {0x1, 0x7fffffff}, {0x7f, 0x4}, {0x5, 0x5}], 0x3, 0xa}, {[{0xc17}, {0x6, 0x1}, {0x2, 0x3}, {0x85cc}, {0x7fffffff, 0x3}, {0x2, 0x3}, {0xfffffffffffffa11}, {0x100, 0x2}, {0x9, 0x1}, {0x0, 0x3}, {0x0, 0x3}], [{0x6, 0x6}, {0x3, 0x800}, {0x0, 0xffffffff00000000}, {0x7ff, 0x8}, {0x9, 0x5}, {0x8, 0x80000000}, {0x6}, {0x4, 0xea07}, {0x6, 0xc6f}, {0xffff, 0x7}, {0x6, 0xffffffff}], 0x7, 0x1}, {[{0x5}, {0x1ff}, {0x7fff, 0x3}, {0x7fffffff, 0x2}, {0x2}, {}, {0x5}, {0x8, 0x3}, {0x2, 0x3}, {0x80000001}, {0x400, 0x2}], [{0xffffffffffffffff, 0x7f}, {0x10000, 0xae}, {0x1, 0x7}, {0x40, 0x5}, {0x240, 0x9}, {0x3}, {0xff, 0x58}, {0x8, 0x2}, {0x800, 0x10000}, {0x401, 0x5ef5}, {0x3}], 0x4, 0x6}, {[{0x4}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0x7f, 0x3}, {0x7fffffff}, {0x4000000000000000, 0x3}, {0x775}, {0x81}, {0x0, 0x2}, {0x5b986610, 0x2}], [{0x4, 0x74}, {0x7248, 0x3}, {0x5, 0xffffffff}, {0x7260, 0x1ff}, {0x4, 0x10001}, {0x0, 0x4}, {0x38000000000000, 0xa000000000000000}, {0x0, 0x1}, {0x0, 0x3}, {0x7, 0x7}, {0xf7c, 0x7}], 0x3, 0x4}], 0x2, 0x1}}}, @cpu={'cpu\x00', 0x8, {{0x1, 0x1}}}], [@common=@STANDARD={'\x00', 0x8}], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}, {0x3, 0x40, 0x5, 'syzkaller0\x00', 'ip6gre0\x00', 'veth1_to_hsr\x00', 'lapb0\x00', @random="f9ffba09a5b6", [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xde, 0x256, 0x286, [@stp={'stp\x00', 0x48, {{0x6, {0x81, 0x5, 0x100, @remote, [0xff, 0xff, 0xff, 0xff, 0xff], 0x4, 0x5, 0xffffffffffffff7f, 0x54, @random='z!7C-.', [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x4e24, 0x4e23, 0x5, 0x1, 0x2, 0x300e, 0x80, 0x7, 0x0, 0x3f}, 0x20, 0x48}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"f8bb887c6e22fd51a4d9e5c08807045768c95708c314b83daa42238c1bf2"}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x76, 'system_u:object_r:checkpolicy_exec_t:s0\x00'}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe, 0x2, [{0x5, 0x2, 0x1, 'dummy0\x00', 'lo\x00', 'gretap0\x00', 'bond_slave_1\x00', @dev={[], 0x19}, [0xff, 0x0, 0x0, 0xff], @broadcast, [0x0, 0xff, 0xff, 0x5f2b9aed5cf32c97, 0xff], 0xae, 0x22e, 0x25e, [@owner={'owner\x00', 0x18, {{r14, r15, r16, r17, 0x1}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x10001, 'syz0\x00', 0x5}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x4, 'system_u:object_r:usb_device_t:s0\x00'}}}], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffd}}}}, {0xd, 0x4, 0x0, 'veth0\x00', 'veth0_to_hsr\x00', 'vxcan1\x00', 'team0\x00', @random="8043f7f033f7", [0xff, 0xff, 0xff, 0xff, 0xff], @remote, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0xd6, 0xd6, 0x106, [@pkttype={'pkttype\x00', 0x8, {{0x5}}}, @cluster={'cluster\x00', 0x10, {{0xffffffff, 0xec7a, 0x9}}}], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc}]}, 0x118e) r19 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r19, 0x2007fff) sendfile(r0, r19, 0x0, 0x8000fffffffe) 19:56:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000040)=""/22, &(0x7f0000000080)=0x16) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:50 executing program 5 (fault-call:6 fault-nth:17): r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) [ 290.894097][T14757] ucma_write: process 301 (syz-executor.0) changed security contexts after opening file descriptor, this is not allowed. 19:56:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) fchdir(r0) 19:56:51 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0006dec98df07233a46528073ef32fcf532a39cfc3a4b283ee"]) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:56:51 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r3 = getpgid(0x0) kcmp(r2, r3, 0x7, r1, r1) r4 = open(&(0x7f0000000400)='./bus\x00', 0x100000000010000, 0x0) ftruncate(r4, 0x2007fff) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f00000000c0)=0xfff, 0x4) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0xfffffffffffffd2e, 0x3) sendfile(r0, r4, 0x0, 0x8000fffffffe) 19:56:51 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[0x3a]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:51 executing program 3: recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000000180)=""/20, 0x14}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000003440)=""/161, 0xa1}, {&(0x7f0000000380)=""/117, 0x75}], 0x9, &(0x7f00000035c0)=""/4096, 0x1000}, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000045c0)='/proc/self/attr/current\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004600)={0x17, 0x400, 0xcb89, 0x8, 0x100, 0x1, 0x9, [], 0x0, 0xffffffffffffffff, 0x5}, 0x3c) r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000004640)='/proc/self/attr/current\x00', 0x2, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xaa, 0x80100) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000001b000080010000003688000000ffffff01000000000000000700004004000000ff7f00000000f0ff65000000000000000f0000800100000000000000000000007c0f000000000000000000c005000000010000000800000001000000000084720237320f18cd892d134dd82875d5000001000000ff070000"]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000000c0)) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe) [ 291.326891][T14777] FAULT_INJECTION: forcing a failure. [ 291.326891][T14777] name failslab, interval 1, probability 0, space 0, times 0 [ 291.339818][T14777] CPU: 1 PID: 14777 Comm: syz-executor.5 Not tainted 5.1.0+ #1 [ 291.347437][T14777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.357568][T14777] Call Trace: [ 291.360971][T14777] dump_stack+0x191/0x1f0 [ 291.365409][T14777] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 291.371405][T14777] should_fail+0xa82/0xaa0 19:56:51 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) eventfd(0x3) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001480)={{{@in6=@mcast1}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r3, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r3, 0x2, 0x4, 0x200, 0x48b, 0x77}, 0x14) getsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) [ 291.375919][T14777] __should_failslab+0x25f/0x280 [ 291.380948][T14777] should_failslab+0x29/0x70 [ 291.385620][T14777] kmem_cache_alloc_node+0xf4/0xbe0 [ 291.390916][T14777] ? __alloc_skb+0x215/0xa10 [ 291.395624][T14777] __alloc_skb+0x215/0xa10 [ 291.400167][T14777] ? kmsan_get_shadow_origin_ptr+0x61/0x470 [ 291.406157][T14777] alloc_uevent_skb+0x14c/0x470 [ 291.411132][T14777] kobject_uevent_env+0x1609/0x2760 [ 291.416489][T14777] kobject_uevent+0x6f/0x80 [ 291.421135][T14777] device_del+0x1e45/0x1f60 [ 291.425788][T14777] netdev_unregister_kobject+0x240/0x2b0 [ 291.431545][T14777] rollback_registered_many+0x1b82/0x2210 [ 291.437415][T14777] unregister_netdevice_queue+0x593/0xab0 [ 291.443539][T14777] ppp_release+0x1f8/0x2f0 [ 291.448046][T14777] ? ppp_open+0xc0/0xc0 [ 291.452302][T14777] __fput+0x4d1/0xbc0 [ 291.456373][T14777] ____fput+0x37/0x40 [ 291.460423][T14777] ? fput_many+0x2a0/0x2a0 [ 291.464927][T14777] task_work_run+0x22e/0x2a0 [ 291.469636][T14777] prepare_exit_to_usermode+0x31d/0x420 [ 291.475274][T14777] syscall_return_slowpath+0x90/0x5c0 [ 291.480718][T14777] ? __se_sys_dup2+0x9f/0x2c0 [ 291.485493][T14777] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 291.491506][T14777] do_syscall_64+0xe2/0xf0 [ 291.496109][T14777] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 291.502084][T14777] RIP: 0033:0x459279 [ 291.506066][T14777] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.525744][T14777] RSP: 002b:00007f197562ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 291.534232][T14777] RAX: 0000000000000004 RBX: 00007f197562ac90 RCX: 0000000000459279 [ 291.542261][T14777] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 291.550286][T14777] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 291.558322][T14777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f197562b6d4 [ 291.566358][T14777] R13: 00000000004bf878 R14: 00000000004d0e28 R15: 0000000000000005 19:56:51 executing program 5 (fault-call:6 fault-nth:18): r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:51 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:56:51 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:56:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000140)=0x401) fstat(r1, &(0x7f0000000340)) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000100)={0xa, 0x5, 0x7, 0xffffffff}, 0xa) getsockname$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000180)=0x6e) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000400)={0x1f, 0x5, 0xfffffffffffffffc, 0xfff, 0x8fe9}, 0x14) setxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000300)='/usr/sbin/ntpd\x00', 0xf, 0xb3149085e4abc24a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:51 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x8) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') r3 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x401, 0x0) r4 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x4000) r5 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x1, 0x2) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/vsock\x00', 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002d40)='/dev/sequencer\x00', 0x8000, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002d80)='/dev/hwrng\x00', 0x800, 0x0) r9 = syz_open_dev$usbmon(&(0x7f0000002dc0)='/dev/usbmon#\x00', 0x0, 0x298c2bcb6d8701ae) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000002f00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e00)={0xa0, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4004804}, 0x4004080) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r10, 0xc0305302, &(0x7f00000000c0)={0x7e, 0x40, 0x7, 0x100000000, 0x80000000, 0x100000001}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r11}}, 0x48) 19:56:51 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 291.927272][T14825] FAULT_INJECTION: forcing a failure. [ 291.927272][T14825] name failslab, interval 1, probability 0, space 0, times 0 [ 291.940083][T14825] CPU: 0 PID: 14825 Comm: syz-executor.5 Not tainted 5.1.0+ #1 [ 291.947671][T14825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.957776][T14825] Call Trace: [ 291.961161][T14825] dump_stack+0x191/0x1f0 [ 291.965595][T14825] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 291.971571][T14825] should_fail+0xa82/0xaa0 [ 291.976067][T14825] __should_failslab+0x25f/0x280 [ 291.981072][T14825] should_failslab+0x29/0x70 [ 291.985738][T14825] __kmalloc_node_track_caller+0x1c1/0xf30 [ 291.991623][T14825] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 291.997756][T14825] ? kmem_cache_alloc_node+0x1aa/0xbe0 [ 292.003296][T14825] ? alloc_uevent_skb+0x14c/0x470 [ 292.008398][T14825] ? alloc_uevent_skb+0x14c/0x470 [ 292.013494][T14825] __alloc_skb+0x306/0xa10 [ 292.017978][T14825] ? alloc_uevent_skb+0x14c/0x470 [ 292.023078][T14825] alloc_uevent_skb+0x14c/0x470 [ 292.027999][T14825] kobject_uevent_env+0x1609/0x2760 [ 292.033294][T14825] kobject_uevent+0x6f/0x80 [ 292.037875][T14825] device_del+0x1e45/0x1f60 [ 292.042471][T14825] netdev_unregister_kobject+0x240/0x2b0 [ 292.048173][T14825] rollback_registered_many+0x1b82/0x2210 [ 292.053976][T14825] unregister_netdevice_queue+0x593/0xab0 [ 292.059776][T14825] ppp_release+0x1f8/0x2f0 [ 292.064256][T14825] ? ppp_open+0xc0/0xc0 [ 292.068473][T14825] __fput+0x4d1/0xbc0 [ 292.072526][T14825] ____fput+0x37/0x40 [ 292.076583][T14825] ? fput_many+0x2a0/0x2a0 [ 292.081053][T14825] task_work_run+0x22e/0x2a0 [ 292.085716][T14825] prepare_exit_to_usermode+0x31d/0x420 [ 292.091324][T14825] syscall_return_slowpath+0x90/0x5c0 [ 292.096743][T14825] ? __se_sys_dup2+0x9f/0x2c0 [ 292.101486][T14825] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 292.107435][T14825] do_syscall_64+0xe2/0xf0 [ 292.111902][T14825] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 292.117848][T14825] RIP: 0033:0x459279 [ 292.121804][T14825] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 292.141466][T14825] RSP: 002b:00007f197562ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 292.149943][T14825] RAX: 0000000000000004 RBX: 00007f197562ac90 RCX: 0000000000459279 [ 292.157950][T14825] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 292.165959][T14825] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 19:56:52 executing program 1: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) close(r0) 19:56:52 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x400002000000) setsockopt$inet_tcp_buf(r1, 0x6, 0xe0857db8ce7ab307, &(0x7f0000000000)="a81558254d3219d7fba605dac086f056f8af0d44ebcdd6652615cca3b4958bd8679ef2ca0d2d3b25504ec0629799521454d71fa5744074256a3a1d15315a0bbf2d6ad0be8d18d74cac9da5150d8e33482fa9c0bc121129fd552cd141c019b3dbd842ee1ca80b91ffecefdb7f40d568c627a41fadd7523a3c183d4fefe11fcfbd49bd5b632d", 0x85) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) [ 292.173968][T14825] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f197562b6d4 [ 292.181977][T14825] R13: 00000000004bf878 R14: 00000000004d0e28 R15: 0000000000000005 19:56:52 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x58, 0x43fff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000740)='/dev/infiniband/rdma_cm\x00', 0x18) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000004c0)={0x1, r0}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000380)={{0x0, @addr=0x1195}, "290be4124260f92cfcd4d8acbe72c13f447cd816db8ac3ca84e44b8be9edee0b", 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x2, 0x2}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x4, {{0xa, 0x4e21, 0x6, @rand_addr="e11cd105a648bb6e24728511e6c32d7e", 0xffffffffffffc835}}, 0x1, 0x3, [{{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x28}, 0x9}}, {{0xa, 0x4e22, 0x1ff, @loopback, 0x80}}, {{0xa, 0x4e23, 0x56d, @ipv4, 0x5}}]}, 0x210) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000480)={0x5, r3, 0x10002, 0x401}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) mq_notify(r0, &(0x7f0000000040)={0x0, 0x22, 0x5, @thr={&(0x7f0000000100)="e88af6c181bc2d3d1b27507e3c44a629b03913ec7c470dae92d99fc72a07e0d223f1b4e8281aeb89195dc200b0977fc2a2f846a08d734fddabcadf0109438d7843850558acceade7ce77dd6b395957b6854298181ce84559cb4c0a71fdcdd78157cd9b6dc0647223379ee51a828e84fc72a69f1a1281515a8561a10f4e8ec97cb9fd4f3034e128fa6ceda874684edf2308bd4ef75d5a572f6bd56dd6548c3761c1f564377a8adc9a3d611b47aa329b170b971dd9a58d2bb6e81aeabea037a3e768af904373906d5200057f6fcb474b1e4bff6f0c035bcd5724bf1d80a39715", &(0x7f00000002c0)="92d4ca8b10b678f9b9f8582827d0365f6bbc83985be14d848655a2bf5891f996280c2290528eb1267a675097c45c4f53ee0d8c89dc42c38086739cb5f2584ef9fb34f9a38fe912b8bafaa0c2a2a9caf10508ded6a08d1c31145484c76a9631313378f744b5f4a3af40f16fb40a8116f8675eff4660cb38146a381e311f58c23aa14c2c3eced822f74168bd148e7a6542ddf9e0cc70294fe3fa5d"}}) r4 = dup3(r1, r1, 0x80000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) fcntl$dupfd(r0, 0x406, r4) 19:56:52 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond_slave_0\x00', 0x1}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fD=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) tee(r1, r0, 0x7, 0xc) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:56:52 executing program 5 (fault-call:6 fault-nth:19): r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:52 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x775, 0x200000) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f00000002c0)={0x7c0, 0x2b46}) r1 = socket$inet6(0xa, 0x401000000801, 0x0) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r0, 0x0, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000180)={0xc, 0x8}, 0x10) write$capi20_data(r2, &(0x7f00000001c0)={{0x10, 0x4, 0x87, 0x0, 0xfffffffffffffff7, 0xffffffffffff7fff}, 0xc, "7ec2e6e8164311e84225e711"}, 0x1e) 19:56:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in=@empty, 0x4e23, 0x0, 0x4e24, 0xff, 0xa, 0x80, 0x80, 0x0, 0x0, r2}, {0x7e, 0x9, 0x2, 0x1, 0x0, 0xf1, 0x2, 0x6}, {0xc27, 0xda, 0x7, 0x9}, 0x5, 0x6e6bc0, 0x3, 0x0, 0x2, 0x2}, {{@in6=@mcast1, 0x0, 0x33}, 0xa, @in=@multicast2, 0x3505, 0x4, 0x3, 0x7ff, 0x5, 0x3, 0x100000001}}, 0xe8) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) 19:56:52 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x1e00, 0x4004400}) 19:56:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e24, 0x1, @rand_addr="14bb52b18272455f48fee2628b83506d"}, r1}}, 0x78) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) 19:56:52 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1141042, 0x800000) ftruncate(r1, 0x2007fff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000180001000000010000e0ff000100004f00060000ff00000000000c0009000800", @ANYRES32=0x0], 0x28}}, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:56:52 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000480)) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000003c0)={0x80, 0x3f, 0x3, 0x8b, 0x12, 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x4002, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)={'syz0', "9caf058139106d6fced7218bf8331bb400fd1c9b69e7e4cad33ec8f597509315573ac04c6fe1f6d767b0c60274c5d6d7dc183e0dd4e8ed9219defac518b3d5e7f34a933cf52a93a069dca88471c789ec439ec32b6a3c3fbf6ca6769bea47ffeaee0d8351a04e7b4fb344d7954cd6dd66e17e51d89c5eab1d757cbbd5bd73fbfe45ee5f2403441f3150163c"}, 0x8f) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x4d, 0x0, &(0x7f00000007c0)=[@enter_looper, @exit_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}, @clear_death={0x400c630f, 0x2}, @register_looper, @exit_looper, @decrefs={0x40046307, 0x3}], 0x3a, 0x0, &(0x7f0000000200)="d3884146d89402db4249972cb4cfadce0cfe6d0f8516cf9003a7bc09c59ac1b5f5f77b494aa5d7da4867756b8e40af6c172b8945e2f8f28f4f17"}) ftruncate(r3, 0x2007fff) 19:56:52 executing program 5: modify_ldt$read(0x0, &(0x7f0000000300)=""/219, 0xdb) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = getpgid(0x0) fcntl$setown(r0, 0x8, r1) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7, 0x422000) setpgid(r1, r1) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0x80000000, 0x0, 0x8001, 0x7d, 0x6, 0x40}, 0x5}, 0xa) fstat(r0, &(0x7f0000000240)) ioctl$int_out(r0, 0x5460, &(0x7f0000000200)) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000480)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) statx(r4, &(0x7f0000000240)='./file0\x00', 0x2000, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000400)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) r6 = fcntl$dupfd(r5, 0x0, r5) ustat(0x401, &(0x7f0000000140)) ioctl$EVIOCGREP(r6, 0x40107446, &(0x7f0000000000)=""/174) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000001c0)=0x80, 0x4) sysfs$2(0x2, 0x84, &(0x7f0000000500)=""/4096) r7 = fcntl$dupfd(r6, 0x406, r5) dup2(r5, r7) 19:56:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) 19:56:52 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000040)={0x3, 0x0, 0x300d, 0x10001, 0x1000000007f, {0x9, 0x200}, 0x1}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@broadcast}}, &(0x7f0000000540)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000680)=0xe8) r6 = getuid() stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getgid() setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {}, [{0x2, 0x5, r2}, {0x2, 0x3, r3}, {0x2, 0x2, r4}, {0x2, 0x1, r5}, {0x2, 0x2, r6}], {}, [{0x8, 0x2, 0xee01}, {0x8, 0x2, r7}, {0x8, 0x1, r8}], {0x10, 0x5}, {0x20, 0x5}}, 0x64, 0x3) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000080)=0xb) r9 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT(r9, 0xd, &(0x7f0000000800)=""/67) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/171) 19:56:53 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000440)=""/4096, 0x1}) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:56:53 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d7559dacb33f77ce5868fdaf6da912859399003fbbd97202cc2d1c6b3bceee6fb5875778dfdf8475a55dbfb23c86d96b3650ed8cc0c514f4ea1f52b966db1c0611d58e31a522f5410add8f5de96ce143c61b1d41db6", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000000)={0x2, 0x3, 0x3, 0x1f, 0xffffffffffff7fff, 0x10001}) 19:56:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x117}}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/108, 0x6c}], 0x1, &(0x7f0000000340)=""/212, 0xd4}, 0x48e2}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/253, 0xfd}], 0x1, &(0x7f0000000580)=""/3, 0x3}, 0x1000}, {{&(0x7f00000005c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000640)=""/206, 0xce}, {&(0x7f0000000740)=""/244, 0xf4}, {&(0x7f0000000840)=""/135, 0x87}, {&(0x7f0000000900)=""/30, 0x1e}, {&(0x7f0000000940)=""/223, 0xdf}], 0x5}, 0x80000000}, {{&(0x7f0000000ac0)=@ipx, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/245, 0xf5}, {&(0x7f0000001c40)=""/109, 0x6d}, {&(0x7f0000001cc0)=""/58, 0x3a}, {&(0x7f0000001d00)=""/173, 0xad}], 0x5, &(0x7f0000001e40)=""/23, 0x17}, 0xff}], 0x4, 0x20, &(0x7f0000001f80)={0x77359400}) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000001fc0)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20001, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x9, 0x800, 0x3}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYBLOB="07000900040000007bde0000080600003f0001000800"], 0x1a) 19:56:53 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', r2}) 19:56:53 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x1) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000440)) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000c80)="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") ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) 19:56:53 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x1e00, 0x4004400}) 19:56:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:56:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f0000000080)='&twlan0ppp0\x00', 0xc, 0x3) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:53 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x600000) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x800, 0x8a5a, 0x5, 0x1ff]}) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:56:53 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x48000, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x7, 0x4000) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00', 0x4) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r2, r3) 19:56:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0xca, 0x109000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0xffffffff, 0x4}, &(0x7f0000000140)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0xddec3303cc337dc2, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={[], [], @local}}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:53 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x400) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:56:53 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'bpq0\x00'}) r1 = socket$inet6(0xa, 0x401000000801, 0x0) r2 = dup(r1) openat$cgroup_int(r2, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r3, r3, 0x0, 0x8000fffffffe) 19:56:54 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x1e00, 0x4004400}) 19:56:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096}) 19:56:54 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x220640, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @rand_addr=0xff}}, [0x10000, 0x40, 0x1, 0x1, 0x8000, 0x8, 0xfffffffffffffffe, 0x101, 0x0, 0xca, 0x1ff, 0x54, 0x3efe, 0xffffffffffffff18, 0x40]}, &(0x7f0000000040)=0x430) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={r3, 0x2ed0000000, 0x30}, &(0x7f0000000100)=0xc) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:56:54 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000140)={0x7, 0x1, @stop_pts=0x1000}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x4, 0xc30, 0x6, 0xf40, 0x0, [{0xf1b0, 0x2, 0x5, [], 0x6}, {0x5, 0x0, 0x8}, {0x9, 0x100000001, 0x6, [], 0x7ff}, {0x81, 0x1, 0x5, [], 0x100000001}, {0x6, 0x7f, 0x3, [], 0x7fffffff}, {0x5, 0x9, 0x7}, {0x80000000, 0x5, 0xd1d6, [], 0xfe3e}, {0x1, 0x4, 0x5, [], 0x8e0}, {0xffffffffffffff3f, 0x19a6, 0x7fffffff, [], 0xdde1}, {0x81, 0x10001, 0x1ff, [], 0xfffffffffffffffe}, {0x8000, 0x7, 0xffffffffffffa445, [], 0x4}, {0xfffffffffffffff9, 0x2, 0x3ff, [], 0x80}, {0xfd, 0x6, 0x1, [], 0xfff}, {0x6, 0x2, 0x5, [], 0x4}, {0x7, 0x7f, 0xc7c, [], 0x200}, {0x7, 0x9, 0x5, [], 0xf8ae}, {0x6d45, 0x8, 0xfffffffffffffff9, [], 0x3}, {0xffffffffffffffff, 0x36, 0x7, [], 0x81}, {0x200, 0x2, 0x80, [], 0x7fff}, {0x7, 0x20000000, 0x0, [], 0xfffffffffffffbff}, {0x9, 0xe91c, 0x6d, [], 0x6}, {0x4, 0x7f, 0xdf, [], 0x100000000}, {0x10001, 0x6, 0x8000, [], 0xffffffffffffffc0}, {0x5, 0x8, 0x623}]}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:54 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x200000000}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48) 19:56:54 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80002, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000040)={0x4, "6448d2bae55ad18bb0bd919ebc16a732d20a04b2c8f4bdf8b2b4cc1ad0c120f2", 0x2, 0x3b2, 0x5, 0xffffff, 0x2, 0x2}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000140)={0x0, 0x3, 0xbc3f, [], &(0x7f0000000100)=0x1}) 19:56:54 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x20000) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x24002, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000180)=0x3) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x401, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000300)={0x7, 0x2, @start={0x8000, 0x1}}) dup2(r0, r1) 19:56:54 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = msgget$private(0x0, 0x42) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000100)=""/52) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365727169643d684e5b7adccdde7d05342750537496ef9ed22f50a5c476414b03853b37cc98710559995465b31f4a9d31a816a868d4680c89b43cb496fe6cf121805435482132c619df7401", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c10"]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) r4 = getegid() lstat(&(0x7f0000000140)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x2, &(0x7f0000000180)=[r4, r5]) 19:56:54 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000100)={{0xffff}, 'port0\x00', 0x4b9e9d8343c0cd97, 0x80800, 0x2, 0x7, 0x7, 0x20, 0x7, 0x0, 0x7, 0x1}) 19:56:54 executing program 1: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xfffffffffffffe53, 0x0}, 0xffda) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffff9c, 0xc, 0xffffffffffffff9c, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x800) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000640)=ANY=[@ANYBLOB="080000000020000000000000000000000000000000000000000000000300"/40]) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e0000002700050ad25a80648c63940d0224fc00100003400a000000053582c137153e3709000189cd9eadca77e3", 0x2e}], 0x1}, 0x0) 19:56:54 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80000, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f00000000c0)=0x7ff, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) getsockname$tipc(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:56:54 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x20000000, 0x0) fstat(r0, &(0x7f00000001c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x4000, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x4040, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000800)=""/246) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000300)={0x2, 0x7, 0xe, "928b3091a1d4e268f08b555130b6371d3d7f240f8fc1c1547cb6623c1ca2d8a513925bb59b7d41c0180ed2e56c74d6acacab8528bb8559a6f5927c94", 0x2d, "7ca352f233bfe6197581db2612a8a3210bb0ac07285d0edf5c80dca1360bff5e73af6ca10a65ec92bbcce9e21d2e0f47de7755dd21bd95d729673ed4", 0xdc64cdfe01f2b37e}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000480)=""/174) dup2(r0, r1) 19:56:55 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:55 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303030674dc1573ee6c03830303030300030303030303034303030302c357365725f69643d9cba967182c3cd16eda47b5a16ef549631e8bd2c9c37471d7ef2b6cb9dc58e8be7e8f391762f6d13f9378baa30d94baf9200033a7a23d4fab8c67fb26f834c364ce4922e47c8865337c9be9b17b83503a5a99bb221537dc2dc09d012ccb3c125251d51a708cdea57c16b1177a4fe54ea565fb8b81d9523c0cb13eec1413d0384400b27e42a493a152e23f5e6b91ab2c679941e2e2020552e89e470533fe63bd913d10a2dde8d38dd7752922c394c3e9587a6cfb80000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x6) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:56:55 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file1\x00', 0xc042, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1044, 0x0) execve(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000005c0)=""/11, 0x1f2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, 0x0) 19:56:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x8200, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x80000000, @local, 0x5}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x8, @rand_addr="692a5f43a9c16d371f0b44286f83654c", 0xbd10}, @in6={0xa, 0x4e20, 0x4, @mcast2, 0x793}, @in6={0xa, 0x4e24, 0xb9c, @dev={0xfe, 0x80, [], 0xf}, 0x194}, @in6={0xa, 0x4e22, 0x800, @mcast1, 0x70000}, @in6={0xa, 0x4e21, 0x9, @rand_addr="b6d32c6c410be9dd0a32abfebce93e21", 0x9}], 0xb8) fstat(r0, &(0x7f0000000240)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r2) 19:56:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:56:55 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) r1 = dup2(r0, r0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x9) close(r0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fuse\x00', 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x4, {0x4, 0x5, 0x0, 0x3, 0xb2af, 0xa9}}) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v1={0x2, "402c4274570d215b444ef6c3"}, 0xd, 0x0) ftruncate(r3, 0x2007fff) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000001540)=ANY=[@ANYBLOB="00100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038210a845a1a91120000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c5e04a03eb01d6161e01d4c6ee714aafbc1b1a919afc1a8b05799b5096c24b85dca7fc3b8301e8ad63cddfc27343f5c28be714255b330d6c2f5b3a27fb39e5261666955e8a477dec453e3a3021481c80baf298b0ebacdef30fb897bea782651a0f39ee78bc57734fdd7624fc858b8f5f2b6e1326f0aa4917c8d9dd2791e82f14158c0f8bbfc553b6c825671e1a6c118f948e5bb2183ecb7884bc37d7f230374e7e9a5b84acded15f1036caeb5ec20ea25131e7568f58f6572e9449dc61396abd7ae7f981d448c92fb416f3f6b95cceddbed87cf51f0ae75"]) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000000)=0x4, 0x4) write$FUSE_IOCTL(r3, &(0x7f0000000040)={0x20, 0x0, 0x7, {0x7, 0x0, 0x100, 0x401}}, 0x20) sendfile(r0, r3, 0x0, 0x8000fffffffe) ioctl$KDSETMODE(r1, 0x4b3a, 0x207) 19:56:55 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x200040, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000040)=0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:55 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x8040) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xa11}, &(0x7f0000000080)=0x8) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) kcmp(r4, r5, 0x7, r1, r2) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000440)={r3, 0x1000, "ea22365831d7a4d30f24b8bb38f2de85621c3b72d74af91d91d985aabc9adec2e098281a0c4365360b7100d9f325c6f8e46ec47772e4e20b45e6f0db01b6699176743b937c0007be8b046d3dd2100e60981feb0c6c6b2c9f187e684e2c6f59402f9232bf3ef90e0fd3a5f93edb244fef3915696f9c097e60fefdd57a249c88c81edb9f723f653d96a59ec50bf829e07d0e4a907cb40aed4a162ea7dd86f681a46be59a031a753a99d2a07d01a14ce8e0a0eea6161a1d128ddaf609226ed587a20c5277262bc402a3416cfb5cfdfb870bbd75a344095206d27e730b66ad65ba585138dae0a6869543f7821d452da647813d3a27c2d35065e57a47d984d22c2a6e37536a47f2d24952004023cc225fd2d44f328f7920356f38e1a139f081875b485d97bde5a226d886aac959ac260c64f33b25d32bf5dea087f6373cbdd608ee39ba8f9dce270a819da1b668b4a917a40d0cd18b2ae71232f07bb8a0a484ef8e001664bcb19bf8521593a9f598bc406890cbd9c20b0aed8b0f130d201d12d6dc166eeb85edbbd25563f22d449e0178d45186baf257a7420be63257c01888ba05e9c1e8e4f1a4a25b78f56ba8626aab5552b638995c293f938c41db6e685962b7f95745ecfb00707dcb45f88c2ce239e875644d907bab6bcf29876cb636712b1f7df1778f550b83e625009f936194364a2bab911e16baba57a071d5105623a4f8daad768766585bf7349d4941181dd6654c95b8bbb80849112f12257186e327c2ae232e88c23455823a2d9fe6ca42cc4fdfe789a7450ef5fdda50bbaedec1e12fbfa6fdb07024159dca421a6e9bc834b63bc463e3146c88ec166ae19bc5520f198f304329bc028ce541153474d9966274f01c52d794fb9416e4ee1854b2329a024828f4f4ce4e7024978014e71443d9cec0843363f8d19edd9a49e30946556a094ac6c14e6e58af0097ea9f949228971b9e09acf4505cd14273f75ebad5d1c4ec85e4e8f7d755374f66313b194a8ca851f00fc1b489047fd17bc81b72b0c86a02075103bfcfe0e80275c74c78ae5f52a82ec782f34460f9cdfd53a87c195816dab5104594388bf4542a41efd7b1a20c8599c8548ca1836be8d12ba66cafeea479729f0cdee67c0bec529c0e816e826a337f23c67392153a2801ad3805932ffd24a117c26a4ecba439f45c6d01db8509626cfacebf83c18afa18111c9f40c8f2a3ed8f2eabd5e7b5dbed568dadbd2425e369c1bfbc4af171c4c7e24e25f560f2abd188da3779bbd31bc1ae48c57abe968e3d6efc20eaaceff71acebdd1be1c3212895022018a03523c7f51b298b25ef978151c51ec35818a9f7c4f8b441981b7973103c65d8f48afe6d51decf676153a55b75ea7f301c5e046627452592c2068bec0dc94ae705b59e3c4a80db974289cbc88c2435b6711ecce35cc88650169653c6a16ab7497e7bb71c269fc0ae7c5ad6891eea9a2bd781f809505af5730135a05dcdfb54f8d1200362ecab7d24ee9d61addbf2f8889524c3574bf5244f399a1e725f6b31c7e15fc5f28a140999aca7928d03236d824092344aaca6cc424807ee310e3823418dfb8bf97625234bc172e3f38a64ae7b41ff8e5ee13c71491e5e7d407984a82f19f74acf167c91967c2b0d1925b2f20456fb8ae6b7c5c26865ced56343b1f6d44ff4ab939353c599af3d36dd6ec33366e13ef69a660ec77ebc27788a859450deec266ccb5b1c464db7cf6a8b484da5a59245e94d5ee719e281017837eac53754272e977c7775b669d05ef2943f3408d800f38f42ca7b1530fdf31e7824a10b2b3161283b9d4611a8e98840445170bfcd168292f682023d1dcabb1334d79e580f7f5c786b2d11efae4d8654b159d943e540de37cfe493d689bb9ecde6be17efe687155c1fdc03701a44642cfafa7eaf87c77e2f9b3d11d5af1b0a42f3816c66f64195d4d8599a11d67310517ac647023b883c78aea3ece02226190a0de45843163bf0c4b81fc943696fb1866f7cd0bdc972bc87659296c5c4865e751e955c57eebeaa8ac0ad97d37ac90be5a5002faa22ecefa63cb55d47d218d96c0fd0597091d24eeddc0340eaa9c10a6e14a681590ff60862eae04d6b9c4cd27c8308fbb54152d3f1f421db3ec5dbf9f55f17acc3d223269044685491a83cf17787965f5cb90d34bb845de4064b108574704d33646333eb68fd244197a9c4530b6070c749b44814eff4c551699e716006991f46de746d83c2afa052a4b1a4d962528aa4c049aadf0a7250b03b190387674a1af3ce61055408a8d8526386a0983ade65b1c81df38e9a562b0dc041f9f19361ee2b884e7839af35235f1d131c237e2f661b4fd36b9b9f555a2101decf97c6e5f0ecd0d84aff4800ad44188d038e33d5dabea8af1948bf0179ac30626c28db783202dea870e2e5277779da2b82a73cf3ed3371281e78e91c51e8a91954fcdce6647ec4c28150addf088489f9083e4ad7995ea0630740c7895771d3e7c749fba2360af01c3cedbaa9c9e443a484a15d39010e8113d6ceca33982dee30d563dee65ad9b64de803cf11932562b26299100a14ae125089a0a6b4097a8f4f692ede43ae266cebfa31523edbef43faaff997e15e569b0592f5003a1566bc8500a76d9196937cc13d3a21c4fd65e1290c220f8beb161f0fc22d8f95fee9fb4d0ee0dc9c4f157edea096752c68581b8b0d1d266b00363af79af094cc4712fd5aa960e4c7f8aa0090a1a35b83f920aabd6d8d8e84fde0c367fd970f14141d6e5cf130893e547a36702d48e3fc235f4b5b7cbf2c6cd4a8f9203e45bb4ec189505d3bd421f34aef7ef96497279cf9321adf226efac13eb784f0b34618cda85bedf9ba8eadc7b85718232f8ea66a202d466a364c6890fe9de9bec6b7be58419d6f0ca07a566d68bb316df37d0b7f90e000071a4173af3fcb7b989cd5dfc2627ddf33bcd0adc68b6dae0858fc8b96f16516cc21d5a1e74f6367cfbffc35841a0ab51ff49548bf9e1228ce2c3339689eb71ee976882f03f0e34c79f5f8be8fb8f3b101be80a24ccf5f8942eb3b1ab3d78683bf901a415d5398c9c6e3909b4a8dd1f69ceb03a645a1deba988b5d90451efbc4a2340bb36f6cc8f3bb6fac25ac442439be44c4d79978bc41c8bc064fe76677a40ef52c0eeee01c9839fec7af0ef9e3a1455d00110a886ce77159dd7aeeadeeac6c70a9f3981e8ac2da8503fc71be0b00da76e944fbae1f9fcff00b56b611b0e8e177fe6488765106317bee902006508fa28301b4aa93dd365a91abef25d22bb8e1a3dd6e4390d9e35fe6ec895d6839f954f3e737d81e048dfcf93ab4e856ec76d76207a847153bd0a5492075e318d54cde161d77e7e23f8fa4ad6a95ff785dbf49c151ce59ce1f25ff9ce666d1967cf7e44d556e79eda731347dc51a41a52ba6239ace8ab6ead1a012e381ef142e56d5fcee7e6def73b074b40845df6729c1cc968682f5049c4ce45d9d8b97b5abdb70d559a1ad49f2d98a30e591712312354d45d04450b2bf97bc13f63b9c3ed161b4a2ffc1b84df46eeb38d073e40767156eae62736b1140b3648261fea9c201ab4945cd5561fc422f2b748de087e5a268c87e67f56e32dc61778d570f2f6ac3701dda11f13cb902bcd1238a5fdab38f51bbfc61bf6e99438cfd74a05cfab0af2278f4c5d5d0a9230fd347e71e79829f73192bb3fea8669fa305414301f85d3434d631661fcf509e3d6f0033ff8a96005f3f731a7eae7675dbfe466c5bc2e79ce75a5fb427bf3704ff8d296c9865f7b1a6740235c104ae45594fce1a5d977ccf745f62f44885162488ea090f7f28e0893522f7d28055ad52eb7024b03dd9e971dee1c12bdf328326c50b0080c6f4266cbac4f75d78a59e3d4f538039a4113a26d336fbc68281201248eaa74f10ef73c5552154cd311f0be6ce35dec96bbe61d95da259b208c90cf00b4befdff243c8bdc65d7d4170c4deb535ea8b10a38cdc09dc170d433f9ee6ff2e3a2393a6e695d2777f030620d02cd59af6dfeb296ec4a720a7090c72c9e6f63afe57422b4b989f4b8ef99eb96dff33e5ea684bd390278d905d800508ea56762f63055c99b80a0e1d265e3fca9845b1a46edaeec41f90f69001c284df193243bc368ff24b71950355c90e3d226b5010e85f7415f5e5ce31bb0b77f96d9922a2d35638f8cf35ee69464bc17a9c8faa52053e2329855231c5c61349055a6847ecd2801d9f563d52372118a312fa28f0a25cb497f6e7a88aa354af125cbbf293456e73d14543e5b655dcf6d1ca51396c01b25bce293e351dda9b520fc32b2092cc5b823e24a8d2e833a5f438eca71d5549e458e97b77b7ef943e9ba71efecac7b84f76c01c91d6af015721f741a3f24e7ebb32205f3fd5b7f7872a6ec4be7ed48bc0d3c743df20c5ea05df097c67940aaa6abd5045fbed4d43d8914c5f00b5a02e5f5a6848d3b93280561eb585734bb6b7fdbcca047c048b7a1bf7484f6c83ab0282d7f92ac9879ee2a29c6371e3786ccf3120d6eced0c20c77c4a8ed40ddb8e6ff43036828f8875315ad6bf66a1d428c5b824a93ae11c7a134f87a1e149fd2dd7b1056212a41b5280f5492dc7b3c0ee13db18ec79523dca399170dcdac2313df02f8621205cef6a212766d4d3516a47ec852c8e2eecb0b53ab53ffb1a5f776de4ebbb5b4d522ebe430d93248028c8737e4c80326bfe8244c7156710081f3a442a54e4d9b06f9e24aa6935f92fc48cf8070bcfa0643ddbfd724852f879c2d40487695271314ea3ab1d18dbe7afe3ca5592b1afad2302310a238c6f811245749415f64a9d5289c4ab139155d2cd13df7ad608ea7b1bc5bfc31ea75351f5146a3ad4e2114060fb01d6f2f91efd692f995935f952c312999e2ecf89ab98e63bda7e97cd8872f23885ab7c4675e948320d1f745a5c8c1a22b716159eeaebc840f85a5838bd7132e2fb1a87499db77c799faec2468bf436323511e292b7ce0ce0f6049a4a6b0b37eaf7312002afae0f362242164f939c27162b21152c9f50427c741d2b32be154d64cb2a0b8686ba9799f9c963231ed4d09f83e4845646987ef860b555fe6a2f88a940c975efc87a1a311fec90eeecdbc158fa4189597b82b52257c2568add14e459e431ca791a2d49b33ed5b6e3278baf665c8e467f28af02c08696b114ffc44605ea74a027c54c382faabe786edfb6051a7968e9bf4864d197eb87ba5cc9071ce274b12a309e94f5f762e8e61712607046b3096e1d67e3bbd7f4252a19c0a692435f78349e8327f08a4684d9552dde7edf75c9840d92c4e9fde22b6edec2955fd355476c2444605f0407b04804f2c1fd377e75367e81dd23f01492319a3fb6cdcdd127b47ef629b1754dc545cb2157f8341bbebd6a8183bbdac492465686262bbf8b5c7bebec060216a549c54fdbe90669deee69833867f494b7d17a78953188fbf214d9cd840e5c3fe684806eead371b6637a6ae6bc934c4b6f100c27100d38b0b32b78e03e4ee41f6a345783190bf1a51f2ee70a64247cc11123c1723e74ddde249f8bd993b8c7db43f4d341575bb2c84ab18a1747dd6b7263c5036d388015a34f23c21fa868295e8ff29389fd3d34e8efe6f97d391867c9fbfa42488853af23e1d02249f507d7763d96e6c9b6f3a8d34d8304a42f956d652e5c7b13e28068338a996ad9e06fe8c978b8245959ee6b1fa663eecf764984c93eeca2594563bcff1e716e557beb0cbd595a9b845d42405bec90b15007dc659bf3e582de4e13807ddf87f52353d9c5c8ea48e"}, &(0x7f0000000100)=0x1008) r6 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r6, 0x2007fff) sendfile(r0, r6, 0x0, 0x8000fffffffe) 19:56:55 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000000)={0x0, 0x0, {0x6, 0xff, 0x100, 0xffff}}) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:56:55 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:55 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000000)={0x689, "e768a7446e0571f1451b2a8f5d27212a1388099f33d60d004f391b0915281520", 0x2, 0x1}) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:56:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000280)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(r1, r0, 0x80000) 19:56:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000200)) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) set_tid_address(&(0x7f0000000140)) dup2(r0, r1) 19:56:55 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0xffffffffffffffc7) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 295.814749][T15091] QAT: Invalid ioctl 19:56:55 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:56:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x442002, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000040)) 19:56:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) openat$vnet(0xffffffffffffff9c, &(0x7f0000002ac0)='/dev/vhost-net\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 19:56:56 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x6f, 0x1) write$P9_RRENAMEAT(r2, &(0x7f0000000200)={0x7, 0x4b, 0x2}, 0x7) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='&d=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x5, 0xdd, 0x100000000, 'queue1\x00', 0x80000000}) sendfile(r0, r3, 0x0, 0x8000fffffffe) r4 = fcntl$getown(r3, 0x9) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r6 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={r4, r5, r6}, 0xc) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000240)) 19:56:56 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0xf9f83e1472919c36, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr, 0xfffffffffffffffc}, {0xa, 0x4e20, 0xffffffff, @mcast1, 0x4}, r1, 0xffffffffffffffff}}, 0xffffffffffffff39) 19:56:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x10) r3 = dup2(r0, r1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) socket$key(0xf, 0x3, 0x2) 19:56:56 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1) r1 = socket$inet6(0xa, 0x401000000801, 0x0) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x40) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 19:56:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="20e6678c2f9bcc6d6f254cf72e1aab3f4774737b53e332f0791082e905ab656adb69fca61843d8fa57b43ba43bc0f1a62920ccbaa20485bb8a75486968463028054e5ee34c", 0x45) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1f, &(0x7f00000002c0)=0x30, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x1, @mcast1, 0x3}}}, 0xfffffffffffffd54) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000040)={0x0, 0x3, 0x4dc, 0xfffffffffffffffb, 0x1, 0x2, 0x9, 0x5, 0x1000, 0xfffffffffffffffe, 0x7, 0x81}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000100)={0x3, r2}) 19:56:56 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="6b85eaaa8f27544be565a76bae4a9e46ea50626750447bd3a9944f5c2639dbb5d163d078a4bf0437256ca27a4fe0e9e50969e00d3dbf5d5eef6aeb05db4341e428750a1f1d552feaec04fab389dddd5b990664804fcdc21d01b06668c7689e0ce5297bd0108de00e296787dfca75df5ddad7", 0x72}, {&(0x7f0000000100)="bb40d81ba9c3b6db8ab7c966cf4b57869967c9096a64801b4d4381743dcca71351bee9215eeab2e01e2f3b0d30c52e030033240c53444d214f2a75bda28dd3703f3caefaada155e83e10b681087c6e4bd023a955fb0c6da4ddd95dc463cf1e47d8c1878e99c402ac683de20adf097b94d2b4fd3b2d332d8c55ed9f57d85188be12d3124e08d9fa23d75f7d107406018a2718d93422a11f9013b895beff73b5cf247d8f1ad74cbe5105094e12c0e50b209619", 0xb2}, {&(0x7f0000000340)="5e5a7226b7a20e90a229a688a03c3f036522cd851e8541970d6ed66be962eb1cc4fabb47be8654ce84e24749671caa044b5d33fd882b73dd3e0600b69a795ae28eb1e1e121ad01097188bfc82e0cf5b8e0bfaf74c19cf4c3b030b1aeefb20d59c547375f91c37f", 0x67}], 0x3, 0x1a) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:56:56 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x40) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000040)={{0xff, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e22, 0x4, 'rr\x00', 0xc, 0x8, 0x2}, {@empty, 0x4e24, 0x3, 0x80000001, 0x3, 0x3}}, 0x44) 19:56:56 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0xfffffc65, 0xfa00, {0x0, 0x0, 0x106}}, 0xf) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:56 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sysfs$2(0x2, 0x6, &(0x7f0000000000)=""/64) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000080)={0x4003, 0x0, 0x20000, 0x38}) 19:56:56 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x0, @rand_addr="ac5446bf7d387697c8f97fac5fa60a37", 0x5}}, 0x4, 0x2}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000300)={r2, 0x7fffffff}, &(0x7f0000000340)=0x8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r3, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r3) 19:56:56 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:56:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8a03, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000a00)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x000\x00'}, 0x0, 0x0, 0x0, 0x0, 0x237, 0x0, 'syz1\x00', 0x0, 0xfffffe13}) 19:56:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff7d, 0xfa00, {0x0, 0x0, 0x10a}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:57 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c1cebaef439fdb2849770ad0eda2b5a69f0d912be3d6bb24dc067ce1d"]) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:56:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffc42) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:56:57 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007ffd) sendfile(r0, r0, 0x0, 0x8000fffffffc) 19:56:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000140), 0x4) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x44ea9ccbf4e735fe, 0xfa00, {0x0, 0x0, 0x0, 0x200003}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x20c, 0xfa00, {{}, {0xa, 0x0, 0x2, @ipv4={[], [], @rand_addr=0xfffffffffffffffa}, 0x3}, 0xffffffffffffffff, 0x5}}, 0x48) 19:56:57 executing program 1: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xfffffffffffffff8, 0x1) 19:56:57 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x5) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:56:57 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) r1 = getpgrp(0x0) r2 = dup(r0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x8, 0x6, 0x7ff, 0x80, 0x0, 0x50, 0x0, 0x4, 0x80000000, 0x8, 0x9, 0x1, 0x5, 0x0, 0x80000001, 0x40000000, 0xff, 0x6, 0x7fff, 0x0, 0x575, 0xff, 0x7, 0x2, 0xffffffff, 0x4c6, 0x2, 0x1, 0x6, 0xfffffffffffffff7, 0x9, 0x800, 0xda5f, 0xfffffffffffffffd, 0x1f, 0xffffffff, 0x0, 0x4, 0x7, @perf_config_ext={0x5, 0xa155}, 0x4, 0x15f1, 0x5, 0x7, 0x6, 0x100000000, 0x3f}, r1, 0x4, r2, 0x2) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r0, r4, 0x0, 0x8000fffffffe) 19:56:57 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000300)=""/174) dup2(r0, r1) fgetxattr(r1, &(0x7f0000000080)=@random={'osx.', '/dev/ppp\x00'}, &(0x7f00000000c0)=""/37, 0x25) 19:56:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r1, &(0x7f0000000040)="1bf6f6060b5a17342fa21e2c19fe00fd0b8e0ce3c00d30593711285dfcb9bcbffdbcce45d7c99595fb36ae924fc664910d5c0d4c37ed62f0", &(0x7f0000000100)=""/205}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2ea, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:57 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3, 0x2) ioctl$RTC_PIE_OFF(r1, 0x7006) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000080)='syzkaller0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000200)='i\x8b6_\x05t\xe1\xf1\xb9M\x96i0\t\xc6GY\xdb\x11\x9a:\xca\x80\xaa\x1d\xefqgv\xf5\x05\b`\xc2LM\x02\xe1W\xad\x9b\x00\xebj&@jf\xbf=\xc6\xf6\xaah%H\tiy\x95\xee\ft\x95\'\xd2\xede\xa4}\xde\x12\r\x98\xf8\r\x83n\xbfR\x8d\x0eCS\x9a\xe3\xcc\x1aV0\xc5I\xe7l\x1d]!\xe8]') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000580)='ip6_vti1\x00') 19:56:57 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @bt={0xffffffff, 0x9, 0x4, 0x0, 0xda, 0x8, 0x0, 0x2}}) write$ppp(r0, &(0x7f00000000c0)="eda462e0281ba7889d1e70d63c94fa79b1ef4cd59fdfb55be52c3bea2dae560098c8a6d72d0c63b86f7c1eada54baaa410d4a88248d501be620ffbc28bdfdfcc44eeaa9ae0378f1727e7b83cb87ce377395ff38501660710d72684e80a9afa99564fbb921edfec350f189ec921511f20b3365e7ca96f38", 0x77) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:56:57 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='-\x00']) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1, 0x200) 19:56:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)=0x0) ptrace$setregs(0xf, r2, 0x400, &(0x7f00000006c0)="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") setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:tmp_t:s0\x00', 0x1b, 0x1) 19:56:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000000}, 0xc) dup3(r0, r1, 0x0) 19:56:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x2000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1, 0x4d, 0xdf, 0x2, 0x20, r1, 0x85, [], r2, r3, 0x4, 0x5}, 0x3c) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000140), 0x1f, &(0x7f0000ffb000/0x4000)=nil, 0x2) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:58 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x20400) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000240)="1e", 0x1}], 0x1, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:56:58 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) r4 = open(&(0x7f0000000000)='./bus\x00', 0x101200, 0x0) ftruncate(r4, 0x2007fff) sendfile(r0, r4, 0x0, 0x8000fffffffe) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000100)=0x80000000) 19:56:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x81, 0x800) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0xb8, 0x0, 0xb8, 0x0, 0xb8, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, &(0x7f0000000040), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, 0xffffffff, 0x0, 'lo\x00', 'veth1_to_team\x00', {}, {}, 0x73, 0x1, 0x20}, 0x0, 0x98, 0xb8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffffff, 0xffffffff, 'teql0\x00', 'hwsim0\x00', {0xff}, {0xff}, 0x7f, 0x1, 0x8}, 0x0, 0x98, 0xe0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x10000, 0x0, 0x2, 'netbios-ns\x00', 0x9}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 19:56:58 executing program 1: clone(0x84007ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() mknod(&(0x7f0000000140)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) creat(&(0x7f0000000080)='./file0\x00', 0x0) mknod$loop(0x0, 0xa800, 0xffffffffffffffff) ptrace(0x11, r0) 19:56:58 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f0000000040)='./bus\x00', 0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="522612204eddef7abbd5af85dd9b03d3002000e83544a40cb4504db37e9c7cf59e038f3fb89db0c7d629f3eb8a1264fd79268b0ba3a8", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f00000001c0)) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000000)) 19:56:58 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000140)={0x1, 0x19, 0x17, 0xf, 0xa, 0xa464, 0x0, 0xe6, 0x1}) sendfile(r0, r1, 0x0, 0x8000fffffffe) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf25050000000000dbda0b000000000c001473793a3100000000cec6486b50e07ceb5316ff30dfdf9a78d7020640016896d295ce6583a97fb93d2c1f891e07c0710c20e0887c40b1d8e8ebb4c4f456a4e64f69eea244202d9556cf485db90adcc1c27c7a345acc26db5afcffaf16e19940f802969e47bfefdba0b91c8ec14e33a663704f7b47f62687202b8e804d7bf53fc38767a3577534c18ac5c3caf5c2560be8b9210248636bc567b53047a64759639c8c3a395d0a6599bbe05bb55339d1933ba76634aa6a65c3af8364a31ab26e6ca8c7cd3e948fa8"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40c0) 19:56:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0, [], [{0x0, 0x20, 0xff, 0x6, 0x8, 0x7fff}, {0xd87a, 0x6b5, 0x401, 0x8, 0x5455, 0xffff}], [[], []]}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x58, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000780)=[@textreal={0x8, &(0x7f0000000700)="ba400066ed363ef4ba430066b88907000066ef66b9800000c00f326635002000000f3066b9840000c00f320f019e0000db803e002e670fc75c110c66b98403000066b80050000066ba000000000f30baf80c66b8cc99988966efbafc0c66ed", 0x5f}], 0x1, 0x16, &(0x7f00000007c0)=[@cr0={0x0, 0x8}], 0x1) pidfd_send_signal(r2, 0x10, &(0x7f0000000100)={0x29, 0x1ff, 0x86b}, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f00000006c0)={{&(0x7f0000000480)=""/8, 0x8}, &(0x7f00000004c0), 0x4}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:56:58 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0xfffffdef, 0xfa00, {0x1000000000000000, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000140)={0x6, 0x0, [{0x9c0, 0x0, 0xd344}, {0xabb, 0x0, 0x9}, {0xc0010b7f}, {0x8c6, 0x0, 0xebb}, {0x91f, 0x0, 0x40}, {0x20a, 0x0, 0x1}]}) dup2(r0, r1) 19:56:58 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000140)={0x77359400}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x800, 0x40000000) ftruncate(r1, 0x2007fff) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000000080)=""/182, 0x4}) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:56:58 executing program 2: r0 = socket$inet6(0xa, 0x400401000000801, 0x1) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fm=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0000ca82e3bb7897389d751c7e32486a77173955df526a83e16e761f2ad0dbf2596ee2d07c354cbeba1f5c40b32c7247ea5dc4bcc143d3a37409d901d276ed93ac95c77f18d58e26e75b9b58d41ed975bc603ae5a33243c9f76de6b20a9a4fe36fd4c257e901612254a3ead66079fedc97bd0646aa49a750c527e97bf40bd4b695325ed2c3c0d8c4931e776dbab7ce06af016f82be73383a912a82ed61bf017235b4e6e813febfb8017be13944b9d75c58ca3dc6078b3715c23bd7b7468f59a6d4e9a6be10088bbd24b0c0031af48ddb93caae3dfc7c8d2da8c66f419d626153aebb9a000000"]) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x40008000fffffffe) 19:56:58 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cachefiles\x00', 0x20000, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000340)={'icmp\x00'}, &(0x7f0000000380)=0x1e) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dsp\x00', 0x200200, 0x0) getsockopt$inet_dccp_buf(r2, 0x21, 0x0, &(0x7f0000000100)=""/145, &(0x7f00000001c0)=0x91) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) 19:56:58 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) select(0x40, &(0x7f00000000c0)={0x1000, 0x80, 0x0, 0x1, 0x3f, 0x2fd, 0xa76, 0xfffffffffffffffa}, &(0x7f0000000140)={0x3, 0x5, 0x8b, 0x1, 0x3ff, 0x6, 0x1, 0x1f}, &(0x7f0000000180)={0x60a, 0xfffffffffffff862, 0x0, 0x3, 0x9, 0x80000001, 0x9, 0x81}, &(0x7f00000001c0)) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x9, 0x2000) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:58 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) socketpair(0x4, 0x802, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000000c0)={0x46}, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0xffffffffffffff01) ftruncate(r3, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x100a, 0x2) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) renameat(r4, &(0x7f0000000100)='./bus\x00', r3, &(0x7f0000000140)='./bus\x00') 19:56:59 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2000000000100811, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 19:56:59 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x4a0100, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000003c0)=""/208) r1 = socket$netlink(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000005c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000640)={0x8, 0x120, 0xfa00, {0x4, {0x1, 0xfff, "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", 0xdb, 0xd223, 0xfff, 0x1f, 0x6, 0x1000, 0x1}, r2}}, 0x128) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000320000000000000100003b76890f2eca357602dc54dfd0be000c0002"], 0x20}}, 0x0) timer_create(0x4, &(0x7f0000000780)={0x0, 0x41, 0x5}, &(0x7f0000000180)=0x0) fallocate(r1, 0x41, 0x5, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) timer_getoverrun(r3) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0x7fff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000004c0)={r4, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, [0x7, 0x7, 0x7, 0x40, 0x0, 0x4, 0x3, 0x242, 0x3, 0x7fffffff, 0xffff, 0xffffffffffffffff, 0x7ff, 0x3, 0x101]}, &(0x7f00000002c0)=0x100) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x104}}, 0x123) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x80}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000800)={0x100, r6}) fadvise64(r5, 0x0, 0x2, 0x2) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @rand_addr="4cf939847b31986d48dd77fdb81ce09e"}}}, 0x48) fsetxattr$security_selinux(r5, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:etc_mail_t:s0\x00', 0x20, 0x3) 19:56:59 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:56:59 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) symlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000300)='./file1\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x58) close(r0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x101000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x84000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000440)={{0x4, 0x8}, 'port0\x00', 0x4, 0x1000, 0xfffffffffffffffd, 0x35b, 0x0, 0x8, 0x2, 0x0, 0x4, 0x1}) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2e146a1e4db00db54a211c9d88ce4a0afd1943d064d7411787ad7c1bbc7dbdf983f5c367cd3e967fd5a36e7a21e1dca983eb50cba62e2260198c", @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000004000\a\x00\x00\x00\x00\x00\x00\x00d=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000200)=[0x200, 0x7]) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r0, r4, 0x0, 0x8000fffffffe) 19:56:59 executing program 5: syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x0, 0x40000) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:59 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x1c402) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) setpriority(0x3, r1, 0x100000000000a) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x48) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xcba, 0x200000) semget$private(0x0, 0x0, 0x100) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000180)={0xdab1, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}}}, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000140)={0x5, 0x10, 0xfa00, {&(0x7f00000002c0), r4, 0x1}}, 0xfffffffffffffdcd) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 19:56:59 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:56:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0xfffffde6, 0xfa00, {{0xa, 0x0, 0x5}, {0xa, 0x0, 0x0, @mcast1}, r1, 0x1000000000000}}, 0x48) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r4, 0x408, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x5, {0x7}}, 0x18) 19:56:59 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200000, 0x91) syz_usb_disconnect(r2) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:56:59 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) 19:56:59 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) dup2(r0, r0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000440)={0x4, 0x1000, "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"}) 19:56:59 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x9, 0x8) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r1 = geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getuid() r8 = geteuid() stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000740)={{}, {0x1, 0x3}, [{0x2, 0x0, r1}, {0x2, 0x1, r2}, {0x2, 0x2, r3}, {0x2, 0x4, r4}, {0x2, 0x2, r5}, {0x2, 0x2, r6}, {0x2, 0x1, r7}, {0x2, 0x6, r8}, {0x2, 0x1, r9}], {0x4, 0x7}, [{0x8, 0x5, r10}, {0x8, 0x2, r11}], {0x10, 0x2}, {0x20, 0x3}}, 0x7c, 0x3) 19:57:00 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @empty}, {0x0, @dev={[], 0xf}}, 0x0, {0x2, 0x4e24, @loopback}, 'vcan0\x00'}) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:00 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000180)=""/117, 0x75}, {&(0x7f00000002c0)=""/166, 0xa6}, {&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000380)=""/53, 0x35}, {&(0x7f0000000440)=""/208, 0xd0}], 0x7}, 0x0) 19:57:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x9, 0x2}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20000, 0x0) ioctl$UI_SET_SNDBIT(r4, 0x4004556a, 0x2) 19:57:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x3ff, 0x1) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000200)) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) r3 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000180)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) [ 300.193331][T15446] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 19:57:00 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r1, 0x0, 0x800100000000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000000)={0x3, 0x50000000, 0x80000001, 'queue1\x00', 0x8}) 19:57:00 executing program 0: r0 = getpgrp(0x0) getpriority(0x3, r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x4e21, 0x0, @mcast1}, r3, 0x6}}, 0x48) socket(0x1, 0x80003, 0x23dd) 19:57:00 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x20000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in6=@ipv4={[], [], @multicast2}}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x81, 0x101000) read$eventfd(r2, &(0x7f0000000040), 0x8) 19:57:00 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='=\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=')\x00']) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000000)) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x8001}, 0x4) 19:57:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 19:57:00 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000140)) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000000)) r3 = getuid() r4 = getegid() fchownat(r1, &(0x7f0000000100)='./bus\x00', r3, r4, 0x1900) 19:57:00 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2000000000100811, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 19:57:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x2080) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000002c0)={r2, 0x5, 0xfc, "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"}, 0x104) 19:57:00 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = request_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='group_id', 0xfffffffffffffffc) r3 = add_key(&(0x7f0000000380)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000440)="9779d0ca26576c3ddd5f3f1f36500b93c3a18cb9ee71ea7fa5c6631bbb6e817cd491ea7700f0314d116b612a289a032d056caa2bf05afcd8989ec77ff046444afe59177e9e56dade96a7e368c55d45873f3e914204c9ee5734697a914e2a082da23148087bbeac057a0eeb41f05e0a1cd55dd88f35941a49aff3a4d5c62f5538fac5d91a2fb90198a193b93bf2ca81ef3aae7c4069bccb2ab2273e478590ac78f8af75213488d76924513d7a3047c38816efdf81f4e66b5dd0c06188a83f7a8e2924a96ef8df8ac6d7d72c4071f47f59961af053f42b89126201550d8412b215577fdf870a056d92b6e0a61225", 0x25a, 0xfffffffffffffffe) keyctl$reject(0x13, r2, 0x7, 0x100, r3) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000200)) ftruncate(r4, 0x2007fff) sendfile(r0, r4, 0x0, 0x8000fffffffe) ioctl$KVM_ARM_SET_DEVICE_ADDR(r4, 0x4010aeab, &(0x7f0000000100)={0x5, 0x4000}) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000180)=0x27c7a8ff) 19:57:00 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:57:00 executing program 3: r0 = socket$inet6(0xa, 0xffffffffffffffff, 0x7) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ptmx\x00', 0x400802, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000001780)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) recvmsg(r0, &(0x7f0000001640)={&(0x7f0000000380)=@ethernet={0x0, @local}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001440)=""/164, 0xa4}, {&(0x7f0000001500)=""/217, 0xd9}], 0x2}, 0x20) getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000440)=""/4096, &(0x7f0000000000)=0x1000) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/252}) ftruncate(r3, 0x2007fff) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) lstat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r4, r5) sendfile(r3, r3, 0x0, 0x8100fffffffe) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000001680)=ANY=[@ANYBLOB="02002d00bf7ccd472bf91543b2485d07ec1286be4713675a4e405fd4fb63c07d3059cedf36fb6849c81807000000000000"]) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001700)={r3, &(0x7f00000016c0)="615df3b1f81e14dccca76a7883fd98b8ec1ced943d58b9825cb57e8d9cb096"}, 0x10) 19:57:00 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000001c0)="270000001400070703200000000f0a0011020100ef00010000000000078a151f75080039000500", 0x27) fstat(r0, &(0x7f0000000240)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x1000000000000000, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) r3 = dup(r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r2) 19:57:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff23, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x2) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000040)=0xff) 19:57:01 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:01 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000840)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffd0a, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) prctl$PR_CAPBSET_READ(0x17, 0x4) 19:57:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000140)=""/70) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:01 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80040020}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020029bd7000fddb4c5007000000018f52df2505000000440002000800010004000000080001003f0000000800010003000000080002001e0000000800010080000000080002000400000004000400040004"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pause() 19:57:01 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="001cdd40cb86f200", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dca2cda4ff481f3ca4c236aa2f9f4ba0155befab43ac102488563f2e236782e7da45c69a5acf73b99f9f0dd89236db655c6119a621ffd6a02b25951eeb6b246b22a7e2c9645d518ba529d1c7d07993710e86c9e1fe37099e30cc870cf2e39004b745646a1d9f31a77e89af68f4973f8ee0a4584bc24ab976e569b8ebef62beed72f2ca2d7e880eb4fe18a2a01a70c9666ad5eca953a154b97eadb08144b788e22f5f0a7be14b4b0540f7d2eeae231e470", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f0000000200)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x1) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000040)) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') sendfile(r0, r3, 0x0, 0x8000fffffffe) 19:57:01 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000380)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x3) getpeername(r2, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f00000000c0)=0x80) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:01 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1ff, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000000080)={0xa, 0x3, 0x8, 0x40}, 0xa) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) 19:57:01 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) r2 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="c72cad2ccd4ee37170e1cc2ffdcae82ee61869e3acdd8a97715f07182a3b9a5aa5e85512262a76604e37507df62c38f7996a62141e965620a13efeccf96fbc5dbac8655e1028314e2356410353174bc229ebd91fcca739f099bd17f18d143b2a115ab49a8896074800cc1767976481591d31afbd72", 0x75, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000100)='rxrpc\x00', &(0x7f0000000140)=@secondary='builtin_and_secondary_trusted\x00') 19:57:01 executing program 2: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x2, 0x3, 0x4, 0x7, 0x7a}, 0x20) r1 = socket$inet6(0xa, 0x401000000801, 0x0) close(r1) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) 19:57:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$binfmt_elf64(r0, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0xdd, 0x9, 0x4, 0x8, 0x1ff, 0x3, 0x3f, 0x6, 0x2da, 0x40, 0x1a6, 0x8000, 0x9, 0x38, 0x2, 0x9, 0x5, 0x6}, [{0x6474e551, 0xd5, 0x7df9, 0x6, 0x89, 0x8, 0x400, 0xc08}, {0x6474e553, 0x3000000000000000, 0xfc6, 0x2, 0x1, 0x9, 0x5, 0x6}], "220c409b4686a67d954c709435668099392740135f712e599f59f4f24b34d6b55d3da3365808e5c3eca6f3f36bcfe5e076450ea69e3c1286a1134e931828dc85783caba3963cded3eab19921a9f6342e1a360977f6451f0f33a8afd04c55dea2a1224293338f71", [[], [], [], [], [], []]}, 0x717) 19:57:02 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:57:02 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) 19:57:02 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:02 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000fffffffe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080)="8ebfa4f9f7b48ece2805bf817d8825fba847c2a863a23d5626614bf25ee1bb74738383a37945ac", &(0x7f00000000c0)="d3b5380c2526026a5b079496691dacd4c1a6511dca707e23f68841cf326c39af4a15890eabf399ace870a5532fedf1f4292b992c5547031a29f8d45a7c145884f090b55bc662a82c0840da5359c83b33fb85358d0069689778bc4531c2a68cba2b", 0x4}, 0x20) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f00000014c0)) 19:57:02 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0xffffffd5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:57:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x200000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) fstat(r0, &(0x7f0000000240)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x3, 0x0, [], [{0xd16, 0x5, 0x5988ad58, 0x8000, 0x796b, 0x20080000}, {0x3ba9, 0x72f4, 0x9071, 0x3d, 0x20, 0x480000000000}], [[], [], []]}) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000140)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000180)={@local, @local, @initdev}, &(0x7f00000001c0)=0xc) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r2) 19:57:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x113, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000400)={0xb, 0x10, 0xfa00, {&(0x7f00000002c0), r2}}, 0x18) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0), 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000440)={'ifb0\x00', {0x2, 0x4e20, @empty}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1105, &(0x7f0000000000)={0xffffffffffffffff}, 0x113, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r4, 0x22, 0x8, 0x0, 0x20, 0x8}, 0x14) 19:57:02 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="71868a3475705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:02 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x400800) 19:57:02 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106, 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/236) 19:57:02 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ioprio_get$pid(0x1, r1) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:57:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x800, 0x100) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000540)=""/174) dup2(r0, r1) 19:57:03 executing program 2: r0 = open$dir(&(0x7f0000000000)='./bus\x00', 0x40024001, 0x140) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = socket$inet6(0xa, 0x401000000801, 0x0) close(r1) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x80065) sendfile(r1, r3, 0x0, 0x8000fffffffe) 19:57:03 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x7, 0xfa00, {&(0x7f0000000500)}}, 0xfed6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x12) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x4000) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100)) 19:57:03 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x7, 0x200) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r1, 0x74b482a61c44da35) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'veth1_to_bond\x00'}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000002c0)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:57:03 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x1000) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x80000001, 0x280202) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000140), 0x4) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:03 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="4867726f75705f69643d715af8b495637e37406c67f1554895030bffd2883f2c653f327f711d068615e42627450eff122a39494940348c49c70ac75ca77ef8bd8ffd6ea9f671f85e73d8dcbdea9b30cf3799cecfe31c66abc44b48a72c52ef43259f0eab43013815c842f99015ecb901a30aaec625c05f8585100e8b747e1c780a312dbf903240df7a6c10079253f8558775a421da82937fb85bcdb50a96623228468790c0059f580b97a9e21aeb024a67bc9c3a4ce3f382bb3383efaad535f622d4584f69fbe103a2c5f7af3ade68", @ANYRESDEC=0x0, @ANYBLOB="59d5"]) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "bf4e8dcd4ad06667", "84174463fc3d6ebf1f32211409583ae7", 'f?$I', "65c6a4569c635c91"}, 0xfffffffffffffea2) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "a17164ce98c2ccb7", "77911a09ecee35133e68f2b79268ad431d731d3131f3f4f6ee0ad031f79f5464", "5e10f2d4", "7aec42dc61854066"}, 0x38) ftruncate(r2, 0x2007fff) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @remote}}, 0xc9, 0x7, 0x1ff, 0x401, 0x1c7}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000002c0)={r3, 0x1000, 0x79, "f721649567dd016bc1e1240ddd22a22ec5a62cf63c757f2def973e466f6d47783eac5e78fbb7d658139286c12311205c28626be3a252aa968fbbc3edf86fd0358e9d4052e9494872cf009c023542c05fa8d28f6faf0edf9bc12ff401a909e99ebbb81e93efbc58946cde29df50384ee38301a38f11ad96792b"}, 0x81) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffffff, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000040)=0x4) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="357926a9005937a937b5b0ee8ac92a24b79cb7a81ad75016afa4c1f8407c4b77eb3dfc486cb4c3201fbc41bedeeb94ff00d1174e8dd159284631127cabc6254e6ed691c59adb0ed616c19166c7bbade625e35544e32e6b112897328ee8a9d51a1042a928b97a75245b9d31b713", 0x6d, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000001c0)={r2, 0x62, 0x41}, &(0x7f00000002c0)={'enc=', 'oaep', ' hash=', {'wp384-generic\x00'}}, &(0x7f0000000340)="4eff3025d60c01a417e824416fc3cc74ab13b5221ce33c73bd8f38392aacb9a37104280fa80dd969f51edc2230bf7dca9dba1afa9f35389834f69a2ae199154fa54099433390237a4668b5d2ce85501e8fdddff77e57501d6f62269f0a2530c87eae", &(0x7f00000003c0)=""/65) 19:57:03 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8000, 0x34) write$smack_current(r1, &(0x7f0000000000)='/dev/fuse\x00', 0xa) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)=0x6) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) r2 = fcntl$getown(r0, 0x9) sched_getattr(r2, &(0x7f00000001c0), 0x30, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) r3 = dup3(r0, r0, 0x80000) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000140)={'security\x00'}, &(0x7f00000000c0)=0x54) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:03 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x7ff, 0x5, 0x0, 0x5, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x2, 0x20}, &(0x7f00000000c0)=0xc) finit_module(r0, &(0x7f0000000100)='\x00', 0x1) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x8) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:03 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/216}) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) 19:57:03 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20800, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @empty, @initdev}, &(0x7f0000000140)=0xc) sendto$packet(r1, &(0x7f0000000240)="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", 0x1000, 0x20000000, &(0x7f0000000180)={0x11, 0xfd, r2, 0x1, 0xfffffffffffff801, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x21f, 0xfa00, {{}, {0xa, 0x0, 0x0, @local}}}, 0x48) 19:57:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffff9c}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000000c0)={0x1f0, &(0x7f0000000300)=[{}]}) ioctl$EVIOCGREP(r0, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:04 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000000, 0x200000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000003c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x10001, 0x1b000}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x13}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)={r2, 0x0, 0x59, "b56057cd6b8d5cc9e496fb4e923b9bdf3b501280311fd89e4883ad8ce31b446958dd88a575c9bbc792207934a8c59b5e44f5518fbd22b1a5ddae3ad089cf2403d4eb26a192e422cba8d52f0e96311f11a483a4de2fb8bfbb1f"}, 0x61) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='sockfs\x00', 0x2000, &(0x7f0000000380)='/dev/bus/usb/00#/00#\x00') 19:57:04 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e21, 0x3f, @empty, 0xdf}, {0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x100, [0x9, 0x9, 0xfffffffffffffac2, 0x7, 0x5, 0x5, 0x6, 0x7]}, 0x5c) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = syz_open_dev$usb(&(0x7f0000001780)='/dev/bus/usb/00#/00#\x00', 0x2, 0x600) prctl$PR_GET_SECCOMP(0x15) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001800)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x44, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x24000840) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000000)={0x3f, 0x6, 0x7, 0x4, 0x0, 0xfb8138a}) 19:57:04 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) 19:57:04 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) socket$inet(0x2, 0x80000, 0x100000001) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0x4632134c, 0x81, 0x40}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x620000, 0x23) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @local, 0x8}}, 0x100000001, 0x5}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x7}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000002c0)=@hopopts={0x16, 0x2d, [], [@hao={0xc9, 0x10, @rand_addr="26375527f534fc708349dbd0fc62d3e3"}, @ra, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x7, [0x7, 0x1, 0xfffffffffffffbff, 0xffff, 0x8]}}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x28, {0x8, 0x8, 0x1ff, 0x4ad, [0x7, 0x1c0000000, 0xfff, 0x10000]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x8, 0x9a, "b0b1f0e0bc66e530e7c144b6332da4c22ddf74259fad6d627ec361487eb3af0a79f402eb331f3aae99b7e6e36c96f024c2af003a1d05b40cce9cc73b7d945f925d3a71cfc61494c1a1195f9a543961dd38d2a961b93676b771eaed9bc34adb60e88798a35a354e1ac924deb3cb8ecab786287e825207883a88792fa9fa86696eca7905a83aefb93f2eb7fc8701c6356d0447af903838d37beeab"}, @calipso={0x7, 0x48, {0x6, 0x10, 0xcd, 0x3f, [0x4, 0x3, 0x10001, 0x318e, 0x7, 0x9, 0x80, 0x400]}}, @pad1]}, 0x170) 19:57:04 executing program 3: pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000002c0)="8a13abe97ab32f3b34d2876015284dace069169046da2cf3a7c8307dbd6cfb2c362feb49d2", {0x9, 0x7fff, 0x30323953, 0xf, 0x99a, 0x5, 0x7, 0x5}}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x2b8}}, 0x3ff, 0x0, 0x4, 0x8, 0x9e}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, &(0x7f0000000180)=0x4) r4 = socket$inet6(0xa, 0x401000000801, 0x0) close(r4) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100e6fffe08fffffffdfffffbffffffaaaaaaaaaaaaaaaaaaaa8bbe1e84f9aeaa0e"]) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) io_setup(0x100000001, &(0x7f0000000480)=0x0) io_destroy(r6) r7 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r8 = getpid() syz_open_procfs(r8, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') ftruncate(r7, 0x2007fff) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000440)={0x0, 0x40, &(0x7f0000000340)="d44d848e08ab008966838e78d2db092a08bf4ee153c463d0a22c05ca6823ae1c359018027298197bdcde647002cd89a1798213a6770ee65f6ce01ad8f893094588dae531d5aa928d35e5c015c8fa1e717a848b236c81e084ff81e72376d96b89aa021613a0e9051956196f63ef7c68db7f07711e500fa93e2ae7e52423d5ef58b36d0fb9", {0x80, 0x5, 0x357e775b, 0xf, 0x9, 0x6, 0x8, 0xfffffffffffffffc}}) sendfile(r5, r7, 0x0, 0x7) 19:57:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000100)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r0) 19:57:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000001c0)) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000004c0)=@req={0x534, 0x7, 0xfff, 0x1160}, 0x10) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0xfff, 0xc0}, {0x3, 0x2}]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x4e22, 0x7, @empty, 0xbe}, {0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x19}, 0x2}, 0xfffffffffffff996, [0x7, 0x7, 0x6d, 0x10000, 0x7b, 0x81, 0x7fffffff, 0x7]}, 0x5c) fstat(r3, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="06eac8b1de7a8cf74182842b18aea4e9766e5b8c100799f9b987d24a85c7d2be2dba15ffff00003401df8c7014235b191af33040640b5724682337809bb0588f048c3efb2a3c91c89a43b7d6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000140)={r4, 0x2, 0xa, [0x1000, 0x40, 0x3be09b79, 0x5, 0x9, 0x9, 0x6d, 0x40, 0x81, 0x8000]}, &(0x7f0000000180)=0x1c) 19:57:04 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vsock\x00', 0xc0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10003000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000780)={0x2e8, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x92}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xd8, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9e, @mcast1, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @ipv4={[], [], @remote}, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xea}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3adf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff80000001}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @empty, 0x3a0b}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x48000000000000}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8001, @mcast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x28}, 0x1f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = socket$inet6(0xa, 0x401000000801, 0x0) close(r2) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) write$UHID_INPUT(r0, &(0x7f0000000b00)={0x8, "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", 0x1000}, 0x1006) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r2, r4, 0x0, 0x8000fffffffe) 19:57:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x80000) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x440001, 0x0) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x10001, 0x101000) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xfffffffffffffc00, 0x880) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) getpgid(r2) 19:57:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0xfffffffffffffec6, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:57:04 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x10001, 0x80002) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x7025, 0x0) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:04 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:04 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303034303030302c757365725f69643d53000000c06bf7350796ab08b44ed5057496873941131eb3de0c63e3a3b00e8ad446ed0fb33f9be59b70379d1e14d3269ef88dee72ce83136c1328d9aab10306d82d463b41711d38454b0f13086a71dcee3e594b274d37e77e0791ad4a624a83465e010eab3a1d16c07df78494989d2ec3d80ec7bed1de317fa86d695abd4c550643bdf1c71fbfd9f27c96bb3b79d2b26494248b341ab46a1fe58e93dc7a5356069308049b8a9faee49f", @ANYRESDEC=0x0, @ANYBLOB='Lgroup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000040)='./bus\x00', 0x400000, 0x44) ftruncate(r2, 0x2007fff) readahead(r1, 0x11e, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:04 executing program 3: r0 = socket$inet6(0xa, 0x4, 0x10000) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000080)=0x20, 0x4) ftruncate(r2, 0x100000000) sendfile(r0, r2, 0x0, 0x8000fffffffe) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8) getgroups(0x9, &(0x7f00000002c0)=[0xee00, 0xee01, 0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0xee01, 0xee00, 0x0]) mount$fuse(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='fuse\x00', 0x8, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1600}}], [{@obj_role={'obj_role', 0x3d, '/dev/fuse\x00'}}, {@pcr={'pcr', 0x3d, 0x26}}, {@smackfshat={'smackfshat', 0x3d, '/dev/fuse\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/fuse\x00'}}]}}) 19:57:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1ff, 0x20400) ioctl$VT_ACTIVATE(r1, 0x5606, 0x2) ioctl$TIOCSBRK(r1, 0x5427) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x6df498897df9e482, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) epoll_create(0xffffffffffffff7f) 19:57:05 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:57:05 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xc9f2, 0x280000) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000040)={0x0, 0x6}) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) 19:57:05 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10006, 0x2, 0x20000002001, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x11, 0xfa00, {0xfffffffffffffffd, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:57:05 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xd}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x28000000, 0x8, "2cb303c121a4c3f411b099f3c8e85b9f8345faa58a6ab2e2f62ebd63bfff36728176e684ec760a34935e6d456cfe575613ae2db6c58071c1f19c8844457fc6b33ea354ef2534260ee3b37f2d341eacddee093ba4efa251eed2275416190a86fbfe83c005d49aeff5831fee38b83036672e39abfed23c0659960fadd1b99f107e6dcd79d9f0d95c4c6748f811ffadeef4c71f6d6be5e1553fd9350a23d65f885629578e419ff78115eb0d30fc7cf43cd66971127f73164ebac75dcdacc8d58474ff9375375d4ec7c4245eb56121e26f3bebc076a74fcdff908d5def74dd3cbabc170d75982d2dea2216f25053e5c23f0b291fbaa04be8a03bc9581ba8c604755e", 0x82, 0x7, 0x6, 0x3f, 0x5, 0x9, 0x28000000000, 0x1}, r1}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 19:57:05 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1141042, 0x40) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:05 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:05 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="a81775dd9e30ccc8227945f08cbada2a62baeaba40ed32387da7fc756e3168ee33d4662778552d8d82b94a0ea6", 0x2d}, {&(0x7f0000000440)="e7a7cc75c446c501af2e896aeefa4a979d5563eca3b2a807c0cc08fcfff7f57eadac3d400124b6828bf2297921c1bf312ae6116fa8587ffa19fabfb9e0ca7db368193c11b435b87e9094db4398b8902dcf3335bd7321967b5ba262383aa83fc274689e33be5346e882c35fc6e3bc92eaa93a4209a348a79ec3bef05ab725ad17599e5f84e12a652e3a038eeabb8d637edd106c6820fea917d200c5fd41a8dce6b79d57b5ed791b91086d6bb7dbd5a8649c0fc62258eee1759e34b54b9300242e9c3e7c1b478f3c2f742f32973c71c949f9ad720791f6bcdb420f70e9a7ce9d", 0xdf}, {&(0x7f0000000540)="cf99545421e6550966092f742fa6a485cbb2af32ea8a81d07984b8514457640dc4a38065159884b8c1e1b9ae031eb4ec1c63fdfe87d920630c95ced19efba52729aad9b266e7a2a56879349c160a51d34a36ceef9685059e5f3da1fa6b713530be3eb5e49af01751400bc8f3d3e72445077b6aff5c06b57812e2d54603f377527a93bf81cdd1987162df2fbf3dd860a32b7641851118c6b44307334c165037ff4085c7940fc75e9db16cf0726127ea0b02f4a96c5e7fe3a42273794e6addd233160071259933b781e465610f62a5d4d62dcab51d175ff02a1a151038552373d942eb84eb8f53f515c53d48a4823ae2d99c5e0cb2439293af35f1cf70533f15103ed6106bca769339eab01d00292e530a53dbf39ebe00f7537fd275438bda43daa7c2fade1e0ef37da48f1e6f6d35c30f04b8b14d1c7ea8a5166d8cd54c5dcca71f5879685e2fdfc7bc5bc168fe46121b05c7daa67b8861e796f4330ec779c43c8e8b230028142c0213cd6f09e99f469b573794e3711caa625fe65a99d2ba8ff1bbccc130010c343fe200dd1fdda048db3e1d4667888d9da06e62d7253dea849de42d9bf8089d0af02d64c8f37e4136486ee9de468e28c11d5691366e26c940261cb72962ebef14bee8ba2b0a7b391107f1892107a0f4d619b91f0ea1d2d70e730aec1efc059a234ff1fdd1a322ff5db5e3e5332c8a5312e56f7c63f5bbdcd8425e7d8972e07e952199f17e32ef304f82795fd4b9829d7759362b58fae7e0cbabbf41550f30c76e620b5aa81ea828ea09fcffb1dc54bc42a8c83790439d09733f2b4b48ed7c90aedb3d52df561f460a3fafb04e3643a13f50b064295fc6d662e2b5591cfb8dd192c7f0c56862b46cfe90ee3dbe0e8aa9e4a586cc1fb3614eac0a3fd89caa7cf6d46b4319955db886a7ac55b8ca4809217041d5b1d27b1a83c8718518cfad4f2a330619a2ffed2f8fbecfd4b21c327d0d3b6a2ece5f3465b371f58724cd7837a67a01291f840a564b0e48a187b78669a16726a1be002ffdf38b8c9bb10aefd9386639f9e9de4b79327b3ae94b723014cb4e66562549e8f35afe9e3bab7a43f3e8f0c35160eec41da5e7db3608eae8f2c323b895133fe910c1646582ea846ded3a1e5cbf983bbba0bbb7f976755e6d6f20f188771c93fd421b012df581eb40304ad207e610db137d7fe3109e38fd8b801040e4cc0cc3329534574816c01c19add7da2900ce65538d1ae0b6bea9f8dbfc8424119a6609f33df747a553e91cdc1c7e268935a43b8ce9245eb0c3f025b829249cebd9d0eee1ba852ec604cf202978e9e92d9c9619d1c12d9fcd395fbf4b36b112c9fa4cb1c666f4cc4d5bf7b24546aa0f4f379dd849d3ab4ec92c1b073f95e208dae783b957c4e53cc91462b7b8939ee04a277ededecf45cecaa9e119937c77d9d49bd00f1c36fed05f6785437acd1fbb7bcb1f19c7292aa26d871af2096cb506475488ce158d5ecb04925f6ad5d706820b73c11dbb2321c856efa4f22462c353d87ccd390d93ae2fc1e594726307926fe38649bfb6fda0d1e51328ad7593422f4284490697ef56c1428d27aade091631d9d54b3eb262e5b7d0a7eb799eb72530105559c94c3358c5a0f814b928a26ae62f6c4284b11b270144a504c571995f27efc0c6e7d8965d6389fc0bdea249d700d93eb8260d27c4c4dd77530664cab7399a92c6f6dfa824105427565b4c1cc879038f63ae65326585ba8a19053def2b50951b5651399780b58ea2c9c68335694d4cf37de071dd6b919281dfabc1da03dfb5fbf9faf96297b654e3798e68bdaf7df3779abd3facf4cea41184b8c1880989ea4a2a537e7b9b202991549329afe7b62f66d99224609ca66d8b4ae6d3763f2d24ca73f01aaeafad6307f993cb5dc8fc4cc15a19b3400fe9190d57c5862f55f8c609cf32b310fb3e0d908d6ca05d840681a3720d233cd731f84a770f9ca22dcec6ed15354e73c64b3aba2b5867d8d581efa991156908eb523b165681284994f35e4b0040c7cc1d54f6c59144f6bb6c660d009cd96558796d02c1fa975eb289bccce501ebbb427e0cda9e936db33ba4e13a68f71984fa88dbcffd1f3257d040d913699857eb5d7a0bd8a3a7f621bb16b4853a56e33a5ef631797fc881efa8d255271ce25e9af60c329661a20823abc4317b4c15cbbc260164f0b4a3c4c41acf79783f286124347841299bc3cafe6b9858c1872373272aca644d459993280bb8c19eb21f31570a9c66bbcf43037972568a54a2a852bf5f7d7a5745208d1042379d981dd1774fb1106e519e50d293a6ebd1c3e622975bdeb369c5278297d85663cb5b0972889b8108dbc458b44de6a2253841880ad158703c1d3adeac50bb2a2caefdbde29fa91837ac37d088ba89bbb97879a70bb63d679d02671f7307d839ebafea560634c9bb1abbfa296cd8a175e463921824b34ea1fa4fb3c5173224d86cb5379432444dddbf29d3e3b748d4c2b6704655ee4a73135fbeb1dc69199080e305754c222f7997c27f2d845d6acac7a8ac93df42f0865ebbeaaae96706d2dbe45ec34242f573e037568c470fefe08c93d309dbee8d9489b933cc43a101b929bb2e7318d95d0ba7e05806160b1dc9925904b51b92910fc39c2ee89a7a05dd7c510c854e9ca1b45716d25ed1d4894ac0c02a1432db10244480b47fd556125a9c2fd51bee39a012f7fedcfb19baab46bf0d9232349c97e8382775670e3e88c326d04903b5782580071d9f24347278ae8327796f58d695dfb80250b98f950feadeb4808149d9bec739a5aa93f58b14645c3f6c525d632a70a0ed12057238087bce43ab50a74d722615ec340adf1e7e0bfa5a5c5ec8a99c4d382ffa3f2a65df9169b615bc4696b61690685583422160d4fde7f00511258787f304c441281bbc1d5383749195cbfe32056b95883e561b4277bc1fc7bb5bc6effcbb0654ab7967c02166a63da232daeb0e9491d7743ac3bdcfde4168cafb13bb01d959d7ce97fbc59ce78020987a2c881bf532908aa39eb0a2aecd589b1959c8b6bc0786019598a41a3a386a3c94ff449c86aa50439f557df2f4f15d3f6260cadd5c4c2294ade2b7ff81ac445265f3a1859ee245aa12b7fa1ab024ecab083885fe8175e445c182bbe520bf9641cf2647f02653ef0a6128b5d5af7866a3e1359d7aa26ad2158c646ac8289a75c4e5ffab797bb16ababf1faba00785335b79a5e263322612b72fd9a937a85719416853b585e567cbc8e4ee9a4ae130bcc7fdd31db493d075f649f999c0acd2460c45ef43a2aeffedad00bd3102b7168cb648199f2c541f5b9f707bf3ae2df4b4f9ffa8a3ae268eea0bf44e2a7791adfc2beca6ee4acc456e418dcb44a0d5538d8bf975ab7d8107dd353962c36e487b606388018b4305a01cf79176799500710f9b908d39ff0d484e96f1762537ed431458ca2889fdd053eef145597f39206809369c6e08ab3562622eb27774100336c8d7e374b63eb4867dc0aff0344c263673894dbc8f9bd0df46b9ce0b427c0f34f27151f46bc8a4a629461cbcc5e5aacb669f44f42c9b579d848cc1d323775b5acf115bce37d3efe2c0a84383467be90a3bac80f9ad0002565a842fde5dd0b018aff0d7480bb7d69ff660d7cfcd4eca637a9686c50cc25f26c5010bae56d82cff30aa36b68f30b4b47226b67b8b75ad07bdda286f2e8c615eff791e7b754d0a8bbc5e964de1d3a965b84feb85b7e08c4ef493e1033656a050888fa162c82b90da65b3128168b041c32ff9f257b647e2da102b62bb06f7d88dde7312d3ed35b4c72d6b627f89f50662f4c7feb1988cde2be64733b5361d8fa7c828b402285d7a8932054a5770e1040d31fa2977145c9123ce42046b90ac714411205e6092e2197fd18de215734ba357e1dc5172267db4797186719590f172f4eac99b9aafb9d6080ac9000fd189e87a31326f78d2a523a0ad3505fd53d5b6358dd2603d9df6a0d5b643e405f72e75e79b1b07ebc37e9047597f171e38310bc5a958898ca47dc630075bcc2440af2d323b526575777e72a1c316aae1300be21f6f3246621c92fae162377f0bd260b273162e53c7b31ea523cd25b14bd2c63a742e9d3e85d099114916f166ffb8ca271547d1893a2275fed7e7aba2562316b02f712fb723596d5d6f90594402e85b16342d4eef06811a2a68c12d14062daf84f06de81629282a39da57d2ed21000263fde855f4f8a2feb107142c7af5d4f1e8e2436b5dede55cd8f18757438faf954c8e3ba296d8f59254291b611a1b148194f1eed25377aa14c0c9d23baffa93614560e62f221bd3d022e03ea73708ba07ec4ba8e3aae489d5dceb7790aabc3c075c33f63dc2948ac42d135e030073a1c80ebca06a274a67d2b383b8aa7382e6dcd8340bc6154e724f482dd04c50f9bf974cb1bffd2589edd2d942b31fe4e1b520eea2c8b2b58cde059d358de3302c0bd5b70df8450cb19864365414a46dbc03a86531d5056c0bd49bfd8bdf9db673c117f1ec165280df124e742e821d623186d8cb225627ab429907741b49b9c9738e49ba15ae4bca64548ca6e7c6577af5dad7153d40596ece09b4782e6d38d62478a052eb8c89b8bc2433d816bb27aee2a616b517dc35c21334c836e81de9124a8687232a014e76830eaa5a81957ee0a4111be388b9ed83eb04883fa61006f0e51822080d899a314b784e5955e688fea7eabf141d45d15bbe411bf9aa2e7bfc3a68ad4b6d54549d5477a444fea0401873bf4420f099f2dd4ec71c4c240a2a40047459d1c2fda760c408485753f6d15c2182a8117ee42e75f82e10728677b91d37b76b557b7428f053837eda537972e8285b81bd53290030d02f29ab90d42bc3a5ee0e6d0f8a5e9211889bcc04e7acc1f722ef492d3f7cc7f75e85f038452dfe923d68f73a549c8ac7d593e9d752c9c49bd441bdd04401137e83f9b0730c78a24cbc144b44db7ede3f671bfd8e1fd4388eee9fb699bd16c4db31220bbfc15d7dd1f95645264793591c819138c74262ecfba59dbb5079f054f89e38131bafa9850e54950c5170d016ac153e639679fd28f1e87b1ff1637d93d3492a556e81607ed399d3a15889a3be411b190c8102720babcfb53b8710ea2c92e7cbcd6060bb5c2df553360ec2ec6a886288e51e5fb924d365b9bab7f120c334942b2995fb2eda17296ef3ba628f13ffce0afce9172175593e139f4bb837bc7a17b092395779e68af16a3e5dbe504a98a2e3ac643b47ada982c64279d59fad0461d1c99d5137a5818f6ea1092a6405b4c938c8a457290eb4b32b0bbfec0a2868cd73c977ba83f5cf718b4eb51551b3ace2ba4ec4177934a5f4224621494789b3da65a6dd2cd648faa5df8ccdec3df5d729a5518edd248f04a9c5799c4ef3d6f224f6ac82800bd57a445fb2699c4355a884441fda72299f5fe56ad24caadf9e20618e6cd1cf4f21a0913b67ac7b1b3ab70722401195304324e94eeb7d8d4cb7f30a5202296b14bc9133f2df3dd5866e3a3c414d62de405f6d48d8dbf0fb46d76f10a12ff524509f3cf66ec74352236c3c82ee800f1ef9d5c4d63e8c398cbd4d541ac8b52a65145bdd078a81f3a0558c331e5cae337a6feda5cf115ad7509c9e12b4ef07b68f7b4b2203548940213664b64db824bf6ead592729a1ed8537a05d34c53cbe3f5d7560c62008a680e7dc5dace7a8c742e9a3ab51512edf77b54621e3d58e4a22efda1e23b46232d080dc59114fa7698e89edcd6be9ef0dcb49b335545d1ade96bbdcb6cc6ca1ffce38", 0x1000}, {&(0x7f0000000100)="860dceff4c44a7aabb012ff76bb0c1d8a234b82b5215765b7331aeadcb891e063b5f1d8ca607dd104048d524c33ff76cda12e2026e13013d7a2f743211e76838844219448b570f622fef43582d297f0d72505cfc0c634fb402552a4cc011f3edad7438a8f34c4288b7165f2bc1e5f7b666d85c02709ccd6e98779615dc4bff686e2749b79d70c02b92431192decde873ffecbc0eeed69de2f9051f1dc3bb24019a990d6770b34fb1dcbd0c", 0xab}, {&(0x7f0000001540)="6af9e1774e1fed48c483961c5b4f144b9f2b3ec226d661d2cf9fdabf545eb7a457755c79e11ebbcf2d9cbb8f8c9dc800dec4c681f386699d84a1e9f6dc07702de1bae21844bbc62f6e5cda8af937304f68fe8c25bf35bfca9069f77860ecd86141881f4f848882411418350ab745491f5ca493f0f9cfa486bb6b7eba52f7f5543df96be23d4962ee0183f0cd16c162b91621122ba0bf26fe17ab02f4cbc226e7d98d2f31c59a4f61d154c1e259e09c83d20351922acf26abc3351ed5a1d42c5e32547b194507f815edd4c31fc3db46fc9cfed9a7e9f232b4c1b7bc83f52462943e09bb70", 0xe4}, {&(0x7f0000001640)="5a02f41e7280e6194d0825b54c4f9b4f4e44e5bbd5f61b639b2a35a3c98f32b80fef451fa3015e9dcd20ede761876d19c30d9ac12255e70d629fbaf3f4ed8beabcb0d6295cb3f5b444d776d20bad5b8da975fdae1566dd3a671292b3ce388201b5c088f57237fe3ed5e42e7307d8b368205797fdc71030d78d832e3b4b641cab2090b0729ef848c9350d2831e6926e2c2d93664615826c8c6a023232dd13e9aac3a96fcdb08ad2d44e668ca1d570c6363059eb73fd985f75980d733bf0c15c9bddca844c02c2049be1935f9a", 0xcc}, {&(0x7f0000000040)="dff70b8d56f1d9c5905e5c743809bd7ce5", 0x11}, {&(0x7f0000000080)="66cc836d5e4b646db399a6eb0fd5252e1c9944861a3e687611bba9570534f23ce631b6060bcbcdc24cd4b4dd0bdcbc31e362cbae10985a", 0x37}, {&(0x7f0000000200)="485cff9f02473ae521b62d5788d7a9db7282", 0x12}], 0x9, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2008001) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:05 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:57:05 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x80000000, 0x40000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x100, 0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xc) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:05 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000002c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:57:05 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000000)={0x14, 0x13, 0x2, {0x10, 0x3, 0x4}}, 0x14) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:06 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x10) close(r0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'veth1_to_hsr\x00', {0x2, 0x4e23, @rand_addr=0x7}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) read$FUSE(r1, &(0x7f0000000440), 0x1000) 19:57:06 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:06 executing program 5: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x0) getsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000140)=""/147, &(0x7f0000000200)=0x93) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000240)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) dup2(r1, r2) 19:57:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 19:57:06 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0xdf644dbaad226759) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[r0, r1, r0, r1], 0x4) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, &(0x7f00000000c0)={0x8, 0x0, 0x301f, 0x23b, 0x400, {0x8, 0x1ff}, 0x1}) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) write$P9_RATTACH(r3, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x1a, 0x2, 0x8}}, 0x14) 19:57:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000040)={0xdaac, 0x64fb6170, 0x5, 0x0, 0x3, 0x4, 0x7ff, 0x2}, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:57:06 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) chmod(&(0x7f0000000000)='./bus\x00', 0x184) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="666405", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x803, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000340)=""/35, &(0x7f0000000380)=0xffffffffffffff98) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000040)) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000100), 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 19:57:06 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:06 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x7) dup2(r0, r1) 19:57:06 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = dup3(r0, r0, 0x80000) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000002380)) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x0) sendto$isdn(r2, &(0x7f0000000040)={0x37, 0x28d, "225c286ae28f9c1a7d774187caae251b0d1d53024ebf4be59a67d0ecbf76b37b36d4a6b3991367a974608b6a85a8f1f47769fda3b112053a63803cbe3733c046a4e220a017f0e374142e886eb153d4d388fab3b315"}, 0x5d, 0x20000080, &(0x7f0000000100)={0x22, 0x3, 0x47c, 0x800, 0x7}, 0x6) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000140)) write$P9_RSETATTR(r1, &(0x7f00000001c0)={0x7, 0x1b, 0x1}, 0x7) 19:57:06 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000000)={0x3, 0x9}) ftruncate(r1, 0x2007fff) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x31) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:06 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0600"]) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1141042, 0x2) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:57:06 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x200000000, 0x80000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x2}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0x6b14, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40000, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000040)={0x7f, 0xff, 0x4, 0x2c23, 0x16, 0x1ff, 0xfd7, 0x1e00, 0x1, 0x10001}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x2c2df00, 0x80) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:57:06 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x1) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) 19:57:06 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) exit_group(0x9) r2 = dup2(r0, r1) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0x8) 19:57:07 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = getuid() r2 = geteuid() lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000380)=[0xee00, 0xffffffffffffffff, 0x0, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01, 0x0]) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) r6 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x7}, [{0x2, 0x1, r1}, {0x2, 0x1, r2}], {0x4, 0x5}, [{0x8, 0x4, r3}, {0x8, 0x1, r4}, {0x8, 0x4, r5}, {0x8, 0x3, r6}], {0x10, 0x7}, {0x20, 0x4}}, 0x54, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r7 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xa525, 0x200) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, {0x2, 0x4e22, @empty}, 0x54, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000080)='netdevsim0\x00', 0x200, 0x14f, 0x400}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) sysfs$1(0x1, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00') 19:57:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000002c0)={[], 0x9, 0x0, 0xfffffffeffffffff, 0x0, 0x2, 0x1f002, 0x2000, [], 0x1ff}) r3 = getuid() fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000480)=0xe8) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0, 0x0}, &(0x7f0000000940)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in6=@ipv4={[], [], @multicast2}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000a80)=0xe8) getresgid(&(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0) getresuid(&(0x7f0000000b80), &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) fstat(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000cc0)={0x378, 0x0, 0x1, [{{0x5, 0x3, 0x1, 0x2, 0x2a2, 0x1, {0x6, 0x4, 0x2, 0x1, 0x1, 0x7, 0x3, 0x9, 0x8, 0x1, 0x81, r3, r4, 0x8001, 0x1d7}}, {0x2, 0xf6, 0x16, 0x7, 'cpuset.effective_cpus\x00'}}, {{0x0, 0x3, 0x3, 0x1, 0x7, 0x6, {0x4, 0xfffffffffffffffa, 0x9, 0x0, 0x800, 0x7, 0x40, 0x8d2, 0x2f, 0x5, 0x5, r5, r6, 0x7, 0x8001}}, {0x5, 0x720, 0x2, 0x7fffffff, ')]'}}, {{0x2, 0x2, 0x4, 0xfffffffffffffff8, 0x9, 0x800, {0x4, 0x1, 0x80000000, 0xffffffff00000001, 0x5, 0x6, 0x9, 0x8, 0x9, 0x9, 0x0, r7, r8, 0x9, 0xa8}}, {0x6, 0x1, 0x16, 0x0, 'cpuset.effective_cpus\x00'}}, {{0x1, 0x3, 0x0, 0x39, 0x4a, 0x400, {0x2, 0x89c1, 0x1ff, 0x8, 0x1ff, 0x1, 0x2, 0x9, 0x0, 0x7fffffff, 0x5, r9, r10, 0x2, 0xfffffffffffffff7}}, {0x4, 0x6, 0x9, 0x7f, 'ip6_vti0\x00'}}, {{0x2, 0x2, 0x9, 0x8, 0x100, 0x32, {0x0, 0x7fff, 0x800, 0x7fffffff, 0x0, 0x8, 0xe7b9, 0x3, 0xb5, 0x0, 0x1, r11, r12, 0x101, 0x5155}}, {0x0, 0xffffffffffffffff, 0x23, 0x5, '}%.vboxnet0systemnodev\x92\x1b$cgroupself'}}]}, 0x378) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000100)={{0x8, 0x7ff}, 0x0, 0x9, 0x2, {0x2}, 0x1000000000000, 0x9f}) 19:57:07 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000000)) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x5) ftruncate(r2, 0x2007fff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0}, &(0x7f0000000c00)=0xc) lstat(&(0x7f0000000c40)='./bus\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r1, &(0x7f0000000d00)={0x78, 0xfffffffffffffffe, 0x3, {0x4, 0x7, 0x0, {0x1, 0x7, 0x4, 0x1f, 0x9938, 0x401, 0xfffffffffffffffa, 0x400, 0xfffffffffffff000, 0x9, 0x8, r3, r4, 0x1000000000000}}}, 0x78) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x12, r2, 0x0) getgroups(0x9, &(0x7f0000000300)=[0xee01, 0xee00, 0xee00, 0xee01, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000640)=0xe8) stat(&(0x7f0000000680)='./bus/file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000000800)=[0x0, 0xee00, 0x0, 0xffffffffffffffff]) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="38030000000000000700000000000000000000000000000002000000000000000300000000000000000000000000000043000000080000000400000000000000000000000000000002000000000000004cec9f44000000008b00000000000000e38a0000000000000101000081aa3337ff0700000500000072020000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="050000000c0000000000000006000000000000000300000000c7000004000000f9ffffff6574683100000000030000000000000000000007000000000000002000000004000000000000000000000005000000000000001600200000000000ff00001000000000810000000000000001000000000000000000000000000000ff7f010004000000cd00"/152, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0100000000000000000000000000000000000000ff010000000000000600000004000000766d6e657430000006000000000000000300000000000000ffffffffffffffff0400000000000000000000000400000005000000000000000800000000000000040000000000000007000000000000000d00000000000000890200000000000007000000ff010000000800000600000009000000", @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0080ffffff7f00000000000002000000000000000a0800000000000000000000010000000100000000000000000000000000000003000000000000002b000000000000000800000003000000040000000000000080000000000000000500000000000000a1be000000000000010400000000000020000000000000005f0000000300000006000000a7a6000008000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="fffffefff604000000000000060000000000000006000000000000000a000000040000002f6465762f66757365000000000000000400000000000000030000000000000057000000000000000100000000000000080000000000000001000000000000000100000000000000c5000000000000000900000000000000800000000000000007000000000000000400000000000000000400008100000006000000", @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="040000003f00000000000000050000000000000006000000000000000a000000060000002f6465762f6675736500000000000000"], 0x338) sendfile(r0, r2, 0x0, 0x8000fffffffe) prctl$PR_GET_TSC(0x19, &(0x7f0000000b80)) 19:57:07 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1bb1e4, &(0x7f0000000100)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x14, 0xfa00, {0x0, 0x0, 0x111, 0x4000000000000000}}, 0x3ed) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr, 0x9}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:57:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0xe7, 0x5, 0x8, "69ee4fbf4b0ace3415a2394ebc83e3cf", "4d39445b30cb7f0d8ad56badcbf7a50e20c32cae98a325cffdb8545a77f7bddd27983efe7d502bdebbb9bed945edadb2fba5808c194913b9ae28b46333e830e9f13da3e865ee58624dc84443f811cdacebd03c34aaaf18f46b7bc4f42ab8c687fd5a60f117636a29b44385102b2f989c179cc02a3d9fb5cbd431959e6180056fdd74280292112d02a24e5e80d257f83dae2cc800055cbe176a876b00c9c21a968aa1201f3e542519b4d788ff7e5d06c5db78480392ab00bf7b7dfc14c907d068311132295214655d394075b40a6ff4c8918a"}, 0xe7, 0x2) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:57:07 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:07 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:07 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1141042, 0xffffffffffffffff) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:07 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x1118, 0x2, 0xa, 0x10, 0x70bd2d, 0x25dfdbff, {0x1, 0x0, 0xa}, [@nested={0x1104, 0x15, [@typed={0x1004, 0x7e, @binary="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"}, @typed={0x8, 0x33, @pid=r2}, @generic="b105f90105f67f8de5b0f3a9c9d8336b6cddc0dedc131755142dad564f3b8f58f258d17623fe7bd4d1a3e22600a8bc0d06b61d75d4872f34959188091f6805aa04c69d368665ce15dd2d0e0459437ff10ea01fee75f3cca73521f32f8ebd222e692dc1eaa3a5886bb9d507cd34a2dee9aebf1a73309e04b12555fc5bec13c318e7258311731fa7ed38fac994eae12c28c7840b8c7d7b1f89b1b2443a390edcafc60af9d7dfeabba1c8c819c28655cfff4b8fcc56d8730b5549800c31bca3d65358f7d4e8c8fa167b731492e85ad18c323f630adcc752cb8e000ae0c8cc17541e71249deab1917a964f3c512cd34819ccd1c663"]}]}, 0x1118}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000140)) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001400)='/dev/vfio/vfio\x00', 0x402, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x400000000}, {0xa, 0x0, 0x0, @rand_addr="7da8170e9e9599040d6c302c30c281ab"}}}, 0x48) 19:57:07 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$VT_RELDISP(r2, 0x5605) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:07 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000080)={0x8001, 0x0, {0x0, 0x3, 0x5, 0x0, 0x162c}}) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x5dce, 0x400000) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) fcntl$notify(r2, 0x402, 0x20) 19:57:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x10001}, {0x9f0, 0x4}, 0x5a7e, 0x7, 0x3}) 19:57:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x1, @mcast1}}}, 0x48) 19:57:08 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:08 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000080)=0x8001) r1 = socket$inet6(0xa, 0x401000000801, 0x101) close(r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='n\x00']) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) setsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000100)="c26d22b22a69eb76104643f9e997c5c2940b76bbf4eeb72597864046608b670396b5272d2e418909c764100a4023871b31acb6ddec0c82a051eac723bcb1f4c3977d75506e92f7b45778645cb0edb27ffde396eca8653247b75b069ea8f6d0e4e47c517d99f8564d3d8bfa869d0b56330cd2e5fe17d1a2b6dcb960f4f5b8d073059b99428eb2e0e65956571a7ac28de61f35cd781a8426ad11d5367c8a98c72827e6a5bfb7193933fccd139492d03f4da59a6a640e17ae20a22cf7f2b78fbe8144f3fa24244efb4a6b87", 0xca) 19:57:08 executing program 5: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000240)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x31) r3 = dup2(r1, r2) r4 = openat(r3, &(0x7f0000000180)='./file0\x00', 0x0, 0x2) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x3, 0x4) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000001c0)={0xf, 0x0, 0x6, {0x100000001, 0x3, 0x1}}) 19:57:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="62747266732e2f6465762f696e66696ea9354a8fff029ac7d53af83e6962616e642f72646d615f636d00"]) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:57:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr, 0x651}, {0xa, 0x0, 0x0, @mcast1}, r1, 0x1000}}, 0x48) 19:57:08 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r0, 0x2008001) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:08 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x40000) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x2}) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="9b5c65af16ee4d9a3ee7e83e73e94fccf2050f28bbaedabc4909a520eb8a5c"]) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) 19:57:08 executing program 4: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) dup2(r0, r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000080)={0x6c, @loopback, 0x4e22, 0x4, 'nq\x00', 0x0, 0x9, 0x24}, 0x2c) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:57:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x8, 0x410001) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x20, &(0x7f0000000340)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000400)={r3, 0x2}, 0x8) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000700)=""/4096) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000001c0)={r5, 0x101}, &(0x7f0000000200)=0x8) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:08 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:08 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000140)={r2, 0x2}, 0x8) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) 19:57:08 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) accept(r0, &(0x7f0000000000)=@caif, &(0x7f0000000080)=0x80) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = dup(r0) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x3, 0x5, 0x93, &(0x7f0000ffb000/0x3000)=nil}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:57:08 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:08 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365724eac9afa", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x7fff, 0x4000) write$UHID_INPUT2(r2, &(0x7f0000000540)={0xc, 0x1000, "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"}, 0x1006) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000440)={0x1, @win={{0x7f, 0x6, 0xfff, 0x100}, 0x7, 0x0, &(0x7f0000000080)={{0x800000000000000, 0xffffffffffff2a0e, 0x7, 0x7}, &(0x7f0000000040)={{0x9, 0xffff, 0x101, 0xe004}, &(0x7f0000000000)={{0x6, 0x5, 0x0, 0xffff}}}}, 0x7fff, &(0x7f0000000100)="80d777410b8c0394a610e6c0c87dbd058f2d1f", 0x401}}) 19:57:08 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x6, 0x800) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000004c0)={0x4, 0x1}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40) r3 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xda, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000400)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EVIOCGREP(r4, 0x40107446, &(0x7f0000000000)=""/174) r5 = msgget$private(0x0, 0x20) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000440)={0x3, 0x7, 0x9bbb}) msgctl$IPC_INFO(r5, 0x3, &(0x7f0000000300)=""/196) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)) dup2(r0, r1) 19:57:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) recvmsg(r1, &(0x7f0000000300)={&(0x7f0000000040)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/186, 0xba}], 0x1, &(0x7f00000002c0)=""/14, 0xe}, 0x40000000) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000340)={@mcast1, r2}, 0x14) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:57:09 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x2000000000000003, 0x4, [0x6, 0x8, 0x10001, 0x9]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r2, 0x7b, "9264db6fb94bbed5203b6fbe7fe4560f49fbccc819e8066b238c3124bd137f67a0235898934bdc8673d715cdc0a430f2e13e778eff0ed92581bcebb8cc265f425a8be99155d9e9e3b9c9ff27fdade81945ef0b77eab5e348b3b3b628440535dfc1e2549a2254847c9e34cf0ae5ec0ec0acbe1221f328fe127d44e3"}, &(0x7f00000001c0)=0x83) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0xffffff2e, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = open(&(0x7f0000000040)='./file0\x00', 0x380c2, 0x1) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000080)={0x92, 0x14, [0x3, 0x6, 0x48, 0xfffffffffffffffe, 0x4]}) 19:57:09 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/127, 0x7f}], 0x1) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:09 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) accept4$tipc(r2, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:09 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) read$FUSE(r1, &(0x7f0000000440), 0x1000) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x5}}, 0x20) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5, 0x202400) write$P9_RVERSION(r2, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0xa7, 0x8, '9P2000.u'}, 0x15) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0xa}, 0x8000}, {0xa, 0x4e21, 0x0, @remote, 0x5}, r1, 0x4}}, 0x48) 19:57:09 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:09 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) 19:57:09 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x4) close(r0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U+'}, 0x28, 0x3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r0, 0x2007fff) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000080)) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:09 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x729e, 0x4) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r0, r3, 0x0, 0x8000fffffffe) 19:57:09 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3116ec17, 0x8000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x309, 0x70bd25, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:57:09 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:57:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b010107d60100007d02000007000000b5020000000000000000ddffffffffffbab795ee14c786e01a77f0db1a1812a9608c116306e10fe89675fccf8471cfc21e877a02b3370c77eecea9b978c6530202abd25b8ca352e771320dade8f2e97c87a801732fad3c3b0742f4c0324505d607326e9810944ab448897180d289ddcffcad2f8ca3d43d3ece82f83971cbc89817822b99c2fb85acf26442435a1c298c25d25e35fd46608938b578d6f8ba4333fd2dc6c63d23d733c5982a194bc3e7eb3ebc684de8e85fb7f8d0f58c1f20b3f2f0215d4b27186672a0a9f8b4aba6dc78fc197720dc9b7d918859de2fb2fe3bb94efda2e4db68431f2662a64e79a3d2cabe1830b30876fccfc075207efc4b21d0d2581bdf2e4b1f3007bde42963004f902b1e7ea7ed5345b5b2af1cc450188a"], 0xf3) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 19:57:10 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x511900, 0x0) 19:57:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) r2 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x3}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={r3, 0x8}, 0x8) dup2(r0, r1) 19:57:10 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101000, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}}}, 0x48) 19:57:10 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="aca7"]) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:10 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:57:10 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fallocate(r1, 0x11, 0xffffffd, 0x8000) 19:57:10 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) fcntl$getflags(r1, 0x1) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x9) ftruncate(r1, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:10 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./bus\x00') close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) utime(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)={0x1, 0x6}) 19:57:10 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:57:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = dup(r1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x1, 0x8000, 0x5, 0xfff, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r3, 0xe9}, 0x8) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x2, {0x100000000, 0x38c, 0x159e, 0x7d, 0x0, 0x7, 0x0, 0x9, 0x41cf}}, 0x43) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) 19:57:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000300)=""/163) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x401, 0x1) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000200)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000140)=""/98, &(0x7f00000001c0)=0x62) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000003c0)) dup2(r0, r1) 19:57:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x4}], 0x18}], 0xfffffffffffffd61, 0x0) 19:57:10 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x100, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000003c0)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000002c0)={{0xffffffffffffffff, 0x0, 0xfff, 0x3, 0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xfff, 0x1, 0xfffffffffffffffa}) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) rt_sigaction(0x19, &(0x7f00000000c0)={&(0x7f0000000000)="d1a8f6ffff7f460f38043af04708b7001000008f08d8a2bd0300000004400f8b1867fba2c481dde8c13e460f1d7443f466440f51f3c401fd72e4f8c4c379082900", {0x7f}, 0x1, &(0x7f0000000080)="c4a2550626c462c5ae9fdd1298a065450fae82aca80a30c4613972d008c4e17ae6d243d3790dc4e279336d0ac46275983c7466410fe036f26667450f01c2"}, &(0x7f00000001c0)={&(0x7f0000000100)="410f137d003626440f0154cb004583bb00d0000000362e2e26f3410fbd7f0f66430f3a20a2ffefffff0146e936c41084c4a269017d93c461e1daedc42199efd2262e2666410f380b22", {}, 0x0, &(0x7f0000000180)="c4627d979d06000000c4c12358ccc4c1792974033b421ad0c4a16968649720dc8500000000c403f915d541368140063fca8b15c4c3915f0305c4217d562a"}, 0x8, &(0x7f0000000200)) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:10 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gre0\x00', r3}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) signalfd4(r1, &(0x7f0000000180)={0x3}, 0x8, 0x800) 19:57:10 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 310.718340][T16261] Unknown ioctl -1057467389 19:57:10 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r0, 0x40000000d0) ioctl$FICLONE(r2, 0x40049409, r0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0xfff) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000002c0)="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") getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) [ 310.852209][T16261] Unknown ioctl -1057467389 19:57:11 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x0, 0x3, 0x2}, 0x7fffffff}}, 0x18) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x51, 0x1000, &(0x7f00000000c0)="34bd1b9f176e080c611dfb946e5181bed5ca186f9ac539b9d20ee4c7c40fa7c4e0080f598cdaf529ce1a863706134cc911a7cba842f779670253c0f4509ee010fb68b6d78b11818b6677f8c2f5061d5143", &(0x7f0000000440)=""/4096, 0x3}, 0x28) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r2], 0x1) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:11 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:11 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x100, 0x0) ftruncate(r2, 0x2007fff) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000000)=""/188) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:11 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x40) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r0}}, 0x48) 19:57:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x80000, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000000c0), 0x10) 19:57:11 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 19:57:11 executing program 3: r0 = socket$inet6(0xa, 0x800, 0x5) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001700)={&(0x7f0000001540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/179, 0xb3}], 0x1, &(0x7f00000016c0)=""/47, 0x2f}, 0x40000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001740)={'vcan0\x00', r2}) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x101000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000100)={0xa, 0x101}) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r4, 0x2007fff) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0585604, &(0x7f0000000000)={0x1, 0x0, {0x200, 0x4, 0x100a, 0x7, 0xf, 0x3, 0x2, 0x7}}) sendfile(r0, r4, 0x0, 0x8000fffffffe) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) 19:57:11 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x1cc, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x4}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000}, 0x20040080) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080), 0x106}}, 0x20) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xcd, 0x4007fe) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x7) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000100)=""/69, 0x1}) 19:57:11 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:11 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000000)=r2) ftruncate(r2, 0x2007fff) open(&(0x7f0000000040)='./bus\x00', 0x101040, 0xe0) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:11 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) statfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/222) 19:57:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) setxattr$security_smack_entry(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.SMACK64IPIN\x00', &(0x7f0000000180)='-nodevselinuxppp0\x00', 0x12, 0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x400002, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:11 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './bus', [{0x20, '/dev/fuse\x00'}, {0x20, '/ppp0'}, {0x20, '/dev/fuse\x00'}, {}, {0x20, '%lo.]'}], 0xa, "9c41107705b3bbea015c9c1fe356fdbb04e47a236dbc44d158ecffc47bdd869c68d6b7b1ad5b5cd574ababd254eabdefe47fde6d122c78d88aa6bb9f90d82bad8d4106561287c4b3f64877f734564c6d9a02ff610233839b2b1bc5a0dfbf8bc7761fd5c978dc88316e7414f88a858554664472e0aaaeca025d918075bdaa2dbade2a7ac5"}, 0xb0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:11 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='/\x02roup.stap\x00\bJ\x96\xec\xf6\xb5\xd2\x9a7\\\xcd\xf0t(\xcb\xf6>V\x92\xe3ra8\r\x8a\xfc\xefX\x1bw\x8c\xd6B\xc7\x1b\x97t\xa8d\xa58\xba\x91\x80\xe0Z\xd4\x86%\xc9\xbeQ~<\xc53\x10:\xae\xdd\xb4s\x7f\x8b\xe9\xeae\x1f\b\xe4\xee\x01B', 0x2761, 0x0) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xfffffd55) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x7144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x709, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe96, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x747, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8f, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x8, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="000700000000000000ff010000a9bb000001"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc020660b, 0x20000001) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) 19:57:11 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f00000000c0)={r1, 0x10000}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r2) 19:57:12 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:12 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000000)) ftruncate(r1, 0x2007fff) linkat(r1, &(0x7f0000000040)='./bus\x00', r1, &(0x7f0000000080)='./bus\x00', 0x400) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:12 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:12 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x11, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x103}}, 0xfffffffffffffdee) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = semget(0x2, 0x1, 0x30) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000100)=""/210) 19:57:12 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) dup(r1) 19:57:12 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) chroot(&(0x7f0000000080)='./file0\x00') ftruncate(r1, 0x2007fff) read$eventfd(r1, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x5, 0xce, 0x3}, 0x8) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:12 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {0x77359400}}) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:12 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:12 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',iroup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0xe391) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:12 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x40, 0x6}, {0x15, 0x10001}]}, 0x14, 0x2) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x80001, 0xfffffffffffffffb) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x2a) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000028c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000002980)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x30, r2, 0x220, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x4, @bearer=@udp='udp:syz0\x00'}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) ftruncate(r1, 0x2007fff) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000026c0)={0xffffffffffffffff, r1, 0x0, 0x38, &(0x7f0000002680)='](posix_acl_accessvboxnet0]md5sumsystemsecurity\'GPLeth0\x00', 0xffffffffffffffff}, 0x30) getresuid(&(0x7f0000002700), &(0x7f0000002740)=0x0, &(0x7f0000002780)) times(&(0x7f0000002840)) r5 = getegid() tgkill(r3, r3, 0x3d) sendmsg$unix(r1, &(0x7f0000002800)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002600)=[{&(0x7f00000002c0)="4d5c0186c973b5105e9d412cba9c4668b2f84dbd60be10f0b0012a82180000f14aaee8f0d8a8882500b38b9f2ea66037a65c28e2f48f77d04320267c77daa055b1a7d49ee91d48c9ce79e3abff4b08414361986023d8ef71656923f985d88eb78d582a22c2232ce40c0af4770e7cbb9d5dfc79d8ab08257242dfdd4894ae346f02b42bdc53158e31956965ddfb6d0837", 0x90}, {&(0x7f0000000380)="efc5862b1dda36d6cd03645e46fc3e8c0f73dad077e368a597bcad1ff1e70339c43843f8d825e471eb665840efc3ff6f158e6fb6dfacffc094da7fb9ecace24c5841582ba6ac3f925bb335f5509a58cfe0d336918b5d7a6c0c9a90c86461590459072ddc144b117c2b9f2790a42543a58437a536c4b0c95d91494cbc96a2d420b47d11ebac45b5eaafc6bd9ba76be57be9e87c83b1d06f8cf2f837d5ca6a2736195e4dbc80af8538e005731840e154272b4086", 0xb3}, {&(0x7f0000000440)="ed4de15ba15466ecd90f01c2776a8dd435afd2c423e51c0a43ae9e3151c5f943c4e40d06c95e2409d4f678846a8322e0549cedd8a383a750bd54b2a9d8294fe5f4780734fa021c5a758961e2643ec777c62527cddc66f45623542b3adc86db4cce95790925c7703f1528b468d9ad031d39159a4b6e823a8470af5c2dedff8e59bf9f71b6f969ae1f9bee21f00193", 0x8e}, {&(0x7f0000000200)="f25c214d702a2f647c4137c2214abcb1e1d1f4506e1af43d2d09da109555e6ad96dd5386ca34ca1c1bf8c5e4179ce56a2ca7d923ca1ce8949b383fb6a3b85ec1079b3abdf3eb271014", 0x49}, {&(0x7f0000000500)="dbd441e4", 0x4}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="291e12993d9307b4c8df8770c7568df269c01f860c3bb8c24df1eabb8d18bcd6e0fe3a3aee8cc60afbd0f344c1d52f356a0d832010f5a6e67ae30a3dc21da8e9ea063ac15081791ecdd16e67349d23138382b28b2e39edef91f10dcd3638813ebe84f80f79443ca6d0df07312bee6564c4228ee4c93dbd5a90d8c6a127b0077c7a581c93e03240edab37b1a0ada6951efa35ce394b877718090560c187f72a4566ea", 0xa2}, {&(0x7f0000001600)="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", 0x1000}], 0x8, &(0x7f00000027c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20}, 0x40000) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:13 executing program 4: syz_emit_ethernet(0x2a, &(0x7f000000a000)={@random="a5cc578652f0", @random="165d5dea3bcc", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 19:57:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x140, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000140)={0xc223}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) accept$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) pwritev(r2, &(0x7f0000000340), 0x4, 0x0) dup2(r0, r2) 19:57:13 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:13 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000000)=""/169, &(0x7f0000000100)=0xa9) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:13 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000000)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000fef000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0xf000, 0x1}) 19:57:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:57:13 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000000)={0xc77, 0x10, [0x60, 0x525, 0x8, 0xe1bc]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:13 executing program 4: seccomp(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgrp(0xffffffffffffffff) getpgrp(0x0) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x8004e22}, 0x1c) getrandom(0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x5b) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r1 = dup(r0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x1c}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x0) 19:57:13 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) prctl$PR_GET_THP_DISABLE(0x2a) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:13 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000140)={0x7, 0x81f}) fstat(r0, &(0x7f0000000240)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r2) [ 313.411388][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 313.411427][ T30] audit: type=1326 audit(1559591833.459:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16423 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c0ba code=0x0 19:57:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendmsg$xdp(r0, &(0x7f0000000900)={&(0x7f0000000300)={0x2c, 0x4, r1, 0x2e}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="30f2545dc096b40e38718288eee0e147ca0d79a7", 0x14}, {&(0x7f0000000440)="8bc61a7a1b6d6ce2e1e84349a069f60dcf690e7f2bcb18bb780303424e9791f50887c4ed5cf4cf507571907d802a4288060d284516d54ba6d210d885d8c08fae927f07bbc9a06ae040465def58e26aae52a34a2391f93c9eb29d0a00d473df8d49415627f89879c470aec1f951ca8460330baaf9cc44ce16f89d56fac3ecbf17ab9d2d74b1b967669eb20e6382cce34eca37c76b36ee80c38d9f92720346ed9f86fa14d8632873e0ef2549eab3872ab5a105f845153cc3991496a7bb04c9fbd0b59b36301311f7cf9167deeefd6a776328d4993943207dcbbb4f6d55a990aa39e3509c0ef329ed9303fc0c003d546f3cd6489dfb", 0xf4}, {&(0x7f0000000540)="66c007a9fb452601cbcb2e40f52194a2ec66900d4089eadaa6f966b5f9b564c5105987beaa5ecff46994a545b7ca72944d7196e4667b056331dbdf52f5ac06064d03e4102b55acb74b8e8c3555ec64937dc0bb8b8916c6e00308057003d216f6a77fdd44af4ca224849f1168453c05f68f21e012864c9c439b9061c863c30ceed49bdec0619178ad4f7f808582dd38ab73d51ea0dee4341ad4c66e3ea6c028940b6f9f51", 0xa4}, {&(0x7f0000000600)="0ddf0de511c0fd2c6ba5387d514e3ee7c020b149290033e149c987318872254480042147ba964a13a08f72e964c4156ec265c06368643aa1114c2601a6778540556ded9e8d6d1e52fb9b2b38f3b5f8f528790ab0ddf033cb36e8c6230dee8b3753b7915da68e9238e2dc366a9a556903db2097c49ef36ef2d1beab1ee79702214f427dfa4fc2b636bb253b9859ffb6366b1f000925192208f026a6a51e486712fbeaf511f9e3214b431b7ef5396eeceb60c584ff0ebd44cd45da47ce34331f35ba6bca237f8b703ef8d88fc227e51843b0f3", 0xd2}, {&(0x7f0000000700)="941154c16e922422601dde914c22544f2457925c64462b5b408bd300b45da7c59c5728de7e83aea4789e73e3ac54ce2a07472a09d452cd8fa9e709815f835808a2b93acb1e43427e25c11d75096108702299ada6ba78482ad93ca9a4b40fcb4086da1929992dc8e427b0d5866e03edd71a1da108afff35642844698e20a4b509c35c9e16893bbdaaf6fbe594af731e88", 0x90}, {&(0x7f00000007c0)="ab250e100ec075b5edf5bd8aa3bbcb56d2f672dd269e1e64d391bbcef5b20466c262258a0de40279847817173493e333017675a8ed038f606f4f709c181843109cf323b3a65c9dd74fd133930d81ebc6b2042227f17e94eeb62cf3c4f43052e6b9ac6b540ebe1dfadbb3d2801d34f0364e515f4d6d85b40dac449933655b06a6a23204778b9e6580106c2b744afb2b5ee05f485657b0ec421f8f4092fdb200eba69e390f38ba", 0xa6}, {&(0x7f0000000380)="ecb1c4d1fc1d3dd188b2977cdc4c0b8d2071eb9d45a8b0caecfe55c8cbc104b9056b296b332e8781419838a9bc52eaf92334944d1dbf868cffb7cda7c85ccaaa4ddc41939842b1ad784e503a03fb51499c05b67607efc8434e078c0ce8debc0546f89d1fbc22636f325696823304f6b90e3c7720edcf6b", 0x77}], 0x7, 0x0, 0x0, 0x4000000}, 0x800) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000080)=""/76) r2 = socket$inet6(0xa, 0x401000000801, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x27}, 0x4000, 0x0, 0xff, 0x1, 0x1}, &(0x7f0000000180)=0x20) close(r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0xff, 0x58f2}, {0x7, 0x6e}]}) ftruncate(r4, 0x2007fff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@mcast2, 0x81, 0x1, 0x2, 0x1, 0x7, 0x2}, 0x20) sendfile(r3, r4, 0x0, 0x1) 19:57:13 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) getsockopt(r2, 0x4, 0x4, &(0x7f0000000000)=""/138, &(0x7f0000000100)=0x8a) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:13 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:13 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000002c0)={0x8, {{0x2, 0x4e23, @empty}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 19:57:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) sendto$rxrpc(r1, &(0x7f0000000340)="d1d7ec75458b864a4ae63e68542374a8878aebd0f0c0893a20cae53fab67f5740fd7be887f6758fdf7ec048b94d46bd8889b6a89e74d01ffe7ca6c9ea47a15f707c636806407c8de3c95f37e40050799b34775407ec013f38f2ab1b4ab6abbe6a65fecb4e5e895354560498771d2b4fa2e45720e9f43e2db220d50f7836167ade567c44f86432cd957c28efdaf90928b37acedc0c4b4a35cc2a374116d7416ecb8a2eb8cb452799acc38fb3618", 0xad, 0x0, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x6, 0x202800) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x100ffd, 0x0) ioctl$EVIOCGREP(r3, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r2) 19:57:13 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES32=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="65c89677bccace8446400827ba4aa8e3544adcc2f2b5ade82b704c8445fadc06817311588d537fd2d4ca4d88578d0aab3e58165ac2aa40b26630ce06fb4b4d3a935c849948b1f76859a90ed755b1c67b3143c75af51bfb3216cd2be66c9f15e9665881db7ad4ee2b9099f9df90be04684a427fb09c5fc5b1be83500ca9bd7f95035388243b414f3211ff85cb05fe2e44def0bf"]) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000000)=0x2) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000040)) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:13 executing program 3: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:57:14 executing program 0: r0 = socket$caif_stream(0x25, 0x1, 0x4) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) [ 314.208234][ T30] audit: type=1326 audit(1559591834.259:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16423 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c0ba code=0x0 19:57:14 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000012c0)='rdma.current\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 19:57:14 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="4267726f75705f69643d2402f140c01e1bac1969d7a3a91692f2ee4364c50e07aad91f732dfdaaee91bff0a0ebff90811582b91c0d9d7bb1a9309bc32c0abe8503c9", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:14 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:14 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x200000, 0x2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/165, &(0x7f0000000180)=0xa5) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000140)=0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x1) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) 19:57:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000100)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2002102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000380)=[@window={0x3, 0x0, 0x800}, @mss], 0x20000002) setsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) 19:57:14 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x5, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x8, 0x101) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:14 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x5) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f0000000080)={0x0, 0x6, 0x1, [], &(0x7f0000000040)=0x7}) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 19:57:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000040)) 19:57:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000280)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) dup3(r1, r0, 0x0) 19:57:14 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_emit_ethernet(0x19b, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x0, 0x1, [0x959, 0x8e9, 0x58f, 0xfe7]}) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000180)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) dup2(r0, r1) 19:57:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8a03, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000180)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x000\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00'}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 19:57:14 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1, 0x100000001}}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000002c0)=""/206, &(0x7f0000000180)=0xce) 19:57:14 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101000, 0x0) write$P9_RMKNOD(r0, &(0x7f0000000080)={0x14, 0x13, 0x2, {0x1, 0x0, 0x2}}, 0x14) r1 = socket$inet6(0xa, 0x401000000801, 0x0) close(r1) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x7fff, 0x8f8, 0x1}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(r1, r3, 0x0, 0x8000fffffffe) 19:57:15 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x40, 0x0) geteuid() ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) 19:57:15 executing program 3: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 19:57:15 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ppp\x00', 0x2, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x8) pidfd_send_signal(r2, 0x18, &(0x7f0000000300)={0x3a, 0x5, 0x1}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000700)=""/246) lsetxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@sha1={0x1, "5fbe938e7970324f9537d0d2a7e3525e9479595e"}, 0x15, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) r4 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000140)={{0x8, 0x473}, {0x6, 0x9}, 0x7, 0x4, 0x100000000}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000480)={0x0, 0xf00000000, 0x0, 0x4, 0x100000000}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000500)={r5, 0x13, "4ef600df4bd3af7cd28e2f4cb6b06ca3b87862"}, &(0x7f0000000540)=0x1b) r6 = dup2(r0, r1) ioctl$VIDIOC_SUBDEV_G_CROP(r6, 0xc038563b, &(0x7f00000000c0)={0x0, 0x0, {0x5, 0x100000001, 0x3, 0x9}}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000380)={0xc0000, 0x0, [0x0, 0x2a7473ad, 0x3, 0x0, 0x4, 0x6, 0x8000, 0x200]}) 19:57:15 executing program 2: r0 = socket$inet6(0xa, 0x401000000801, 0x0) close(r0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cb614cf8072692f613d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) ftruncate(r2, 0x2007fff) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000440)={0xf, @vbi={0x7, 0x4, 0x81, 0x77755f79, [0x101, 0x5], [0x100000001, 0x8], 0x13a}}) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000000)) sendfile(r0, r2, 0x0, 0x8000fffffffe) 19:57:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2102001fbc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_ifreq(r0, 0x894a, &(0x7f00000000c0)={'team0\x00', @ifru_names='caif0\x00'}) 19:57:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:57:15 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1bacf6, &(0x7f0000000140)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x1000)=nil) dup2(r0, r1) 19:57:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:15 executing program 2: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) read$eventfd(r0, 0x0, 0x0) 19:57:15 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xfffffffffffffe53, 0x0}, 0xffda) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffff9c, 0xc, 0xffffffffffffff9c, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x800) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000640)=ANY=[@ANYBLOB="080000000020000000000000000000000000000000000000000000000300"/40]) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="a800000000000000ff00000000000000ff21b17d88b931a2c58cff84451d25f29bbd8fb9642b65021ece01f56b64bd4464645cc1593228905bec8ed1aff3a7a12bf18b6d402d811f0c9f7a7dc3057995f287e214f14530232bb5d87f0e539cf53705829c6ba703006f9d8e8f26b82a6ee9bda40f72f9daa9ff2ada7060f3b1e01622ff24792ec2ea6b7f7449b0b51789a426636eb878ed03af0000f6cc97ea411d94daef21ab17585d836e9d3ca42eb2fbf3f8502a51d39e18060afe03186ab28e6ea71b92dd91aac2e34497a4f971af16d838e6199221b885bdab60a59b8e17eb5e479dd7405fcf9c3bde5ad62c3198100f2bca93e51480a938df8ba9ecffcdb3fbf02a08e1102d1d47146800d3af4e995fcb4e5a73ff51cb03268845e8d94a6b04dfa83aac10ded755db4674248310"], 0x130}, 0x0) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000580)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='-:*+@\xffvmnet1.,\x00') ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000000)) sendmsg(r1, &(0x7f0000002ec0)={&(0x7f0000000840)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f0000002b80)=[{0x0}], 0x1}, 0x0) socket$kcm(0x29, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e0000002700050ad25a80648c63940d0224fc00100003400a000000053582c137153e3709000189cd9eadca77e3", 0x2e}], 0x1}, 0x0) [ 315.580641][T16581] binder: 16580:16581 ioctl c0306201 20000100 returned -14 19:57:15 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x2, @mcast1}, r1}}, 0x48) [ 315.652052][T16589] binder: 16580:16589 ioctl c0306201 20000100 returned -14 19:57:15 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:15 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbmon(&(0x7f0000000640)='/dev/usbmon#\x00', 0x2, 0x200000) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000680)={0x0, 0x0, 0x2020, 0xe1, 0x0, {0x3}}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x561000, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) getgroups(0x3, &(0x7f0000000300)=[r1, r1, r1]) fsetxattr$security_evm(r4, &(0x7f0000000400)='security.evm\x00', &(0x7f0000000600)=@ng={0x4, 0x2, "949883f231e06463b07ca26a"}, 0xe, 0x2) ioctl$VHOST_SET_VRING_ENDIAN(r4, 0x4008af13, &(0x7f0000000340)={0x2, 0x1000}) ioctl$EVIOCGREP(r4, 0x40107446, &(0x7f0000000440)=""/174) dup2(r0, r3) getsockopt$sock_buf(r4, 0x1, 0x3f, &(0x7f0000000500)=""/205, &(0x7f0000000080)=0xcd) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000380)={{0xa, 0x4e22, 0x80000001, @loopback, 0x9}, {0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1ff}, 0x5, [0x1000, 0x30000000, 0x4, 0x5, 0x2, 0x800, 0x7f, 0x101]}, 0x5c) 19:57:15 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 19:57:15 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) sendto$unix(r0, 0x0, 0x2bc, 0x0, &(0x7f0000000d00)=@abs, 0x6e) 19:57:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100, 0x2c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYBLOB="008007000700070100ff01090009005503579d0cd80ba2c407000000a59b3931ae6663b9d5901dffc59e4fb2b9d49262993a9178"], &(0x7f00000003c0)=0x16) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x200000, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) mount(&(0x7f0000000400)=ANY=[@ANYBLOB="00000823eaf0defff22f16"], &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='qnx6\x00', 0x100000, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00') ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000001c0)={0x7fff, 0x20323159, 0x8, 0x2, 0x1, @discrete={0x3, 0x8}}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r4}}, 0x48) [ 316.012538][T16611] binder: 16609:16611 ioctl c0306201 20000100 returned -14 [ 316.052337][T16613] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! 19:57:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:16 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001300)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000e80)="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", 0x480, 0x0, 0x0, 0x0) 19:57:16 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='G\xffL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="33215aab4087f687ff16f8b00800", 0x0}, 0x28) 19:57:16 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x800000, 0x204400) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x242840, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r2, 0x20, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x80, 0xa23, 0x6c, 0x1}}}, [""]}, 0x30}}, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x28000, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f00000006c0)={[], 0x7ff, 0x3, 0x3, 0x0, 0xa0000000000000, 0x5000, 0xf002, [], 0xffff}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x200000009, 0x2, [0x1d, 0x5]}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00000002c0)={r6, 0xd0, "750365e5ff84b551887778c921ffad144723dc018502c67e4aa6a01eed60ae32244f7e07a2c1a605a75694e28c4b8f6e88f159e539dfb464e40d811d32a55c1789184410094f5f245dd1c76b9fbdeac3717ea474f08769badb50f2dc512102d6448ba4e8b78125839693d4533d724fcddd323d6e1dcacb1f047640cfc75bd7cdcdee40852ba94a41d88df34992c5771c91f15ee0c46cd1968f437f27c1134ce10649d20c101ce3cba2a87aa3cface7bb853861de208783b9a1ae391aad7df24201c3ea58a6185db467b25b024cc81970"}, &(0x7f0000000140)=0xd8) 19:57:16 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 316.368369][T16638] binder: 16637:16638 ioctl c0306201 20000100 returned -14 19:57:16 executing program 4: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em1ppr0ScpusftsysL\xc5\xf9z') 19:57:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:16 executing program 2: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) read$eventfd(r1, 0x0, 0x0) 19:57:16 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) dup3(r1, r1, 0x80000) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1000, 0x80000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x28000, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000300)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) r3 = syz_open_dev$radio(&(0x7f00000004c0)='/dev/radio#\x00', 0x3, 0x2) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000500)="317775e92084ae46fd6ba551b869a9a977908434596ffe81f8bf0c1313feee7515d732989e05c86914e7da7d9e5384ab899a828320bd4b145343e76ce454c0cf5bb812e1da967aaefb9300eafb557f28d59c119f0902421e7fa0fc720d553eb7a3") dup2(r0, r1) io_setup(0x100, &(0x7f00000000c0)=0x0) io_destroy(r4) 19:57:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) [ 316.710543][T16665] binder: 16661:16665 ioctl c0306201 20000100 returned -14 19:57:16 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) ppoll(&(0x7f0000000000)=[{r0, 0x2000}, {r0, 0x4008}, {r0, 0x12}, {r0, 0x100}, {r0, 0x4000}, {r0, 0x4400}, {r0, 0x2440}, {r0}, {r0, 0x2000}, {r0}], 0xa, &(0x7f0000000100), &(0x7f0000000140)={0x3bb}, 0x8) 19:57:16 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8a03, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "57612471408982025872100b70c10a02"}) 19:57:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:16 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:17 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0xa000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) r2 = fcntl$getown(r0, 0x9) ptrace$peek(0x2, r2, &(0x7f0000000000)) 19:57:17 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000200)={r1, &(0x7f0000000100)=""/196}) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x442400, 0x0) r4 = dup3(r3, r2, 0x80000) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000480)={'raw\x00', 0xb0, "5232713e45f97bce8acdbd3024588f37c177e5b5f8185adba0726482a8c2c45ec59ed814ecadcd834540baa0f4826b7f9e2111743d83e805de8fb6aed14234920b41d41e04aca271453554a8d2db262bb5fc84da68da87298b4425ef7e5c60712616eb43e22538ea8aa8215ff1dc980877b43265b89cb79858273fc069cea905ed27c9752a9d1c37b5229dba9bbae84365e03d4ceb9ca78c4b986234e8142d58f1e7192597f3fd8dcc088127bc949ab6"}, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto(r0, &(0x7f0000000380)="e15fbf911b2ba859ac8f48070efba0191fbfc7b07238262ec5161054133dd4c3ac6057bcd1d38198dfa1805e86f16e2528ced0f4ab8753a430f8e0234e66146b8298ba7a89c67a3af2cc071b1d7c74ff04593df4058fc4d7f7d73419893dfbf63f05eddc9d30a41ee41749cf32646249b4bd57ebdd4a92cf2349bd13b073d1c0499a7dccdbc85dfb4822611a2eef5619262facc5076420e6634b65dfe3e8913981ce4e2b71c9b7d76b45e87b3a11c5aee00c82dc22be582da9fe48f164a4cb628db925b6fde5b453c7ba3fa9ffc5cf04dafb475620f85755791c1cfb811acf", 0xdf, 0x40, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000c82a133ff1940000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000200"/116], 0x1) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f00000002c0), 0x4) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280), 0x73f2, 0xfffffffffffffffc) [ 317.054248][T16692] binder: 16690:16692 ioctl c0306201 20000100 returned -14 19:57:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x208001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000a00000/0x600000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000a29000/0x2000)=nil, &(0x7f0000bdc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c7b000/0x4000)=nil, &(0x7f0000c52000/0x1000)=nil, &(0x7f0000bd9000/0x4000)=nil, &(0x7f0000000340)="917455a51671c6d6dd3248356b2a3d59861469df70ae1630ed63018012d831c0928751a10171aa250bc5b0a9e11e3c26495cc371d9c766ffeb11fb4c5d8c3c3ea1e83a73880df74db9592a1c7623bf921cdefb0547baaeb5ee15fc0bca781c35096c198ed061f4fe29534a236268d41e171101f362a260ca2ad31e7eee350f6c81168f4402cd67e1ff9e7cf477b393a3584d48e099fc97377cdf3436f3ab670bdd3442499ba8c3805dd961dc0fdfc371376e223ccf5c2737225efc25cfc8e390c4", 0xc1, r0}, 0x68) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={0x0}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:57:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) [ 317.328144][T16712] binder: 16710:16712 ioctl c0306201 20000100 returned -14 19:57:17 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000400)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000180)=0x7fffffff) write$P9_RAUTH(r3, &(0x7f0000000140)={0x14, 0x67, 0x2, {0x80, 0x1, 0x5}}, 0x14) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) [ 317.382855][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 317.389257][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:57:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:17 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000200)={r1, &(0x7f0000000100)=""/196}) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x442400, 0x0) r4 = dup3(r3, r2, 0x80000) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000480)={'raw\x00', 0xb0, "5232713e45f97bce8acdbd3024588f37c177e5b5f8185adba0726482a8c2c45ec59ed814ecadcd834540baa0f4826b7f9e2111743d83e805de8fb6aed14234920b41d41e04aca271453554a8d2db262bb5fc84da68da87298b4425ef7e5c60712616eb43e22538ea8aa8215ff1dc980877b43265b89cb79858273fc069cea905ed27c9752a9d1c37b5229dba9bbae84365e03d4ceb9ca78c4b986234e8142d58f1e7192597f3fd8dcc088127bc949ab6"}, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto(r0, &(0x7f0000000380)="e15fbf911b2ba859ac8f48070efba0191fbfc7b07238262ec5161054133dd4c3ac6057bcd1d38198dfa1805e86f16e2528ced0f4ab8753a430f8e0234e66146b8298ba7a89c67a3af2cc071b1d7c74ff04593df4058fc4d7f7d73419893dfbf63f05eddc9d30a41ee41749cf32646249b4bd57ebdd4a92cf2349bd13b073d1c0499a7dccdbc85dfb4822611a2eef5619262facc5076420e6634b65dfe3e8913981ce4e2b71c9b7d76b45e87b3a11c5aee00c82dc22be582da9fe48f164a4cb628db925b6fde5b453c7ba3fa9ffc5cf04dafb475620f85755791c1cfb811acf", 0xdf, 0x40, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000c82a133ff1940000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000200"/116], 0x1) setsockopt$packet_int(r5, 0x107, 0x13, &(0x7f00000002c0), 0x4) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280), 0x73f2, 0xfffffffffffffffc) 19:57:17 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x80000000, 0xfffffffffffffffd}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000004c0)={0x0, 0x3f, 0xffffffffffffff5f}, &(0x7f00000006c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000e80)={0x0, @in6={{0xa, 0x4e24, 0x0, @local, 0x7}}, 0x8, 0x9, 0x79d4a9bf, 0x7, 0x40}, &(0x7f0000000f40)=0x98) sendmmsg$inet_sctp(r1, &(0x7f0000001000)=[{&(0x7f00000001c0)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f00000002c0)="bb369dc41ae17a63579e7824d2712669cf0b8008e6b52c59cfc6a29a90aa02d3ccbddf55ea9260ece996d8b66daedc2168f84724b2f2b00537def1976f8e71aa8ba5cbd225a1f88408394f4d8e8f639acddc7e74daf36ec1bec419bb0413ed1a83426e0dc729981c6272de0818a6b9ae02f2f30c776c1e1fe28d99d61678211fcef4", 0x82}], 0x1, &(0x7f0000000700)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @init={0x18, 0x84, 0x0, {0xb1, 0x5, 0x8, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0xfff, 0x4, 0x4, 0x6, r2}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x80}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x9}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x0, 0x3, 0x686, r3}}, @authinfo={0x18, 0x84, 0x6, {0x8001}}, @init={0x18, 0x84, 0x0, {0x4, 0x4, 0x9, 0xfffffffffffffff8}}, @init={0x18, 0x84, 0x0, {0xfff, 0xecf5, 0x3}}], 0xe8, 0x20000004}, {&(0x7f0000000800)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000840)="3edc648a1bdc637466c30185c5458f88a4b9619fdb327e5633a0c5d2a8c96f964b0cac1b6862612dc92c8b451c4c0d2c91b87d849e298dcc8a93ce35b76861c5d9809761b4c24aa612e87b93a80b32456257a090ebefdfb4f493ccc54096f493b8285b6d7107a90586ac0daa27eeb496a1df66cfaa4830baa9f3c580561cff9282cf00cd326379e31bfd2b28147514b4871c98ec49b9db97cde1b251ed2d3cf3e1557d5a0225691d7e85435e6b9636b5e0425bf18f8aac5461004361f644ec714445657c9ff7e6ced197c7c45b8decdaeddb9903b609bbc52d130cbe41fb41389153d94ca282", 0xe6}, {&(0x7f0000000940)="0ae8388bd0f04d468a66f82dfe6121c14bf0cba603f6c9f47bf023140194f2d7b78360ab4dbcd0b8b002cd59275d6b5b1bf05a548be82a194ebc356c9812d340c500b2bb3ea12604fae9ce8461aa86e0bcdc917dfb3da59c2029280f43f45ff12c8c523df1b7ae5368e3312f9140bf8006573c526d24ee497645bb142e5ded7c1e2be828b275fcac5fe2096f63fab67df2ca2c8db5878bac1a00869e9f12d14ea97eefb17031bf37904a1550e63d79", 0xaf}, {&(0x7f0000000a00)="3e26d87e1fe8cedfc63c29c6d70b1b071055c6f21353a8d7ddc0a8b07c16c32af07740746ead03c4c1684fa502e8d7df68c59cd9cca4f3fc5050fc3a4040dfb6d346b5b5d3cb8aa0ada6829ad54f48006db8aa1c55dcc62dcd4f00570a04709e486df2452ce407cb8b142a3bcf7ccdcaa1e434b4521dbf4caae1282d95269f16833763c163dbf87a2919fe7cefb1346a908be8dcb171003470765b20fbad45b1101cae7cc1064e84213fea491158e0b6fc96ba2f16fb3d79f41f3e00ca68ee80", 0xc0}, {&(0x7f0000000ac0)="d7f68bb8f3ff0e9205a783828b1d82e2f6c8a7aa1520ee9384908d41f0d3b19748c109587b4a6cd091c4e20838e7789ae219432a9f9eaf2c6b9d651cde365712350a40cef2fed79a8d506151e5694a591de177895fcbb51bdeba6ad7e047a64a5aaa3cae1548e46aae3628236e52de2cd6164d14d26f09990a4ef6ae583684c52e5b9ca5c02eb4c9df553d6c07ca485a693def6477e967811a67b70199ed9bf49efeaa5a212ff2b81ed59047cf09dea3a7266e40f95b16c17f9dcfbf2ec0e6d0a5f998823ceba1c7f7ff2ced637110233eae3f75fb3033d5c3a903bef3ac8ccc216e044a4dd7f25614", 0xe9}, {&(0x7f0000000bc0)="7e3ce00dfcc34b6c46b11fa00b0a5d49ab5d008d832492eb618df5b330d881eb4f2c8954b990a68e864c276bfe60c273dde0a86a0c0f1763e081b90066c5568ef4ab1253bd4dbbf226ffab16577280bf99b5e2b5407e3a6c52afe2a38c5dcaf16f1c270fc189732400218f185a0e56b98d38d76e476657bc4574fa13085ad995c008fa1c4606091eb885acdf202b28f34ffb0866b8", 0x95}, {&(0x7f0000000c80)="9a710e1c6a58f8749d09a6b68465ece6ba1114f243b5a6feaa2ea3c77a520bcf2ab3132d582582be12efb48d08f1a68237e1d8a2353499bb38474a53115529330261abbbc36774af28f35cbf9d4a", 0x4e}, {&(0x7f0000000d00)="8ce7db0737dee3c1a926c6f70939e023a1b2cdab12f2032cab56a822fe3431189cd849601841a4deeb2f2639e1ca17f75adb5b6f88d827ea9091b5dfa0e3de9542b623485777976e86904ab8958820b8a04ba35ab0952d0468c9851b7e104cd357dddafb140b089f10598e14c49b3f1366e9f528af5237bc307012cb3bbbb36171ede36df44b4a2d0605ff054d4166240eb495bfdd90e2d60f1acd37ee116cdd33077fa4969cc96972a043dd505f846925563ea4033461dbc796ea80fbadd0ed4a9e7ab9cf75d7aaf51cdcc1c534dee592aca2", 0xd3}], 0x7, &(0x7f0000000f80)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0xce9, 0x5, 0x5, 0x9, 0x9, 0x100000001, 0xffffffffffff0000, r4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xd0}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x68, 0x8000}], 0x2, 0x800) socket$inet_dccp(0x2, 0x6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) getrlimit(0x5, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r5}}, 0x48) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x200, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x17600}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0x2f, @mcast2, 0x2}, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}], 0x64) 19:57:17 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) [ 317.645833][T16731] binder: 16729:16731 ioctl c0306201 20000100 returned -14 19:57:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:17 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffff8, 0x1) 19:57:17 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ip6_tables_matches\x00') ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000380)) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7c953ed4, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0xb0, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x4, @rand_addr="f4365e271d4157251ebbefdf9b77b75a", 0x9}, @in6={0xa, 0x4e24, 0x5, @loopback, 0x7}, @in6={0xa, 0x3, 0x1e3, @loopback, 0x80000000}, @in={0x2, 0x4e24, @rand_addr=0x80}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, @in6={0xa, 0x4e22, 0x100000000, @loopback, 0xe23}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={r4, 0xffff}, &(0x7f0000000300)=0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:57:18 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) io_setup(0x2, &(0x7f00000000c0)=0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x20000, 0x0) r4 = dup2(r1, r3) r5 = syz_open_dev$usb(0xffffffffffffffff, 0xffffffffffffff1d, 0x1) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x8800, 0x0) io_submit(r2, 0x5, &(0x7f0000000840)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000000140)="2d3448daf9a788fffc20ff5c9d5b47a1a3ed51bf960c82ed840e3da2e3", 0x1d, 0x1, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r1, &(0x7f0000000300)="9faa0895f412df5d32819f2461cdc05e707beaa92978ee50ebf3fb1e8c167f83494dc3749ad0870f404b90d7423c03ce52246a6a48c9ad663b58fb0a64e8cc45c7501e9679f231f661db1dca93c3e571f1fadcabaf1a48cb538902e22a752f15e940ab57f1269f7faa0c18fb1929cc5cefeaefaf28d7df1eec6d39a073d8fb9bb3a64a99742ef7c16dddcb558c03de59803684e0402441f366de59d358e5a97cac75432a290ae2e55dea4c4618b9bd1c14a045c3c51cf33b86b37f8fd2241e2266fa3f589a93bd8b2bf25cad497649a19d8b", 0xd2, 0x10000, 0x0, 0x2, r3}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1d, r0, &(0x7f0000000400)="54266b231cd9e27cff05d85dac32e44b70cc96d99afc623dd4a0882ed5829baaf7a6f33ebfa6fd256d1be78e32441bdef67d1ef877e80eda97cc07fab1038deac6dee832304d76e68d2bdbfdf908b91ce675f17934f4faa7b581d518e8dd5ad02bcf138eac44b8f388198ce0966a519cc02d40c99b74b323911123eac8d9035f02914598de7a6c0181040371051f70d0184eda507439e0e6c340a5d6db6afe4bfbbeaa0a9b0365ae94f5c3a23a4fbf8cd687", 0xb2, 0xffffffffffffff7a, 0x0, 0x1, r4}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0xb, 0x7ff, r0, &(0x7f0000000500)="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", 0xfa, 0x4, 0x0, 0x0, r5}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0xf, 0x73, r1, &(0x7f0000000740)="f45220bb3d36a5fd689091a45f89eb3ed52a0aed793d18995446b903f8b54c2c1ef0007f14853c786a4258bfa7083abbd54fade913a789b474fc267667e89ef433014a7ec1770d92757d3d2f3a5dcd00bcf7fa6cb1fda14e1039d89c7984ba3840865fbbf67166db7a8e16d9f7d8f5", 0x6f, 0x8000, 0x0, 0x1, r6}]) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r1, r1) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) 19:57:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) dup3(r2, r0, 0x80000) 19:57:18 executing program 4: syz_open_dev$loop(0x0, 0x0, 0x10000000080) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000012c0)='rdma.current\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 19:57:18 executing program 0: r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000040)={0x7, 0x10f004}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 19:57:18 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:57:18 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:57:18 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:18 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) write$P9_RSTAT(r2, &(0x7f0000000180)={0x55, 0x7d, 0x2, {0x0, 0x4e, 0x3, 0x101, {0x0, 0x2}, 0x4000000, 0x10000, 0x3, 0x100000000, 0x0, '', 0x9, '/dev/ppp\x00', 0xb, '/dev/loop#\x00', 0x7, 'system@'}}, 0x55) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0xfde8, 0xfa00, {&(0x7f0000000500)}}, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:57:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() fsetxattr$system_posix_acl(r1, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000104000000000000000000000000000010000000000000002000000000000000"], 0x1, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x13) ftruncate(r1, 0x0) 19:57:18 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:57:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 318.818793][T16821] ptrace attach of "/root/syz-executor.2"[16820] was attempted by "/root/syz-executor.2"[16821] 19:57:18 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x328, 0xfa00, {&(0x7f0000000500)}}, 0x3a3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xa, "da222bd956ec6e0a645c"}, &(0x7f0000000180)=0x12) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000140)=r3, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) 19:57:19 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x10000000400008, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:19 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:19 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000680)={0xc, 0x8, 0xfa00, {&(0x7f0000000500)}}, 0x10) r1 = fcntl$getown(r0, 0x9) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000140)=0x2, 0x4) ptrace$setregset(0x4205, r1, 0x202, &(0x7f0000000040)={&(0x7f0000000000)="0c45b3d175c7cd7e98b5a06fe6632d6e9800fe27526a9a4f0c2be13584d9d8a8f267250225e6043c6a7abc3d8364", 0x2e}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0xffffffffffffffb2, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x2a, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) ptrace$peek(0x1, r1, &(0x7f0000000180)) 19:57:19 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x3fffd) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000200)='/dev/input/event#\x00', 0x200, 0x100) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600100002320220326bd7000fddbdf250600000008006200", @ANYRES32=r1, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x8000}, 0x20044000) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r2) 19:57:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:19 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x7ff) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[r2], 0x1) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) eventfd2(0x9, 0x800) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:21 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xfffffffffffffe53, 0x0}, 0xffda) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffff9c, 0xc, 0xffffffffffffff9c, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x7eac8638, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x800) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e0000002700050ad25a80648c63940d0224fc00100003400a000000053582c137153e3709000189cd9eadca77e3", 0x2e}], 0x1}, 0x0) 19:57:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000700)="0adc1f123c123f319bd070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000000000000000000007000000a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fbb11bedfb872a0a11e32f7b0ef6ba185947306a84c6c5e7be78ab9406a3ea01ad8514d024cacb80e3ba5600"/104], 0x1) [ 321.994201][T16881] kvm [16880]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f 19:57:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x103200, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000500)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000006500)={0x0, @loopback, @remote}, &(0x7f0000006540)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000006700)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000006740)={'veth1_to_hsr\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000006a40)={0x0, @loopback, @initdev}, &(0x7f0000006a80)=0xc) accept$packet(0xffffffffffffff9c, &(0x7f0000006b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006bc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000006c00)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000006c40)={0x0, @remote, @loopback}, &(0x7f0000006c80)=0xc) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000007040)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40d0040}, 0xc, &(0x7f0000007000)={&(0x7f0000006cc0)={0x31c, r3, 0x303, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0xf8, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r5}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x1bc, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xced}}, {0x8, 0x6, r10}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x4, 0x21293c3d, 0x3, 0x1ff}, {0xb42d, 0x0, 0x8, 0x3}, {0x10001, 0x9, 0x81, 0xffffffffffffffbf}, {0x10000, 0xc23f, 0x6, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xebe}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x31c}, 0x1, 0x0, 0x0, 0x40810}, 0x240080c0) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) pread64(r1, &(0x7f0000000140)=""/206, 0xce, 0x0) dup2(r0, r1) 19:57:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000080)={0x63}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$pptp(0x18, 0x1, 0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x8b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffee1, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000040), &(0x7f0000000100)=0x14) sendmsg$xdp(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x2c, 0x2, 0x0, 0x1a}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x8000) 19:57:22 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2000000000100811, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5) sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) 19:57:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x731d, 0x80000) bind$vsock_dgram(r2, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @reserved}, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) fcntl$setstatus(r1, 0x4, 0x2000) socketpair(0x11, 0x1, 0x10000000100000, &(0x7f0000000440)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x10000, 0x0) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) r4 = dup2(r0, r1) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xa0000010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x10, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000140)) 19:57:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 322.626324][T16922] binder_alloc: 16920: binder_alloc_buf, no vma [ 322.661693][T16908] kvm [16907]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f 19:57:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:22 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x5) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000140)=""/174) dup2(r0, r1) 19:57:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:23 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) fstat(r0, &(0x7f0000000240)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) accept4$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @reserved}, 0x10, 0x0) dup2(r0, r2) [ 323.088959][T16936] kvm [16934]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f 19:57:23 executing program 1: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 323.649712][T16954] kvm [16953]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f 19:57:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:27 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mISDNtimer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001600)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:57:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {}, 0xab852ebbeefbd631, 0x0, 0x0, 0x0, 0x7fffffff}) 19:57:27 executing program 5: syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x10001, 0x801) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f00000001c0)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) readlink(&(0x7f0000000140)='\x00', &(0x7f0000000300)=""/99, 0x63) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:27 executing program 1: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:27 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r0, &(0x7f0000000080)={0x6000000, 0x0, 0x0, 0x0, 0x223, "a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fbb11bedfb1f8cd557b0bdfcd7f42f63af872a0a11e32f7a0eb6bb02f6b78b1ea580f6ba185947306a84c6c5e7be78ab9406a3ea21ad8514d024cacb80e3ba56"}, 0x68) [ 327.244489][T16973] binder_alloc: 16971: binder_alloc_buf, no vma 19:57:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:27 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000300)=""/174) r2 = dup2(r0, r1) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={&(0x7f00000001c0)=[0x1, 0x7], 0x2, 0x400, 0xffffffff, 0x3, 0x3, 0x8000, {0x100, 0x20, 0xffffffff00000001, 0xfffffffffffffffa, 0x2, 0x9, 0xd5, 0x9, 0x101, 0x80000000, 0xfffffffffffffffa, 0x1, 0x3, 0x8, "b02e1848ad45bf7c0804329ef22606ae9719f36d7ba7fc7af1578fd761b6ed2d"}}) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x1b, 0x7, 0x800, "d378c6f89802cf105de809a12ad56e4c", "7b7bad28f7d8"}, 0x1b, 0x2) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 327.368864][T16981] dlm: Unknown command passed to DLM device : 35 [ 327.368864][T16981] [ 327.388065][T16966] kvm [16965]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f 19:57:27 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 19:57:27 executing program 1: openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:27 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200100000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='rpc_pipefs\x00', 0x0, 0x0) [ 327.860145][T16998] kvm [16995]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f 19:57:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:28 executing program 2: creat(&(0x7f00000003c0)='./file1\x00', 0xa) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000001c00)='./file1\x00', 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, 0x0) 19:57:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:28 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/capi/capi20ncci\x00', 0x12c00, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x3f, @rand_addr="37a899ef912dd6c5b3e55d650cd0c31d", 0x9499}}, [0x6, 0x7, 0x8, 0x81, 0x6, 0x7400000, 0x1, 0x1000, 0x8, 0x20, 0xb11, 0x4, 0x0, 0xd2, 0x101]}, &(0x7f0000000480)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000004c0)={r4, @in={{0x2, 0x4e24, @multicast1}}, 0x8000, 0x4}, &(0x7f0000000580)=0x90) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={&(0x7f0000000180)=@gettaction={0xac, 0x32, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10000}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7d}, @action_gd=@TCA_ACT_TAB={0x88, 0x1, [{0x18, 0x1a, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x18, 0x14, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x10, 0x12, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x11, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x6, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x1f, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r0, r1) 19:57:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 328.148053][T17010] binder_alloc: 17009: binder_alloc_buf, no vma 19:57:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r3 = dup3(r0, r0, 0x80000) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000200)={r3, r0}) fstat(r0, &(0x7f0000000240)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) pwritev(r4, &(0x7f0000000440)=[{&(0x7f0000000140)="3b2429f66031888f0f1cd25f99e6c462206b0f6f3dea07bde25cc64181ecbfd73e72add4305217a6380df6349f1b6f6dfa08a81e8915d776df15c5beb6594706cebf1f056f08a4051e9b07c8ddaf6320eb91611d3b1d943257d4f220726f22646cc572c2141375fcf766c7ca823287032846daa67504e7877e5e92f8a0c8a6e4cd7617e9537f07d9fcf52e86fcbb5f42ea0fe989cdb76038ea58d66fded6ae0d", 0xa0}, {&(0x7f0000000300)="265a12dc057e85540bb9b3b23d32c0f401c4e931cf61826e4b3aed8b1cd956de08f2037ede9e564e5371823e9271647888f091f98acc6c54cd82d58fa7ae20f0f970be896e38a5d3e83f45891874adaa8d6f00fe8d7f1a4b0ddafb5d0e4754f3a6ed17243e06421d55517d9ec09564d37829", 0x72}, {&(0x7f00000000c0)}, {&(0x7f0000000380)="7fa17219466d3636351c9798a38e7b3e1cd3595e5c06e0764d8621505b4ac6c45dd824f77a37bfc50d357e3ba03ea64414c8e21cb6812808d8fc82575fb033b11a295a31e67b92ca1479164b483a01970b6883b5fc0f71e467f1b1aa581dbdb90a3274b0e2824ff72a4cd15e2568eaec77141ca58c8bfcf0ce748b432cb8a278b0e770f6", 0x84}, {&(0x7f0000000200)}], 0x5, 0x0) ioctl$EVIOCGREP(r4, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r0) 19:57:28 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:28 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:28 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @remote}, {0x7, @local}, 0x8, {0x2, 0x0, @local}, 'bridge_slave_0\x00'}) 19:57:28 executing program 0: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000340)={0x8, 0x120, 0xfa00, {0x4, {0xe2a6, 0xfffffffffffffff7, "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", 0x71, 0x81, 0x85d4, 0x5, 0x0, 0x3f6, 0x5}, r3}}, 0x128) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x3, 0x101400) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self\x00', 0x2, 0x0) readlinkat(r4, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/59, 0x3b) dup2(r0, r1) 19:57:28 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:29 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) unshare(0x40000000) 19:57:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:29 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) read$eventfd(r0, 0x0, 0x0) 19:57:29 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:29 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x101000, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000140)={0x3, 0x7, 0x8, 0x7, 0x3, 0x8, 0x65}) fstat(r0, &(0x7f0000000240)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f00000001c0)=0x3ff) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000200)) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) r3 = socket$rxrpc(0x21, 0x2, 0x2) dup2(r3, r2) [ 329.075622][T17069] IPVS: ftp: loaded support on port[0] = 21 19:57:29 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_GET_VERSION(r0, 0x400c55cb, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8800, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) listen(r2, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, 0x0, &(0x7f00000000c0)) close(r6) syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)={'team0\x00'}) getpeername$packet(r4, &(0x7f00000069c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000006a00)=0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000006a80)) accept$packet(0xffffffffffffffff, &(0x7f0000006ac0), &(0x7f0000006b00)=0x14) accept$packet(r4, 0x0, &(0x7f0000006b80)) accept4$packet(r6, 0x0, &(0x7f0000006c00), 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000008180)={@broadcast, @multicast1}, &(0x7f00000081c0)=0xc) accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000009480)={0x0, @broadcast, @dev}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000009540)={{{@in=@broadcast}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000009640)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000009740), &(0x7f0000009780)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000009800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000009840)=0x14, 0x800) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000009a40)={0x0, @loopback, @initdev}, &(0x7f0000009a80)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000009ac0)={@dev, @empty}, &(0x7f0000009b00)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000009b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000009b80)=0x14) accept$packet(r6, &(0x7f0000009bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000009c00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000009c40)={'team0\x00'}) getpeername$packet(r6, &(0x7f0000009d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000009d40)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f000000d880)) getpeername$packet(r4, &(0x7f000000d8c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f000000d900)=0x14) getsockname$packet(r4, &(0x7f000000d940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000d980)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f000000d9c0)={0x0, @broadcast, @multicast2}, &(0x7f000000da00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f000000da40)={{{@in6=@local}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f000000db40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f000000dbc0)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000000f240)={{{@in=@loopback, @in6=@local}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f000000f340)=0xe8) [ 329.455795][T17084] kvm [17082]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000000f 19:57:29 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:29 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x400401, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x800, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz1\x00'}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:57:29 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) pipe2(&(0x7f00000008c0)={0xffffffffffffffff}, 0x800) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000940)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4085}, 0x880) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) iopl(0x1) getsockname(r0, &(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000600)=0x80) rt_sigreturn() r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x42011000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0xf4, r5, 0x2a, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="90c6f0d2ccbac1c4e36c12639b91d1fb"}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xe8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x92}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3d}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x240040d0}, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000200)=""/132, &(0x7f0000000040)=0x84) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xa0, r7, 0x708, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x101}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8011) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x2d, "9bbc4179051fb15bac30086931dc123829a24c638a95e4f60073b50663b945707c3c6a84c1ce4785300565b8b0"}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000480)={r8, 0x80, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x34eb, @mcast1, 0x2}, @in6={0xa, 0x4e22, 0xff, @loopback, 0x400}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0x3bff, @mcast2, 0x25ca}, @in6={0xa, 0x4e21, 0x4, @remote, 0x40}]}, &(0x7f00000004c0)=0x10) 19:57:30 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f00000000c0)='net/ip6_mr_cache\x00') dup2(r0, r1) 19:57:30 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:57:30 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) pipe2(&(0x7f00000008c0)={0xffffffffffffffff}, 0x800) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000940)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4085}, 0x880) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) iopl(0x1) getsockname(r0, &(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000600)=0x80) rt_sigreturn() r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x42011000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0xf4, r5, 0x2a, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="90c6f0d2ccbac1c4e36c12639b91d1fb"}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xe8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x92}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3d}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x240040d0}, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000200)=""/132, &(0x7f0000000040)=0x84) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xa0, r7, 0x708, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x101}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8011) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x2d, "9bbc4179051fb15bac30086931dc123829a24c638a95e4f60073b50663b945707c3c6a84c1ce4785300565b8b0"}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000480)={r8, 0x80, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x34eb, @mcast1, 0x2}, @in6={0xa, 0x4e22, 0xff, @loopback, 0x400}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0x3bff, @mcast2, 0x25ca}, @in6={0xa, 0x4e21, 0x4, @remote, 0x40}]}, &(0x7f00000004c0)=0x10) 19:57:30 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:30 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:57:30 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000480)=""/142, &(0x7f0000000200)=0xfffffffffffffeab) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x260, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r2) 19:57:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) pipe2(&(0x7f00000008c0)={0xffffffffffffffff}, 0x800) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000940)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4085}, 0x880) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) iopl(0x1) getsockname(r0, &(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000600)=0x80) rt_sigreturn() r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x42011000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0xf4, r5, 0x2a, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="90c6f0d2ccbac1c4e36c12639b91d1fb"}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xe8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x92}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3d}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x240040d0}, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000200)=""/132, &(0x7f0000000040)=0x84) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xa0, r7, 0x708, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x101}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8011) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x2d, "9bbc4179051fb15bac30086931dc123829a24c638a95e4f60073b50663b945707c3c6a84c1ce4785300565b8b0"}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000480)={r8, 0x80, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x34eb, @mcast1, 0x2}, @in6={0xa, 0x4e22, 0xff, @loopback, 0x400}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0x3bff, @mcast2, 0x25ca}, @in6={0xa, 0x4e21, 0x4, @remote, 0x40}]}, &(0x7f00000004c0)=0x10) 19:57:30 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:31 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r1, 0x401) [ 331.062844][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 331.069367][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:57:31 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) [ 331.239065][T17165] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:31 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) [ 331.352486][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.362024][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.369378][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:31 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 331.543026][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 331.549676][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 331.573757][T17165] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.671825][T17173] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.679332][T17173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.703026][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 331.709640][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 331.716700][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 331.723345][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:57:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:31 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 19:57:31 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000300)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x4100) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0x72, 0x4) dup2(r0, r1) 19:57:31 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 331.927409][T17200] binder_alloc: 17196: binder_alloc_buf, no vma 19:57:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='pagemap\x00') setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000580)='L\x9appp0\x00', 0x0) gettid() sendfile(r1, r0, 0x0, 0x2000005) 19:57:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:32 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 332.292828][T17209] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.402468][ T3359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.411847][ T3359] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.419331][ T3359] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:32 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x80002000) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0xfffffffffffffffe, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000400)=ANY=[@ANYBLOB="060000000000000000000000800000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a1187a0f12f18a4b8164d9f3fac721019c71044240c2b6bbf6c65c81f3b7986a0c569348463d89551ac1bd12416f07f83696c165edc8c06f84302c6d08caa623d756000000"]) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x101000) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000100)=""/4) dup2(r0, r1) 19:57:32 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x8000, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x3) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x2c, @loopback, 0x4e23, 0x0, 'sh\x00', 0x32, 0x74d6ca5d, 0x59}, {@rand_addr=0x1, 0x4e20, 0x10000, 0x8, 0x1000, 0x8}}, 0x44) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) r3 = dup2(r0, r2) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000001c0)=@req={0x9, 0xffffffffb621bc6b, 0x0, 0x1}, 0x10) [ 332.905236][T17241] binder_alloc: 17239: binder_alloc_buf, no vma [ 332.991144][T17229] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:33 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="24000000220007031dfffd946f6105000a0000000543000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) [ 333.118913][T17236] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.126325][T17236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.142909][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 333.149487][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:57:33 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:57:33 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:33 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:33 executing program 5: syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0xf16f, 0x230000) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x8040, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:33 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) [ 333.852603][T17286] binder_alloc: 17285: binder_alloc_buf, no vma 19:57:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 333.899263][T17268] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.045042][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.054461][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.061779][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:34 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:34 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xd6}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x7fff}, &(0x7f0000000200)=0x8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f0000000600)=""/246) clone(0x1200000, &(0x7f0000000700)="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", &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="1d1783ad3cad67617111e16f8ce5d5126d2f20c990f59549322c976eed5a5f080e31e0f4c96531df6e9c931c09b1efb42e1c14a31ee680024e44a3109fda61dbb587b8ecb4d58d0517185d4e22ee346175c4c7cbddbbd69157aa52f903466138d5bc36222a9fb6e41fcce9b1f6022e20fa28b1b231cc44f9315761840dbfb2ac7870a2a2d044f095f4f411f194f371aeca64aba0879f9e2d07ae0b82de7789ef1982790e9a1cc558a829db70d3628c2aa45696eef86fb0c42147c4a7a950b1ac4feb62") ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r3, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r3) 19:57:34 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:34 executing program 0: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580), 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x148e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') 19:57:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 334.547416][T17299] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) [ 334.670636][T17304] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.678093][T17304] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:34 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mISDNtimer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001600)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:57:34 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:34 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 334.851476][T17319] binder_alloc: 17318: binder_alloc_buf, no vma 19:57:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 335.268564][T17328] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.396219][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.405759][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.413115][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:35 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:35 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:57:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:35 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xe277, 0x40000) fstat(r0, &(0x7f0000000240)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x40, @time={0x0, 0x1c9c380}, 0xffff, {0x120, 0x200}, 0xffffffffffffffff, 0x1, 0x1}) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r2) 19:57:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:35 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:57:35 executing program 0: r0 = socket$inet6(0xa, 0x4000000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x2000000000067, &(0x7f0000000100)=0x8, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth0_to_hsr\x00', 0x10) sendmmsg(r0, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e24, @multicast2}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000200)="10e8fa9b41a4b46485", 0x9}], 0x1}}], 0x1, 0x0) [ 335.815177][T17361] binder_alloc: 17358: binder_alloc_buf, no vma 19:57:36 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 335.987995][T17353] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:36 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) mknod$loop(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8, 0xffffffffffffffff) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000380)='[', 0x1}], 0x1, 0x0) [ 336.103021][ C1] net_ratelimit: 20 callbacks suppressed [ 336.103044][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 336.115377][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 336.162515][T17359] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.169908][T17359] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:36 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 19:57:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @mcast2}, 0x1c) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) 19:57:36 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:36 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x200, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:36 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:36 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) [ 336.729032][T17411] binder_alloc: 17409: binder_alloc_buf, no vma [ 336.829525][T17403] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.915668][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 336.925227][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.932669][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:37 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:37 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:37 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 337.302858][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 337.309339][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 337.357327][T17423] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.506040][T17427] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.513483][T17427] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:38 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:57:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100000000, 0x2) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000140)=""/18) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:38 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) [ 338.102794][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 338.109346][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:57:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) [ 338.183146][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 338.189886][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 338.215534][T17445] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.334729][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.344457][ T31] bridge0: port 1(bridge_slave_0) entered blocking state 19:57:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 338.344659][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:38 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:38 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:38 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) r2 = dup2(r0, r1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r3) 19:57:39 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:57:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:39 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x80440, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000001c0)={0x1bad155, &(0x7f0000000300)=[{}]}) r2 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000003c0)=@ccm_128={{0x43535cfd4d014997}, "fb6ca7a4f560abbf", "786c4ae9f5e7f991cfc6c1b156ed7957", "1825c3a6", "0696695d31ef3946"}, 0x28) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) fdatasync(r1) splice(r0, &(0x7f0000000140), r1, &(0x7f0000000180), 0xb6, 0xa) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x200088, 0x4) dup2(r0, r1) 19:57:39 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:39 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:39 executing program 2: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:39 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:40 executing program 2: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:40 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:57:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:40 executing program 2: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x10000) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:40 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:40 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:40 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x80800, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1, 0x200200) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000140)=""/54) dup2(r0, r1) 19:57:40 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:57:40 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:57:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:41 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x2, 0x2) fstat(r0, &(0x7f0000000240)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000002c0)={0x1bacf914c1bad8f, &(0x7f0000000140)=[{}]}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000200)={0x54, 0x8, 0x6, {0x3ff, 0x28}, {0x9}, @rumble={0x6, 0x1000}}) ioctl$EVIOCGREP(r2, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r2) 19:57:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:41 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:41 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:41 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) socketpair(0x1f, 0x2, 0x7, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) dup2(r0, r1) 19:57:41 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:41 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:41 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$UHID_DESTROY(r1, 0x0, 0x0) 19:57:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:42 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:42 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000200)=0xd5) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r1, 0x2, 0x5}, 0xc) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x501002, 0x0) r3 = dup(r2) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x3, 0x73d5d71f}) connect$rds(r3, &(0x7f0000000340)={0x2, 0x4e24, @rand_addr=0xf97c}, 0x10) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40a000, 0x0) fstat(r4, &(0x7f0000000380)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0xc004743e, &(0x7f0000000600)=""/246) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000400)={@broadcast, @multicast1, @multicast2}, 0xc) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r5, 0x40107446, &(0x7f0000000000)=""/174) socket$inet_sctp(0x2, 0x5, 0x84) dup2(0xffffffffffffffff, r5) 19:57:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$UHID_DESTROY(r1, 0x0, 0x0) 19:57:42 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 342.262898][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 342.269345][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:57:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xfffffffffffffff7, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) [ 342.305606][T17629] binder: 17628:17629 ioctl c0306201 0 returned -14 19:57:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$UHID_DESTROY(r1, 0x0, 0x0) 19:57:42 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:42 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:42 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) 19:57:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:43 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={&(0x7f0000000140)="761516ca99175da0c397f21e7de3410e8501d895c82eac2179b7049706afae692ad0e99bfafb514d4b64f0363b95ccebbffdf33216211fe7dc984870ef4612dc260ed6be4c31e89eb52b54e5252a103d19a04f3d4d08bf647188641ef0b2f70e3404c2b855d9aaa447e96aea32557bd6844a7ca4bfe2ba4a07e81f1b0f888c0c255697f85da09a1139053e52d2954884525aabdab1b68a616ea8d1d5610a73a5e809a30d9066", &(0x7f0000000300)="0f4f96762abd80fd698a9b46dfe1553d0c4e7e4fe6096e50d22ae908aa7757fda2e77a932af484f37bc76879002d10b8594d594a1eb5f61cff5041c5744f85fc14a405d7dc8d3966a7fefb22c4d17557759f8c25d1dc09d783f6fc88628a50ead4235822197b5f4ea6023d9d0495145c5b46fbeabb548d90b3a0c94a99fd3bdb2b8af93e386f98a65979f1167488a0862d2d21d68d78d86afb95889634b74607a974d2e7549920c1a5d7db5e38d2683f837e24c629fcc5cd0ae38f547a5d6a0598016a8435370b2d3d70efcd79aa83b0f6433c9a0930230255e4c4ee4fc3"}}, &(0x7f0000000200)=0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cachefiles\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000480)={0x0, 0x7}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000500)={r4, 0x53, "a623ff15e8b6de33fc9af775b6bba3232aeacb20015145c5a9f34ac66f20e342aaed6d048489dcfc4a187625aabd5e70358bc9db9b4b468ef98dea197d9615c7f37ef346beaf120005a6ae98e8a6b95fe585cc"}, &(0x7f0000000580)=0x5b) timer_gettime(r2, &(0x7f0000000400)) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:43 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 343.182944][T17660] binder: 17654:17660 ioctl c0306201 0 returned -14 19:57:43 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:43 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:43 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x7) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) 19:57:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:43 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) 19:57:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 343.886664][T17686] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:44 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:44 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) [ 343.945799][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 343.955230][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.962567][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:44 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000600)=""/246) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) ioctl$EVIOCGREP(r1, 0x40107446, &(0x7f0000000000)=""/174) dup2(r0, r1) 19:57:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 344.132845][T17699] binder: 17698:17699 ioctl c0306201 0 returned -14 [ 344.182864][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 344.189268][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 344.195853][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 344.202287][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:57:44 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 344.292688][T17703] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:44 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) [ 344.342783][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 344.349156][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 344.422831][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 344.429405][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 344.451873][T17707] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.459370][T17707] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:44 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:44 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 344.818522][T17725] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004840)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001300)=""/111, 0x6f}, {&(0x7f0000001380)=""/204, 0xcc}, {&(0x7f0000001480)=""/153, 0x99}], 0x4, &(0x7f00000015c0)=""/103, 0x67}, 0x5}, {{0x0, 0x0, &(0x7f0000003d40)}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, &(0x7f00000049c0)) writev(r0, &(0x7f00000023c0), 0x1000000000000252) [ 344.973474][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.983098][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.990504][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:45 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:45 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) 19:57:45 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r1 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) read$eventfd(r1, 0x0, 0x0) 19:57:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) [ 345.471723][T17743] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:45 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) [ 345.558724][T17751] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.566131][T17751] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:45 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x80000006}]}, 0x10) 19:57:45 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:45 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) 19:57:45 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:46 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8a03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "57612471408982025872100b70c10a02"}) 19:57:46 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) [ 346.223760][T17777] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:46 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 346.362153][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 346.371586][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.379128][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:46 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:46 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:46 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:46 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) 19:57:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 346.951690][T17810] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.008414][T17815] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.015753][T17815] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:47 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:47 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:47 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:47 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:47 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) 19:57:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 347.601165][T17841] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.703146][ C1] net_ratelimit: 6 callbacks suppressed [ 347.703170][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 347.715524][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 347.806284][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.815619][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.822997][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:47 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:47 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd0") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:48 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) [ 348.182898][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 348.189341][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 348.200989][T17866] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.283805][T17871] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.291175][T17871] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:48 executing program 0: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) 19:57:48 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 348.342821][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 348.349229][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 348.355892][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 348.362267][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:57:48 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:48 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:48 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 348.852385][T17895] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 348.907995][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.917529][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.925007][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:49 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:49 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:49 executing program 0: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) 19:57:49 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:49 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 349.501819][T17918] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.679011][T17924] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.686411][T17924] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:49 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:49 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 350.031515][T17947] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.119199][T13130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 350.128732][T13130] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.136235][T13130] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:50 executing program 5: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:50 executing program 0: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) 19:57:50 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 350.365630][T17968] binder: 17961:17968 ioctl c0306201 20000100 returned -14 [ 350.423025][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 350.429644][ C0] protocol 88fb is buggy, dev hsr_slave_1 19:57:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) [ 350.522654][T17977] binder: 17976:17977 ioctl c0306201 20000100 returned -14 19:57:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:50 executing program 5: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 350.635901][T17973] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.735098][T17987] binder: 17986:17987 ioctl c0306201 20000100 returned -14 [ 350.763931][T17983] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.771287][T17983] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:50 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:50 executing program 5: setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:51 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:51 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) [ 351.083444][T18004] binder: 17999:18004 ioctl c0306201 20000100 returned -14 19:57:51 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:51 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) [ 351.363459][T18005] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.511162][T18025] binder: 18024:18025 ioctl c0306201 20000100 returned -14 [ 351.528201][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.537835][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.545330][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:51 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:51 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:51 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) [ 351.850425][T18040] binder: 18037:18040 ioctl c0306201 20000100 returned -14 19:57:51 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:52 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:57:52 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) [ 352.159262][T18044] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:52 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 352.379550][T18049] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.387011][T18049] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:52 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:52 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 352.743095][ C1] net_ratelimit: 8 callbacks suppressed [ 352.743116][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 352.755679][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:57:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 19:57:52 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:52 executing program 0: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) [ 352.900994][T18096] binder: 18095:18096 ioctl c0306201 0 returned -14 [ 352.951704][T18085] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 353.096871][T13130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.106367][T13130] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.113752][T13130] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:53 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 353.192399][T18107] binder: 18106:18107 ioctl c0306201 0 returned -14 19:57:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319b") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:53 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 19:57:53 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 353.521767][T18126] binder: 18124:18126 ioctl c0306201 0 returned -14 19:57:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:53 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) [ 353.694053][T18118] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.781474][T18128] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.788918][T18128] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:53 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:53 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319b") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:54 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:54 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:54 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) [ 354.319466][T18153] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:54 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 354.393403][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.402795][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.410156][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.422792][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:57:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319b") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:54 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:54 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:54 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd0") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:54 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:55 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:55 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 355.155687][T18197] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.240825][T18208] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.248340][T18208] bridge0: port 1(bridge_slave_0) entered forwarding state 19:57:55 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) 19:57:55 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd0") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:55 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:55 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:55 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 355.908820][T18231] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.984843][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.994444][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.001743][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.023045][ C1] protocol 88fb is buggy, dev hsr_slave_0 19:57:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 356.029656][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:57:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd0") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:56 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:56 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:57:56 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) [ 356.358941][T18248] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 356.501280][T18256] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.508830][T18256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.517456][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 356.524087][ C1] protocol 88fb is buggy, dev hsr_slave_1 19:57:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:56 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:56 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 356.822729][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 356.829132][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 356.902907][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 356.941165][T18274] bridge0: port 1(bridge_slave_0) entered disabled state 19:57:57 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:57 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:57:57 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:57 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?', 0x22000000c0ffffff}) 19:57:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:57 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 19:57:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:57 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:58 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:57:58 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 19:57:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:58 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000dbd000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 19:57:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 19:57:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x500000000000000, &(0x7f0000000b80)='\x00'}) 19:57:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:58 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, 0x0, 0x0) 19:57:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?'}) 19:57:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?'}) 19:57:58 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, 0x0, 0x0) 19:57:58 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:57:59 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x2d, 0x0, 0x0) 19:57:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:57:59 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00?'}) 19:57:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x0, 0x500000000000000, 0x0}) 19:57:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:57:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x4b564d03, 0x1]}) 19:57:59 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004840)=[{{&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000001540)=[{0x0}, {0x0}], 0x2, &(0x7f00000015c0)=""/103, 0x67}, 0x5}, {{0x0, 0x0, 0x0}, 0xf20}], 0x2, 0x10000, &(0x7f00000049c0)) writev(r0, &(0x7f00000023c0), 0x1000000000000252) 19:57:59 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:57:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x0, 0x500000000000000, 0x0}) 19:57:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000540)=[{&(0x7f0000000080)='X', 0x1}], 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x20000000003, 0x0) 19:57:59 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:57:59 executing program 5: r0 = socket$kcm(0xa, 0x522000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0xeca60000, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0x80, 0x0}, 0xb50) 19:57:59 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:57:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x0, 0x500000000000000, 0x0}) 19:58:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000140)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r1) 19:58:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:58:00 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmsg$key(r0, &(0x7f00000001c0)={0x20480, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/16], 0x10}, 0x6}, 0x0) 19:58:00 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:58:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x0, 0x500000000000000, &(0x7f0000000b80)}) 19:58:00 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:58:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:58:00 executing program 2: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)) ioprio_set$pid(0x3, 0x0, 0x0) 19:58:00 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x80001000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000140)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close(r1) [ 360.430780][T18449] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) 19:58:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x0, 0x500000000000000, &(0x7f0000000b80)}) 19:58:00 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:58:00 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:58:00 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) memfd_create(0x0, 0x0) memfd_create(0x0, 0x2) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x2) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x72, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x400000, 0x0) write$P9_RWRITE(r2, &(0x7f0000000240)={0xb, 0x77, 0x1, 0x100000001}, 0xb) sendto$inet(r1, 0x0, 0x5b, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000140)=[@exit_looper, @register_looper, @acquire={0x40046305, 0x3}], 0x0, 0x0, &(0x7f00000001c0)}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x7}, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 19:58:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:58:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x0, 0x500000000000000, &(0x7f0000000b80)}) 19:58:01 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 19:58:01 executing program 1: openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.clone_children\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:58:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:58:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r1, 0x301}, 0x14}}, 0x0) 19:58:01 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:58:01 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:58:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:58:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect$inet6(r0, &(0x7f0000000100), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x80fe) 19:58:01 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='G\xffL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="33215aab4087f687ff16f8b00800", 0x0, 0xf000}, 0x28) 19:58:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x1000) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) 19:58:01 executing program 1: clone(0x40002300001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000140)="06c6be56", 0x4) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x79) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="070100000d000000ffffffff00000004ce00000000000000"], 0x18) 19:58:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9130b00000f32b964090000b8e2555325ba000000000f3066f20f35b8010000000f01d90fc79b5630000066ba6100edc4e2fd3e8cc92d1e0000c4c11ddc3ab9800000c00f3235008000000f308fe950014e00", 0x53}], 0x2bb, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 19:58:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') sendfile(r0, r1, 0x0, 0x1) socket$key(0xf, 0x3, 0x2) [ 361.939505][T18518] net_ratelimit: 1 callbacks suppressed [ 361.939539][T18518] skbuff: bad partial csum: csum=0/65535 headroom=2 headlen=14 19:58:02 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x4, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b1c8a4e3d503e6dd"}}, 0x48}}, 0x0) 19:58:02 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$RTC_UIE_OFF(r2, 0x7004) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000d23000)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x1f) wait4(0x0, 0x0, 0x0, 0x0) 19:58:02 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) [ 362.327031][T18537] binder: 18535:18537 ioctl 7004 0 returned -22 19:58:02 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:58:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 19:58:02 executing program 2: unshare(0x8000400) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) 19:58:02 executing program 1: unshare(0x8000400) r0 = mq_open(&(0x7f0000000080)='-$\x00', 0x43, 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) 19:58:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r2 = dup2(r0, r1) clone(0x2100001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EVIOCGUNIQ(r2, 0x80404508, 0x0) mount(0x0, &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='hfsp,us\x00', 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 19:58:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:58:02 executing program 4: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000200)='./file0\x00') r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) read$eventfd(r0, 0x0, 0x26c) 19:58:03 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 19:58:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x5, 0x1}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) 19:58:03 executing program 4: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) memfd_create(0x0, 0x0) memfd_create(0x0, 0x2) memfd_create(0x0, 0x2) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000240)={0xb, 0x77, 0x1, 0x100000001}, 0xb) sendto$inet(r0, 0x0, 0x5b, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x7}, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 19:58:03 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xffffff8e, &(0x7f0000000040)=[{0x0, 0xffffffffffffff6a}], 0x1}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="310000001300070f690006007a000010ab008048100000004600010700000054090003c0256465a38000000000000000fe", 0x31}], 0x1) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492a6c, 0x0) 19:58:03 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) [ 363.376842][T18593] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. 19:58:03 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:58:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x0, 0x0, 0x0, 0x182) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4cb]}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000001c0)={0x0, 0x0, 'client1\x00', 0x0, "ee283b2fbd78f82b", "1e49858715ff5bf3e2228114c8deee627b1be71a61edd349dbc2294d3e4c55c2"}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:58:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x801, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) [ 363.815136][T18606] kvm [18601]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000000f [ 363.940866][T18606] kvm [18601]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000000f 19:58:04 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) pipe2(&(0x7f00000008c0)={0xffffffffffffffff}, 0x800) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000940)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4085}, 0x880) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) iopl(0x1) getsockname(r0, &(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000600)=0x80) rt_sigreturn() r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x42011000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0xf4, r5, 0x2a, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="90c6f0d2ccbac1c4e36c12639b91d1fb"}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xe8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x92}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3d}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x240040d0}, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000200)=""/132, &(0x7f0000000040)=0x84) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x200004) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xa0, r7, 0x708, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x101}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8011) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x2d, "9bbc4179051fb15bac30086931dc123829a24c638a95e4f60073b50663b945707c3c6a84c1ce4785300565b8b0"}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000480)={r8, 0x80, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x34eb, @mcast1, 0x2}, @in6={0xa, 0x4e22, 0xff, @loopback, 0x400}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0x3bff, @mcast2, 0x25ca}, @in6={0xa, 0x4e21, 0x4, @remote, 0x40}]}, &(0x7f00000004c0)=0x10) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000500)={{0xa, 0x4e24, 0x1, @empty, 0xfffffffffffffff9}, {0xa, 0x4e23, 0x0, @local, 0x4}, 0x1, [0x1, 0x7, 0xedcc, 0x3f, 0x3a76, 0x0, 0x7, 0x9]}, 0x5c) 19:58:04 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8a03, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "57612471408982025872100b70c10a02"}) 19:58:04 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, &(0x7f0000000300)={0x0}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 19:58:04 executing program 4: ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000140)=0xe76, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000040c0)='cpuacct.usage_user\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000004100)={0x0, 0x8}, &(0x7f0000004140)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000004180)={r3, 0x49, 0xdf, 0x5, 0x1, 0x1}, 0x14) r4 = socket$inet_udplite(0x2, 0x2, 0x88) close(r4) r5 = socket(0x800000000000011, 0x2, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f00000003c0), &(0x7f0000000400)=0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000380)) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, 0x0, 0x4000085) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000000c0), 0x4557434d) ioctl$FITRIM(r6, 0xc0185879, 0x0) sendfile(r4, r7, 0x0, 0x20000000006) ioctl$sock_ifreq(r1, 0x20000008990, &(0x7f0000000000)={'batadv0\x00', @ifru_flags=0x800}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'bond0\x00\x04%\x00 \x00\x00\x00/\x98\x00', @ifru_names='bond_slave_1\x00\x00\xa1*'}) 19:58:04 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:58:04 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:58:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x6, 0xdd5, 0x0, 0x11d]}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 364.831303][T18633] bond0: Releasing backup interface bond_slave_1 19:58:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") connect(r0, &(0x7f0000000140)=@can, 0x80) [ 365.213774][T18648] kvm: pic: non byte write [ 365.231838][T18648] kvm: pic: non byte write [ 365.250941][T18648] kvm [18639]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000fd0f 19:58:05 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) 19:58:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") creat(&(0x7f0000000100)='./file0\x00', 0x2000828) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3, 0x0) 19:58:05 executing program 3: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x3d3427e) unlink(&(0x7f0000000100)='./file0\x00') clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) statfs(0x0, 0x0) r1 = gettid() mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='bdev\x00', 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x14) 19:58:05 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) memfd_create(0x0, 0x0) memfd_create(0x0, 0x2) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x2) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x2) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x72, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x400000, 0x0) sendto$inet(r1, 0x0, 0x5b, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000140)=[@exit_looper, @register_looper, @acquire={0x40046305, 0x3}], 0x0, 0x0, &(0x7f00000001c0)}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000080)={0x7}, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 19:58:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") clone(0x20002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x10, 0x400000000002, 0x6) sendmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="4c0000001200ff09fffefd856fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000006400)=[{{0x0, 0x0, 0x0}}], 0x565, 0x0, 0x0) 19:58:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) [ 365.894975][T18673] ptrace attach of "/root/syz-executor.3"[18670] was attempted by "/root/syz-executor.3"[18673] 19:58:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) [ 366.010030][T18677] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. 19:58:06 executing program 4: timer_create(0x0, 0x0, &(0x7f0000044000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3000004, 0x31, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 19:58:06 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r2, 0x0, 0x0) 19:58:06 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x2) lseek(0xffffffffffffffff, 0x0, 0x2) lsetxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x5, 0x8}]}, 0xc, 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) 19:58:06 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() write$9p(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 19:58:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:06 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='cgroup\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) 19:58:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x80000000000002, &(0x7f0000000140)=0x8000000010000006, 0x100000187) setsockopt$sock_int(r0, 0x1, 0x4000000200000002, &(0x7f00000001c0)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x800001000008912, &(0x7f0000000280)="11dca5055e0bcfe47bf070") r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000080), 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) 19:58:06 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) memfd_create(0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x2) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x5b, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x7}, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 19:58:06 executing program 4: [ 366.897335][T18723] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:58:07 executing program 4: 19:58:07 executing program 4: 19:58:07 executing program 5: 19:58:07 executing program 3: 19:58:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) sendmsg(0xffffffffffffffff, 0x0, 0x0) 19:58:07 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) 19:58:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:07 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000180), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001300)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000e80)="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", 0x480, 0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080), 0x4) 19:58:07 executing program 3: 19:58:07 executing program 2: 19:58:08 executing program 3: 19:58:08 executing program 4: 19:58:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) sendmsg(0xffffffffffffffff, 0x0, 0x0) 19:58:08 executing program 2: 19:58:08 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) 19:58:08 executing program 3: 19:58:08 executing program 4: 19:58:08 executing program 3: 19:58:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) sendmsg(0xffffffffffffffff, 0x0, 0x0) 19:58:08 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(r1, 0x0, 0x0) 19:58:08 executing program 2: 19:58:08 executing program 4: 19:58:08 executing program 3: 19:58:08 executing program 3: 19:58:08 executing program 4: 19:58:08 executing program 2: 19:58:08 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) 19:58:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) sendmsg(0xffffffffffffffff, 0x0, 0x0) 19:58:09 executing program 3: 19:58:09 executing program 4: 19:58:09 executing program 2: 19:58:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) 19:58:09 executing program 3: 19:58:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:09 executing program 2: 19:58:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$UHID_DESTROY(r2, 0x0, 0x0) 19:58:09 executing program 3: 19:58:09 executing program 4: 19:58:09 executing program 3: 19:58:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1ffe00) 19:58:09 executing program 4: 19:58:09 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) 19:58:09 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:09 executing program 2: 19:58:09 executing program 4: 19:58:09 executing program 2: 19:58:09 executing program 3: 19:58:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1ffe00) 19:58:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:10 executing program 3: 19:58:10 executing program 2: 19:58:10 executing program 4: 19:58:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1ffe00) 19:58:10 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) 19:58:10 executing program 3: 19:58:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:10 executing program 4: 19:58:10 executing program 2: 19:58:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:10 executing program 4: 19:58:10 executing program 2: 19:58:10 executing program 3: 19:58:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:10 executing program 3: 19:58:11 executing program 2: 19:58:11 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40201, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) 19:58:11 executing program 4: 19:58:11 executing program 3: 19:58:11 executing program 2: 19:58:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:11 executing program 4: 19:58:11 executing program 2: 19:58:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(0xffffffffffffffff, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:11 executing program 3: 19:58:11 executing program 2: 19:58:11 executing program 4: 19:58:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:12 executing program 3: 19:58:12 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:12 executing program 2: 19:58:12 executing program 4: 19:58:12 executing program 0: 19:58:12 executing program 3: 19:58:12 executing program 2: 19:58:12 executing program 4: 19:58:12 executing program 0: 19:58:12 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:12 executing program 3: 19:58:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r0 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(0xffffffffffffffff, r0, 0x0, 0x1ffe00) 19:58:13 executing program 2: 19:58:13 executing program 0: 19:58:13 executing program 4: 19:58:13 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:13 executing program 3: 19:58:13 executing program 0: 19:58:13 executing program 3: 19:58:13 executing program 2: 19:58:13 executing program 4: 19:58:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r0 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(0xffffffffffffffff, r0, 0x0, 0x1ffe00) 19:58:13 executing program 0: 19:58:13 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:13 executing program 2: 19:58:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r0 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r0, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(0xffffffffffffffff, r0, 0x0, 0x1ffe00) 19:58:13 executing program 3: 19:58:13 executing program 0: 19:58:13 executing program 4: 19:58:13 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:13 executing program 0: 19:58:13 executing program 2: 19:58:13 executing program 3: 19:58:13 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:13 executing program 4: 19:58:13 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:13 executing program 2: 19:58:13 executing program 0: 19:58:14 executing program 3: 19:58:14 executing program 4: 19:58:14 executing program 2: 19:58:14 executing program 0: 19:58:14 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:14 executing program 3: 19:58:14 executing program 4: 19:58:14 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:14 executing program 0: 19:58:14 executing program 2: 19:58:14 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:14 executing program 3: 19:58:14 executing program 4: 19:58:14 executing program 0: 19:58:14 executing program 2: 19:58:14 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:14 executing program 4: 19:58:14 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:14 executing program 3: 19:58:14 executing program 0: 19:58:14 executing program 2: 19:58:15 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:15 executing program 4: 19:58:15 executing program 3: 19:58:15 executing program 0: 19:58:15 executing program 2: 19:58:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:15 executing program 4: 19:58:15 executing program 0: 19:58:15 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:15 executing program 2: 19:58:15 executing program 3: 19:58:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:15 executing program 0: 19:58:15 executing program 4: 19:58:15 executing program 2: 19:58:15 executing program 3: 19:58:15 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:15 executing program 4: 19:58:15 executing program 0: 19:58:15 executing program 2: 19:58:16 executing program 3: 19:58:16 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:16 executing program 4: 19:58:16 executing program 0: 19:58:16 executing program 2: 19:58:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:16 executing program 3: 19:58:16 executing program 4: 19:58:16 executing program 2: 19:58:16 executing program 0: 19:58:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:16 executing program 2: 19:58:16 executing program 4: 19:58:16 executing program 0: 19:58:16 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:16 executing program 3: 19:58:16 executing program 2: 19:58:16 executing program 4: 19:58:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:16 executing program 4: 19:58:16 executing program 2: 19:58:16 executing program 0: 19:58:16 executing program 3: 19:58:17 executing program 4: 19:58:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:17 executing program 0: 19:58:17 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:17 executing program 2: 19:58:17 executing program 3: 19:58:17 executing program 4: 19:58:17 executing program 0: 19:58:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:17 executing program 3: 19:58:17 executing program 4: 19:58:17 executing program 0: 19:58:17 executing program 2: 19:58:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:17 executing program 4: 19:58:17 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:17 executing program 3: 19:58:17 executing program 2: 19:58:17 executing program 0: 19:58:17 executing program 4: 19:58:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c12") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:17 executing program 3: 19:58:18 executing program 2: 19:58:18 executing program 0: 19:58:18 executing program 3: 19:58:18 executing program 4: 19:58:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') ioctl$TIOCSETD(r0, 0x5423, 0x0) 19:58:18 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "3e4daf8b34b4287f320fabb79b7ea1c950f924f05624d1f328eb901ad92e46ab9702353529209a7885afd0cb7c8051ef7f54c74cec2979f65c7dff6ab29eccd7", "cb08d7f40a86b666cbf77623dec36dd5f6f2e04cc54a10195fcb0f2bc8eb9b86bb25dc438dd76a4fb81d4e76e6bb00f75fbf75d7f915234ad8dd249bc58c674d", "2966e5748bd90a001277ed30e0722fd523ef0e43935222223f9a3175427147ea"}) 19:58:18 executing program 3: 19:58:18 executing program 4: 19:58:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c12") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:18 executing program 3: 19:58:18 executing program 4: 19:58:18 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c12") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) read(r0, &(0x7f0000000040)=""/11, 0xb) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) unshare(0x20020000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 19:58:18 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/\x00\x00z0\xdf\n\xcb\xf0\xce\xd9,Fj\xbd\xad\x89!\xf9\x00\x9f\x80\xd5\x01)c)\xaa\xba\x92\xe1\xd6\xa6\x0fTA\x16jwl\x1a\x92% \x1dY\xed\x87b_\xc4\x97r\xf68u\xf4~g\x1b\xf3g\x0e\x167\x0f\xc2\x93\xef\xe1\x91\x81\xe3\xc7*\xdb\x84\x82$\xaa\x8f\xd6 \x98\x91\f\xf4R\x99\xb2\x87#E\xccGc\xf2\x0fs\xed\xff\xc7\xed>Zy\x92\t\xcd\xc8\fN4\x1fn\x99\xd3\x01\x00\xb2gR\xdb\xd1\x95`\xadf\xdb($B\x95\xd1\xef\x15\x9ek\b\xc7\x17u<\xcb\xec\xde\x92 \xf1\x01X!y\x8e\f\x1eo\x84o\x12\x1b\x17\xb3\xd7%Mw\xb9[\v\x19B\n\x87l\x9b\xacn\x86tt\xeb\xb7\xf9r\x82\x16\xac\x12\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9a\x02\xc6\xf0j\x990L\x12\xaboL\x8cD\xb4KRL\xb1\b\xcf\xce\x15Y\xb17\x9fVOn\x9e\xdc\xb7\xddz\xb8\xc8\xa6\x12\x8aC\x99Ai\xaef\x01>\x10\x98\xf42\xe9\xe0?\xae', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000200), 0x12) 19:58:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) unshare(0x20020000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) 19:58:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319b") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:19 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x101b00) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6d6ba810b7e0b200b2ae42b47cb162dbee4914b240eb38eaf7ed252d56e6c1bc331a89edb2f861a8ab0ecf20c1943aef08ad06380e2e2bd13fb2a6f9fd55486", "f559d8fb0ea8654a88181083e7e093f7f62fe55f6ddcda5de6560ca69600125af02bfa88f9cfd236e29f62a5215349af9e19d8f78be11c01769b0d625dd08856", "4c9c8824597bd9c1a3a3148fe710734afea312d02515b9bdc846bc07ab3e3254"}) 19:58:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) unshare(0x20020000) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)) 19:58:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "3e4daf8b34b4287f320fabb79b7ea1c950f924f05624d1f328eb901ad92e46ab9702353529209a7885afd0cb7c8051ef7f54c74cec2979f65c7dff6ab29eccd7", "cb08d7f40a86b666cbf77623dec36dd5f6f2e04cc54a10195fcb0f2bc8eb9b86bb25dc438dd76a4fb81d4e76e6bb00f75fbf75d7f915234ad8dd249bc58c674d", "2966e5748bd90a001277ed30e0722fd523ef0e43935222223f9a3175427147ea"}) 19:58:19 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:19 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:19 executing program 3: 19:58:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc78e0ba568f8254) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@loopback, @in6=@remote}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x4d4, 0xff}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 19:58:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319b") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x4000000000001fa, 0xffd8) 19:58:19 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) 19:58:19 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0xff}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x1}}, 0xe8) clock_getres(0x2, &(0x7f0000000080)) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x80) write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) 19:58:19 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(0x0, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319b") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) [ 379.694356][T19303] ptrace attach of "/root/syz-executor.0"[12675] was attempted by "/root/syz-executor.0"[19303] 19:58:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x101b00) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 19:58:19 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) [ 379.742736][T19303] ptrace attach of "/root/syz-executor.0"[12675] was attempted by "/root/syz-executor.0"[19303] 19:58:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd0") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:19 executing program 0: 19:58:20 executing program 3: 19:58:20 executing program 2: 19:58:20 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:20 executing program 4: 19:58:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd0") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:20 executing program 0: 19:58:20 executing program 3: 19:58:20 executing program 2: 19:58:20 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:20 executing program 4: 19:58:20 executing program 3: 19:58:20 executing program 0: 19:58:20 executing program 2: 19:58:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd0") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:20 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:20 executing program 3: 19:58:20 executing program 4: 19:58:20 executing program 2: 19:58:20 executing program 0: 19:58:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:20 executing program 3: 19:58:21 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:21 executing program 4: 19:58:21 executing program 2: 19:58:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:21 executing program 0: 19:58:21 executing program 3: 19:58:21 executing program 2: 19:58:21 executing program 4: 19:58:21 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, 0x0, 0x0, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:21 executing program 0: 19:58:21 executing program 3: 19:58:21 executing program 2: 19:58:21 executing program 4: 19:58:21 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040), 0x0, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:21 executing program 0: 19:58:21 executing program 2: 19:58:21 executing program 3: 19:58:21 executing program 2: 19:58:21 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040), 0x0, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:21 executing program 0: 19:58:21 executing program 4: 19:58:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:21 executing program 3: 19:58:22 executing program 2: 19:58:22 executing program 3: 19:58:22 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040), 0x0, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:22 executing program 4: 19:58:22 executing program 0: 19:58:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:22 executing program 4: 19:58:22 executing program 2: 19:58:22 executing program 3: 19:58:22 executing program 0: 19:58:22 executing program 4: 19:58:22 executing program 3: 19:58:22 executing program 0: 19:58:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:22 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{0x0}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:22 executing program 4: 19:58:22 executing program 3: 19:58:22 executing program 2: 19:58:22 executing program 0: 19:58:22 executing program 4: 19:58:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:23 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{0x0}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:23 executing program 3: 19:58:23 executing program 2: 19:58:23 executing program 0: 19:58:23 executing program 4: 19:58:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:23 executing program 3: 19:58:23 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{0x0}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:23 executing program 2: 19:58:23 executing program 4: 19:58:23 executing program 0: 19:58:23 executing program 3: 19:58:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:23 executing program 2: 19:58:23 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:23 executing program 4: 19:58:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000280)="0adc1f123c123f319bd070") r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\f\xee\xc6\xcb\"I\xd0AVImG\x9e~\x01\xf0,\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xca\xcf\x13\x19\xc5I\t@\x00\x00\x00\x00\x00\x00@\x03\xee\xce2\xa3\'\xcb\xa6\xf2\xba\xc6x\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc') r2 = syz_open_procfs(0x0, &(0x7f0000000840)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3W8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf\x93\x89t\xf4\x8dB\fI\xe5\xb3\t\x00\x00\x00\x00\x00\x00\x00\x19/?G\xc7\xea\x9a+\x9c5\xbf%32\xe8\x83>\xfa\xb8L\xde\xc6<\x1fs\xe1\xdf\x14\xa2^\xd1\xd9U\xc0\x99$\x8a\'\fx\xa2\xb1\xc9/\xb4\xfdp4\xc3\"\xea\x95\xce\x10R\xa8p\xc6\xdf\xc8|x\x14\xb8\xa2\xbb\xc5\x7f\xe2\x97\x1cr\x84\xc7\xba\x86\x96k1v\x17z{\x91Le~+\xe5r0\x0ez4\x12E\xb2[\xb5\x94\x00\x05\t\xd1o\xcfWR\xe8.\x8b\x83Rl\xd1\xec\x89)Xdig\"2*^\xcd=\xdf\xda\x83%4\xe5_q A!I\xbb\x7f\x9c\x13\xff0G\xc9\x92A\xcf\x03\xaa\xc0G\xaerd\x11\xe6\x00\x00\x00\x00|;\xb1@2\xdbs\x8b4Pk\xc2Sl\xc1\x90\xd9\a2eL\xef\x8eGX\x8c\xbbA\xa6\xf2Y?\xd0\x7fe\x12\x01\x90\x12t\xfe\x02\xa0Xg\x9c,pb\x16\x97e\x90\x12X\xa5\x93\xae\x00\x14y\xdd\xf9\xf5{4GY\xf4@\x92\x05\xe91\x16\xf5\x9a\xf8\x1a>\x11\xe6\xf7q\xec\x9e.\xd6\x05\b\a\xb9\ri\x86\x1d\x8c\xfaO\b8\x0f\xceL!\xcf\x16\xcf\xfd<;\xac\x9b.\xeb\xee]d]\xb2\x0f<\xfb\xa6\x9b\x85\x1b\xaf\xe8\x81n\n\x0f6!\xfa\xe6\xedT\xab\x0e\x18\xc2\x84\xb9\x81\xbd\xc3\x96z\xc6;\x90m\xd2\xbf\f\xd7\xe6\x1c\xd0\xd2\xa7\xde\xc9p\x8e\xd7:U~\x19\xee#\xcb\x1a\xb83QI7\x17~v\x11n6/+\xf8/\xb1V\xc9\xf4\xe4\x82\x88c\xec\xbfs4\x8f=\x8c\b\xbbQ\xf5\x96\x96\xc1\xa1^R\xf5\xe1o\xe2\x87\xfe\xb7\n\xc5\xde\x0ea\xcfi\a|`Z\n\x9e\x91v\x83?.](\xc8#\xa9\xfe\a\x15N\xc8\x17\xba\xb5)\x00\v\x8fQ\x8e:\xad\xcc\x87\xb5\xd4\xccI\xf5K\x02\x89?\xa2\xb9\xeeT\xe5E\x05I\x04\xa3\xeb1\x0f\xeb\xb9+\xeezU\x06\x8f\xdd\xa8\xb3\xe4\xcb\x99\xc9\xbc\xbaa\xc1L\n\xc6\xd7\x1dVITL\xa6\x8a\x86\xaa\xc7\xb0\xd9\xe41\xc1\xe4\xc9G\xf8A]\xd5\xbe\x16C\x06\x81\x9b\"\x16y\xa1_a\'`\xff$\xafJL\x17?\xe0rQ,\xd5z\x7f\x8eF\xf7\xcf;V0.M2\x83\xefk@9\xd0\xf3\x8d+\xa1\xb33\x81J\xd2]\xdc\xfd\xc8<\x1e\xea\x94\xc6\xdb/ \x10z\xbb%mDV\xe0\x81\xe7x\x80v9\xb5\v\b\xa4\xdfp\x96\xa7E#=U\x16\x91\r\xf7\xd4\xd1\"2\x81g\xa4h\x18\xc2\x0f\xbb\xccgEb=0\x80\xb4:\x1f\xa3\x11\xd5\xda\x85\x9f\xe2t\xe4\xdb\x0f\x8c\xa0\x00\xfb\\\xcd\x03\xeeub\rH@\x9c\x9a\x17\x0f\xb9m?K>hr\x16\xa3\xda\x150.Q\xd9\xd9{\xc1\xfc\xff&\x06\x91._P\x17\x04\xb0\xf2\x1a\xf4i\"\xb6\x1c\x97\xfd\x89\xad\xbb\xaa \xb5\xedU\xd6 \xaf\x94G\xe3\x83\xa9\xc1\x9eni\xfe\x8aS9\xcb\xb4\xd2\xd1\xeav\xdby\x9e\x10[\x8f\xd0\xb6\te[\xfc\xac\'z\x8a\x96\xe5\xc0)$\x86x') sendfile(r1, r2, 0x0, 0x1) 19:58:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x200000000000039e, &(0x7f00000001c0)=[&(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) 19:58:23 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:23 executing program 2: 19:58:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="8adc00003c123f319bd070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000e4e000)) write$vnet(r1, &(0x7f0000000540)={0x1, {&(0x7f0000000640)=""/139, 0x8b, 0x0, 0x0, 0x2}}, 0x68) 19:58:23 executing program 4: 19:58:24 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)}], 0x1, 0x800000) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:24 executing program 2: 19:58:24 executing program 4: 19:58:24 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) r1 = memfd_create(&(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) sendfile(r0, r1, 0x0, 0x1ffe00) 19:58:24 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0x100000000}) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000180)) ptrace(0x10, r0) ptrace$poke(0x4209, r0, &(0x7f00000000c0), 0x716000) 19:58:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40286608, &(0x7f0000000040)={0xffffffffffffffff}) [ 384.708870][T19547] ================================================================== [ 384.717039][T19547] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x16b/0x1f0 [ 384.724276][T19547] CPU: 0 PID: 19547 Comm: syz-executor.4 Not tainted 5.1.0+ #1 [ 384.732973][T19547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.743133][T19547] Call Trace: [ 384.746941][T19547] dump_stack+0x191/0x1f0 [ 384.751312][T19547] kmsan_report+0x130/0x2a0 [ 384.755955][T19547] kmsan_internal_check_memory+0x974/0xa80 [ 384.761814][T19547] ? page_fault+0x3d/0x50 [ 384.766189][T19547] kmsan_copy_to_user+0xa9/0xb0 [ 384.771082][T19547] _copy_to_user+0x16b/0x1f0 [ 384.775817][T19547] copy_siginfo_to_user+0x80/0x160 [ 384.780968][T19547] ptrace_request+0x24bd/0x2950 [ 384.785985][T19547] ? wait_task_inactive+0x7b4/0x9b0 [ 384.791341][T19547] arch_ptrace+0x9fa/0x1090 [ 384.795893][T19547] __se_sys_ptrace+0x2b9/0x7b0 [ 384.800706][T19547] __x64_sys_ptrace+0x56/0x70 [ 384.805562][T19547] do_syscall_64+0xbc/0xf0 [ 384.810014][T19547] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 384.815925][T19547] RIP: 0033:0x459279 [ 384.819843][T19547] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 384.839471][T19547] RSP: 002b:00007fb23b404c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 384.847917][T19547] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459279 [ 384.855915][T19547] RDX: 00000000200000c0 RSI: 000000000000032b RDI: 0000000000004209 [ 384.863944][T19547] RBP: 000000000075bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 384.871962][T19547] R10: 0000000000716000 R11: 0000000000000246 R12: 00007fb23b4056d4 [ 384.879967][T19547] R13: 00000000004c61f4 R14: 00000000004daad0 R15: 00000000ffffffff [ 384.887972][T19547] [ 384.890307][T19547] Local variable description: ----info.i@ptrace_request [ 384.897253][T19547] Variable was created at: [ 384.901697][T19547] ptrace_request+0x2161/0x2950 [ 384.906555][T19547] arch_ptrace+0x9fa/0x1090 [ 384.911056][T19547] [ 384.913390][T19547] Bytes 0-47 of 48 are uninitialized [ 384.918678][T19547] Memory access of size 48 starts at ffff888034abfd70 [ 384.925450][T19547] Data copied to user address 0000000000716000 [ 384.931645][T19547] ================================================================== [ 384.939726][T19547] Disabling lock debugging due to kernel taint [ 384.945905][T19547] Kernel panic - not syncing: panic_on_warn set ... [ 384.952628][T19547] CPU: 0 PID: 19547 Comm: syz-executor.4 Tainted: G B 5.1.0+ #1 [ 384.961574][T19547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.971654][T19547] Call Trace: [ 384.974989][T19547] dump_stack+0x191/0x1f0 [ 384.979351][T19547] panic+0x3ca/0xafe [ 384.983326][T19547] kmsan_report+0x298/0x2a0 [ 384.987884][T19547] kmsan_internal_check_memory+0x974/0xa80 [ 384.993907][T19547] ? page_fault+0x3d/0x50 [ 384.999605][T19547] kmsan_copy_to_user+0xa9/0xb0 [ 385.004492][T19547] _copy_to_user+0x16b/0x1f0 [ 385.014025][T19547] copy_siginfo_to_user+0x80/0x160 [ 385.021321][T19547] ptrace_request+0x24bd/0x2950 [ 385.026241][T19547] ? wait_task_inactive+0x7b4/0x9b0 [ 385.031500][T19547] arch_ptrace+0x9fa/0x1090 [ 385.036076][T19547] __se_sys_ptrace+0x2b9/0x7b0 [ 385.040908][T19547] __x64_sys_ptrace+0x56/0x70 [ 385.045672][T19547] do_syscall_64+0xbc/0xf0 [ 385.050123][T19547] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 385.056040][T19547] RIP: 0033:0x459279 [ 385.060043][T19547] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 385.079671][T19547] RSP: 002b:00007fb23b404c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 385.088107][T19547] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459279 [ 385.096094][T19547] RDX: 00000000200000c0 RSI: 000000000000032b RDI: 0000000000004209 [ 385.104114][T19547] RBP: 000000000075bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 385.112111][T19547] R10: 0000000000716000 R11: 0000000000000246 R12: 00007fb23b4056d4 [ 385.120105][T19547] R13: 00000000004c61f4 R14: 00000000004daad0 R15: 00000000ffffffff [ 385.129321][T19547] Kernel Offset: disabled [ 385.133664][T19547] Rebooting in 86400 seconds..