[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 70.358164][ T27] audit: type=1800 audit(1577983140.627:25): pid=9132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 70.385583][ T27] audit: type=1800 audit(1577983140.627:26): pid=9132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 70.426564][ T27] audit: type=1800 audit(1577983140.637:27): pid=9132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.90' (ECDSA) to the list of known hosts. 2020/01/02 16:39:12 fuzzer started 2020/01/02 16:39:14 dialing manager at 10.128.0.26:44691 2020/01/02 16:39:14 syscalls: 2555 2020/01/02 16:39:14 code coverage: enabled 2020/01/02 16:39:14 comparison tracing: enabled 2020/01/02 16:39:14 extra coverage: enabled 2020/01/02 16:39:14 setuid sandbox: enabled 2020/01/02 16:39:14 namespace sandbox: enabled 2020/01/02 16:39:14 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/02 16:39:14 fault injection: enabled 2020/01/02 16:39:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/02 16:39:14 net packet injection: enabled 2020/01/02 16:39:14 net device setup: enabled 2020/01/02 16:39:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/02 16:39:14 devlink PCI setup: PCI device 0000:00:10.0 is not available 16:41:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) 16:41:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r0, 0x0) syzkaller login: [ 215.493538][ T9300] IPVS: ftp: loaded support on port[0] = 21 [ 215.529520][ T9301] IPVS: ftp: loaded support on port[0] = 21 16:41:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f0000000180)) [ 215.751697][ T9300] chnl_net:caif_netlink_parms(): no params data found [ 215.814036][ T9301] chnl_net:caif_netlink_parms(): no params data found [ 215.912962][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.933798][ T9305] IPVS: ftp: loaded support on port[0] = 21 [ 215.937335][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.948530][ T9300] device bridge_slave_0 entered promiscuous mode [ 215.971169][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.995723][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.003394][ T9301] device bridge_slave_0 entered promiscuous mode 16:41:26 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000000)="da660f4c5e0ca59460e01699899d4169993fc4a3fafcb485018ee43e277a69384024bef17f39b0a913fd033fd945a20f0cdb62ae69be62204bb20a070ed91dea7466fc02f05b947311ef96aa1312c4f477fd09995ee325490a661915e17abdab4cccb00d0731737ec0be4fa33b0e5b4115f56de7d744d08444eff9d909363641209847dc84211e0d1c50aa2daa38ca139e", 0xfffb, 0x4, 0x0, 0xffffffbd) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) [ 216.016863][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.023893][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.032045][ T9300] device bridge_slave_1 entered promiscuous mode [ 216.062141][ T9301] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.075670][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.084562][ T9301] device bridge_slave_1 entered promiscuous mode [ 216.165160][ T9301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.188976][ T9301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.219120][ T9300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.266599][ T9307] IPVS: ftp: loaded support on port[0] = 21 [ 216.274449][ T9300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.293335][ T9301] team0: Port device team_slave_0 added [ 216.319329][ T9301] team0: Port device team_slave_1 added 16:41:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socket(0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0a99b3e3930870dcd4c6d68e6abe088af4ccdbe6dc85ed63bcee4834cd53f8a19cfad53574230c17377bd7b3eb23d9008f0c69b08db538753bcf550f05d219f8c6ca03228dd8d293261ba079190f47d70c95a97fe5d4cb7511e180f73e8ef5e2f7ee4f47c1a036e37e", 0x69}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="23ff1f0a8117fb6ad5eb1b3c758c75c5533f018823a16997c30a069cb5b742486128af8baad097514187691d92010000009e3d7af1ab586e0a9ce86db57e1d384bfe3042c49ef9134937af481f2b44e023b3884e0efb76d2659a715f3b513e33fd96c9888a50cbbcb8c360a40000e6ffffff000a010000000003000000000832ff0769dea9ed32487d2bf1ac37afcf98d817857774004608d609000000701f793b97fdcccc62270800000100000000f645e9898fb9d669af77550098329a0aa58aa500aa02421df57f"], 0xc9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) [ 216.383994][ T9300] team0: Port device team_slave_0 added [ 216.471112][ T9301] device hsr_slave_0 entered promiscuous mode [ 216.528321][ T9301] device hsr_slave_1 entered promiscuous mode [ 216.571761][ T9309] IPVS: ftp: loaded support on port[0] = 21 [ 216.595773][ T9300] team0: Port device team_slave_1 added 16:41:26 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_opts(r0, 0x29, 0x1, 0x0, &(0x7f0000000080)=0x694) [ 216.771978][ T9312] IPVS: ftp: loaded support on port[0] = 21 [ 216.788234][ T9300] device hsr_slave_0 entered promiscuous mode [ 216.835932][ T9300] device hsr_slave_1 entered promiscuous mode [ 216.885510][ T9300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.893286][ T9300] Cannot create hsr debugfs directory [ 216.931006][ T9305] chnl_net:caif_netlink_parms(): no params data found [ 216.968885][ T9301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.021625][ T9301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.079879][ T9301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.159141][ T9301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.348514][ T9300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.398632][ T9300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.449947][ T9300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.497744][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.504820][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.513313][ T9305] device bridge_slave_0 entered promiscuous mode [ 217.524291][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.531602][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.539801][ T9305] device bridge_slave_1 entered promiscuous mode [ 217.564942][ T9300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.645272][ T9307] chnl_net:caif_netlink_parms(): no params data found [ 217.662019][ T9305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.674600][ T9305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.735176][ T9305] team0: Port device team_slave_0 added [ 217.772816][ T9305] team0: Port device team_slave_1 added [ 217.823531][ T9309] chnl_net:caif_netlink_parms(): no params data found [ 217.908817][ T9305] device hsr_slave_0 entered promiscuous mode [ 217.965827][ T9305] device hsr_slave_1 entered promiscuous mode [ 217.995464][ T9305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.003056][ T9305] Cannot create hsr debugfs directory [ 218.008986][ T9307] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.016248][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.023882][ T9307] device bridge_slave_0 entered promiscuous mode [ 218.049342][ T9312] chnl_net:caif_netlink_parms(): no params data found [ 218.066792][ T9307] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.073860][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.082061][ T9307] device bridge_slave_1 entered promiscuous mode [ 218.134088][ T9307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.169775][ T9312] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.178552][ T9312] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.187223][ T9312] device bridge_slave_0 entered promiscuous mode [ 218.195826][ T9307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.204924][ T9312] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.212033][ T9312] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.220381][ T9312] device bridge_slave_1 entered promiscuous mode [ 218.242670][ T9309] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.250630][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.259280][ T9309] device bridge_slave_0 entered promiscuous mode [ 218.269519][ T9309] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.277743][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.285769][ T9309] device bridge_slave_1 entered promiscuous mode [ 218.311076][ T9307] team0: Port device team_slave_0 added [ 218.318610][ T9312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.351298][ T9309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.361508][ T9307] team0: Port device team_slave_1 added [ 218.379116][ T9312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.396797][ T9309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.439054][ T9305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.490663][ T9305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.564992][ T9305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.619341][ T9305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.660137][ T9309] team0: Port device team_slave_0 added [ 218.668628][ T9312] team0: Port device team_slave_0 added [ 218.678311][ T9309] team0: Port device team_slave_1 added [ 218.751038][ T9307] device hsr_slave_0 entered promiscuous mode [ 218.796314][ T9307] device hsr_slave_1 entered promiscuous mode [ 218.836113][ T9307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.844168][ T9307] Cannot create hsr debugfs directory [ 218.857881][ T9312] team0: Port device team_slave_1 added [ 218.907629][ T9309] device hsr_slave_0 entered promiscuous mode [ 218.965879][ T9309] device hsr_slave_1 entered promiscuous mode [ 219.035455][ T9309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.043037][ T9309] Cannot create hsr debugfs directory [ 219.057200][ T9301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.158853][ T9312] device hsr_slave_0 entered promiscuous mode [ 219.197022][ T9312] device hsr_slave_1 entered promiscuous mode [ 219.235726][ T9312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.243324][ T9312] Cannot create hsr debugfs directory [ 219.261413][ T9300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.281671][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.290960][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.339796][ T9301] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.368791][ T9300] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.375855][ T9307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.437509][ T9309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.509876][ T9309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.580084][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.588647][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.597069][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.606648][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.614986][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.622219][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.631442][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.640848][ T9307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.722104][ T9307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.792517][ T9307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.859509][ T9309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.921259][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.930389][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.939060][ T2748] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.946165][ T2748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.954146][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.962829][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.971353][ T2748] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.978475][ T2748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.986566][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.013878][ T9312] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 220.056837][ T9309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.103056][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.112303][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.120980][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.129733][ T2660] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.136894][ T2660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.171611][ T9312] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 220.223015][ T9312] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.292506][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.302211][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.311041][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.319406][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.329840][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.365683][ T9312] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.415615][ T9301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.426759][ T9301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.441044][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.450369][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.459164][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.468269][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.477006][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.485745][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.494163][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.502576][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.511491][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.519781][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.528507][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.538032][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.546141][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.579958][ T9300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.591295][ T9300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.625785][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.634558][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.647236][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.657039][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.665133][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.672886][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.681230][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.709346][ T9305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.727750][ T9301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.755953][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.763419][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.794614][ T9305] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.836208][ T9307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.845779][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.853474][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.873642][ T9300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.907342][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.915036][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.924279][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.935158][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.943873][ T2748] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.950976][ T2748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.961236][ T9307] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.984873][ T9309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.994862][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.035994][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.044572][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.067945][ T2660] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.075088][ T2660] bridge0: port 1(bridge_slave_0) entered forwarding state 16:41:31 executing program 1: [ 221.098945][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.107841][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.116983][ T2660] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.124074][ T2660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.134615][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 16:41:31 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 221.142793][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.167913][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 16:41:31 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="006d256d00027920"], 0xda00) [ 221.202509][ T2660] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.209681][ T2660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.274273][ T9309] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.318828][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.329077][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 16:41:31 executing program 0: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) [ 221.359467][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.369134][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.377758][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:41:31 executing program 0: r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0xa5) [ 221.403383][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.413504][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.439331][ T9312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.470298][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.487149][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 16:41:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x7, 0x0, 0x0, 0x7}, 0x3c) [ 221.511454][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.533177][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.542768][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.551962][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 16:41:31 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000040), 0x308) [ 221.564294][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.591425][ T9312] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.648311][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.664144][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.673713][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.680843][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state 16:41:31 executing program 0: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0xfffffffffffffffd, 0x0) [ 221.695063][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.703016][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.717848][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.731337][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.742549][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.758325][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.771292][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.778438][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.792586][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.801910][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.823760][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.898793][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.907027][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.915243][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.924065][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.933859][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.942457][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.951414][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.960116][ T2748] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.967222][ T2748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.975584][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.986045][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.994316][ T2748] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.001462][ T2748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.009244][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.017668][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.028874][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.037507][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.046413][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.054742][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.063439][ T2748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.074340][ T9307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.093945][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.102394][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.114073][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.122964][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.132457][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.140979][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.149897][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.173116][ T9305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.182406][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.226134][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.235283][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.249765][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.259206][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.268350][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.276804][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.286230][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.294603][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.303396][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.311080][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.319115][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.338038][ T9312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.353358][ T9309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.365278][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.374097][ T2671] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.395482][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.402971][ T2660] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.418049][ T9307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.430816][ T9305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.503222][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.511713][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.531057][ T9312] 8021q: adding VLAN 0 to HW filter on device batadv0 16:41:33 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000200)=""/4096, 0x1a, 0x1000, 0x1}, 0x20) 16:41:33 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\xb6e\x80\x00\xdb\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\x05b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA-\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89\x90\x83\xe1$\x89\x9bjpQ$\x150\xdf\x86\xa8d\xd79\xa7\rX^\x99\x18\xfb\x94\xe5}>\xc6\xc8\x1b\x1f\x7f\xea\xbc;Y\x9ah\x91\'\x00\xee\x88\x14N\xb7\xcb\xde\xedt)\xb9\xfb\x11ye\xf5\x8f\xf1Yb\xba\xd6\xd6e\xbdUB\xcf6\xc8\xa2\x10\xb75\x90\x8b\x1f\x16\x82\xf5=0\x9c\xe5H\xe6pH\xd6\xb8\x9c\xd7\x98\x83\xa4p\xf02\x00\v\x82Y\xe8\xb0\x97\r&\x99\xb9&1\xd7n\x8e/\xf8\x18\x83\'\x1d\x89@\xcf\xd0;\xc0\xeb\x04\xd8\xee\xd8Oo\xc7\xed\xdb\x94\x0f\xbfP>\x19\xa9W\xdc\x1cds\xd3(\x16Uk\xbf*\x04\xec;\xf2\xee`XF\xcd\vR\xbc!l\r\xe9y\xc0\xd7\xc4\xb7\xa2\xd3\xc7\x05\xa0\x96h\x06=\v\xe6\xe5\x04\xd6\xaf\xbd\xf2\xd3\xda\xe6e\xb1\x11UWw\xd83\xd4\xc0/Q\x9df4\x1e\x9c\xb3V_\xcdZ\xb7\xa2a_f\x9f\x93m\xac\xf2\xdd\xe1D($\xb2ZI~\x1c?\xedq\x8a\x9d\xa5V\x02\xcf;H\xa8\xedy\xde\xbb\x05\x13at\x13\x01k<\x05\xbe\xdc\xf5x\xd2\xdcM\x88\xf5\xe4\x96%\xc5\xc4\xc6\xea?\xc0k\x86\x8e<\x17\x9b\xd2\xd16][\xdb\xe3\xbb\xfd^\x85\xa7\xd2\xb2\xd2\xc6[\xd0<\xf8\x996\xe0/\xaf\xee\xe9\x05L\xcf\x16\xc4\xd6', 0x26e1, 0x0) close(r1) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_type(r2, 0x0, 0x0) close(r1) 16:41:33 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x44, &(0x7f0000000040), 0x308) 16:41:33 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, &(0x7f00000016c0)=""/184, 0x32, 0xb8, 0x10000}, 0x20) 16:41:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000001640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f00000016c0)=""/184, 0x1a, 0xb8, 0x10000}, 0x20) 16:41:33 executing program 5: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup\x00\f\x7f\xd9\xfa;\x8b\x88gb\xefi\x16\x91\xbb\xc4\xd5Jk\tU~ \xa4\vR\\\x8a\xdb\xcel\xe0\xa3[\xae\x9d\xac\x84\x9f\v\x9e\x9f\r\x10\x1f\xd3\x80\xc1\xccq\xab\x01y\xed\xfc\x96)\xf6_>+\xa03\xf4\xcc0\xbbE\xb0\xc3\x94\xd53\x87\xd6\xc4\\\xc7\x82\xe9\xaf\xb5\xb6\x15\xf4K2\x17\f\x98\x1c\xebq/\xf5\x81#\x85\xc5\xa0\xfd\xfac\xd9\xf2c`\xe9[c\a\x12\x1bb\x82\x83\x86d\xf0k\xa8\x90\x06\xa8\x1cK\xea\x19\x91\a1z)\xde_r`\xee\xb6\x9e\xcb\x05\x00\x00\x82\xa1\t\xc9\x05\xcc^', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='memory.high\x00\x90\x80\xa4\x96\xbb\xe4\xb2\xa2\x01\xc0\xb8*Z\xef\xf8\x0e\x1f]\xf7\x10\xdb\xfe\xe4\x1d\xc6\x92\x7f\xeeK_p\t\x8c\x9f5\xd0\xef)\xd8\x04\xbf\xc2N\x1c\xf0R\xdc\r\xb1Gf\xba\xd11#<\xaf^,s\x85\x10R\x99\xc2D\xee\n\"\xf9c\x15{\xc1[\xef\x06\x8a\xcd\x9d\xc8\x90#\xd0\xe7\xe3\xe0\xa9\xf3\xc0n\x1f\xd1\x11P\xe20\xcd\x1c\xfa\xfd\xa3\xcf\x9c\xc6\xb7]\x16\xc7\xd7\xb4/\x82\xd1\xae\xd9TM\x05a\xe5\xc5U\x91\xbe\x81\xac4\x9d\x02`\xe7\xa6q\x1f@\x1f\x1f?tm\x9c\xd1\x8c\xa1\xb5\xe0`H)\x97r\xc0?y\x9cc=c`A^\x9f\xcd\xbc\xf4m>I\xae\xdf\x946\xe7M`\xeb\x9fm\xbe+n\x00\x18k\x98\xab\xd5\xeet\"d\x81\x94\x04\xf5\xeb', 0x2, 0x0) write$cgroup_int(r1, 0x0, 0x0) 16:41:33 executing program 1: r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x3, &(0x7f0000000ac0), 0x8) 16:41:33 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) bpf$BPF_PROG_GET_FD_BY_ID(0xb, &(0x7f0000000580)={0x0, 0x0, 0x11}, 0x4) 16:41:33 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x6, 0x70}, r1, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x23bc, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000cc0)={0x0, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000c80)='./cgroup.net/syz0\x00', r2}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='nodevvmnet0+eth1#bdevvmnet1\x00', r2}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r2}, 0xc) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="1400000013000507ed008064d20010002a000080", 0x14}], 0x1}, 0x0) 16:41:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00', 0x200}) 16:41:33 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x35, &(0x7f0000000040), 0x308) 16:41:33 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000040), 0x308) 16:41:33 executing program 4: r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x83, 0x0, 0x0) 16:41:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x3}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r1, 0x0, 0x10}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x20) 16:41:33 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000001640)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0x10, 0x0}, 0x0) 16:41:33 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\xb6e\x80\x00\xdb\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\x05b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA-\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89\x90\x83\xe1$\x89\x9bjpQ$\x150\xdf\x86\xa8d\xd79\xa7\rX^\x99\x18\xfb\x94\xe5}>\xc6\xc8\x1b\x1f\x7f\xea\xbc;Y\x9ah\x91\'\x00\xee\x88\x14N\xb7\xcb\xde\xedt)\xb9\xfb\x11ye\xf5\x8f\xf1Yb\xba\xd6\xd6e\xbdUB\xcf6\xc8\xa2\x10\xb75\x90\x8b\x1f\x16\x82\xf5=0\x9c\xe5H\xe6pH\xd6\xb8\x9c\xd7\x98\x83\xa4p\xf02\x00\v\x82Y\xe8\xb0\x97\r&\x99\xb9&1\xd7n\x8e/\xf8\x18\x83\'\x1d\x89@\xcf\xd0;\xc0\xeb\x04\xd8\xee\xd8Oo\xc7\xed\xdb\x94\x0f\xbfP>\x19\xa9W\xdc\x1cds\xd3(\x16Uk\xbf*\x04\xec;\xf2\xee`XF\xcd\vR\xbc!l\r\xe9y\xc0\xd7\xc4\xb7\xa2\xd3\xc7\x05\xa0\x96h\x06=\v\xe6\xe5\x04\xd6\xaf\xbd\xf2\xd3\xda\xe6e\xb1\x11UWw\xd83\xd4\xc0/Q\x9df4\x1e\x9c\xb3V_\xcdZ\xb7\xa2a_f\x9f\x93m\xac\xf2\xdd\xe1D($\xb2ZI~\x1c?\xedq\x8a\x9d\xa5V\x02\xcf;H\xa8\xedy\xde\xbb\x05\x13at\x13\x01k<\x05\xbe\xdc\xf5x\xd2\xdcM\x88\xf5\xe4\x96%\xc5\xc4\xc6\xea?\xc0k\x86\x8e<\x17\x9b\xd2\xd16][\xdb\xe3\xbb\xfd^\x85\xa7\xd2\xb2\xd2\xc6[\xd0<\xf8\x996\xe0/\xaf\xee\xe9\x05L\xcf\x16\xc4\xd6', 0x26e1, 0x0) close(r1) 16:41:33 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$tun(0xffffffffffffff9c, 0x0, 0x408200, 0x0) 16:41:36 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x84, 0x82, 0x0, 0x952) 16:41:36 executing program 4: r0 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r0, &(0x7f0000006d40)={0x0, 0x0, 0x0}, 0x20) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f000000c280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) 16:41:36 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x1b, &(0x7f0000000040), 0x308) 16:41:36 executing program 2: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 16:41:36 executing program 0: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x891e, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1') 16:41:36 executing program 1: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x2}]}}, &(0x7f0000000280)=""/237, 0x26, 0xed, 0x1}, 0x20) 16:41:36 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 16:41:36 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="0a99b3e3930870dcd4c6d68e6abe088af4ccdbe6dc85ed63bcee4834cd53f8a19cfad53574230c17377bd7b3eb23d9008f0c69b08db538753bcf550f05d219f8c6ca03228dd8d293261ba079190f47d70c95a97fe5d4cb7511e180f73e8ef5e2f7ee4f47c1a036e37e", 0x69}], 0x1) 16:41:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}], 0x1) 16:41:36 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 16:41:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, 0x0, 0x0, 0x0) keyctl$link(0x8, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x77359400}) [ 226.427021][ T17] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 226.458058][ T17] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on sz1 16:41:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x12e) readv(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=""/62, 0x3e}], 0x1) [ 226.666994][ T5] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 226.688806][ T5] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on sz1 16:41:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) ftruncate(0xffffffffffffffff, 0x0) 16:41:44 executing program 3: 16:41:44 executing program 1: 16:41:44 executing program 4: 16:41:44 executing program 0: 16:41:44 executing program 2: 16:41:44 executing program 4: 16:41:44 executing program 2: 16:41:44 executing program 3: 16:41:44 executing program 1: 16:41:44 executing program 0: 16:41:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) inotify_init() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000080)={{0x35, 0xb9}}, 0x10) sendmmsg(r1, &(0x7f0000003040), 0x4000000000003c4, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000100)=0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 234.889282][ C0] hrtimer: interrupt took 52492 ns 16:41:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x32, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x6}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x40000c20) fsetxattr$security_selinux(r2, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:urandom_device_t:s0\x00', 0x26, 0x3) 16:41:49 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes128, 0x0, "6a5c7135497fb0cb"}) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='com.apple.system.Security\x00') write$apparmor_exec(r1, &(0x7f0000000880)={'\\C\x1a(0\x0e\x06C\x9bHY\x1d\x9b8L\xc3\x16\xb1\x9bV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00]LD\xef\xf1Jg\xb9a\xe7\xe2k\xc6\x11\x8d>\x80\x9f\xddZ\xb3\xe5\xc8\x04s\xe6E\xfbQ\x0f\x82\x13\xdfP\xcc\xb3\xba\"\x18}\x04GxG\xeeN\xac\xc05`'}, 0x2c1) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) 16:41:49 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0805b5055e0bcfe8474071") r1 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) write$binfmt_aout(r1, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20404}}, 0x20) 16:41:49 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffff, 0x8040) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000c20) r2 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x5, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000380)=0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x230400) r4 = syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x2, 0x101) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "06d3962f23047a243d28bef0d7bb6d2a01af5fb71f539015d19797ba82ecd0eb1ff4dc719e0c397dfab84adc7335a1e8e5fbf75318c635b961126b1ba7fb88c6", "7e1e4a0352226d3a7b1bd1c3ffd2aa5552cb755ba92aee8286e719431688db63"}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0x24, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "b63c40dfcc692ec2e027e4023241082b1b79c8baf33fbb95841c05e9f5552a1a8cf51935527a6f0700e11527530a3c924b5a94dc64b130469ca057968caf3e87ad2e5aab8c038398808e9291daa28c9c"}, 0xd8) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xe3b5, 0xa, 0xb, 0x54d284213d64f2ba, "e941714f80f83fef58202e482ac5a853ce7e3242bdb44a67855d8c86c0a9d5a61a037d7a4881b2109f66ae3c34c4dd154f53e2295c017400fc5098f6ae219e78", "2af332dfa3b94e49744e0e328d3308d355cf9aafbfafc875585b53effc69e8b3", [0x6, 0x1dc0000]}) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3) 16:41:49 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000002b40)) socket$netlink(0x10, 0x3, 0x70cb8c7860ada619) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) getpeername(r1, &(0x7f0000000000)=@pppol2tp, &(0x7f0000000080)=0x80) 16:41:49 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="abaaaaaaaaaaaaaaaaaaaa0008004c0000580000000000009078ac1414bbac1e000144100601ac1414bb0000000000000000070b0800"/102], 0x0) pkey_alloc(0x0, 0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x40000c20) r5 = fcntl$getown(r4, 0x9) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000180)) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='wlan0-selfvboxnet0\x00'}, 0x10) r7 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x8, 0x800) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000080)='./file0\x00', 0x40000c20) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, r6, &(0x7f0000000140)={r7, r8, 0x2}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$BLKDISCARD(r9, 0x1277, &(0x7f00000001c0)=0x9) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x890400, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000280)={0x5, {{0x2, 0x4e23, @broadcast}}}, 0x88) inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x100) 16:41:49 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000002b40)) socket$netlink(0x10, 0x3, 0x70cb8c7860ada619) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) getpeername(r1, &(0x7f0000000000)=@pppol2tp, &(0x7f0000000080)=0x80) 16:41:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="050600080000000000d85ad5158429601f86000000000000000000001a4cf8ec89eb7dc84117f189b49470315ac23ab45485ccaa419ac82d3ec0d9d1f61fe5", 0xfffffe76) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000100)=""/77) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x204000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x4000, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000180)={@local}) 16:41:50 executing program 3: syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@broadcast, @empty=[0xffffffffa0008000, 0xd00, 0x689], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x274, 0x0, 0x0, 0xf8, 0x6, 0x0, @loopback, @remote}, @icmp=@dest_unreach={0x3, 0x5a91d49cc70a59f5, 0x0, 0x0, 0x5, 0x8, {0x0, 0x4, 0x2, 0x5, 0x3, 0x68, 0x7fff, 0x6, 0x8, 0x400, @local, @multicast1, {[@rr={0x7, 0x0, 0x5c, [@multicast2, @multicast1]}, @ra={0x94, 0x0, 0x7}, @generic={0x89, 0x0, "f94fe36adf"}, @end, @rr={0x7, 0x0, 0x3f, [@broadcast]}]}}, "03c5"}}}}}, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vga_arbiter\x00', 0x7040, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000018c0), &(0x7f0000001900)=0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000040)={0xfffffffffffffffd}) 16:41:50 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40200, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00\x14\x9d\xe7\x8b\xbbz\x98\x1e\xc8>i\x8f\x0f\xa5~\x88\xf4\xe9\xbc\xb0\xc0\xfd\xf7\x16_\x89\'V\x98\x05.\x80\xde0\xf1\xb6\xaaoz0\xf7m-J\x10+N\xd4\xf5\x12\xe2\x1b8\xf8\x9d\x12*\\\xad\xc6\xd2\xcc\xb3\x88j\xd9c\x0e\xac\xb9\xfb\x8a\x84\xb8\x0eVK\xf0\x12') r2 = syz_open_dev$video(0x0, 0x2003, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) r4 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r4, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x400005, 0x84) sendto$inet6(r5, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xffffffffffffff8f) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r7, 0x20000003) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0xfc00], [], @local}}, 0x1c) r9 = accept4(r7, 0x0, 0x0, 0x800) write$binfmt_elf64(r9, &(0x7f0000002040)=ANY=[@ANYBLOB="7f454c460904050907000000000000000300070007000000f8010000000000004000000000000000a303000000000000880000000500380001007f00010401000000000001000080030000000200000000000000ff7f000000000000010000000000001386ecd4ffffffffff0000000004000000aa0900000000000000000000000000000000000000000000090000000000000004000000000000000000000000050800b2b8e7c0207f8c15435c5f65b824f9482fce5a469e19cefe3db700dc0aba3b189fc1cba86b252746cf2a9f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000001a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000065de00000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000312300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff4000000000000000000000000000000000000000000000000ff7f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4177202ebb80a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bba7aa1290c7ad8a00000000000000000000000000000000000000000000000000000000000000000000000090ea000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000043ee40e966c62f82e4fcdc96ed2d4f95036dc23050816251768870c4636f0fcdff6ffd8c3ceb70a69cb9f89a571a082ee889131d6933aa7141d2527e536bf171b66a21206d2b413aa235b9d9ac4d4cd4489895ba945ef0ec4fa739ec46991a1cf4a433fab8d212c2a9f6cb8329fa4a5a0501640101114bb0675e44fcf6c1b99e503410cc4412932daf477d4ee629eae0ae0258f291979586f632ec335f48caada21fae1e97bc808b88a3b3858167e9cf21c575ea195fbc9b072bb9e808f7d137ec002b901bbe88241ec358b37a9e1ce1a1ff8a3df8f04c4fdea5ebf762a8ca7b84e2442df5dc8b333440a2e651250b87474852804317172cf25cd73cc18a47b0b47f71f65a02f8dfe1c6053d7d6083c59c0258f222a5230a875d38c6b2401b10a2f9449e87155bec06bd8c7b72db2d7e440f6e4b4cf8511e1c0a83e549b0d2cb6d36e6c7eeed408c5832f464f9aacbad3c112b33ebeb3477c941aee9f1d911563c5ceb0b9325c8d3c63ecedc5e4c059a8eee4a9f11687789212d613fd15559017b85c6cd2f901cc8308ec6b2714e2c35445069c9f2bb64f15ec369c8d02b3c8080abecff11ac62c7e1294dabb1a07614af762e0d0300ddb3f60c48ef50554590727ee8be9bf206cf3cdff6a7bd8e5cf4a27d58fac46bc044d87295643c9b755c3d4675814565a849cdd3964408024e9b2151947c756f166615fb875993c129a6d164947bad5e370ecc4b8efe5305bcd04b698a0e1f49bc94c8b9a5788ea725dc8d8419c5df404802cc9e094540f5c4c9977d584fe2f4ff28fbf3cfc3bd238f93ac089e1af931a36a52426cebbcfa063bd3636ab5f134042dab64abd9de4f4c6726eea204fcab79c9bb4a23c0855b80e76d3a0ea95f19ee478572aadc9595005b04c27955111068496aa818563f94cb7e4290a7525871ed5d80a9d7e07a21a3328c7c0b5007f8ac5a33dc35f2c8140357af6d3e8300ed983114965fa243c5c609e177bf517dabe3e630fb31da2a9258e1a8e64e25e1c2e9e80bc8c2b60139ed46cd47552724192e44e9849b05d86838f070e2de762a7731daedd7030ed584a1719d017d07ef43254e79de4517dbf2565fabb7cf545856f9a76c972216b12120dbab47caab07295c0337081100939c6836"], 0xadf) setsockopt$inet6_opts(r9, 0x29, 0x37, &(0x7f0000000500)=ANY=[@ANYBLOB="e13e2b74074dbd5b088db21330a47d295986fd8ac8c703949a589c8c91190fb2ca719e7a68dd6b8e005b4048d9d770438fa7044f2f2cba77080b2b371677a85730ff49af1c8ff3767ef9a662eb8158ffa72377b01bcb752424ed04ab3669b8a820a508bc7dd4cae093634341d8c7eee737976d3b3954553af67b52cf54a17f06cf7715f38a7ea9eddd2451d26c9aa2c1976b3e50b5db06b0ac83ab57aa18fb4c1ef3631dfc144ee6f1ca01c0ba6896cc747f46bc42581a713344a4c895bbce47f3305f484700"/213, @ANYRES16=r9, @ANYRES16=r2, @ANYRESDEC=r7, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYRES16=r5]], 0x5) 16:41:50 executing program 4: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x892c, 0xa, 0x4, 0x80000000, 0x0, {0x4, 0x2}, {}, 0x7}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet(0x2, 0xa, 0xfb) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8971495abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 16:41:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2186aa2358ef361e, 0x70, 0x0, 0x8c, 0x80, 0x9, 0x0, 0x0, 0x60812, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x30, 0x1, 0x20, 0x0, 0x1f, 0x739, 0x1f}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000002940)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f00000000c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendto$inet(r3, &(0x7f0000000300)="b34ae1ef3a25ed537b9e50994e4b6a4cf7eea34edaf80dc6c596198caf6612693e401f120a3860e3dba964e50057997ccb35fc829cd116e3481117dcea", 0x3d, 0x20008040, 0x0, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f00000002c0)={0x80000000, 0x4, 0xffffff00, 0x7, 0x0, 0x7ff, 0x6}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4], 0x2}}, 0x4) memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) socket$kcm(0x11, 0xa, 0x300) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)) r5 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r5, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) [ 240.173093][ T9548] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) 16:41:50 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)=0x1) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001d000507d25a80648c63940d1524fc6010003d400ad3cd00053582c1371500f01700d1bd000000000000", 0x2e}], 0x1}, 0x0) 16:41:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x0, 0x1ff}) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'veth1_to_bond\x00', {}, 0xa53}) syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00') [ 240.465138][ T9560] netlink: 'syz-executor.1': attribute type 61 has an invalid length. 16:41:50 executing program 3: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@md5={0x1, "3973250455501e79ec5ec267a53b4ba3"}, 0x11, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000400)={r4, 0x5}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000000c0)={r4, 0x3}) pkey_alloc(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000540)=""/10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfec8) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32, @ANYBLOB="08000200000000002c001200100001006970366772657461700000001800020014000600848000000000000000000000000000aa"], 0x4c}, 0x1, 0x0, 0x0, 0x4004a84d}, 0x0) 16:41:50 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r3, 0x1000000000013) [ 240.519035][ T9560] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 16:41:50 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000600)="72c72f076ffa8069bfa4b7063b4db3c2699680dfae02cbdd8dbb0719ac051d8babfd6cd81b8bb0019b1bc2b0bbc89d046063ad09ab5b39eb10def14a6e07ecb08fe754eccf1c636c31b429a1fd723ea383de200f62949b61536be75f1749eb47d954b7f2764c8828d31e9480d322ef51837c5b4fd9f21f6d7b6ee56e12a45c0ef131865a80f3aadd6e841157d353dae5882300d0a163943500717ab026b8bb99330c7218aebb0ad9a370ea1fdb541c10c664c6d28a6706b5a0d436", 0xbb}, {&(0x7f0000000180)="ce10dc4fc5", 0x5}, {&(0x7f0000000280)="f4da41", 0x3}, {&(0x7f00000006c0)="21cef2d60417eaa9914fbdf60392309df60585832978f83fe0b7c7227ae1fb00862a4193b20a0b83c8f5a59cea196cf94f9370e822f85e0b7809d1db792d2f88b6bc4c1d84e4072beccf78aa9dd60865af4493e4bf7e52b276d2a0d5fb25f9957871551ec33dc77ae237bf0936f702b098c099385ea84ffc68bf6d3b9fc04a2a29cdc937d07159095e5797de183237fd3cd780d659d8a6371a047952fffca71719b9fc6ef112", 0xa6}], 0x4, 0x80000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="4d2ee0b305eed7bc32af2f8a28231e0536b59e4180e45b37cb6f63903c83f1b35ab4a65d7982fdbe8eb329d6f7dcb7ac8c9080447656b81e98638e6c2f122466b094c28d06f4675f46640ff2608473b1154fcdea7c4176d81540c40f3bdb198f1779b0c0f2a7415af280957a60d851effbfbdd5b3e337f9e32", 0x79}, {&(0x7f0000000340)="a12b1f462c388700a860575c72490cdbd1e0e230be950d179f55ee85457885608664b883510aa306096d188be9cda7569a91334e769897374ce525abbec67f50b725ce329b4a8f806daae43af3081e4c03acd893a91e9fc76710a2265db07c0f25fd450ee144280b05b87917e85bfdca8ae6eac03ca803697171d463e8f87bc29fcf3c6a910c0cf5da3e0b0540bb3ce74ca9d2c1949e60007d7be6a1bbfc715dd80bb046af7fe60285f6c6879e78de33f53b886677bcbd33c4ae8b4f5d9e89250fb1e2699183bf5bfe49fc513f2328fd56dd244e111aed32723860c6c8899b48feb77c1888da86c75bce3f908988ea8944373cfa0d3eef", 0xf7}], 0x2, &(0x7f0000000440)=[{0x50, 0x108, 0x40, "13cfe4f3c7f0cf8cccbbacf5b0ecf06ed24f2ee621312d6968f21fa37ead7c1188d1d283e9f8b27d2e4a8099ab088d51096462d634be4f36651feb3169"}, {0xa0, 0x0, 0x1, "2ef38afa7e05c95f329b834586019dc52a1fa4642c70a9e8bcfd8e0c9e417119c8713ffce5607e29341664aea8094530fc14bc3296239e0a1d973d8e5ec450013892c90e0a1c3359345be7eee704d19b5947ec4e5f131101b4b06b38de5ec24b1fe171b472877b7bab0183d49bd90e98b654c8170ba1e5b79da83b30baa2b282a9394b4e45708f0ecd"}, {0x88, 0x118, 0x200, "57717df1cdf2204af49375f713c46c1dbcb2cd261c07abb6050bffec19270c35ea96aeb49b68be9be93acb92e3c46a1f964f5e38818a269d115f535ef9fcced05b6180b2fcd943964668953d5cc977925594fd4afb0413495cff38778c6a269a28c2823e11fb0ca430263fe4b1c5f73c21655d1a3ae88c2b"}, {0x48, 0x0, 0x6, "01e73244e39ce373e6d205f084465d2f3ef6d49de4fa2487e99f28f8a4b469b289cc3a20d1c633f313d853ae4d66e59a36a1"}], 0x1c0}}], 0x1, 0x4040001) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) io_setup(0xb, &(0x7f00000001c0)=0x0) io_submit(r3, 0x8, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)="0400000093c21faf16da39de706f646800580f02000000003f420f000004000000580f02000000003f420f00000000000000000002000000", 0x48}]) 16:41:57 executing program 5: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x0, 0x0, 0x0, "8aabff53674d7d01457e1efbc0cc92e66c561dfbf29e73f829bc7f3687b13e2a"}) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) dup3(r2, r3, 0x80000) pipe(0x0) r4 = getpid() r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r6 = dup(0xffffffffffffffff) setsockopt$packet_int(r6, 0x107, 0x12, &(0x7f0000006ffc)=0x400000000008, 0x4) r7 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r7}, 0x0) getpgid(0x0) r8 = syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(r8, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000040)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="fd111bcdf0c40c3fe9cd6f47c045477e6428e0f0b822e0c4e1fe13b5a11624a4c3ad978ad3365802877c72c2fa72ea35389a221f6ab2cfa84f8f9ac3d9236552233c7f4fe149ed9a72ad59454eca6a29e8e730ea793b8d458c870000000000000053235dbe78a7bb4d0a6cd400000000000000020000000065aef4aa20a0f96e855e52a69dd436ae7fe9d7f83608d35326599b31177df30f9781f324d0a896152bfa45b4ea2ef5dbaa", @ANYRES32, @ANYBLOB="79a400", @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRESDEC], 0x6, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r10 = gettid() r11 = getpgrp(0x0) setpriority(0x0, r11, 0x8001) r12 = fcntl$getown(0xffffffffffffffff, 0x9) waitid(0x2, r12, &(0x7f0000000040), 0x0, &(0x7f0000000480)) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESDEC]], 0x8}}, 0x20004850) gettid() r13 = syz_open_dev$sg(0x0, 0x0, 0x40) writev(r13, &(0x7f0000000000), 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r14, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) ioctl$sock_SIOCGPGRP(r14, 0x8904, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0)='devlink\x00') kcmp(0x0, r10, 0x0, 0xffffffffffffffff, r15) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r16 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r16, 0xffffffffffffffff) memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x81, @loopback}, 0x1c) r17 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r17, 0x200004) sendfile(r0, r17, 0x0, 0x80001d00c0d0) 16:41:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, 0x0) pipe(0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) capget(&(0x7f0000000000), 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00'}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/124, 0x7c}], 0x1}, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000740)=""/40, 0x28}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000000ac0)=""/76, 0x4c}, {&(0x7f0000000c40)=""/173, 0xad}, {&(0x7f0000000d00)=""/138, 0x8a}], 0x5, &(0x7f0000003580)=""/4096, 0x1000}, 0x102) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000e80)) waitid(0x83b895581628fca4, 0x0, 0x0, 0x2, &(0x7f0000000480)) syz_open_dev$sndseq(0x0, 0x0, 0x9a0efa2b65aacb27) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001c001200140001006272696400000000040005000000000000000000"], 0x3c}}, 0x0) 16:41:57 executing program 0: syz_open_dev$sndtimer(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) getegid() r0 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x12, r2, 0x101, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID, @SEG6_ATTR_DSTLEN]}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x84, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x7f}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ff}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="18aa52a4f93e2f8e4f682c94c10e5dea"}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0x20]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0xff, 0xffffffff, 0x1, 0x8]}, @SEG6_ATTR_SECRET={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x40901}, 0x20000810) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000240)={0x7, 'veth0_to_team\x00', {}, 0x4}) r4 = dup(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r4, r5, 0x0, 0x8000fffffffe) 16:41:57 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xd03927eedc77769c, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = open(&(0x7f0000001340)='./file0\x00', 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x0, 0x0, 0x25b) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f00000015c0)='/dev/admmidi#\x00', 0x8, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x0, 0x5}}, 0x1e2) ioctl$BLKTRACESETUP(r3, 0xc0401273, &(0x7f00000001c0)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xfa723) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$VIDIOC_G_AUDIO(r5, 0x80345621, &(0x7f0000000040)) ioctl$FIBMAP(r4, 0x1, &(0x7f00000000c0)=0xffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:41:57 executing program 3: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x40000) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x7ff) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="00fb4e050092706034573863c9bb63f11597b6e2961fa351c19ac3924d3c156f759468bdbedb4493a0902d1fa6eb5eda35a537b29efd07fec12665c0c6261332bce491734b00000000007f002000000000000000005d6b4b748acaa37df3e15a6388d137ba17a1624f7dfb1a26705a2626"], 0x4e, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0xfffffffffffffeec) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}, 0x0, 0x0, 0x0, 0x3, 0x10000, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() tkill(r2, 0x9) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r5 = socket$inet(0x2, 0x80001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10) socket(0x1e, 0x4, 0x0) 16:41:57 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r3, 0x1000000000013) [ 247.014833][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:41:57 executing program 0: syz_open_dev$sndtimer(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) getegid() r0 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x12, r2, 0x101, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID, @SEG6_ATTR_DSTLEN]}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x84, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x7f}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ff}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="18aa52a4f93e2f8e4f682c94c10e5dea"}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0x20]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0xff, 0xffffffff, 0x1, 0x8]}, @SEG6_ATTR_SECRET={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x40901}, 0x20000810) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000240)={0x7, 'veth0_to_team\x00', {}, 0x4}) r4 = dup(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r4, r5, 0x0, 0x8000fffffffe) 16:41:57 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffff02, 0x3ea, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1011}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ustat(0x9, &(0x7f0000000000)) 16:41:57 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r3, 0x1000000000013) 16:41:57 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) setxattr$security_evm(0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00009200be2bbf000000d5c7914c357f313b9e2a0a5b0334a6"], 0x1, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000100)={@local, @empty, [{}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x58, 0x0, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3c, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @rand_addr="b56855adc22691312ab737233a00", [@routing={0x0, 0x2, 0x2, 0x8, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}]}, @fragment={0x0, 0x0, 0xfb, 0x1, 0x0, 0x4, 0xfffff801}, @fragment={0x62, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}]}}}}}}}, 0x0) 16:41:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create(0x5) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x1, 0x0) sendmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500022881001f03fe0504000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000000), 0x4) [ 247.726177][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 16:41:58 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) setxattr$security_evm(0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00009200be2bbf000000d5c7914c357f313b9e2a0a5b0334a6"], 0x1, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000100)={@local, @empty, [{}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x58, 0x0, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0xe80, 0x0, 0xe80], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x3c, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @rand_addr="b56855adc22691312ab737233a00", [@routing={0x0, 0x2, 0x2, 0x8, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}]}, @fragment={0x0, 0x0, 0xfb, 0x1, 0x0, 0x4, 0xfffff801}, @fragment={0x62, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}]}}}}}}}, 0x0) 16:42:06 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x80, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x1, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0xffffffffffffff6a, &(0x7f0000000740)={&(0x7f00000004c0)=@getroute={0x14, 0x1a, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}}, 0x4c098) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfec8) r5 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x2, 0x80000) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000240)="7382adc3898d00aedf4d39d0e423a36a88bac1272c12cb8ab203d1948c4dcde4f0980a2755df51af2e0c47292840b3dcebaf23e4ae8e97afe602f0626758946f0dce482aaa8ecbff77cbebf297d2e0dd002f62ab96aa9a23a9c83acdfb544489c26b39c039287940c10d8d2be0", 0x6d}, {&(0x7f00000002c0)="92e920060baccf48ca76a1f828cba57b004228a5a0acd4edb3ecb7508b5a5babb1fce73e691ba4143828d3c6eb90e33c0c92f286f7fd012e761be4618432315a174b9ed2694308ca99053cd81bff5bc8f279c9e20b683e0d4f5243f5ea7a2539a8bb939e2de8eff9501fa7e9ac932af8288c21d3b34f75877bc1ed1efade03de7a8e73bc612035fbdc2c2d295a4691503e321a1645", 0x95}, {&(0x7f0000000380)="f73758deec02f5f80a2054b14e65306f4026a5a2a8d26df70edb7a5c00a6d12cfa693178b1eca97e7b302c2f8d05a350ec38ab86ad64763f9a01a63dda9098025673565dab5bd742abc3695652e8f2fac120aeb5e9dadce8a3e1028e5e7e4280c4737e16ee159daa697d3cd460180b13e5150f1620b6", 0x76}, {&(0x7f0000000400)="c30ebae022d432bff52a0c", 0xb}, {&(0x7f0000000500)="01a38f77021d05bb44ac4c9acfa67548abd6943753e5d2e8c3ddda9491ffa513fc6f84d28616bcb2850443205fb4541fb8c05b957cf4d1fc7350c63925235b4cc4c1c514bf2cda1107a38880e3da31f6de31ab309ee7956bed3b85ffa2a1cae8d2d8f0dd2e5f5bc47d50a7f7d41d34c34f3be8eb5224fdce7f1b1f9bbfd61afadabec091d1509b91f2756d8076fa46d7ad5a018b4e67ff4e1d8d344f589b0a31ea58499a3473573b29ae30d465dbee910510712bcd3155a3c5440186ba0f02f3861a0b813bdab4b2178d14f18a6994c94bc55986f3e45397d148fbf093d88c4465a365082ea12908f583", 0xea}], 0x5) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x40000c20) r7 = dup2(r3, r6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r8, 0x0, r9, 0x0, 0x10005, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x7, 0x7, 0x7ff, 0x7fff, 0xffff, 0x3, 0x7fff, {0x0, @in6={{0xa, 0x4e21, 0x3f, @mcast2, 0xfff}}, 0x2, 0x20, 0x9, 0xfff, 0x8}}, &(0x7f0000000700)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000600)={r10, 0x8, 0x10}, 0xc) r11 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x101000, 0x0) ioctl$BLKREPORTZONE(r11, 0xc0101282, &(0x7f0000000140)={0x91b, 0x2, 0x0, [{0x9, 0x4800, 0x2, 0x40, 0x0, 0x3f, 0x2}, {0x8000, 0xa758, 0x1, 0x6, 0x7f, 0xe1, 0x5}]}) 16:42:06 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x203, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaae89b994f0e995152aa0008004500001c00080000002f9078ac1414fef5890efffb0957b9edb1e612"], 0x0) pread64(r0, &(0x7f0000000040)=""/44, 0x2c, 0x80000001) 16:42:06 executing program 2: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) socket$packet(0x11, 0x3, 0x300) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000006ffc)=0x400000000008, 0x26d) r3 = getpgrp(0x0) capget(0x0, 0x0) getpgid(0x0) r4 = memfd_create(0x0, 0x6) r5 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r6 = dup2(r5, r4) ppoll(&(0x7f0000000200)=[{r6}], 0x1, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) close(0xffffffffffffffff) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[], 0x0, 0x1) r8 = socket(0xa, 0x3, 0x8) r9 = syz_open_dev$amidi(0x0, 0x9c4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) gettid() r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) waitid(0x83b895581628fca4, 0x0, &(0x7f0000000040), 0x80000000, &(0x7f0000000480)) r11 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(r11, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) r12 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r12, 0xffffffffffffffff, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000000)) r14 = syz_open_pts(r13, 0x0) dup3(r14, r13, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000000)) r16 = syz_open_pts(r15, 0x0) dup3(r16, r15, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) r17 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r17, 0xffffffffffffffff, 0x0) sendmsg$key(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYPTR64=&(0x7f00000005c0)=ANY=[], @ANYRES64=r2, @ANYPTR], 0x2c}}, 0x20004850) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r18 = gettid() r19 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r19, &(0x7f0000000000)=[{&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x24}], 0x1) getpgid(r3) r20 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r18, r20, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000940)={r21, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000900)='syz1\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r1, r0, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00'}, 0x30) open(0x0, 0xe279a88a3b20cda9, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x807}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r22 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r22, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r22, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r22, 0x1, 0x19, 0x0, 0x0) r23 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r24 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r24, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r22, r23, 0x0, 0x102000004) 16:42:06 executing program 0: syz_open_dev$sndtimer(0x0, 0x0, 0x0) memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) getegid() r0 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x12, r2, 0x101, 0x0, 0x0, {}, [@SEG6_ATTR_ALGID, @SEG6_ATTR_DSTLEN]}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x84, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x7f}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x6]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7ff}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="18aa52a4f93e2f8e4f682c94c10e5dea"}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0x20]}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0xff, 0xffffffff, 0x1, 0x8]}, @SEG6_ATTR_SECRET={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x40901}, 0x20000810) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x8100, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000240)={0x7, 'veth0_to_team\x00', {}, 0x4}) r4 = dup(r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x800fe) sendfile(r4, r5, 0x0, 0x8000fffffffe) 16:42:06 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) tkill(r3, 0x1000000000013) 16:42:06 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000002f102093ae6fabe6c33b660000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x40000c20) dup(r2) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, &(0x7f0000000340)={0x0, &(0x7f0000000300)=[&(0x7f0000000040)="3379b79bd2246c2baf16db2c906f6876e17d5b764ed98a0fcc005b270bfb9bc282da3b46a7dce89b04bbd75094b1448039a547b0c062bdca64bac2d654b97fbc006a955398435b0b22cef9cad165f1c08ebc9797", &(0x7f0000000200)="65cef4ac8ad0521590a6c7b5c845fc1a88922e25b155a1cfd6c68340c4900b230059be18b90a4e8214b00405362e8d338dad6fb7ec50bd90801249009303a6327d40c022fe1c6707db333867296046f9230a4f197717915701d509f2d0654f7f4871fe5aa4f6e54ddb7bfa16a05a68efc199c6b5c5085339fd9960723814dd2d48f1371335a08857d27bdbed6c10e1673062813e386b", &(0x7f0000000100)="635b83fead575b8341522eb6919e5fece7d605cad91f087e74b51d64c7fe9c4ce090b015db8b7afe57d539b328999248be0322fb46aa58e2d62e374bbeacdb2ffee445d4", &(0x7f00000002c0)="4147f5930191a7"], 0x4}) [ 256.241386][ T9658] bridge0: port 3(gretap0) entered blocking state [ 256.289236][ T9658] bridge0: port 3(gretap0) entered disabled state [ 256.414252][ T9658] device gretap0 entered promiscuous mode [ 256.591124][ T9658] bridge0: port 3(gretap0) entered blocking state [ 256.598525][ T9658] bridge0: port 3(gretap0) entered forwarding state 16:42:07 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) uselib(&(0x7f0000000340)='./file0\x00') connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) r4 = inotify_init() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfec8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x1}, 0x14}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0xfec8) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r7, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x8}, @L2TP_ATTR_LNS_MODE={0x8, 0x14, 0x6}, @L2TP_ATTR_SEND_SEQ={0x8, 0x13, 0x40}, @L2TP_ATTR_RECV_SEQ={0x8, 0x12, 0xff}, @L2TP_ATTR_L2SPEC_LEN={0x8, 0x6, 0x80}, @L2TP_ATTR_UDP_CSUM={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r8}, @L2TP_ATTR_MTU={0x8, 0x1c, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9c018b7d77b01e7d}, 0x2) inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x40000c20) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3, 0x5, 0x4, 0x0, 0x1ff, {0x0, 0x7530}, {0x2, 0x6, 0x1f, 0x20, 0x2, 0x3, "c7040d8b"}, 0x67a, 0x3, @planes=&(0x7f0000000000)={0xb1, 0x8, @fd, 0x7ff}, 0x6, 0x0, r4}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0xfec8) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000000)={r13}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000100)={r13, 0x15b0, 0x200}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r14, 0x1}, 0x8) r15 = socket$kcm(0x10, 0x2, 0x0) sendfile(r15, r1, 0x0, 0x29d) 16:42:07 executing program 0: r0 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904024865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 16:42:07 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x10005, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x281f9, 0x0, 0x5001, 0x1000, &(0x7f0000fff000/0x1000)=nil}) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockname$inet(r1, &(0x7f0000000240)={0x2, 0x0, @loopback}, &(0x7f0000000280)=0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r7, 0x0, r8, 0x0, 0x10005, 0x0) r9 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") ioctl$sock_bt_cmtp_CMTPCONNADD(r7, 0x400443c8, &(0x7f0000000200)={r9, 0x6}) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r6, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x401, 0x0]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x101, 0x0]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x12006004}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010000d07cdd87d345d28000000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0dacee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a60451f0e13ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x48}}, 0x0) 16:42:07 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 16:42:07 executing program 3: pipe(&(0x7f0000000680)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$xdp(0x2c, 0x3, 0x0) dup(r1) r2 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r2}, 0x0) getpgid(0x0) r3 = memfd_create(0x0, 0x5) dup2(0xffffffffffffffff, r3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0) r5 = socket(0xa, 0x3, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x0, 0x5}}, 0x20) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) sendmsg$key(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0200"/16]}}, 0x20004850) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r6 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r6) kcmp(r6, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 16:42:07 executing program 1: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') fstat(r0, &(0x7f00000016c0)) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x9) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0xa0000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x2, 0x4, 0x8, 0x200, 0x9, 0xffff, 0x0, 0x6, 0x8d01, 0xc, 0xffffffffffffffff, 0x6, 0x7, 0x9, 0x3], 0x991da638e8fc3fcd, 0x20000}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000080)='stat\x00') exit(0x0) preadv(r3, &(0x7f0000000500), 0x37d, 0x0) 16:42:07 executing program 3: ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(0xffffffffffffffff) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0x5df211b9}], 0x23a, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) 16:42:07 executing program 3: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0x4, 0x10001}) 16:42:07 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) getpriority(0x0, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) syz_open_dev$media(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x36a7, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x6, 0x0, 0x40, 0x1, 0x1}, 0xc) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 16:42:07 executing program 1: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x10094}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000007fb2773a88de8f8565d5734434db8cc5000000"], 0x18}, 0xfc) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="4aafc37394f5e4f754cc3901aaafc9cb0e8face20cc1431624eddef46d98019b7de69c86da6d9851efe334f74008", 0x2e}, {&(0x7f0000000080)="4df9fd8a04736b14a79e37a3c7bdbe8a59ec6ad3c502e5574978fc0b1e0b9c9f95818f5580a80d07dc17b83d0bf7fa5ae40952fbeb28c4", 0x37}, {&(0x7f0000000180)="c8091f11f212ba1a974b6ec3622d0fb33c01964d33961b0bff05c78800567924f5b507ab09e5e0d8c91f83a6cecc7664db5dd85919bf8c23d555af14768124a46cce38639587931cde4931167471004ff365e2e4bdbd73033658c4dbbfa287b053cb6b23fa68895c59e4c296533923d4b40ef323ab77e0c5796236869de8952defdddcda5c1e1bb96719a2adc507b513dd082c", 0x93}, {&(0x7f0000000240)="b536424749c85ba95bafbcc4f473e4c8f2cbcc320855d136c7665fc4da9b6dc8ef38a07bd1b730996c32884b0e13be148c690363b7db705bf1f6f63c65ce08a77b4f1cc916bb9437eef8aabbea48051c9e6c50b4b275a3475adfd9cb3ace7cadf27d0a69268547a1bd5bf0283a7b3a6cdc124b2a2ba7cc19e188d6365f6f2a01cc38a2bc9c5e95fdfcda6f78310e98207b3f3efe71e9af9d13ee7c3706779920451ab2a9caa82a60cbcf0bdaedb6b6cd72419dce92ca7ed2986309dd8503a5018add25f35cbf248bbdfcc26a54bb0f8e4849bfdd", 0xd4}, {&(0x7f0000000480)="0fe5d7bd50bc8ca73cbec59864e4f0013c29e15c93e1d72bca0141d080172d84d05ce31781844ecde7bc3f857f9fc99a2366bd36e3398e32cc4778a6f78bfd3138527fb3f039319ac60cb77a436f0cfa067ec99e58125ba3f8e9299d01d99d1a91b34920ca223b979d8b5968005b0a97130af10b2f8326e555da801b1efd7a2c763d92da89151893b4e011014598aac970805c89889506dd0c5ad489ccad3ca93580b1c8892ad6f8210963ecb8c37c96af4ed8c8df8e8aa678facac2a62f08733d9c337d3735f099f10d", 0xca}, {&(0x7f00000000c0)="015741f9", 0x4}], 0x6, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x48, 0x4010c91}, 0x1) 16:42:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/213, 0xd5}], 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'netpci0\x00', 0xca05}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x12, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x0}, 0x6c) r5 = socket$inet(0x2, 0xa, 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x40000c20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r7, 0xc0305302, &(0x7f00000003c0)={0x566, 0x2, 0x800, 0x1f, 0x7, 0x9a0}) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x20080000000) r8 = socket$inet6(0xa, 0x80003, 0x6b) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000440)={0x80000001, 0x7, 0x4, 0x400000, 0x81, {r9, r10/1000+10000}, {0x3, 0x0, 0x5, 0xfe, 0x1, 0x8, "30e06c64"}, 0xd5a, 0x3, @userptr=0x7fffffff, 0x200, 0x0, 0xffffffffffffffff}) r12 = socket$inet_sctp(0x2, 0x1, 0x84) r13 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r12, 0x84, 0x19, &(0x7f0000000000)={r14}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r14, 0xa8}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r11, 0x84, 0x78, &(0x7f0000000540)=r15, 0x4) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000380)=0x4, 0x4) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) 16:42:08 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x100901, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x2) socket$nl_crypto(0x10, 0x3, 0x15) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x40000c20) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x40000c20) splice(r2, 0x0, r5, 0x0, 0x7ff, 0x8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYRES32, @ANYBLOB, @ANYRESHEX], 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000001680)="cd", 0xfffffcf0}], 0x1) 16:42:15 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip6_tables_matches\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9a23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0x7fffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r5 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x2, 0x1}, 0xc) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = accept4(r6, 0x0, &(0x7f0000000140), 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r9 = dup(r8) r10 = socket$inet(0x2, 0x4000000805, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = dup3(r10, r11, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r12, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r11, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r12, 0x84, 0x7a, &(0x7f000059aff8)={r13}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000180)={r13, 0x55a990e3}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000180)={r13, 0x1, 0x0, 0x1c4}, 0x10) listen(r5, 0x4) accept4(r5, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 16:42:15 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 16:42:15 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x29cb5a25, &(0x7f0000000340), 0x0, 0x0, 0xffbe}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bcsh0\x00', 0x21}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) getpriority(0x0, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) syz_open_dev$media(0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x36a7, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x6, 0x0, 0x40, 0x1, 0x1}, 0xc) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 16:42:15 executing program 0: close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x41c1, 0xc000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x5}, 0x54142a9b8b24b77, 0x0, 0xaad}, 0x0, 0x4, 0xffffffffffffffff, 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 16:42:15 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x100901, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x2) socket$nl_crypto(0x10, 0x3, 0x15) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x40000c20) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x40000c20) splice(r2, 0x0, r5, 0x0, 0x7ff, 0x8) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000d80)=ANY=[@ANYRES32, @ANYBLOB, @ANYRESHEX], 0x3, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000001680)="cd", 0xfffffcf0}], 0x1) 16:42:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2, 0x3}, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x41c00) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r3, 0xd0f, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500227cbfb52fa01e69aad400b2e98b9dcc3f84c0000", @ANYRES16=r3, @ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x1}, 0x24) sendmmsg(r0, &(0x7f0000000a40), 0x28f, 0x111d9) 16:42:15 executing program 0: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x3, 0x3, 0x6, 0x2, 0x0, 0xffffffffffffffc0, 0x2, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000500), 0x8}, 0x4, 0x403, 0x5, 0xd, 0x1, 0x72f1eaa5, 0xb33}, r1, 0x6, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x5) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8b05, &(0x7f0000000100)='wlan1\x00\x98\x8f\x8e\xb8\xd2\xba{P\xc3\x96\x9d\xee\xf3\x9d\xdd\xde\xb7\xfd\x1d)\x94\tiY\xa4H\xce_D\xa7\xa0I\x88\xa3\xa8[\xc8\xd6\xc3\x81\x98\xf4\xc5\x1a\'\xb2\xea\xf1x\x89\x9a\xee\x8e@\x0f:\xd3b\x8c#5@T\xd7#\fv\xee\xc0\xbf^\xcb\x01\xe9\xdaI\xabS\xed\xd9z\xbe\x81\xde\x06\xc4_\xf6T\xe38Z5\xfc\xe9\x914+Q\xb8\xb8\xba@\xaf\xb8\x806\xc1Sx\x8cv\"M\xd2x\xa2\xc1\xfe\xf6\xe6#\n\xb2\xb1`Q\xc0\xc2\xb7\xa8\xfb<_\xdaKn<\xbaq\x9c\x8d\x8cx\x95\xfa\xa8\xf3D*\xe6\xce\xc8a\xd3[\x95\xc9\xcf\xc2(\x8e\xe6\xb2f\xc1eY\"\xbfB1\xd2\xa8\xc3') r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt(r4, 0x1, 0x6, &(0x7f0000000440)=""/192, &(0x7f00000002c0)=0xc0) fchown(r3, r6, r7) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffef6, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYRES64=r3], 0x3c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0xfec8) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f0000000300)={0x0, @local, @local}, &(0x7f00000003c0)=0xc) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010001fff000000000000000000000000cbdbd69e91fae3b96b0420d5a8da29910a79e2b8f42f5ef29b2fbf562bd5", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469000c00020008000400ac1e000108000a00", @ANYRES32=r8], 0x40}}, 0x0) [ 265.635175][ T9752] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.654207][ T9752] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 16:42:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, 0x0}) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)={0x7, 0xc, 0x4, 0x200000, 0x8, {r6, r7/1000+30000}, {0x3, 0x1, 0x8, 0x0, 0x0, 0x1f, "c24011bb"}, 0x10001, 0x0, @userptr=0x3, 0x9b5b75f, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000400)={0x4, 0x8, 0x4, 0x4000, r8}) r9 = syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000080)=0x40, 0x4) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r10, @ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0xd14}, 0x1) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x40046109, &(0x7f0000000300)) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000001500)={0x0, 0x9, 0x8000, [], &(0x7f00000014c0)=0x7}) ioctl$KDSIGACCEPT(r5, 0x4b4e, 0x3f) r11 = dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup3(r13, r12, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = syz_genetlink_get_family_id$tipc(&(0x7f00000013c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r14, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x20410001}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x24, r15, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10000044}, 0x4800c000) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_UNIQUE(r11, 0xc0106401, &(0x7f0000000000)={0xd1, &(0x7f0000000240)=""/209}) getsockopt$ARPT_SO_GET_ENTRIES(r11, 0x0, 0x61, &(0x7f0000001600)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000010000038127843c9b134f1ebf363aa5e0610b9669962ef6f054dc921ca30ae6841f6e630966c63083c030ea8aff6350373e0a657b564bb97e9990bf40ef121c2d3feef463a97f835f7bf80293a65c53fe097fc1aa7c4ff255d2336e16f88d152178f5606e475ce1f534dc20e8570f3e8119512d70232cdd5024e4fedd769d87af1a1190d5ae16ba2f70ce01b8d9a4335e1c4a3d3df953d795822670a65032be90bbc8b1edccafe3457c717b2838716142e67d45b2906be8fd8d2969828f3675308e925ab61bc174288dffc59944f9bad4d3b535440320efa7201ea3156fad33e27f0d4da1c5da1bfbf7932842291444798e67459669525ed8efe8aaceb081f29ab95009f522142866db4044b64e9b73c8f2ed0a309aaf9555d5297226331ba2f195829c002fdd717e949ee940e7397dc3b67ac5df581395bd262cd62e7e5b4621782e4ec40e66dab41f02ceaf2a94fbecb1e3f1bb9172167a5904d81ac230d1c99fdf311f61a967ead753fcc5c094afb2a40902b3e566378d9232afdf5ec9e8e14a79c0f974ced5d07f10915db90a6c5144d9478522496dfcecaf03efb797399181e3ad547e3f94a14fbebecf69fe24811c2cad6ad213844fadd7d48388e78b6d1c9cb47186bd3b388b4b174e76d5783c8f313560ad7d5fe8a724ca3b564cebd4359380b761ac4e67477dee81e690565b588edbfac459173eaa0c8a1aae654cd0313f9265fea2f1c735c97e0790de2c92be3cf7f19f9050c6d29f62b6d4fd36789dc7f48b58b0c5ebf947669b3eade596bbf420089c929c8cd33f7b8485da6054cc0517e57ca73e4076e20000ab515b9a567a05c315a94aa251b0b3c71146048109d5a72d6f22a9aaa6e418272971771c7f80303cb5db4f96e1c7a8d967dd37ba9928186126fedcfdbe2602d0c9d9b95c3181b7db5ef0152199edba220cf9e98e7d7219367995f2ed704c1b0bf25b3d95f58ffd1d1618bbe4a39580e22d80f6a1a63da5a2db406ad131a30cb0a4714e9a9b9db6159ef6d05815eb700c3d544c05b43e5b4701831b76a2d695884d0f26801793bfdae4afa5923edd0004f29cf09919e93aa4aca225b711ef890b95c69dce4174160fabb1435da03356a761236d5307eecb9a5c45bc123b09ad627c6e423033629bb9b0acc3f6dbac5cd648728054a3f9a5f5e2a88e942ffb81a4a8ca53febc11ab8137cb802e2921b0c0829de4fa606f37e74e1025f2a666f262850ef77e041631ccf4787ed4290a5b32dc630caf0b80601a3759e425cb189002e5a0ee356f076084bcac031a9444713c000b318a8045c63229b43424589ce4c708d6ab626f2dbab890105be24856dd3cd414dd65269f6ec68e038338906b5176dd439abaa8f18b1902de0d03d1726b7a9d5299145c972ad474c74f78b7492906a9a580df0bc38d807f700815a6b65d2f86a0b873b4e82e0a8940e550fdac7a03272e0cb5b7541cb820f1c39ee66301e31123ba5b05f59cbce6f9dea8c771cd7cd96ffc943d5f7907bc3e5347054503af584287d3b419fd660f141b64ba2e43769ecde8d37fe47a5f09e738a0aa062019e5aa852e4e77aa343992b5e7a72951aebf309a51e2520ec83804f2b5655d3bffa90d9ccf729f7ef292e071c64ab448f928732f00cf142cf2b6b42d23915f9e7a633a6cf34d447417b2fd22e52aa4efd2979a51ab90436b7f7cdc05e4d82fbe2acb99e081098c9cdd524ab7300a7f805ea3e0945da563554a0614e55ae179d33ebe87dcc2c31a1889f6008c2306b24c3533e9941acc37f62af996513d22e95622e02822f2f8424d23836ce04420b2a8a86d1ca63870d20e46b66de48ae1efca0af9d8c44a5b6a2f6d22f22376ab97178321bbcf58111b94939d3f1fba18c3bf11c8df242aff7460fc1322d129ec9d8212d5e85a1b838f0ead0b9152f874cf20e06727e7d21e14912c74b0f91829a5abf6b7a3ec09445e135b779742f93e5e9a750c1238891d8cbe54845a4ffc62c7d9aa31d930ff5b2c502bb689cc1e2310fcbb897d1718b6c506c5814ad418a545f868de51e68eaede8c4f97e1265495eb377dbeac84b21ac83aa98f92ceac5bda923329c307e4973b599145d11ed04a55b26cb1b08f9fee057d8c93fa4aa063817cb8dfacbd4bca239ec525f91b206787fe4c3065741460926a2fdf2dcab9da07a05f099b9a8220a2fadd33df5f38ab0dff7ccd3a81ccd7efa89c4a49a684f63366a74e84837d3be673223b200604e90711a4e5bac02bef3bf0195adcb7c6f331ca68c759be2ffe8d04e06c1b4887d039bd18b38e6c1f03b19987fde0f24094eec2480e73ed9f263adcc21e485fef8b3b98cd2a620ee20ee11b0a4556400b63e508b675d896846a82d7a15541767731fcb9bcf51958825f3fd1fe863c66879b896250970d211400acb9fb8e2ed55fee03538034f64902c5d25dc8cd8df789e6be58fe6714199072be7258240997ca3b30c6828a84163dec81b7976994934edadfd0c15eb40b082430b11dec00020befe34c900a804e4b51c258ee45c5575a85d692110457cc01d6fbe502a2d988227be8ea2c941ebd705d27fb1f69a83b5ca2ad518837302d29beb12f9497fec972152f1b57468744606932c7431cb7253c459e79d59c53d566f9bfbc19daa04954ba80ea5ca6623ba0984d5c6f793a88e21a2559b6ecf112085ff5e27bd4206ee9bc10d2be490945980fc441befb8692ceca78e9ca100d9374a849550068de3a1d94330933a5fa4982a79d64018de2d3894d1a46d5408427f59de082ca63455d46fec361346ebbae4d88c1a5d22533cacc0791ff6cc48319948a6d1557071c186c9608e6d20bf3c27e14ccfe7ecafbd3320c1461c5edb6d431f4664dc5ba7a915ed847f6f97823bac0997f14d9b32ff86ada41d9cb4ed91c8de332e8ad84310cd519225b443bcc92658179ca916e7d6bbb5c4ef0dec3df685ec63e36db69bf6a981e53fcf1764cada9cda8fbd008197b8241b1ec57117a261996625de7baa4a5717cab028e362ebdf536177a65e3e250a86e562b7c7d496d18d4779c850a773a05bf54b7268ecc99be42a99c77620787062840944ffa2f7c77c32fca46a7f29847a4853915a95bfdaccf84f12c03aaa892d4ede1292232ff29fec2d5ebe1c7afec3ccb8665e8f22dbff38ed2c36f4217a54562b1006aa988606bc111856d60cc87e67990d16ba5ae13e9d0ad2fc202f77c519ebf6cbaa2783cf0fc7e53b03163153ec5c166ef36492361c664c40221023ce83aa88e069937bb7d437a93088881e67e3dc20ec187ebd26030fbb62b7bbae3836220c268556d051403d1fe9af647a6fc22d17b52da0d54d07dc5a0600d0e3577ff255ba57144d1ea8eb6d7e00a255b758e51f6e76fb577dbef4093bd01ff3b480ecc06e6022094f11b2a2d4f7c14cc814872bf8b3ac9ba30df97063d45d3dd6310ecee66bbf6486f723e24663b79ac354397ead74e9fe5ba8a72e70ddd3edde61e5ad5698eb2f75c8baedbcc5d0f5323cf4a979b5dd397674b224f266ab9ca01968263570b0a7da5d5fab6f3ce3bc3c62820fa09b0318824ad801d1bf02f9700d033b0df0f1a565d4ee1160dfc208bbf5ac2655704252fca64fdfc4683bab02f859b01eb073bd713f480c8196f77f0f0597f1739b4e6c07d13259fd6d35489786daa8681db2c663f859802d233e850fc6a443cb63ac381d212729cea7e3843cb6de8bf22270bf1cb1e43802b015be68d7ef89d7f5041de510f586a09e874ff9d4f5990dff3ed98aab48cc4c4b9d7186d9352f7d37877b21ecbac88aaab27710b7217369ef3898fe877ab00c5a7edf2316012532b0455c3e16b52464dd1bdcb5e21aab9550d58364808722d8bb34eab88e89c90f42783f90ed6e182be1cf56db94f3bb7e0f866b80f03d03cc66070691eb8cd113ff0b94d17324d5cbe8ad454145a781b298627f4b7fef4280fa447c41c49e5ed0cdcabe9db5e6af4b0a69ef5799083e498562e13e2a040efc3e67ff77ba5eb840408b72f55f6c7e01a2114cd63a159d9b0c22542919ea882f0936b3af3194f063c3fff0646eca55a15c9b039efabd70edf3e67c47e407632ce5d8367098cc4c7f56b5a7db82fe255b12d4e3411260d0f36b71bcf21cb9260f28bdee33d5f4e1b18bbc65dd9a67ab8308fad5a8a8e55bb5d407d9bb5e0ba477ee2522393dced6a009c485a0dbe181b0dd3dd55f156cbb7d46fe64042a8333240733d3359a01882190a752415989c2f2f8aee86aa54ff729314cc85043904210ed2e986a62c0eb6e2aab2a787a60a0d729a3de389fba723cd363928cf5566b388382709a7ac454f59b97be28f2ae601f54e822de2771f5f6bcfc408657a2a3751b009b2b4b4381f427bfd855f04ef774a7db0718e0e19428f0e865d0540adbbbe45f4dae584ab6389e25a49f011abb483103a6c1b36ca2e1546865c5537f2b35636556f84b2112e02f45e32297c3cbcc6890db2eca49ebfdf31326e6248e7fbc5292e3e9d803d36b41d7798d2475b793447055750d7e5dff6452205d371b94cec18d099c4debb1be610c24fae387da4c5a7261d818c9c1f910c9e0368414e331c59ba6ad4e9e43b18264e374f9b023d2ab572ca72a340e88606a32fe8a25d60d8f6934c29fd4cd2fb1ac6db40b0b1aedc3653f4f8cd529dba7c2aab1f22a6cfb5509c6f439c5ec23812fa2a84119bb4954603852b42559a4cb1ffc3eaf14861b533ea1b167f180386ffb8d2ef570ce854471db301f07c1917b923fc993f41a5d7cae6df3a5b1f4933485b9d9f42ad6c4682aa09355dafc4f9b1e71248e439bb58cae446b5f113d70ab13051aac02ca359f53bcf0008a6a984311830d27a5c00a336708968d828a2c8865098652a39022cd9e691eff759fe08d96009377aca5c1c9f820860afee120fe55b68e288cbcf06ac42c0459bdd8a4a5dd54080146b4bf2591e2faa4654817aeb7a56235aa6ff605a9dcb80d1f92af233e56ff2e1fc04c909a8a029c0be69a45c548cc6535a8de086512dda8fb89a1368a68ccbfb0830812e59f7c1e6376339f2c62859274da49382b68dc60f5423322e533cc2c753dc27c2795d2543d47ea4c1e6055c771077fca3ca946005f1bb284374cd0be3880bcb3dddc3df00b76eb3ca50bb92a34cb44015ae60dae18edc7f7c612af305f635a47d9c51a57aad098e6594663d2ef62f09eaf8c6cdc5508f96cec995dbc4f77e5353b7f0833827e91571b67745b1e1a67e53b80e87721ab7b14ee365d902e5f75811a4cc268b5ad3d06323501ad33f5d6c470b9d4f3acdf3688631a090e53c21f55c0bd77256c9e08ea88ffebcccd131c4f00bfac4490623b2bd59ecaf1b466c288e993b5bce18ad3879ccc7b75e5b305bce5109880f90a4aec65227fe7f9046a6b11015fc859baebad5a844b5499fdde7a74bdb746e05c87fc7f63e79a76a5a0e5ded8b77aa4a7c497055a2d7d4f48e919a8cfc00662c6a7547e1ceb7a9d7f97e9fffe491bcd8ecc5ff2eb58dcd9254421f22c681319e61daee656fee3972f214ec84e20d29a3b6ff6996e54c8eba8b7ba7f2c7a40b04f9bb7e297f578590bb62e3f60f45d5d8d78f4fa1b8ece8bd4bc57116b9e0ff414f92497e5fa68767c9616522f25996cb4df01cec72a8767f2c89f22ada29c6505485b7757c44549e8818509db19e5301c8b498e7ec70cd888627212b1be019005e1196d9526918cd7468357964c2fcebceba1345bf06d81d63361f108922a5bc1186a872f44281aa67dfddd6b1a96221a099fa3f44a0c0000000000004613449b3f2de29c91aceb6fdfea3de843aa668ea2967fdb603d8d2e54c04df4a6a7d2c24b72a8f9bbcf7a37b7bf548fb31b0ae08501e5007dac433108f71ab136e022de8f7cc20256fd6c2ee2334b762da152e0980d4e9a62d5f500"], &(0x7f0000000140)=0x1024) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x186, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5800000010001fff00000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0084000010000000300012000c00010069703667726500002000020014000700fe8000000000000000000000000000aa080004000000000008000a00", @ANYRES32=r16], 0x58}}, 0x60000000) 16:42:16 executing program 1: syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0xa00) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioprio_set$uid(0x3, 0x0, 0x4000) [ 266.163486][ T9770] team0: Device ip6gre1 is of different type 16:42:25 executing program 5: syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x40000c20) r1 = dup(r0) writev(r1, &(0x7f0000000000), 0x224) 16:42:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x305401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='\xff\xffPCv2\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) munlockall() syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000005000/0x18000)=nil, 0x0, 0x246, 0x8, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_emit_ethernet(0x15c, &(0x7f0000000200)={@local, @random="2f673904e77a", [{[], {0x8100, 0x2, 0x1}}], {@ipv6={0x86dd, {0xc, 0x6, "9f7fdc", 0x122, 0x0, 0xd6, @rand_addr="42a34c6c88d8c657d31bd42b6dd178b9", @ipv4={[], [], @multicast2}, {[@srh={0x7707f3a718fd04b, 0x8, 0x4, 0x4, 0x1, 0xf0, 0x2, [@loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @rand_addr="9e1c9496f05de3d817f8f14f2a9cae25", @empty]}, @routing={0x87, 0xc, 0x1, 0x0, 0x0, [@local, @loopback, @ipv4={[], [], @local}, @mcast2, @remote, @ipv4={[], [], @multicast1}]}, @hopopts={0x18, 0x0, [], [@enc_lim={0x4, 0x1, 0x4}]}, @hopopts={0x89, 0x6, [], [@calipso={0x7, 0x18, {0xa94, 0x4, 0x18, 0x8, [0x9, 0x400]}}, @ra={0x5, 0x2, 0x9e}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x23}}]}], @tipc=@payload_named={{{{{0x2a, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x2, 0x400, 0x0, 0x3, 0x8, 0x1, 0x2, 0x8, 0x2, 0x0, 0x4e22, 0x4e23}, 0x2, 0x3}, 0x4, 0x3}}, [0x0, 0x0]}}}}}}, &(0x7f0000000100)={0x1, 0x3, [0xd2c, 0x772, 0x50d, 0x421]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 16:42:25 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 16:42:25 executing program 3: r0 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x40000c20) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r3, 0x9, 0xfff, 0x5, 0x9}) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0xffffffaa, &(0x7f0000000080)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e3f700000000000000ca1b4e0906a6bd7c493872f750375ed08a56331dbf64700169381ad6e74703c48f93b8446b9bbc7a461e9886a5e54e8ff5", 0x4c}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 16:42:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x4, 0x1, 0x0, 0x10000}, {0x2, 0x2, 0x1, 0x80000001}, {0x40, 0x1, 0x4, 0xaa5d}, {0x4c, 0xe, 0x50, 0x7}, {0x8, 0x23, 0x6, 0x40}, {0x20, 0x8, 0x81, 0x10001}, {0x0, 0x20, 0x3, 0x9}]}) 16:42:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0xff00, 0x0, [], 0x0, &(0x7f00000001c0), 0x0}, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001140)=@nfc_llcp, 0x80, 0x0}, 0x2}], 0x3, 0x2000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x354, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x80001, 0x84) r2 = dup(0xffffffffffffffff) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xbd20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x87) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={r4}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x7, 0x100, 0x2, 0x80, 0x6, 0x2, 0x3, 0x6, r4}, 0x20) [ 274.793050][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 274.793091][ T27] audit: type=1326 audit(1577983345.057:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9785 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d82a code=0x0 [ 274.833876][ T9793] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 16:42:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = semget$private(0x0, 0x3, 0x42) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000000040)=""/6) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) 16:42:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = semget$private(0x0, 0x3, 0x42) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000000040)=""/6) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}}, 0x5000000) 16:42:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000002c0)) r2 = socket$packet(0x11, 0x40800000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x197) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000540)={@empty, @mcast1, @mcast1, 0x4, 0x7ff, 0x0, 0xaceea453b925c7c9, 0x75, 0xa, r4}) lstat(0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, 0x0, &(0x7f0000000140)='fuse\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYRESDEC=r5]) r6 = socket$packet(0x11, 0x40800000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f00000000c0)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000540)={@empty, @mcast1, @mcast1, 0x4, 0x7ff, 0x0, 0xaceea453b925c7c9, 0x75, 0xa}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r9 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r9, &(0x7f0000000040), 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe8) sendmmsg(r9, &(0x7f0000005fc0), 0x800000000000059, 0x0) 16:42:25 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0xff00, 0x0, [], 0x0, &(0x7f00000001c0), 0x0}, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001140)=@nfc_llcp, 0x80, 0x0}, 0x2}], 0x3, 0x2000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x354, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x80001, 0x84) r2 = dup(0xffffffffffffffff) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xbd20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x87) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={r4}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x7, 0x100, 0x2, 0x80, 0x6, 0x2, 0x3, 0x6, r4}, 0x20) 16:42:25 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) [ 275.590773][ T27] audit: type=1326 audit(1577983345.857:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9785 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45d82a code=0x0 [ 275.621468][ T9793] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 16:42:25 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "8000", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x10000c59, 0x100083) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000000)) 16:42:34 executing program 5: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x10000000000f, 0x0, 0x0) getpgrp(0x0) r3 = getpgid(0x0) memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) r4 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r5 = dup2(r4, 0xffffffffffffffff) ppoll(&(0x7f0000000200)=[{r5}], 0x1, &(0x7f0000000280), 0x0, 0x0) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x5452, &(0x7f0000000040)) fcntl$getownex(r7, 0x10, &(0x7f0000000580)) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) fsetxattr$system_posix_acl(r8, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000100eb80000000000200f4b8a2db938d877310085d404ee40bc8aa749cba209f741cfa420a5d4b5dc2c0e9b00b80a1c9380d7091a521a2a1d554f352b5bc4179643d5339d457aa148d8b970d3cdc90b9105f52460a382583afc77c7d974378cb2e6682cad42c8070d796c50b9dbc4d042070d6b0d2907237f6db", @ANYRES32, @ANYRES32=0x0], 0x3, 0x1) r9 = socket(0xa, 0x3, 0x8) r10 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(r9, 0x0, 0x0) r11 = gettid() waitid(0x83b895581628fca4, r11, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r12 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r13 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r14 = dup2(r13, r12) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r15 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r15, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07", 0xd}, {&(0x7f0000000180)}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r15, 0x227d, &(0x7f0000000780)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r16 = syz_open_dev$dmmidi(0x0, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r16, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r11, r14, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r6, 0x0, 0x4, &(0x7f0000000180)='em1\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, r17}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r1, r0, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0xc) open(0x0, 0xe279a88a3b20cda9, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r18 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setpipe(r18, 0x407, 0xfffffffffffffffe) bind$inet(r18, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r18, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r18, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r19 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r20 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r20, 0x0, 0x0) sendto$inet(r20, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) dup3(r20, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="08000910", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000000000"], 0x3}}, 0x0) r21 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) pwritev(r21, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r19, 0x4c00, r21) sendfile(r18, r19, 0x0, 0x102000004) 16:42:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000001200)={'nat\x00', 0x0, 0xff00, 0x0, [], 0x0, &(0x7f00000001c0), 0x0}, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001140)=@nfc_llcp, 0x80, 0x0}, 0x2}], 0x3, 0x2000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) shutdown(r0, 0x1) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x354, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x80001, 0x84) r2 = dup(0xffffffffffffffff) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xbd20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x87) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={r4}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x7, 0x100, 0x2, 0x80, 0x6, 0x2, 0x3, 0x6, r4}, 0x20) 16:42:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x80000000048, &(0x7f0000000040), 0x4) sendto$inet6(r0, 0x0, 0x0, 0x80, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80282, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000000)={r4}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r4, 0xdc, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x7}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x9, @mcast1, 0x7ff}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x80, @mcast2, 0x1}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x74f32261, @ipv4={[], [], @remote}, 0x1}, @in6={0xa, 0x4e22, 0xbd30, @remote, 0x9}]}, &(0x7f0000000200)=0x10) 16:42:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x0, @remote}], 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="01efeeeac6aa3bc25a25d88f", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x3) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 16:42:34 executing program 0: socket$netlink(0x10, 0x3, 0x4) r0 = inotify_init() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x100000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfec8) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x40000c20) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ttynull\x00', 0xc68a088d46a4cb5d, 0x0) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000340)) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000000)="e9bd6de1791feac3a0a933b8a739cc6368d3e929203df93964ef2eb02336c4fcf58f8d084563be81bc37f8af94bda8bb649565cd24b14c85c205909ee0f8cfef1a1a30431c17e397693ef00085e45c01d91245d5eb3b0ac20382cea91f0fe69acb9a1918aa346287e24e646d89ccb1aa136a8104bccdf3d54f20f053b5a5b8e0669af31fa7005a14dc15399636f7bcd16826a8918fc02ef9ee858ba812e81bbf7b06771a62aa03de7acc98cde0d8a0bb4004efb0efb10ad65a288592b3e08f913fbcc2f5feabdbb980e8e20999"}, {&(0x7f0000000200)="1f1ef59f6340871d87ea48b0f2d667b67411719b5f11f5048a02d2d8f6d5509481bce6cbbbee7b845e1197a49c0aabd36eb23089c0f7bfb5a420ccf4b19462de98aad0c5caac16030226b3986590ea0befdbbbbc985b90ba479cee5f1fb323789f406617fde80cbfb13e6d89f00cf7fe7ba2928a439ab9d235562e12702657c05da0e2824bc3108d79184cfdbb1b6b90781b2328ca4e36d6f676b7c29aa1b016c68905d8086f35a29f9e508ef488942562865b16dd2e9fc239f556cc48b96f27933c1608861adb1cea432a8ad604992fc793151227ddcf049df7986f"}, {&(0x7f0000001600)="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"}, {&(0x7f0000001300)="31c88a59d30ccdf998a0aebd39cffb6d1a388ec7d45e93d458b36f1c3cf4e87579db6d5111289c2e9377406020ba3b3b799e8b4e285cd4b28636dd3db1385accf36ed3723c39f92c6a64a44e05436127e29392a48d02f1a193a9f899a393086b8c9968e117303a8b820547589188ace09dc0721276a104db61d3b2786059114b0593012758ce940bf1a2fbb326c9944b8f3c4511f651291e748dbcf6466b1857f0e458aad25a412341c678dfce09d2ffdd532c752d2592d54e38eea6836251461cedc940a4506d602276629d17717c6c51418305ae6ca2ac569c71b9803562b81df92a7e560b669b"}, {&(0x7f0000000100)="81eb4d82c746e8c4226c923ae1f9f8538edfb29528c2e6328d218a8b0ab67dc3daa2d060"}, {&(0x7f0000001400)="0c82b0f0dfeee8dbb4bb93e68311cca3f71932d207624562664a8c3823615c83839c23b739f0abe1f7ff10bd2065e8bc9955d9cfb2b3a9e11ff40fd1081d3d351a39c9cb7125ff21e590467e23b400c69f7c9712d9083a1411bca3f5fa63190be6895a832de45604d5154b1cb4960abf5ad5b984c20882315427cdc0805f0ba64ef0acafe999a971160cac555c31b426a7d6b723d950a8338f535b5dbc8887dfce71eed78f8321ede0f61e30e9879179468603cee3e05a4947a5b263c47dd5e7d310c68ae30f8c39cc493287131a62b297bd8f9c911c00fc8c3c888c1cda391fdf07f219ccb84c12eef07f2524295c7af7e88a82edd56b81e4"}, {&(0x7f00000015c0)="935c9f4f2f697021de16ca2b46cbb92a"}], 0xab) 16:42:34 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) tkill(r3, 0x1000000000013) 16:42:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000e4", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x101}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cc], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:42:34 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip6_tables_matches\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9a23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0x7fffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x40000c20) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x40000c20) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0x802, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) r7 = fcntl$dupfd(r5, 0x0, r6) r8 = socket$inet(0xa, 0x2, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x2, 0x1}, 0xc) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r9, 0x0, r9) r10 = accept4(r9, 0x0, &(0x7f0000000140), 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r12 = dup(r11) r13 = socket$inet(0x2, 0x4000000805, 0x0) r14 = socket$inet_sctp(0x2, 0x5, 0x84) r15 = dup3(r13, r14, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r14, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r15, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r14, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r15, 0x84, 0x7a, &(0x7f000059aff8)={r16}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r12, 0x84, 0x71, &(0x7f0000000180)={r16, 0x55a990e3}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000180)={r16, 0x1, 0x0, 0x1c4}, 0x10) listen(r8, 0x4) accept4(r8, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) 16:42:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) rt_sigprocmask(0x2, &(0x7f0000000080)={0x10000}, &(0x7f00000000c0), 0x8) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) [ 284.249594][ T9858] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 16:42:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfec8) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x40000c20) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x7, 0x4, 0x4, 0x2, 0x3, {r2, r3/1000+10000}, {0x8, 0x0, 0x0, 0x8, 0x81, 0x4, "5a9dee7e"}, 0x7, 0x3, @fd=r4, 0x81, 0x0, r5}) ioctl$TIOCMBIC(r6, 0x5417, &(0x7f0000000100)=0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000140)) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) mbind(&(0x7f0000a8b000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x1) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0xa2c}, {0x0, 0x8}]}, 0x14, 0x1) [ 284.537312][ T9869] kvm [9859]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f [ 284.577217][ T9869] kvm [9859]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000000f 16:42:34 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0xfffffd39) [ 284.642199][ T9869] kvm [9859]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc2 data 0x4d00000000f 16:42:35 executing program 0: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) r1 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'bcsh0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x20, 0xe3, "13940803f55a812945db9622bd8520b3819c63d4ff487f13ff48b8f7ac4e37eb8ddda84983f02c4cd6f86b0a023d5ed96922e7898790e619099ed84b58bd9f0245cfb608c4bd3853a7ffd966a62938866fc7e3509b3afab93d01d49e9505e5cc1919e6912b6d5244376bb28be83b0cb120865c69470fdf93eaf4f21515f9f3eb36a80836364b7f7175a11f3cb75bca7dc9146f3a3150ef5cb24ea692012f958c1c0c18407df0576ae7ea91ea44bbd9ede2a44673fe2d22b4536df9f752ffc729ab307efca5b3c55e7b1baed8c7483149177607f0bbc60bfaa87ce9fe1f7172c2576529"}}) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) r3 = socket(0x10, 0x800000000000803, 0x0) sendto(r3, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) recvmmsg(r3, &(0x7f0000004e00), 0x27b, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000805, 0x0) r5 = socket(0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000140)="120000001600e70d017b00000000008e", 0x10, 0x0, 0x0, 0x0) r6 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x0, 0x84) r8 = dup3(r4, r7, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7a, 0x0, &(0x7f000034f000)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, &(0x7f0000000040)) [ 284.693619][ T9881] mmap: syz-executor.1 (9881) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 16:42:43 executing program 5: r0 = syz_open_procfs(0x0, 0x0) read$char_usb(r0, &(0x7f0000000100)=""/138, 0x8a) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x200a01, 0x0) r2 = socket(0x400000000000010, 0x802, 0x0) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f19", 0x22) sendmmsg$alg(r2, &(0x7f0000001100)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000780)="699ec58965dd2a737196f3c4c2bd66209f2838be4775ddf3fc61acdc4044f90ae39a27419a7adbec5e95727a95bc2057fdc480b68b0baa0be49693011248b40d50a5b2acda1cc3bf5d79a544999a23ad15cdb9e2eb36b862738588c1658586565719bd8893b1f3bcd476b08a670a7c07b513f8c1207e475fea", 0x79}, {&(0x7f0000000800)="f4f36abffc26e04c4de2547b4fb0dca3613c3c191e518e4b4cc987a787627202c106e63102396760ebfb3bb1a77bc6260f6b9bdeca8f9c20d12da11bb9094a4e0a5fd6562a8616b45d2dd903abc3bbe25257b3e70ca813de1e2dc4c7e2e461d04b8eb101bcd5e7791821bd83c356db82c8535c47216956bd1cbc54bf42c353ce5521f67b343f8124a0", 0x89}, {0x0}], 0x3, &(0x7f0000000b40)=[@assoc={0x18, 0x117, 0x4, 0x1ff}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xff}], 0x90, 0x810}, {0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000700)="3d8a567c9479a3c082a8b2176f1e2cad", 0x10}, {&(0x7f00000009c0)="42dfc0268edd67fced095691c5f17712b7", 0x11}], 0x2, 0x0, 0x0, 0x4021}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0xbd1ce1ffba0d5d84}], 0x30, 0x40000}], 0x3, 0x30042801) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x1f3, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800000000000}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x10000000000001) sendmmsg$alg(r1, &(0x7f0000000140), 0x1, 0x45) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008105e00f80ecdb4cb904021d65effd007c05e8fe55a10a0005000000000103000e12040008000000812fa800040011000300e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4ed", 0xcb}], 0x1}, 0x0) fstat(r3, &(0x7f0000000280)) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x3, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0) socket(0x400000000000010, 0x802, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r4, 0x1, 0x2c, &(0x7f00000001c0)=0x1, 0x4) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@empty, @in=@remote}}, {{@in=@local}}}, 0x0) syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x0) dup(0xffffffffffffffff) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000680)='/dev/admmidi#\x00', 0x0, 0x10000) socket$inet6(0xa, 0x5, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000008c0)=ANY=[@ANYBLOB="ffff189a16c6a2d7e3444534912c4bef84ec3f58efa7603c3757405dc0d95f1d5ba865bf46e1dfc375f4e4c85f3a0d41c4848e198837dcbaeba0aec168ae39ae725e0cb32e88f2b2ea15fe5055f0d49f4262ec6da397f53b83cf3834b235d6bb6ef43a66853aeef0ec06d8fdc86c8159cec58a302b56cd003212b0ff61aee9d85fdcbf39a600296cc1eddbb84894272458f388778ea5c6dca980ee57ca27dffd1aeaf3d900f1b73bf996393f190174960a"], 0x1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a40)={{{@in=@multicast2, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000580)=0xffffffffffffff6d) getresgid(&(0x7f0000000240), 0x0, &(0x7f0000000340)) stat(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) io_setup(0x8, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[0x0]) socket$packet(0x11, 0x0, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) shmctl$IPC_SET(r7, 0x1, &(0x7f00000001c0)={{0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x8}, 0x81, 0x7, 0x2, 0x0, 0x0, r5}) geteuid() getpid() syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000740)='net/icmp\x00') r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r9, 0x40045431, &(0x7f00003b9fdc)) r10 = syz_open_pts(r9, 0x4000000000000002) ioctl$TCSETS(r10, 0x5402, &(0x7f0000000080)={0x0, 0x3}) sendfile(r10, r8, 0x0, 0x6f0a77bd) 16:42:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x1080, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x10, 0x80002, 0x0) wait4(0x0, 0x0, 0x0, 0x0) getpid() r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x16, &(0x7f0000000100)) ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000068000507000000000004000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 16:42:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x20, &(0x7f0000000440)) io_destroy(0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x404e21, 0x0, @ipv4={[], [], @local}}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfec8) sendmsg$nl_crypto(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)=@upd={0x108, 0x12, 0x800, 0x70bd2a, 0x25dfdbfe, {{'rmd160\x00'}, [], [], 0x2000, 0x2000}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x4340}, {0x8}, {0x8, 0x1, 0x101}, {0x8, 0x1, 0x659b5369}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 16:42:43 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x7) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8}, 0x0) shutdown(r0, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000340)={@remote, @dev}, &(0x7f0000000380)=0xc) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xea7, 0x20600) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x40000c20) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="12000000", @ANYRES16=r3, @ANYRESHEX=r4], 0x3}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r7 = semget$private(0x0, 0xa, 0x6a8f12ee6a8a7e95) r8 = geteuid() setreuid(0xffffffffffffffff, r8) r9 = geteuid() setreuid(0xffffffffffffffff, r9) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r8, 0xffffffffffffffff, r9, r10, 0x8, 0xfff7}, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x10005, 0x0) setsockopt$inet_opts(r6, 0x0, 0x1b, &(0x7f00000001c0)="d9d55f51ac0451423638d0db0628", 0xe) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_ALGID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x881}, 0x0) 16:42:43 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) tkill(r3, 0x1000000000013) 16:42:43 executing program 3: syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x440, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f00000000c0)) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) syz_emit_ethernet(0x154, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60000001011e3a03fe8002000000000000000000000000bbff0200000000000000000000000000018700000000000000050207ff00000000210007e9680000005704028000000000eed6294ec9e5a492ba9181052b08183efe0000000000bb7706010000000000ff010000000000000000000000000001fe8000000000000000000000000000bb000000000000000000000000000000004e224e24000000000000000000", @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="e0c200069078087803034002040000080a00000006000009830104021e0dff000009000000000000000000006db3fdfc9c6ffb055cae3274bd0a9251b05113c5e1953fae813cf9333ea77567fe0c19ddae50c2fa91000c9222bc8577441d50f05fb5af4fac9f522d71e3f5f91b1eea32ae8fee062e3193034399057c9ddb7f410b29cfaaa9e8aa29f12b8622d572b49cadd2953a3481ebf7196c"], 0x0) 16:42:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00336aa408751a7983c3370000", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00']) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 16:42:43 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r4 = getpgrp(0x0) capget(0x0, 0x0) getpgid(0x0) memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) r5 = syz_open_dev$sndseq(0x0, 0x0, 0x1) dup2(r5, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x5452, &(0x7f0000000040)) fcntl$getownex(r7, 0x10, &(0x7f0000000580)={0x0, 0x0}) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0xfef0) fsetxattr$system_posix_acl(r9, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) r11 = socket(0xa, 0x3, 0x8) r12 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x0, 0x70000) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r13 = gettid() r14 = getpid() sched_setscheduler(r14, 0x5, &(0x7f0000000000)) r15 = getpid() sched_setscheduler(r15, 0x0, &(0x7f0000000000)) waitid(0x2, r15, &(0x7f0000000040), 0x2, &(0x7f0000000a40)) sendmsg$key(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r16 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r17 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r18 = dup2(r17, r16) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r19 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r19, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee0796", 0x17}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01", 0x11}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r19, 0x227d, &(0x7f0000000780)) kcmp(0x0, r13, 0x0, 0xffffffffffffffff, r19) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, r18, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00'}, 0xfe84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r8, r9, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r6, 0x0, 0x4, &(0x7f0000000180)='em1\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={r4, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000480)='2R\x8c85\xd8\xb4.\xee\xf4\x95%\xbe\xe3\xd8\xd0\\\x18\xb8\xf6\xde\x94I\xaf\xb0E(w\xae\xc4Q\x12\x1b\xbd\xd0\x9e\xba\xe7\x7f#\x84\xa9N '}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r20, r3, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r1, r0, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0xc) open(0x0, 0xe279a88a3b20cda9, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r21 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r21, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r21, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r21, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r22 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r23 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r23, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x20000) r24 = inotify_init() inotify_add_watch(r24, &(0x7f0000000080)='./file0\x00', 0x40000c20) r25 = socket$netlink(0x10, 0x3, 0x4) r26 = dup3(r25, r24, 0x1c0000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r26, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) write$FUSE_IOCTL(r26, &(0x7f0000000240)={0x20, 0x0, 0x0, {0x6a7, 0x4}}, 0xffffffffffffffb2) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/11) r27 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r28 = open(0x0, 0x0, 0x1) getsockopt$MISDN_TIME_STAMP(r28, 0x0, 0x1, &(0x7f00000002c0), 0x0) pwritev(r27, &(0x7f0000f50f90)=[{0x0}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r22, 0x4c00, 0xffffffffffffffff) sendfile(r21, r22, 0x0, 0x102000004) [ 293.540114][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.554560][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 16:42:44 executing program 2: r0 = open(&(0x7f0000000180)='./file0\x00', 0x311002, 0xa2) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000001c0)=""/121) r1 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x2) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="e2", 0x1}], 0x1) r2 = accept4$inet(r1, 0x0, &(0x7f0000000040), 0x80800) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}}}, 0x84) socket$kcm(0x29, 0x2, 0x0) 16:42:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') 16:42:44 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = syz_open_dev$amidi(0x0, 0x4f6, 0x10000) ioctl$TUNSETVNETBE(r2, 0x400454de, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r3 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) futimesat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={{}, {0x77359400}}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x0, 0x0) socket$inet(0x2, 0x80001, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r7 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r8 = socket(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r10}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2080000014080189af2f7c84483e9e6829e62f987ba421fd6c125111810000000056ce56f82aadd74a9833b41c92b884ca9839d17eb25d2db717d9dc951d0407d1014965d673fa044d70964886f7e32c44b13a936470b2555e816fc330b92e6a26179bbf0b8a22435a5351075096bbd53b2e34e66476268f44f3d63be7112554080e159e5564f10a86796d", @ANYRES32=r10, @ANYBLOB="08000200e00000023848884aff2c2461bf01"], 0x3}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="68dd0000150001050000f2ffffffffff01801e00c8bd61b443317c3260c1f57f9f22d0f5315a40ffd27f9c78874e35bfb0967de97d3ec769ef012a1873466bcd9e561e47d9e8c204a27030f1e6593d83e1288819e00baa01", @ANYRES32=r10, @ANYBLOB="08000200ac141426"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', r10}) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000001400)={@dev={0xfe, 0x80, [], 0x28}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, 0x7fffffff, 0x1f, 0x8a00, 0x200, 0x1, 0x281, r11}) ptrace(0x4206, 0x0) socket$netlink(0x10, 0x3, 0x3eb190fe4a256bab) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:42:44 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000c20) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/808], 0x328) 16:42:55 executing program 1: prctl$PR_SET_THP_DISABLE(0x29, 0x0) getrusage(0x0, &(0x7f0000000100)) 16:42:55 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$void(r4, 0x8fcc3445aebd1b11) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = socket$unix(0x1, 0x5, 0x0) connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r6 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0xffff, 0x80000001, 0x2}}) llistxattr(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)=""/224, 0xe0) sendmsg$unix(r5, &(0x7f0000000080)={0x0, 0xfffffffffffffe7e, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000030000000300000001000000", @ANYRES64], 0x18}, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000280)) close(r0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0x800, 0x8}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r9 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x80002, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x1) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 16:42:55 executing program 0: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x0, 0xffffffffffffffff) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x81080, 0x0) r0 = geteuid() setreuid(0xffffffffffffffff, r0) r1 = geteuid() setreuid(0xffffffffffffffff, r1) quotactl(0x0, &(0x7f0000000140)='./file1\x00', r1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x341500, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, r0) 16:42:55 executing program 2: msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000000000000bd0f15b5c58dd89947277ad4fba8207500"], 0x8, 0x0) r0 = msgget$private(0x0, 0x417) r1 = msgget$private(0x0, 0x192) msgctl$MSG_STAT(r1, 0xd, &(0x7f0000000340)=""/205) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x40000c20) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x18a8c32dea79dcac, 0xffff7ad3, 0x3, r2, 0x0, &(0x7f0000000080)={0x990a6b, 0x80a, [], @value=0xfffff800}}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r3, 0x4) msgget$private(0x0, 0x1e5) r4 = msgget$private(0x0, 0x417) msgctl$MSG_STAT(r4, 0xd, &(0x7f0000000100)=""/191) msgrcv(r0, &(0x7f0000000080)=ANY=[], 0x0, 0x2, 0x3850fdf99e0d53b9) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='task\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x100) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000001080), 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x680201, 0x0) 16:42:55 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) tkill(r3, 0x1000000000013) 16:42:55 executing program 0: socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000001540)=[{0x0}], 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x100241, 0x0) readv(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000640)='/dev/uhid\x00', 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000280)="b1f0abafacd0eb7c6e61", 0xa, 0x0, &(0x7f0000000680)) fcntl$setflags(r2, 0x2, 0x1) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x19837bde4c6302ff, &(0x7f0000001180)="13991faf47feb27268a7eaf9b35af7e7a42afdeb25a96a7f0f045059dee0e82d63d83556d0d4cf06882d783d9febca4f2419ef10d7960f7163ba258ead751990879f487868d447001a0490e22adc7d607ff67a8af2469887f28b70040d8d92663a16647e6cb1c19f03b4", &(0x7f0000001240)="77edcd230b53785cdf327d97c34e1b4e566554acbf7f1da18959b317e9953de18613f1c55edd9d3c8e5a45909a8051e0166a122060b56ddcec99dadf5e808930076c54322d10568af63ac57c2691b2c45242268bec8fa43541e143b575d4ac985452c59d6676fc7b5b0ae5d55698f463342177b5637e779fd5993799720131dbb271b1824b7f6fdd80dd0d439f5d36dc4da0e608d554b402ee7d7dceca34f06b9b7737448adcc3ea4465dfd17f1f31c1a542fb97222ab4748189a0378d01715e9b9fbd1248610184feb2be73464bb83c657d60a618339c7847b42a6055ed46ca56", 0x6a, 0xe1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) readv(0xffffffffffffffff, &(0x7f0000001540), 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 16:42:55 executing program 1: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x40000c20) fcntl$setlease(r0, 0x400, 0x448f60943b1c03ad) r1 = socket$kcm(0x10, 0x3, 0x10) mknod(&(0x7f0000000180)='./file0\x00', 0x8201, 0xfffffe01) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000100)=0xffffffffffff0000) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002200815be00f80ecdb4cb904064865160b000004140e000a0002000000dc2976d153b400000000000000", 0x5ffe}], 0x1}, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)={0x4, 0xffffffff, 0x3, 0xf64, 0x100}) r3 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x0, 0x240881) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) [ 305.001110][ T9966] QAT: Invalid ioctl [ 305.009034][ T9966] device lo entered promiscuous mode 16:42:55 executing program 2: r0 = socket$inet6(0xa, 0x10000000003, 0x6) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) r2 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) r3 = geteuid() setreuid(0xffffffffffffffff, r3) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@loopback, @in=@remote, 0x4e24, 0x8001, 0x4e24, 0x0, 0x2, 0x80, 0x386695b54aa8b94e, 0x25540aa6cb1fa94, 0x0, r3}, {0x6, 0x5, 0xffffffffffffff81, 0x624, 0xffffffff7fffffff, 0x10001, 0x399, 0x8}, {0x7, 0x6, 0x9, 0x100000000}, 0x3f553d30, 0x6e6bbd, 0x0, 0x1, 0x3, 0x2}, {{@in=@remote, 0x4d6, 0x6c}, 0x2, @in6=@empty, 0x3503, 0x0, 0x1, 0xc0, 0xdf, 0x1, 0x7}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:42:55 executing program 5: socket$netlink(0x10, 0x3, 0xb) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$pptp(r0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000140)=0x4b9d) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r6, 0x1, 0x10, 0x6, 0x800}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000280)={r7, 0xfff}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L-', 0x10001}, 0x156, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000100), 0xffffffffffffff40) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180), &(0x7f00000001c0)=0x8) unshare(0x60000000) 16:42:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80, 0x440000) ioctl$VT_DISALLOCATE(r0, 0x5608) 16:42:55 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x2) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000040)=0x3ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4, 0x81}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x19) [ 305.582786][ T9966] device tunl0 entered promiscuous mode 16:42:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000040)={0x8000, 0x3, 0x6, @dev={[], 0x25}, 'bridge_slave_1\x00'}) close(r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x5, 0x5bb, 0x5}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 16:42:56 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='s\x00', 0x98e76c7e851f1469, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x80000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100005070075ac9e8d00004e83000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080003003a000000250012000c00010076657468000000001800020014000100000000004f4b59960e4fb1174630b16d6ed4107c9d51b9a057992d37263689", @ANYRES32=0x0, @ANYBLOB="0500000000000065"], 0x200}}, 0x0) [ 306.035517][ T9966] device gre0 entered promiscuous mode [ 306.284869][ T9966] device gretap0 entered promiscuous mode [ 306.497419][ T9966] device erspan0 entered promiscuous mode [ 306.703148][ T9966] device ip_vti0 entered promiscuous mode [ 306.773196][ T9966] device ip6_vti0 entered promiscuous mode [ 307.025930][ T9966] device sit0 entered promiscuous mode [ 307.401411][ T9966] device ip6tnl0 entered promiscuous mode [ 307.592308][ T9966] device ip6gre0 entered promiscuous mode [ 307.782173][ T9966] device syz_tun entered promiscuous mode [ 308.001015][ T9966] device ip6gretap0 entered promiscuous mode [ 308.193644][ T9966] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.201085][ T9966] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.213043][ T9966] device bridge0 entered promiscuous mode [ 308.394809][ T9966] device vcan0 entered promiscuous mode [ 308.459842][ T9966] device bond0 entered promiscuous mode [ 308.465468][ T9966] device bond_slave_0 entered promiscuous mode [ 308.471709][ T9966] device bond_slave_1 entered promiscuous mode [ 308.657772][ T9966] device team0 entered promiscuous mode [ 308.663361][ T9966] device team_slave_0 entered promiscuous mode [ 308.670445][ T9966] device team_slave_1 entered promiscuous mode [ 308.854167][ T9966] device dummy0 entered promiscuous mode [ 309.018093][ T9966] device nlmon0 entered promiscuous mode [ 309.096036][ T9966] device caif0 entered promiscuous mode [ 309.154976][ T9966] device batadv0 entered promiscuous mode [ 309.327790][ T9966] device vxcan0 entered promiscuous mode [ 309.386680][ T9966] device vxcan1 entered promiscuous mode [ 309.445934][ T9966] device veth0 entered promiscuous mode [ 309.620745][ T9966] device veth1 entered promiscuous mode [ 309.697318][ T9966] device xfrm0 entered promiscuous mode [ 309.794627][ T9966] device veth0_to_bridge entered promiscuous mode [ 310.034276][ T9966] device veth1_to_bridge entered promiscuous mode [ 310.361527][ T9966] device veth0_to_bond entered promiscuous mode [ 310.591825][ T9966] device veth1_to_bond entered promiscuous mode [ 310.819066][ T9966] device veth0_to_team entered promiscuous mode [ 311.104205][ T9966] device veth1_to_team entered promiscuous mode [ 311.396733][ T9966] device veth0_to_hsr entered promiscuous mode [ 311.643370][ T9966] device veth1_to_hsr entered promiscuous mode [ 311.982967][ T9966] device hsr0 entered promiscuous mode [ 312.056078][ T9966] device virt_wifi0 entered promiscuous mode [ 312.173031][ T9966] device netdevsim0 entered promiscuous mode [ 312.294794][ T9966] device netdevsim1 entered promiscuous mode [ 312.413903][ T9966] device netdevsim2 entered promiscuous mode [ 312.540122][ T9966] device netdevsim3 entered promiscuous mode 16:43:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000040)={0x8000, 0x3, 0x6, @dev={[], 0x25}, 'bridge_slave_1\x00'}) close(r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x0, 0x5, 0x5bb, 0x5}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 16:43:02 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) [ 312.616199][ T9966] device ip6gretap1 entered promiscuous mode [ 312.623128][T10016] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.0'. 16:43:03 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r2}, 0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x5, 0x3, [0x8000, 0x4d, 0x5]}, &(0x7f0000000200)=0xe) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x143002, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x75f3b154e64b90a6) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xfdef) 16:43:03 executing program 2: syz_open_dev$loop(0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x3, 0x6) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) shmget(0x2, 0x1000, 0x1c, &(0x7f000096d000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f00000003c0)) socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x3, 0x0}}, 0x20) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={0xffffffffffffff, 0x400000000796d, 0x8000000, 0x5}) syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)={0x100000000000000}) syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, 0x0) r1 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000040)={0x100000000000000}) r2 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)) fcntl$dupfd(0xffffffffffffffff, 0x0, r2) io_uring_enter(0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000200), 0x8) getpid() ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r3 = syz_open_dev$cec(0x0, 0x0, 0x2) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000040)) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f00000000c0)=""/10) msync(&(0x7f000079d000/0x4000)=nil, 0x4000, 0x0) [ 312.815550][T10021] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.0'. 16:43:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = getpid() r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xfd39, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0xe3, 0x6, 0x8, 0x0, 0x8c, 0x2404, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x8}, 0x262, 0x1f, 0xfffffbff, 0x5, 0x1, 0x401}, r1, 0x0, r2, 0x0) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.nlink\x00', &(0x7f0000000240)='memory.events\x00', 0xe, 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000380)=0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\xc3\xff\xff\xff\x00\x00\xf7\x00', @local}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454d9, 0x0) socket$kcm(0x2b, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 16:43:03 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000001a97af7088b381c078b7ac8321782420700ac5d037c91131f132230c66eaedba3000000000000200000c6cb3c54c4dae4da162ae8ccbe7e6dfb3ac61c96cf04ebcd60cb1a16b952bdb715fbc49f111f1cc5c2e9b716496c37308763c12c693f2b402d1865fa4b1c0d6cfdf5b3bab3f2311a8bc2d0a7fe8c3196c6340b88ad534d1c45d9c4c41cfd100d579e43aab10e6d8a55f725c3bc8ec2e73e44d1a5b8c54fcce0962d843d0d273a7635bfb606ebce", @ANYRES32, @ANYBLOB="91ebb354fd31a94555ba5d2c925d8ff657a2e96ac0ef243599e826d4dd5c3935c24740f2cb2c29d2790f9cf23502515809e6e9ee58877eca3feedc3893bd571c46b022a27342354f350460cbbd81ef2eb18f3c0cfa7301a62d95bbbd3cdcf8b89ec5de", @ANYRES32=0x0, @ANYRESHEX=r1], 0x5, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) msgget(0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88800) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)="6be384a9b85d9eaa954c3e232b8be11f8f69ea716dd2b6d8551d13fc28367a81342453a762d44d0ca4195e6911428b96057667bbd8749ea4aa31570e") r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r3, 0x1) fcntl$setstatus(r4, 0x4, 0x102800) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0xe) dup3(r4, r3, 0x0) [ 313.043683][T10041] device nr0 entered promiscuous mode 16:43:03 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='\x00\t\xf9\t\xdd\x04\x00\x02\x00', 0x101000, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b94000)=""/246) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x301002, 0x10) ioctl$TCSBRK(r1, 0x5409, 0x9) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(0x0, &(0x7f00000002c0), &(0x7f0000000300)=0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="8a13bb0f4f65a28e0b855c9902f0340c", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB], 0x6, 0x0) write$FUSE_NOTIFY_POLL(r1, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x81}}, 0x18) close(r0) [ 313.475678][T10056] device team0 entered promiscuous mode [ 313.481279][T10056] device team_slave_0 entered promiscuous mode [ 313.525587][T10056] device team_slave_1 entered promiscuous mode [ 313.533644][T10056] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.652096][T10035] device nr0 entered promiscuous mode [ 313.875782][T10049] device team0 left promiscuous mode [ 313.881168][T10049] device team_slave_0 left promiscuous mode [ 313.888192][T10049] device team_slave_1 left promiscuous mode [ 313.966176][T10051] device team0 entered promiscuous mode [ 313.971865][T10051] device team_slave_0 entered promiscuous mode [ 313.980193][T10051] device team_slave_1 entered promiscuous mode [ 313.995961][T10051] 8021q: adding VLAN 0 to HW filter on device team0 16:43:04 executing program 5: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/self//exe\x00', 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0) io_submit(r2, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r4, 0x275, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) io_pgetevents(r4, 0x7, 0x8000024, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000000)={0x77359400}, 0x0) 16:43:04 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x10005, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f00000000c0)={0xfffffff8, 0x0, [], {0x0, @bt={0x27, 0x2, 0x1, 0x1, 0x6, 0x80000000, 0x1, 0x1dd362a8, 0x78, 0x8, 0x81, 0x0, 0x9, 0x7, 0x4, 0x4, {0x800, 0x7}, 0xe6, 0x7}}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'all\x00\x19\x00\x00!C\x19\xb2d\xb4\xa0\xb4v', 0x2}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00\v\x83?\x00', @ifru_flags}) 16:43:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x10000000000}, 0x0, 0x0, 0x1, 0x3, 0x0, 0x54b0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() unshare(0x40000000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x1113e0c30549fcec, 0x0) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, 0x3d, 0x2, 0x70bd2a, 0x25dfdbfe, {0x1a}, [@typed={0x1c, 0x42, @str='system#wlan1/userbdev{\x00'}, @typed={0x8, 0x12, @uid=r1}, @generic="c366b0ac63ca05016a905e842bad1f75c87e7b8eb45405836fe5e6cda5a9aa913f075a862b44222c6a96f32398508139d5d88ae724d07de4cbc69a24239333be189e502349ef11b01115a0b0"]}, 0x84}, 0x1, 0x0, 0x0, 0xe78a381e37d2ec50}, 0x40011) 16:43:04 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x801, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r1, r0, 0x7, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000002c0)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0x8, 0x8, 0x55, 0xbd9, 0x101}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) r4 = socket$inet6(0xa, 0x801, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r5, r4, 0x7, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x8, 0x12) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff}) tee(r6, 0xffffffffffffffff, 0x7, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfec8) connect$l2tp6(r7, &(0x7f0000000300)={0xa, 0x0, 0x80000000, @empty, 0x51d0d108, 0x4}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x2761, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000380)={'team0\x00'}) openat$cgroup_ro(r8, 0x0, 0x275a, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8009}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x44, r9, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40400c0}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0x5, &(0x7f0000000140)={&(0x7f00000001c0)={0xfffffffffffffd39, r9, 0x200, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x0, 0x6, 0x8e}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_TUN_PORT={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR={0xfffffffffffffe6f, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) sendto$inet(r3, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800) [ 314.321902][T10069] IPVS: ftp: loaded support on port[0] = 21 16:43:04 executing program 2: set_mempolicy(0x4002, &(0x7f0000000000)=0xfffffffffffffff9, 0x400) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f00000002c0)='wlan1\x00d5sum\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x40000c20) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x40000c20) r7 = inotify_init() inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x40000c20) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYPTR, @ANYRES16, @ANYRESOCT=r5, @ANYRESOCT=0x0, @ANYRES64=r1, @ANYRES16, @ANYRESOCT=r7], 0x164) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0xfec8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0xfec8) r10 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x2, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r12, &(0x7f0000000480)=ANY=[], 0xfffffffffffffed4) accept(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000240)=0x80) r14 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r15, &(0x7f0000000140)=ANY=[], 0xfec8) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa4, r3, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xa1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x80}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r14}, {0x8, 0x1, r15}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x2, 0x30, 0xffffffffffffffff, 0x83000000) [ 314.609101][T10074] IPVS: ftp: loaded support on port[0] = 21 [ 314.875535][ T518] tipc: TX() has been purged, node left! 16:43:05 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) 16:43:05 executing program 3: socket$rxrpc(0x21, 0x2, 0x2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0xc400, 0x0) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000000c0)={0x9bd6, 0x9, 0x6, 0x9cb, 0x8, 0x7}) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f05003fffffffda0602000006fee80001dd0000040d000a00fe", 0x21}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 16:43:05 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) clone3(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, {0xffffffff}, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x50) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r4) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000080)={0x15, 0x2e7, 0xfa00, {0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x4, @empty, 0x5}, @ib={0x1b, 0xffff, 0xaf, {"adcef917f95c156008a58f32c5e6148a"}, 0xffffffffffffffff, 0x949, 0x2}}}, 0x118) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0xc380, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000200)={0xd8ea, 0x4, 0x4, 0x111, 0x65bd, 0x3}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/dlm-monitor\x00', 0xcc29fa706ed99f9f, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000001a97af7088b381c078b7ac8321782420700ac5d037c91131f132230c66eaedba3000000000000200000c6cb3c54c4dae4da162ae8ccbe7e6dfb3ac61c96cf04ebcd60cb1a16b952bdb715fbc49f111f1cc5c2e9b716496c37308763c12c693f2b402d1865fa4b1c0d6cfdf5b3bab3f2311a8bc2d0a7fe8c3196c6340b88ad534d1c45d9c4c41cfd100d579e43aab10e6d8a55f725c3bc8ec2e73e44d1a5b8c54fcce0962d843d0d273a7635bfb606ebce", @ANYRES32, @ANYBLOB="91ebb354fd31a94555ba5d2c925d8ff657a2e96ac0ef243599e826d4dd5c3935c24740f2cb2c29d2790f9cf23502515809e6e9ee58877eca3feedc3893bd571c46b022a27342354f350460cbbd81ef2eb18f3c0cfa7301a62d95bbbd3cdcf8b89ec5de", @ANYRES32=0x0, @ANYRESHEX=r6], 0x5, 0x1) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x80400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x20}, r6, 0x1, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r10 = dup(r9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_GEM_CLOSE(r7, 0x40086409, &(0x7f0000000100)={r11, 0x7000000}) r12 = socket$inet(0xa, 0x1, 0x87) connect$inet(r12, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r12, 0x8) r13 = accept4(r12, 0x0, 0x0, 0x0) sendto$inet(r13, &(0x7f0000000000)='~', 0x1, 0x0, 0x0, 0x0) shutdown(r13, 0x1) 16:43:05 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000080)=0x1a6c) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000540)=0xd, 0x4) r3 = getpid() socket(0x1e, 0x0, 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r5 = memfd_create(&(0x7f0000000100)='\x00', 0x6) write$vhci(0xffffffffffffffff, 0x0, 0x0) ftruncate(r5, 0x1000000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x10005, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r8, 0x0, r9, 0x0, 0x10005, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, r8, 0x0) sendfile(r4, r5, &(0x7f00000000c0)=0xf18001, 0xeefffdef) getpid() r10 = timerfd_create(0x0, 0x0) r11 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r10, &(0x7f0000000100)={r11}) r12 = getpid() r13 = getpid() r14 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r12, r13, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r14}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000500)) r15 = getpid() r16 = getpid() r17 = timerfd_create(0x0, 0x0) r18 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r15, r16, 0x7, r17, &(0x7f0000000100)={r18}) rt_sigqueueinfo(r16, 0x28, &(0x7f0000000140)={0xa, 0xb80}) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x1f, @ipv4={[], [], @multicast1}, 0xd8}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000340)) link(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) io_setup(0x7, &(0x7f00000001c0)=0x0) io_submit(r19, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000300)="050000008cfc6cfde19ab3a251fd2cfd09684d9c7afae3b519d21a0ce3cbdfcb2665dd1203ed5f1023fa813c9a0e46000082734001000000f4", 0x39}]) 16:43:05 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {r1, r2/1000+10000}}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 16:43:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syW'}, &(0x7f0000000040), 0x1d4, r1) r2 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="270bba930ade0b28716d8cef8165f7d008ca4b344129a378698354de2f9e2037e316397d64cd6e5d8bdb6d7c6b7893b58e73578b360ad7534d057f863c46028ac7a083207ed0185d3066e3f6f65d943cc8f83eb169d0ab5dc8a7b535498203", 0x5f, r1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r2, 0xa1, 0x85}, &(0x7f0000000780)=ANY=[@ANYBLOB="656e633d72617720686173683d73686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000421d72b1a375c403e77246e1a2efce66f477d2a6a530a7f6223a738bb87484f1d121c6e70a2200979b808d0a91a3310785c397cf3d3e4c3911e2287e1bbaac6c3fc22d82fc15ce187721157d20a93ee9590d7ddf91c09a75071d3e58b0cadff9ed58db2748843cdbdf422f523c89e160460cbd93f957a6f25e1181929646c76ccd98f98625b5074c7aa60200"/232], &(0x7f0000000240)="feb1e3d9fa0162069de9c201e2e806b4265af75a8729db5dd53d58e981bea54b9417e1e86328dc05331baa6db483a645fb4f89372780718fa2864458a9cd819660da3256dafefe231c8946234fe19b73742a4df39616a90db1535c67f1ee0203cb49caa7f85fd9a0c016b7bdd5763d9352a14e0645b28c419b413cb35109a2beb4ca6bf1293d63251bd9c27429e76cd3cd730be8615b3e1cdee2dcb8b5ba5ca0e7", &(0x7f0000000440)=""/133) keyctl$assume_authority(0x10, r2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000000c0)={0x18a0008, 0x101, 0xfffffffa, r0, 0x0, &(0x7f0000000080)={0x9a090a, 0xc2a9, [], @string=&(0x7f0000000040)=0x8}}) 16:43:13 executing program 0: pipe(&(0x7f00000017c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'}) 16:43:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000200)={'ip6gre0\x00', {0x2, 0x4e20, @broadcast}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000100)=0x4) bind$rxrpc(0xffffffffffffffff, &(0x7f00000002c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x323, @mcast1, 0x401}}, 0x24) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) syz_open_procfs(0x0, &(0x7f0000000340)='net/mL\xcbcfilter\x00\x80\xab+\xb7\xf3\xa0\x1f\xc7\xb2+\xe3\x96\xf47\x89\xc3\x84\xf3\x1c\xf9\x8bW\x1d\x98\xde\xf2\x9d\xad_\xc0\xab\xd0/\xe4|1\'\x8c\x04u\xf5\x10\x9b\t\xdew\x17\xeb\xef\xe2\xd6\xa3u-\x82\x85`\xe5g~\x18\x11\x82\x00\x00\x00\x00\x00\x99\xc6\x90*:\xcf\x84~\x14\x00\x86G#i\xefa\xa4Q\xb0\xaf\xbb\xcc\x8b\xf1\x19\x16\x93\x1b\xae\x03\r\xbf\xa3}5Id,\xea\x1e\b\xeft\xed=0\xbe\x90F\xe1[\xc4\x92\xdcG\x01\x98%f9!r$\x85\xaa\xa3\xc5\x80\x0e\x9b\xf2\x8b\xe6:\xf1\x1e\x9ey\x1ahLw\x87\xa5\xaf\x91\x98\x1d\x01#f\x01JW\xcb!\x19\xb36\x8c\xd2k\xeb-\xc6[VKt\x93\x16<(\x15\xfexG#\f\x00\x04') fstatfs(0xffffffffffffffff, &(0x7f0000000280)=""/20) close(r4) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r3, 0x0, r4, 0x0, 0x100000002, 0x0) 16:43:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0xffffffe0, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x80) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x40000c20) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x148000) sendmsg$nl_netfilter(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x17}}, 0x0) r5 = socket$inet(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="24000000010507031dfffd946ff20c0020200a0009000200021d8568031baba20400ff7e", 0x24}], 0x14}, 0x0) 16:43:13 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) 16:43:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000140)={{0x4000000000000000}, {0x0, 0x989680}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/d`v/null\x00', 0x0, 0x0) r4 = getpid() ptrace(0x10, r4) ptrace$setsig(0x4203, r4, 0x400, &(0x7f0000000140)={0x3c}) pipe(&(0x7f0000000680)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = socket$packet(0x11, 0x3, 0x300) r7 = dup(r6) setsockopt$packet_int(r7, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r8 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r8}, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x5452, &(0x7f0000000040)) fcntl$getownex(r10, 0x10, &(0x7f0000000580)={0x0, 0x0}) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r13 = gettid() waitid(0x83b895581628fca4, r13, &(0x7f0000000040), 0x2, &(0x7f0000000480)) r14 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r15 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r16 = dup2(r15, r14) r17 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r17, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee0796", 0x17}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x24}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r17, 0x227d, &(0x7f0000000780)) kcmp(0x0, r13, 0x0, 0xffffffffffffffff, r17) r18 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r18, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r19}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r13, r16, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r19}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r19}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r19}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r19}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r19}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r11, r12, 0x0, 0x1, &(0x7f0000000080)='\x00', r19}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r9, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r19}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r19}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r8, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r19}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r19}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r20, r7, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00', r19}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', r19}, 0x30) pipe(&(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = getpid() sched_setscheduler(r22, 0x5, &(0x7f0000000380)) r23 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)={0x0, 0x0}) r25 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) r26 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r26, 0x8933, &(0x7f0000000440)={'team0\x00'}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000e80)=0x0) sendmsg$nl_route(r26, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=ANY=[@ANYBLOB="700000001100000229bd7000ff", @ANYRES32, @ANYRES32=r27, @ANYBLOB="0000000c0001002aabaaaaaaaa00002c0012000c00010062726964676513136d6a020008000900bc080000080016001f000000080002000800"/72], 0x4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) fsetxattr$system_posix_acl(r25, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000100eb80000000000200", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r26, @ANYRESHEX=r22, @ANYRESDEC], 0x7, 0x0) r28 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r28) r29 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r29, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r29, 0x227d, &(0x7f0000000780)) kcmp(r28, 0x0, 0x0, 0xffffffffffffffff, r29) ptrace$setopts(0x4206, r28, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r28, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r24, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r23, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r30}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r30}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r30}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r22, r21, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00', r30}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r30}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000040)='procwlan1!posix_acl_access\x00', r19}, 0x30) ptrace(0x4207, r31) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:13 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r4 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r4}, 0x0) r5 = getpgid(0x0) r6 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) r7 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r8 = dup2(r7, r6) ppoll(&(0x7f0000000200)=[{r8}], 0x1, &(0x7f0000000280), 0x0, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x5452, &(0x7f0000000040)) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r12, &(0x7f0000000140)=ANY=[], 0xfef0) fsetxattr$system_posix_acl(r11, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="020000140100eb80000000000200", @ANYRES32, @ANYRES32, @ANYBLOB="b8e365400357609aeb2c35eb6346b93ee6a8ccac064b28045fb5ccc42eb61c604bd9bc6f06af127321df7559522954af9fbdf181f025e9a65d7a17310597d62a318833df89a57e5b53778aa3e66844fc3f6fc7e2cee11b08996b374e80f611201000be84aa0514fdc8976c77795ceead35bdcf1b23c88334501831ff741891ff83bd8103282caf9b66fa23cc7ad8ce987b956942c2650306152e474b", @ANYBLOB="d91fc1c2ff5b2300435584bfa93f02bdf6ee86c589f47bba5750d7dcb6dddd63a8e9fb0bff11fddcc0caa03a34572b4d2236a66d24dcec5915dcbd7cec3b5764ff7785e52ccf72d14d5ab8dee682f21fe6ac5b22aa7ddc49e0078ef1cb0f745a8ef5f18e5bd25e1e0ed5cca659", @ANYRES32=0x0, @ANYRESHEX=r1], 0x7, 0x1) r13 = socket(0xa, 0x3, 0x8) r14 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r16 = gettid() r17 = getpid() sched_setscheduler(r17, 0x5, &(0x7f0000000380)) r18 = getpid() sched_setscheduler(r18, 0x5, &(0x7f0000000380)) waitid(0x2, r18, &(0x7f0000000900), 0x20000000, &(0x7f0000000480)) sendmsg$key(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="adfb58894426fc1be1a5addb4f55f958450f7c8cd6cd3ff6c851e3c31ea149257875fdfe3b5e6bdbaaf157a4b092d22c8ce129e64d3999cc9b6c7ba065dc017479d1faba781d9f91e2", @ANYRES16=r15], 0x4b}}, 0x20004850) r19 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r20 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r21 = dup2(r20, r19) r22 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r22, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r24 = dup(r23) ioctl$DMA_BUF_IOCTL_SYNC(r24, 0x40086200, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r24, 0xc08c5332, &(0x7f0000000c00)={0x2, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) r25 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r25) r26 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r26, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x29c}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r26, 0x227d, &(0x7f0000000780)) kcmp(r25, r16, 0x0, 0xffffffffffffffff, r26) ptrace$setopts(0x4206, r25, 0x0, 0x0) r27 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r25, r27, 0x0, 0xc, &(0x7f0000000180)='/dev/amidi#\x00', r28}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r16, r21, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r28}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r28}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00', r28}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, r28}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r28}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r11, 0x0, 0x1, &(0x7f0000000080)='\x00', r28}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r28}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r5, r9, 0x0, 0x5, &(0x7f00000000c0)='ppp1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', r28}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00', r28}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r28}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r29, r3, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00', r28}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r1, r0, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00', r28}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', r28}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r28}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r28}, 0xc) open(0x0, 0xe279a88a3b20cda9, 0x29) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa1}, 0x28422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r30 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setpipe(r30, 0x407, 0xfffffffffffffffe) bind$inet(r30, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r30, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r30, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r31 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r32 = socket$inet_tcp(0x2, 0x1, 0x0) r33 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r33, 0x0, 0x0) sendto$inet(r33, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r34 = dup3(r33, r32, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r34, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="00006893", @ANYRES16=0x0, @ANYBLOB="0000000000000000000001000000000000000b000000000c001473797a3100000000"], 0x28}}, 0x0) write$FUSE_IOCTL(r34, &(0x7f0000000240)={0x20, 0x0, 0xffffffffffffffff, {0x6a7, 0x4, 0x0, 0xfff}}, 0xffffffffffffffb2) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000640)=""/12) r35 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r36 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) getsockopt$MISDN_TIME_STAMP(r36, 0x0, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) pwritev(r35, &(0x7f0000f50f90)=[{&(0x7f0000000540)="cd3d0e4fa3", 0x5}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r31, 0x4c00, r35) sendfile(r30, r31, 0x0, 0x102000004) 16:43:13 executing program 2: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x24) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003d80)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32, @ANYBLOB="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"], 0x34}}, 0x0) [ 323.857024][T10149] bridge0: port 3(gretap0) entered blocking state [ 323.863520][T10149] bridge0: port 3(gretap0) entered disabled state [ 323.873720][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:43:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) accept$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) read$dsp(r2, &(0x7f0000000000)=""/232, 0xe8) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x36c) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x40000c20) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000080)='./file0\x00', 0x40000c20) r6 = fcntl$getown(r5, 0x9) fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x0, r6}) [ 323.935653][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:43:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nbd(0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x28000003, &(0x7f00000002c0)={0xa, 0x4e25, 0x0, @empty}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x48000) close(r2) 16:43:14 executing program 2: bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfa9, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb) 16:43:14 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000001640)=ANY=[@ANYBLOB="0300000001a97af7088b381c078b7ac8321782420700ac5d037c91131f132230c66eaedba3000000000000200000c6cb3c54c4dae4da162ae8ccbe7e6dfb3ac61c96cf04ebcd60cb1a16b952bdb715fbc49f111f1cc5c2e9b716496c37308763c12c693f2b402d1865fa4b1c0d6cfdf5b3bab3f2311a8bc2d0a7fe8c3196c6340b88ad534d1c45d9c4c41cfd100d579e43aab10e6d8a55f725c3bc8ec2e73e44d1a5b8c54fcce0962d843d0d273a7635bfb606ebce", @ANYRES32, @ANYBLOB="91ebb354fd31a94555ba5d2c925d8ff657a2e96ac0ef243599e826d4dd5c3935c24740f2cb2c29d2d22dfad7c89cff8a69d100020000350200000000fa6601a674a741919e47fb9c9ec5de00000000000000000000000000002ec1070087e1158fb45788dd0dcf74d8dd5eb510a6ac087a160f26a39b07be5059b4f4573a38905413df3e4d793e2ec1238e56732b0630de1501bbe786c0c7ece250e1c6975653c1149c230d29c71a86f978d98361571871c8ee4b21f885bd2b5a042e6b52d7238d165eed48653b5754a47e7ff6d2ad19c0c29e8f68", @ANYRES32=0x0, @ANYRESHEX=r1], 0x5, 0x1) sched_getparam(r1, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0) syz_open_dev$mice(0x0, 0x0, 0x8400) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xa2ea) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, &(0x7f0000001540), 0x1, 0xffffffffffffffff, 0xe2c1a59609f47730}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x10003, 0x2, 0x1006, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r5 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x100000000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r7, 0xffffffffffffffff}}) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 16:43:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xffffffffffffff0b) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0xffffffffffffff87) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x1004cc], 0x12000}) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f0000000280)={0x7b}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000340)=@buf={0x77, &(0x7f0000000380)="50f5e4ad4034f31b3d0c144922c3e8cf96eec2e14075ed6458e50979961dab63d1292cc82e6b4ba3faf235516fd6abbf97e17d5d05cd4f8c426ffd1999951e598d49077ef3a67ff9d42c5a8167a2d5e7834f4da5a9da90397a7d0ffbbdbd1ac2c41886d7d39bd1009f8a57be4bb9a804bdeea517f301b0"}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000100)=""/130, &(0x7f0000000000)=0x82) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:43:15 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x1}) unlink(&(0x7f0000000180)='./file0\x00') unshare(0x20600) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000040)={0x6, 0x6}) [ 324.831628][T10199] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.2 proc:/self/fd/6' not defined. 16:43:15 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = getpgrp(0x0) capget(0x0, 0x0) getpgid(0x0) r3 = memfd_create(0x0, 0x5) r4 = syz_open_dev$sndseq(0x0, 0x0, 0x1) r5 = dup2(r4, r3) ppoll(&(0x7f0000000200)=[{r5}], 0x1, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) close(0xffffffffffffffff) r7 = socket(0xa, 0x3, 0x8) r8 = syz_open_dev$amidi(0x0, 0x9c4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) gettid() r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) waitid(0x83b895581628fca4, 0x0, &(0x7f0000000040), 0x80000000, &(0x7f0000000480)) r10 = socket(0x840000000002, 0x3, 0x200000000000ff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000000)) r12 = syz_open_pts(r11, 0x0) dup3(0xffffffffffffffff, r11, 0x0) r13 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r13, 0x40045431, &(0x7f0000000000)) r14 = syz_open_pts(r13, 0x0) dup3(r14, r13, 0x0) r15 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r15, 0x40045431, &(0x7f0000000000)) r16 = syz_open_pts(r15, 0x0) dup3(r16, r15, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) r17 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r17, 0xffffffffffffffff, 0x0) sendmsg$key(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000500)=ANY=[@ANYRESOCT=r12, @ANYRES64, @ANYPTR64=&(0x7f0000000840)=ANY=[@ANYRES64, @ANYRES16, @ANYRESHEX=r17], @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC=r13, @ANYRES16=r15]], @ANYRESDEC, @ANYPTR64=&(0x7f00000005c0)=ANY=[], @ANYRES64=r1, @ANYPTR], 0x34}}, 0x20004850) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r18 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r18) r19 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r19, &(0x7f0000000000)=[{&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x24}], 0x1) getpgid(r2) r20 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r18, r20, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000940)={r21, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000900)='syz1\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r0, 0xffffffffffffffff, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00'}, 0x30) open(0x0, 0xe279a88a3b20cda9, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xa1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x807}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r22 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r22, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r22, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r22, 0x1, 0x19, 0x0, 0x0) r23 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x33d) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r24 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r24, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r23, 0x4c00, r24) sendfile(r22, r23, 0x0, 0x102000004) 16:43:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x4000, 0xa04, &(0x7f0000ffc000/0x4000)=nil) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) r2 = getpid() fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0xd5, 0x1ff, r2}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000280)=""/101) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8880}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000100), 0x0, &(0x7f0000000240)) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r5 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x0, 0x6, 0x5}}, 0xa) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000600)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d84cb5b41a6c3896d2cc1d58d4f39c4d3a9677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a31124c09950e50877af53721fd467ead79ed642647e0"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) setuid(0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setuid(0x0) r8 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(r9) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/445], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0x91) setuid(r11) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, 0x0, 0x0, r12) keyctl$chown(0x4, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fstat(r13, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100020000000000020004", @ANYRES32=r6, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="02000600", @ANYBLOB="02540002", @ANYRES32=r11, @ANYBLOB="020005d0", @ANYBLOB="0400020000000000080001", @ANYRES32, @ANYBLOB, @ANYRES32=r12, @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r14, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x19, 0x2) [ 325.070175][T10209] bridge0: port 3(gretap0) entered blocking state [ 325.084811][T10209] bridge0: port 3(gretap0) entered disabled state [ 325.161565][T10209] device gretap0 entered promiscuous mode [ 325.215906][T10209] bridge0: port 3(gretap0) entered blocking state [ 325.222738][T10209] bridge0: port 3(gretap0) entered forwarding state 16:43:16 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 16:43:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x4000, 0xa04, &(0x7f0000ffc000/0x4000)=nil) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x3c) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) r2 = getpid() fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0xd5, 0x1ff, r2}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000280)=""/101) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8880}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x14, 0x0, 0x0, @empty}}}}}, 0x0) r4 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x0, 0x6, 0x5}}, 0xa) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) setuid(0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000a40)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r7) 16:43:23 executing program 2: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="480000001400e704b05f9f95274b0a000a840000400403fe0500030001546fab07004e7d063630f10a8a6a36d47a56aa68c6f8c36da6bd7c497626ff19343dcdbfae0000000000d9", 0x48}], 0x1}, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syW'}, &(0x7f0000000040), 0x1d4, r2) r3 = socket(0xa, 0xa, 0x9) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000400)=0x14005, 0x4) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syW'}, &(0x7f0000000040), 0x1d4, r4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000380)=0x6, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x101000, 0x0) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syW'}, &(0x7f0000000040), 0x1d4, r6) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="d50d4e0e6e7fdb8756654931f8ac4f59f1d14458b7b31d993f5b73be5a436484ce6530b2bcdc8d44422b4e5a4b176a12a39857518ddc857afed8cef76ea861c5274baec06dafb5313fb4cc76a02d01c33603b623426dd53b85b74054c29017a190cdb219dc0f2fc60053d5", 0x6b, r6) r7 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$instantiate(0xc, r2, &(0x7f0000000000)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', '-bdev+', 0x20, 0x1000, 0x20, [0x0, 0x0, 0x66, 0x32, 0x61]}, 0x35, r7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x15) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000440)='`ystem.\b\x00\x00\x00\x00\x00\x00\x00\x00-\x82\x00\x00\x00cess\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000001a97af7088b381c078b7ac8321782420700ac5d037c91131f132230c66eaedba3000000000000200000c6cb3c54c4dae4da162ae8ccbe7e6dfb3ac61c96cf04ebcd60cb1a16b952bdb715fbc49f111f1cc5c2e9b716496c37308763c12c693f2b402d1865fa4b1c0d6cfdf5b3bab3f2311a8bc2d0a7fe8c3196c6340b88ad534d1c45d9c4c41cfd100d579e43aab10e6d8a55f725c3bc8ec2e73e44d1a5b8c54fcce0962d843d0d273a7635bfb606ebce", @ANYRES32, @ANYBLOB="91ebb354fd31a94555ba5d2c925d8ff657a2e96ac0ef243599e826d4dd5c3935c24740f2cb2c29d2790f9cf23502515809e6e9ee58877eca3feedc3893bd571c46b022a27342354f350460cbbd81ef2eb18f3c0cfa7301a62d95bbbd3cdcf8b89ec5de", @ANYRES32=0x0, @ANYRESHEX=r9], 0x5, 0x1) r10 = getpgrp(r9) setpriority(0x0, r10, 0x9) 16:43:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x4000, 0xa04, &(0x7f0000ffc000/0x4000)=nil) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) r2 = getpid() fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0xd5, 0x1ff, r2}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000280)=""/101) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8880}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000100), 0x0, &(0x7f0000000240)) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r5 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x0, 0x6, 0x5}}, 0xa) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000600)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d84cb5b41a6c3896d2cc1d58d4f39c4d3a9677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a31124c09950e50877af53721fd467ead79ed642647e0"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) setuid(0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setuid(0x0) r8 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(r9) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/445], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0x91) setuid(r11) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, 0x0, 0x0, r12) keyctl$chown(0x4, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fstat(r13, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100020000000000020004", @ANYRES32=r6, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="02000600", @ANYBLOB="02540002", @ANYRES32=r11, @ANYBLOB="020005d0", @ANYBLOB="0400020000000000080001", @ANYRES32, @ANYBLOB, @ANYRES32=r12, @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r14, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x19, 0x2) 16:43:23 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000001640)=ANY=[@ANYBLOB="0300000001a97af7088b381c078b7ac8321782420700ac5d037c91131f132230c66eaedba3000000000000200000c6cb3c54c4dae4da162ae8ccbe7e6dfb3ac61c96cf04ebcd60cb1a16b952bdb715fbc49f111f1cc5c2e9b716496c37308763c12c693f2b402d1865fa4b1c0d6cfdf5b3bab3f2311a8bc2d0a7fe8c3196c6340b88ad534d1c45d9c4c41cfd100d579e43aab10e6d8a55f725c3bc8ec2e73e44d1a5b8c54fcce0962d843d0d273a7635bfb606ebce", @ANYRES32, @ANYBLOB="91ebb354fd31a94555ba5d2c925d8ff657a2e96ac0ef243599e826d4dd5c3935c24740f2cb2c29d2d22dfad7c89cff8a69d100020000350200000000fa6601a674a741919e47fb9c9ec5de00000000000000000000000000002ec1070087e1158fb45788dd0dcf74d8dd5eb510a6ac087a160f26a39b07be5059b4f4573a38905413df3e4d793e2ec1238e56732b0630de1501bbe786c0c7ece250e1c6975653c1149c230d29c71a86f978d98361571871c8ee4b21f885bd2b5a042e6b52d7238d165eed48653b5754a47e7ff6d2ad19c0c29e8f68", @ANYRES32=0x0, @ANYRESHEX=r1], 0x5, 0x1) sched_getparam(r1, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), &(0x7f0000000080)=0x8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0) syz_open_dev$mice(0x0, 0x0, 0x8400) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xa2ea) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001580)={0x53d2b708009d0c60, &(0x7f0000001540), 0x1, 0xffffffffffffffff, 0xe2c1a59609f47730}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x10003, 0x2, 0x1006, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r5 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x100000000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, r7, 0xffffffffffffffff}}) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 16:43:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x4000, 0xa04, &(0x7f0000ffc000/0x4000)=nil) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r0) r2 = getpid() fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1, 0x0, 0xd5, 0x1ff, r2}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000280)=""/101) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8880}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000100), 0x0, &(0x7f0000000240)) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r5 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x0, 0x6, 0x5}}, 0xa) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000600)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d84cb5b41a6c3896d2cc1d58d4f39c4d3a9677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a31124c09950e50877af53721fd467ead79ed642647e0"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) setuid(0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) setuid(0x0) r8 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) setuid(r9) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/445], 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0x91) setuid(r11) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, 0x0, 0x0, r12) keyctl$chown(0x4, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fstat(r13, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="020000000100020000000000020004", @ANYRES32=r6, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="02000600", @ANYBLOB="02540002", @ANYRES32=r11, @ANYBLOB="020005d0", @ANYBLOB="0400020000000000080001", @ANYRES32, @ANYBLOB, @ANYRES32=r12, @ANYRES32, @ANYBLOB="08000400", @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="080004", @ANYRES32=r14, @ANYBLOB, @ANYRES32, @ANYBLOB="1000020000000000"], 0x19, 0x2) 16:43:23 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) 16:43:23 executing program 2: socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) socket(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xfffffffffffffd52) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='reno\x00', 0x5) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20000) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8009300}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)=@getspdinfo={0x3d8, 0x25, 0x100, 0x70bd2a, 0x25dfdbfc, 0x100, [@tfcpad={0x8, 0x16, 0x5}, @algo_auth_trunc={0x8c, 0x14, {{'sha256_mb\x00'}, 0x1f0, 0x0, "f81ab09dc8170f6f84d1f273e92e2d4b173e262bdfd5bb2e08b5185c81de5038e22fe1ff8239fe67bd01afd87d09986e76fde60ce6381175273be9fdac7e"}}, @algo_auth_trunc={0x7c, 0x14, {{'crc32-generic\x00'}, 0x170, 0x60, "a425bd97c85bdb5391eb9b35ac8526abe45b045fe5133846c970df3cfae5ecfb4c709da540f1b912fe79ec65c5fb"}}, @lastused={0xc}, @migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@multicast2, @in6=@remote, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in6=@mcast1, @in6=@loopback, @in=@rand_addr=0xfffffc3f, @in=@local, 0x3c, 0x2, 0x0, 0x3505, 0x2, 0xa}, {@in6=@loopback, @in6=@local, @in=@multicast1, @in=@empty, 0xff, 0x2, 0x0, 0x0, 0x2, 0xa}, {@in=@empty, @in6=@local, @in6=@ipv4, @in6=@remote, 0x2b, 0x0, 0x0, 0x3504, 0xa, 0x2}, {@in6=@empty, @in6=@mcast1, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@rand_addr="bbdb8e61553c823a90834c5a5d1342f2", 0x32, 0x0, 0x0, 0x3500, 0xa, 0x2}, {@in6=@ipv4={[], [], @local}, @in=@multicast1, @in=@loopback, @in=@multicast1, 0x33, 0x71ed018f00bba942, 0x0, 0x0, 0x0, 0x2}]}, @lastused={0xc, 0xf, 0x4}, @algo_aead={0xd0, 0x12, {{'morus1280-avx2\x00'}, 0x408, 0x100, "daec3629f138949c2d800ebd2de261c85be06f8d28d4fbeb0df9bcd8c79d4eb29f5ea9e653b98725cec909dc29befb91959879b425848dd137c87e709e65cb0410c281b940415c49bf85e9b40ad68a6aaf7c73e4c79ec5b145289b0255e12956af66cc49ba518e2288077459b9716e85b2834dcb689b79d8a2b8db901038e73a59"}}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x10}, 0x60008004) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x802, 0x151) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000001c0)=0x3, 0x4) 16:43:23 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000080)='b', 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) 16:43:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000001a97af7088b381c078b7ac8321782420700ac5d037c91131f132230c66eaedba3000000000000200000c6cb3c54c4dae4da162ae8ccbe7e6dfb3ac61c96cf04ebcd60cb1a16b952bdb715fbc49f111f1cc5c2e9b716496c37308763c12c693f2b402d1865fa4b1c0d6cfdf5b3bab3f2311a8bc2d0a7fe8c3196c6340b88ad534d1c45d9c4c41cfd100d579e43aab10e6d8a55f725c3bc8ec2e73e44d1a5b8c54fcce0962d843d0d273a7635bfb606ebce", @ANYRES32, @ANYBLOB="91ebb354fd31a94555ba5d2c925d8ff657a2e96ac0ef243599e826d4dd5c3935c24740f2cb2c29d2790f9cf23502515809e6e9ee58877eca3feedc3893bd571c46b022a27342354f350460cbbd81ef2eb18f3c0cfa7301a62d95bbbd3cdcf8b89ec5de", @ANYRES32=0x0, @ANYRESHEX=r4], 0x5, 0x1) r5 = getpgrp(r4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r7, 0x0, 0x10005, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x1, 0x3, 0x2, 0x0, 0x0, 0x100, 0x400, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0x20}, 0x252, 0x100000001, 0x7, 0x5, 0x9}, r5, 0x1, r6, 0xb) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0xfec8) getsockopt$inet_mreqn(r9, 0x0, 0x20, &(0x7f0000000100)={@dev, @broadcast}, &(0x7f0000000180)=0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r10, &(0x7f0000000140)=ANY=[], 0xfec8) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r12, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r11, 0x0, r12, 0x0, 0x10005, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r13, &(0x7f0000000140)=ANY=[], 0xfec8) getpeername$packet(r13, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14) r15 = inotify_init() inotify_add_watch(r15, &(0x7f0000000080)='./file0\x00', 0x40000c20) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000700)={0x0, 0x1, 0x1, r15, 0x0, &(0x7f00000006c0)={0x9b090b, 0x4, [], @p_u8=&(0x7f0000000680)=0xfc}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=0x401, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x9, 0x1}, 0x0, 0x0, &(0x7f0000000840)={0x5, 0xc, 0xe5, 0x8}, &(0x7f0000000880)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=0xfffffffffffffffd}}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r19 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r19, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r19, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r18, 0x0, r19, 0x0, 0x10005, 0x0) recvmsg$can_raw(r8, &(0x7f0000001840)={&(0x7f0000001200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0xffffffffffffff96, &(0x7f00000016c0)=[{&(0x7f0000001280)=""/220, 0xdc}, {&(0x7f0000001380)=""/179, 0xbe}, {&(0x7f0000001440)=""/235, 0xeb}, {&(0x7f0000001540)=""/49, 0x31}, {&(0x7f0000001580)=""/137, 0x89}, {&(0x7f00000001c0)=""/88, 0x58}], 0x6, &(0x7f0000001740)=""/220, 0xdc}, 0x10100) r21 = syz_open_dev$mouse(&(0x7f0000001880)='/dev/input/mouse#\x00', 0x5, 0x400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r23 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r23, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r23, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r22, 0x0, r23, 0x0, 0x10005, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000000240)={&(0x7f0000001940)=ANY=[@ANYBLOB="2c010000120004002dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0001000000000100080027000500000004012b007c0001000b0000000d000000", @ANYPTR=&(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000001f000000850000005000000018000000030000000000000005000000a52153510800000018280000", @ANYRES32=r10, @ANYBLOB="000000000008000018270000", @ANYRES32=r11, @ANYBLOB="00000000720900008093030033ad000085100000fbffffff9500000000000000"], @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='syzkaller\x00'], @ANYBLOB="01000080e3000000", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/227], @ANYBLOB="000f04000300"/24, @ANYRES32=r14, @ANYBLOB="11000000", @ANYRES32=r16, @ANYBLOB='\b\x00\x00\x00', @ANYPTR=&(0x7f0000000740)=ANY=[@ANYBLOB="0500000005000000"], @ANYBLOB="0800000010000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="05000000020000000800000005000000"], @ANYBLOB="10000000", @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="0000000008000300020000007c0001000c00000005000000", @ANYPTR=&(0x7f0000000a00)=ANY=[@ANYBLOB="1800000001040000000000004000000085000000230000007b111000000000009500000000000000"], @ANYPTR=&(0x7f0000000b80)=ANY=[@ANYBLOB='GPL\x00'], @ANYBLOB='\t\x00\x00\x00m\x00\x00\x00', @ANYPTR=&(0x7f0000000bc0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800"/109], @ANYBLOB="001004000c00"/24, @ANYRES32=r20, @ANYBLOB="19000000", @ANYRES32=r21, @ANYBLOB='\b\x00\x00\x00', @ANYPTR=&(0x7f00000018c0)=ANY=[@ANYBLOB="0900000003000000"], @ANYBLOB="0800000010000000", @ANYPTR=&(0x7f0000001900)=ANY=[@ANYBLOB="020000000900000000100000ff010000"], @ANYBLOB="10000000", @ANYRES32, @ANYRES32=r22, @ANYBLOB='\x00\x00\x00\x00'], 0x12c}}, 0x80) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r24, &(0x7f0000000140)=ANY=[], 0xfec8) bind$rds(r24, &(0x7f0000000340)={0x2, 0x4e21, @multicast1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 16:43:23 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000c20) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x4009}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfec8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0xc04c5349, &(0x7f0000000000)={0x10000, 0x4, 0x5cf274a2}) 16:43:23 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000000000013) [ 333.667826][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 333.688204][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.695895][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 16:43:24 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='\x00\x19\x00\x04\x00\x00\x01\x00\xa3', 0x4000, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) r0 = open(&(0x7f0000001340)='./file0\x00', 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x25b) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f00000000c0)={0xfffffffffffffffc, 0x0, 0xafd7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f00000015c0)='/dev/admmidi#\x00', 0x8, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) uselib(&(0x7f0000000040)='./file0\x00') socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x0, 0x5}}, 0x1e2) 16:43:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r3}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2080000014080189af2f7c84483e9e6829e62f987ba421fd6c125111810000000056ce56f82aadd74a9833b41c92b884ca9839d17eb25d2db717d9dc951d0407d1014965d673fa044d70964886f7e32c44b13a936470b2555e816fc330b92e6a26179bbf0b8a22435a5351075096bbd53b2e34e66476268f44f3d63be7112554080e159e5564f10a86796d", @ANYRES32=r3, @ANYBLOB="08000200e00000023848884aff2c2461bf01"], 0x3}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="68dd0000150001050000f2ffffffffff01801e00c8bd61b443317c3260c1f57f9f22d0f5315a40ffd27f9c78874e35bfb0967de97d3ec769ef012a1873466bcd9e561e47d9e8c204a27030f1e6593d83e1288819e00baa01", @ANYRES32=r3, @ANYBLOB="00000000007f0000"], 0x20}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="cc0000002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0xcc}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sysfs$2(0x2, 0x4, &(0x7f00000002c0)=""/77) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r5, &(0x7f0000000180)=[{0x10, 0x1000000000000, &(0x7f0000000080)=[{&(0x7f0000000000)="a1f6de693991971efef1040b6786b332c47f3034a4c2abad81fed614c9c19b38b8717e155a7737e3216708232be31ce4948411008881dda75b02a6f50b52a697be00e715220557ae089eb8017af1daec1b922815ccec2aa3cb28dc50cfc672fe4fd9dca7475a8d817883559fb3d8493204043deb0ee335c40163", 0x7a}], 0x1, &(0x7f00000001c0)=[@op={0x18}, @op={0x18}], 0x30, 0x8000040}], 0x1, 0x0) 16:43:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002400e50d000011000000000000997b98", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100686866000c000200080001000000bcd6bd941c5fab18edbb000012804b1511f9c506c9bdc08d86c010b54fcb524d3a45e9a7d130517465ac82661b7a2b2ff934dde3000006a3db578cbf8138f8636cdaaf22ea6a3148cda84a51f4cc7559a81672790e1e0625b31ad40389a76c53466eee5f2b3d7937ecd996f7e532fd15a66aee7cfb76e153a6ce6f80c6b00d8ddc1170c61ee99979310a7e5c3caeae36f38095a28eb83b508d1227a35b908426ce78a5884a7a25873565f0839fc5356e489aec2b1187b6a78031c52aaea79fa27fbb51eeec9238f54af8436d1ed005b45fc0f6781efd76"], 0x38}}, 0x0) 16:43:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x28200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000b80)=ANY=[@ANYBLOB="2321202e2f66696c653020202073656c726e75780ae7288dccac1b221edb964d0fc88245552bbaa559a16b311dc209138f30592faf8de43f479174d6840f7795d77b9c57e7b41eba3103c8d6ff6fdb73f86ad98a6a0d49efb01abb10a0853c92d19b481ad3f292781e73424ceb739dd6839577d71ab2d19829a7e7c29026e38ef33a1b6b4d88c0afc52ff662ed2aabdf6b791932a29c5f"], 0x97) socket(0x10, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) fcntl$getownex(r1, 0x10, 0x0) r2 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f00000000c0)}) sched_setscheduler(r2, 0x5, &(0x7f0000000380)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="020000000100eb8000000000020001", @ANYRES32, @ANYBLOB="b8e365614a57609aeb2c35eb6346b93ee6a8ccac064b28045fb5ccc42eb61c604bd9bc6f06af127321df7559522954af9fbdf181f025e9a65d7a17310597d62a318833df89a57e5b53778aa3e66844fc416fc7e2cee11b08996b795ceead35bdcf1b23c88334501831ff741891ff83bd8103282caf9b66fa23cc7ad8ce987b956942c2650306152e474b", @ANYBLOB="79a400", @ANYRES32=0x0, @ANYRESHEX=r2], 0x6, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4400001}, 0xc, &(0x7f0000000980)={&(0x7f0000000240)={0x124, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xf014}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nlmon0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xf9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="529f57ec5638ef7bd003ee1a6fddd481"}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xbd}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x124}, 0x1, 0x0, 0x0, 0x44004}, 0x20004080) bind$rds(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000400)=@in6={0xa, 0x4e22, 0x8, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000840000e30500000020000000090000"], 0x17, 0x20}, 0x0) close(r0) pipe(0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x0) 16:43:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fdatasync(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x401, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r6, 0x0, 0x10005, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "b8b6485c9abbbd10", "c61a8618376a84033cfba3b792acd6555f45f1ed03d1659f79ae1526a87bcc32", "b976c8a9", "ff5bb30a5191be73"}, 0x38) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, &(0x7f0000000140)=ANY=[], 0xfec8) ioctl$KVM_SET_BOOT_CPU_ID(r7, 0xae78, &(0x7f0000000180)=0x2) 16:43:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x0, @loopback}], 0x1c) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmmsg$inet6(r0, &(0x7f00000067c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000000080)='G', 0x1}], 0x1}}], 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfec8) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x200100, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000200)) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000080)='./file0\x00', 0x40000c20) ioctl$FICLONE(r4, 0x40049409, r3) 16:43:30 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x41395527) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000680)="a1", 0x1}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x10005, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000013) 16:43:30 executing program 1: r0 = socket(0x15, 0x80005, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc2400060}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000003", @ANYRES16=r1, @ANYBLOB="68c42bbd7000fbdbdf2506000000080022000000000008000a0004000000080011000100000008001300810000000800060004000000080009000000000008001300050000000800140003000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x10005, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000180)=0x6) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x300a3, 0x0) 16:43:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000002400e50d000011000000000000997b98", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100686866000c000200080001000000bcd6bd941c5fab18edbb000012804b1511f9c506c9bdc08d86c010b54fcb524d3a45e9a7d130517465ac82661b7a2b2ff934dde3000006a3db578cbf8138f8636cdaaf22ea6a3148cda84a51f4cc7559a81672790e1e0625b31ad40389a76c53466eee5f2b3d7937ecd996f7e532fd15a66aee7cfb76e153a6ce6f80c6b00d8ddc1170c61ee99979310a7e5c3caeae36f38095a28eb83b508d1227a35b908426ce78a5884a7a25873565f0839fc5356e489aec2b1187b6a78031c52aaea79fa27fbb51eeec9238f54af8436d1ed005b45fc0f6781efd76"], 0x38}}, 0x0) [ 340.546626][T10339] ------------[ cut here ]------------ [ 340.552359][T10339] WARNING: CPU: 0 PID: 10339 at arch/x86/kvm/x86.c:8202 vcpu_enter_guest+0x4bc5/0x6110 [ 340.561979][T10339] Kernel panic - not syncing: panic_on_warn set ... [ 340.568571][T10339] CPU: 0 PID: 10339 Comm: syz-executor.3 Not tainted 5.5.0-rc4-syzkaller #0 [ 340.577232][T10339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.587274][T10339] Call Trace: [ 340.590628][T10339] dump_stack+0x197/0x210 [ 340.594983][T10339] ? vcpu_enter_guest+0x4b00/0x6110 [ 340.600235][T10339] panic+0x2e3/0x75c [ 340.604121][T10339] ? add_taint.cold+0x16/0x16 [ 340.608855][T10339] ? printk+0xba/0xed [ 340.612849][T10339] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 340.618299][T10339] ? __warn.cold+0x14/0x3e [ 340.622702][T10339] ? vcpu_enter_guest+0x4bc5/0x6110 [ 340.627893][T10339] __warn.cold+0x2f/0x3e [ 340.632131][T10339] ? report_bug.cold+0x63/0xb2 [ 340.636889][T10339] ? vcpu_enter_guest+0x4bc5/0x6110 [ 340.642106][T10339] report_bug+0x289/0x300 [ 340.646494][T10339] do_error_trap+0x11b/0x200 [ 340.651097][T10339] do_invalid_op+0x37/0x50 [ 340.655521][T10339] ? vcpu_enter_guest+0x4bc5/0x6110 [ 340.660770][T10339] invalid_op+0x23/0x30 [ 340.664929][T10339] RIP: 0010:vcpu_enter_guest+0x4bc5/0x6110 [ 340.670749][T10339] Code: 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e 94 14 00 00 41 83 a7 20 27 00 00 fb e9 d6 be ff ff e8 7b d4 66 00 <0f> 0b e9 85 be ff ff e8 6f d4 66 00 0f 0b e8 68 d4 66 00 0f 0b e9 [ 340.690361][T10339] RSP: 0018:ffffc90007da7a10 EFLAGS: 00010016 [ 340.696436][T10339] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc9001067b000 [ 340.704414][T10339] RDX: 0000000000005a97 RSI: ffffffff810e58c5 RDI: 0000000000000007 [ 340.712387][T10339] RBP: ffffc90007da7b20 R08: ffff888050444600 R09: ffffed100a0888c1 [ 340.720344][T10339] R10: ffffed100a0888c0 R11: ffff888050444607 R12: ffff8880551d806c [ 340.728311][T10339] R13: 0000000000000000 R14: ffff8880551d8078 R15: ffff8880551d8040 [ 340.736317][T10339] ? vcpu_enter_guest+0x4bc5/0x6110 [ 340.741525][T10339] ? kvm_vcpu_reload_apic_access_page+0x370/0x370 [ 340.748038][T10339] ? lock_acquire+0x190/0x410 [ 340.752723][T10339] ? kvm_arch_vcpu_ioctl_run+0x241/0x17b0 [ 340.758454][T10339] kvm_arch_vcpu_ioctl_run+0x430/0x17b0 [ 340.764010][T10339] ? kvm_arch_vcpu_ioctl_run+0x430/0x17b0 [ 340.769819][T10339] kvm_vcpu_ioctl+0x4dc/0xfc0 [ 340.774502][T10339] ? kvm_clear_dirty_log_protect+0x820/0x820 [ 340.780530][T10339] ? tomoyo_path_number_perm+0x25e/0x520 [ 340.786186][T10339] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 340.792059][T10339] ? kvm_clear_dirty_log_protect+0x820/0x820 [ 340.798143][T10339] do_vfs_ioctl+0x977/0x14e0 [ 340.802747][T10339] ? compat_ioctl_preallocate+0x220/0x220 [ 340.808463][T10339] ? __fget+0x37f/0x550 [ 340.812639][T10339] ? ksys_dup3+0x3e0/0x3e0 [ 340.817153][T10339] ? ns_to_kernel_old_timeval+0x100/0x100 [ 340.822878][T10339] ? tomoyo_file_ioctl+0x23/0x30 [ 340.827887][T10339] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 340.834166][T10339] ? security_file_ioctl+0x8d/0xc0 [ 340.839296][T10339] ksys_ioctl+0xab/0xd0 [ 340.843453][T10339] __x64_sys_ioctl+0x73/0xb0 [ 340.848102][T10339] do_syscall_64+0xfa/0x790 [ 340.852624][T10339] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 340.858527][T10339] RIP: 0033:0x45a9e9 [ 340.862420][T10339] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 340.882025][T10339] RSP: 002b:00007fe7c5994c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.890447][T10339] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a9e9 [ 340.898426][T10339] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 340.906399][T10339] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 340.914376][T10339] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe7c59956d4 [ 340.922342][T10339] R13: 00000000004c4283 R14: 00000000004d9cb8 R15: 00000000ffffffff [ 340.931699][T10339] Kernel Offset: disabled [ 340.936123][T10339] Rebooting in 86400 seconds..