[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 97.768702] audit: type=1800 audit(1553568446.828:25): pid=10314 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 97.788074] audit: type=1800 audit(1553568446.838:26): pid=10314 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 97.808343] audit: type=1800 audit(1553568446.858:27): pid=10314 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.197' (ECDSA) to the list of known hosts. 2019/03/26 02:47:43 fuzzer started 2019/03/26 02:47:48 dialing manager at 10.128.0.26:36449 2019/03/26 02:47:49 syscalls: 1 2019/03/26 02:47:49 code coverage: enabled 2019/03/26 02:47:49 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/26 02:47:49 extra coverage: extra coverage is not supported by the kernel 2019/03/26 02:47:49 setuid sandbox: enabled 2019/03/26 02:47:49 namespace sandbox: enabled 2019/03/26 02:47:49 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/26 02:47:49 fault injection: enabled 2019/03/26 02:47:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/26 02:47:49 net packet injection: enabled 2019/03/26 02:47:49 net device setup: enabled 02:51:31 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') exit(0x0) sendfile(r1, r2, 0x0, 0x1) syzkaller login: [ 342.820457] IPVS: ftp: loaded support on port[0] = 21 [ 342.997222] chnl_net:caif_netlink_parms(): no params data found [ 343.085885] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.092763] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.101795] device bridge_slave_0 entered promiscuous mode [ 343.112652] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.120239] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.129176] device bridge_slave_1 entered promiscuous mode [ 343.169819] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 343.183147] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 343.223802] team0: Port device team_slave_0 added [ 343.233263] team0: Port device team_slave_1 added [ 343.427932] device hsr_slave_0 entered promiscuous mode [ 343.593133] device hsr_slave_1 entered promiscuous mode [ 343.876887] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.883654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.890977] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.897760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.992235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.006082] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.016458] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.033751] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 344.064128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.072682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.091530] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.109956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.118913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.127489] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.134144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.147219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.156219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 344.164798] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.171365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.186688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 344.206492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 344.231481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 344.241198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 344.276635] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 344.286586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.301804] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 344.310853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 344.320469] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 344.330217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 344.338970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 344.348152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 344.358277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 344.369689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 344.407368] 8021q: adding VLAN 0 to HW filter on device batadv0 02:51:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x805, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe3\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\x85[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\x94r\x00\x00\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&N\x03\xb2K\xac\xe6x\x05\x98\xe5\x8b\xa5\f\x00\x81[K\xa6yfF\xfb\xceJ\xf2\xc0\x85\xc9l\vf\xcd\x97\xb9\xab\xb8\xa0A\f-\xd0\a&g') write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000008100000000000000000180c2000000aaaaaaaaaabb0805000000"], 0x1) 02:51:34 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000380)={0x18, 0xf, 0x2, {{0x0, 0x3, 0x3}, 0xd913}}, 0x18) pause() getpid() pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='\f\x00\x00\x00@\x00'], 0x1) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x2, 0x8, 0x7, 0x0, 0x4, 0x0, 0x80000000070bd2c, 0x1, [@sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2d, 0x34ff}]}, 0x20}}, 0x8da4e702d3e69d4d) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r4 = open(0x0, 0x240040, 0x40) r5 = memfd_create(&(0x7f0000000040)='/dev/loop#\x00', 0x0) write$P9_RLCREATE(r5, &(0x7f00000001c0)={0x18, 0xf, 0x1, {{0x80, 0x4, 0x8}, 0xe9}}, 0x18) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000300)=""/81) sendfile(r5, r3, 0x0, 0x2000005) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000180)={0x5, 0x20, 0x1}) 02:51:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0xeacf0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) fcntl$setstatus(r1, 0x4, 0x42803) 02:51:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x2) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 02:51:35 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) mmap(&(0x7f000060b000/0x1000)=nil, 0x1000, 0x5, 0x10, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7e) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000680)='./bus\x00', 0x0) 02:51:35 executing program 0: r0 = syz_open_dev$mice(&(0x7f0000001040)='/dev/input/mice\x00', 0x0, 0xc0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000001080)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0xfffffedc) write$FUSE_ENTRY(r1, &(0x7f0000001100)={0x90, 0x0, 0x2, {0x20000000007, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a4d, 0x4}}}, 0x90) bind$netlink(r0, &(0x7f00000010c0)={0x10, 0x0, 0x25dfdbfe, 0x20000000}, 0xc) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000011c0)={0x1, {{0xa, 0x4e24, 0x10000000000, @remote, 0x8}}, 0x1, 0x4, [{{0xa, 0x4e23, 0x678, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}, 0x3}}, {{0xa, 0x4e22, 0x5, @rand_addr="d9ca4a02f91d0f42261caf66fc4f20d6", 0x2}}, {{0xa, 0x4e20, 0x9, @rand_addr="937498de6d6be69adbc490c248dd3915", 0x5}}, {{0xa, 0x4e24, 0x0, @mcast1}}]}, 0x290) [ 346.558869] CUSE: unknown device info "Mz" [ 346.563425] CUSE: unknown device info "" [ 346.567720] CUSE: DEVNAME unspecified [ 346.576727] CUSE: unknown device info "Mz" [ 346.581139] CUSE: unknown device info "" [ 346.585733] CUSE: DEVNAME unspecified 02:51:35 executing program 0: r0 = socket$tipc(0x1e, 0x800000000005, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000001d80)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) 02:51:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x20400) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000a, 0x31, 0xffffffffffffffff, 0x0) sendto$rxrpc(r1, &(0x7f0000000040)="5a382b490201b6166668b172c3ca1aa9685a6f7d5bd36ebc837baf004536526bafbd84edf867e7", 0x27, 0x10, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) fstat(r2, &(0x7f00000001c0)) 02:51:35 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x4000) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=""/219, &(0x7f0000000140)=0xdb) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x81000000}, 0xc, &(0x7f0000000200)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r1 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000300)={{0xa, 0x6, 0x100, 0x7}, 0x6, 0x44, 0x80000000, r1, 0x9, 0xc000000000, 'syz1\x00', &(0x7f0000000280)=['\x00', '/dev/dmmidi#\x00', '\x00', '\x00', '\x00', '/dev/dmmidi#\x00', '/dev/dmmidi#\x00', '&\\^wlan1!posix_acl_access\xefw\x00', '/dev/dmmidi#\x00'], 0x54, [], [0x8, 0x7, 0x8, 0x8]}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000440)={0x3, 0x1, 0x5, {0x4, 0x6, 0x200, 0x4}}) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000480)={0x18, 0x0, {0x2, @local, 'rose0\x00'}}) sendmmsg$inet_sctp(r0, &(0x7f0000000a80)=[{&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0xff, @mcast2, 0xfffffffffffffffd}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000500)="65c5bda2c4139f2e1d3b0ae88b3b77f517d32e01bd5c133cb4513de658ec5691fa8f55f25bee5afe37f05966f445e2d9ffae960e163944922b7b58674426fbc71c0db9824e2b58bcb98e2e6b4f96fe9f2330ca26ffaff4e219a753d35ad3acc2539d31d2751e2561757caab48a9df92983910e23ecd257b060e80e55022336f848a814eb132166b66e7e9bf8", 0x8c}, {&(0x7f00000005c0)="340824884a0b33eb386b16318a5c3c93e92940d686d3e624045fc14f4ad4c6ad79d0c549cd7ea317d9b1ec5b0af60fece064a786f67842c4ecd762ca57244302016117aab183bdee68291e77fd2900b595fac27592c3d24fe8fcd73c54f8247e63a6c0077c349deb65a78e2f368d5973ea9a6ca9f999831c8755aced962f9edac084932ecf067e467bba08bcf36d57652b4b363dda30e1904131f1364257468d3805c3ae817db53edfc5e3ed05c793a19500989f773a2ccfd41dab", 0xbb}], 0x2, &(0x7f00000006c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x1000}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x80000000000}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0x88, 0x4040000}, {&(0x7f0000000780)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000880)=[{&(0x7f00000007c0)="e9c52496fc94c254eecc8ac2e0c8753f3ed1963157634dd9a104628ea0a810550235cac7e863e617ebf07c5b04c079c1793b8c06fa5480e7f86189bd5a80bf6249a0e353acf30cef266ccdbe0e3ecbc5b55808acf4f3839612d16a37d160ef2e3203ffac14e7625c8a6970eaff57b63db40a184e5fcbe78602f65bf115a64c6892fdf9f13f71596a1d65b5136001aab5fce2a45c6ea6ee5e9124f48abc3e0ff58e11bc5defe129e2e00dc4", 0xab}], 0x1, 0x0, 0x0, 0x4000}, {&(0x7f00000008c0)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000900)="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", 0xfb}], 0x1, &(0x7f0000000a40)=[@init={0x18, 0x84, 0x0, {0x8c, 0x4, 0x8, 0x800}}, @authinfo={0x18, 0x84, 0x6, {0x2000000000000}}], 0x30}], 0x3, 0x4000800) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r2 = open(&(0x7f0000000b40)='./file0\x00', 0x40000, 0x8) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000b80)={0xaea7, 0xf, 0x3}) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000bc0)={0x0, 0xb9b, 0x1e, 0xf711, 0x6, 0x5, 0x7, 0x7, 0x200, 0x171, 0xffff}, 0xb) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000c00)) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000c40)=0x7) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000c80)=@routing={0xef, 0xc, 0x0, 0x5, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, @loopback, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}, 0x68) accept4$inet(r2, 0x0, &(0x7f0000000d00), 0x800) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000d40)=0x3) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) ptrace$getenv(0x4201, r1, 0xff, &(0x7f0000000e00)) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000e40)={0x1, 0x2, [{r0, 0x0, 0x1000000, 0x1fffff000}, {r0, 0x0, 0x10000fffff000, 0xfffffffffffff000}]}) openat$cgroup(r0, &(0x7f0000000e80)='syz1\x00', 0x200002, 0x0) rt_sigaction(0x1d, &(0x7f0000000f80)={&(0x7f0000000ec0)="660f382b79d465660fd9f0c443e97ca40ba1abd4a2fec683feefffff6236670f186c3023c4226af529c4e19a5ca1f8ffffff18dbc441ad59cec4417dd281ec000000", {0x1000}, 0x90000001, &(0x7f0000000f40)="c421d16a0b36660fe9a2f9000000f2a58f497c80680cc402fd1e02f3f20fc74978460f595b0065664e0f3a612232ddc0c4817658c7"}, &(0x7f0000001040)={&(0x7f0000000fc0)="c4c1f97e530c224464e8c4e1a9627d0066660ffe910a00000040f7e6c4a1f8ae9ccf39510000f20f510af347e30bc40211bcf1c48215aff6", {}, 0x0, &(0x7f0000001000)="420c00c4817d68d7c482559e4f74c462f933530dc4012211e0de6104660f38046526c44279184200c4c1437db9a10000008f0810ef5cef7622"}, 0x8, &(0x7f0000001080)) write$P9_RSTATFS(r0, &(0x7f00000010c0)={0x43, 0x9, 0x2, {0x200, 0x81, 0x80000000, 0x4, 0x100, 0x0, 0x1f, 0x8, 0x2}}, 0x43) prctl$PR_MCE_KILL_GET(0x22) 02:51:36 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000140)="00de67fbb4f8bb8e0520310764fd9182cd43d707b1ca3282bc82c0e8a154e748537610251bbea4e2fdb04501f4dd90f3ef34b913fe486bc2909d4ae476c0169abfa0341ae70a18d64031", 0x4a, r1) r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 02:51:36 executing program 0: unshare(0x20400) r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4) bind$can_raw(r0, 0x0, 0x0) [ 347.532616] IPVS: ftp: loaded support on port[0] = 21 02:51:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x8, 0x400000100000011, 0x1}, 0x2c) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3}, &(0x7f0000000100)=0xc) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0xe35f, 0xffff, 0x100000001, 0x1, 0x1000000000}, 0x14) syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x0, 0x200100) r2 = bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x3, 0x0, 0x77fff8, 0x0, 0x820008, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000180)={0x2000000003, 0x0, 0x713000, 0x0, 0x20000820000, r2, 0x1}, 0x2c) 02:51:36 executing program 0: clock_getres(0x0, 0x0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) waitid(0x0, r1, &(0x7f0000000040), 0x80000000, &(0x7f0000000180)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000240)=0x4) futex(&(0x7f0000000140), 0x85, 0x0, 0x0, 0x0, 0xfffffffffffffffc) [ 347.767420] chnl_net:caif_netlink_parms(): no params data found [ 347.881331] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 347.905976] futex_wake_op: syz-executor.0 tries to shift op by -1; fix this program [ 347.907472] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.920546] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.930379] device bridge_slave_0 entered promiscuous mode 02:51:37 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e22, @remote}, 0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth0_to_bond\x00', 0x20, 0x0, 0x3ff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x5100, 0x0) [ 347.956639] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.963407] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.972408] device bridge_slave_1 entered promiscuous mode [ 348.058160] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 348.096641] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:51:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) [ 348.176965] team0: Port device team_slave_0 added [ 348.195765] team0: Port device team_slave_1 added 02:51:37 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) set_robust_list(&(0x7f0000000140)={0x0, 0x20000000, &(0x7f0000000100)={&(0x7f0000000040)}}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r1, 0x10d, 0x1, &(0x7f00000000c0), &(0x7f0000000000)=0x4) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4) listen(r2, 0xfc0004) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0), 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) recvmmsg(r3, &(0x7f0000004900)=[{{&(0x7f0000001480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/4096, 0x1000}}], 0x500, 0x2, &(0x7f0000004a80)={0x77359400}) recvmsg$kcm(r3, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) [ 348.334701] device hsr_slave_0 entered promiscuous mode [ 348.383430] device hsr_slave_1 entered promiscuous mode [ 348.446579] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.453492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.460837] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.467636] bridge0: port 1(bridge_slave_0) entered forwarding state 02:51:37 executing program 0: r0 = memfd_create(&(0x7f0000000200)='\x00\x00\x00\x00', 0x6) ftruncate(r0, 0x1000000) io_setup(0x9, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') bind$rxrpc(r2, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) io_submit(r1, 0x2, &(0x7f0000001880)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000040)="5059427837c993e374cd2b1c14a579600df68ac738883fa0631dc5d2eea01d7d640163030881a3b5afea13442ebd7252e0e6adfd74a94974e67690f992a497a652d5003b52c81e5bf07aeda2aa30b010cd5eeae02e6c700f20a5e2ff151d1734c8b8aa2d91bec2bb468e539970992f7fbb75b05c68356155cfedd538f9a30adf789cab2594ded747f0003ee871b393ad2c2d52f44761a6bbd9755482", 0x9c, 0x8000, 0x0, 0x0, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x1}]) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) write$UHID_CREATE(r3, &(0x7f0000001280)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000280)=""/4096, 0x1000, 0x8001, 0x1, 0x2, 0x4, 0x9}, 0x120) [ 348.570511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.595725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.605987] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.633941] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.655840] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 348.676468] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.704601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.713191] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.719771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.744711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.754429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.762961] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.769542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.812270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.822105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.831977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.841275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.850525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 02:51:37 executing program 0: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) socket$inet(0x2, 0x10000000000003, 0x9) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4400, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0xfffffffffffff800, 0x8, 0x10000, 0x91, 0x15, 0x1f, 0x400, 0xffffffffffffff31, 0x0, 0x2}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x53) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x22, 0x0, 0xffffffffffffff98) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e22, 0x4, @ipv4={[], [], @empty}, 0x8}, {0xa, 0x4e22, 0x800, @mcast2, 0x1ff}, 0x1, [0xe3b, 0xffe0000000000, 0x4000000080000000, 0x4, 0x401, 0x5, 0x100000000, 0x6]}, 0x5c) [ 348.859990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.869770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.879903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.898145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.909762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.918659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.947571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 02:51:38 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) close(r0) [ 349.034375] 8021q: adding VLAN 0 to HW filter on device batadv0 02:51:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x101, 0x200000) r2 = msgget$private(0x0, 0x1) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000140)=""/9) recvfrom$rxrpc(r1, &(0x7f00000000c0)=""/47, 0x2f, 0x0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x7, @local, 0x2}}, 0x24) rmdir(0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f0000000040)="3045692753ccc7dcafaa015aba992018acb52a65ae882a51c5f06689bd6b71ed"}) 02:51:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f00000000c0)=@ethtool_eeprom={0x47}}) close(r2) close(r1) 02:51:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000000c0)) r1 = eventfd(0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) dup2(r1, r0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) 02:51:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000500)={0x93e, {{0x2, 0x4e20, @local}}, 0x1, 0x9, [{{0x2, 0x4e23, @remote}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e22, @local}}]}, 0x510) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="096310c0", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 02:51:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000000c0)) r1 = eventfd(0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) dup2(r1, r0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)) [ 349.715198] binder: 10604:10609 unknown command -1072667895 [ 349.721153] binder: 10604:10609 ioctl c0306201 200000c0 returned -22 [ 349.754748] binder_alloc: binder_alloc_mmap_handler: 10604 20001000-20004000 already mapped failed -16 [ 349.776343] binder: BINDER_SET_CONTEXT_MGR already set [ 349.782112] binder: 10604:10605 ioctl 40046207 0 returned -16 [ 349.823536] binder_alloc: 10604: binder_alloc_buf, no vma [ 349.829601] binder: 10604:10614 transaction failed 29189/-3, size 24-8 line 3035 [ 349.853021] binder: 10604:10605 Release 1 refcount change on invalid ref 1 ret -22 [ 349.879633] binder: 10604:10614 unknown command -1072667895 [ 349.885853] binder: 10604:10614 ioctl c0306201 200000c0 returned -22 [ 349.902500] binder: release 10604:10609 transaction 2 out, still active [ 349.913808] binder: send failed reply for transaction 2, target dead 02:51:39 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000300)={0x39a60000000000, 0x10000, 0x7, 0x6d, [], [], [], 0x6, 0x2, 0xf869, 0x2, "6c5deecdb090b8247edc18f2d4af422d"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"]) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1000000000000, 0x0) ioctl$CAPI_GET_PROFILE(r3, 0xc0404309, &(0x7f0000000080)=0x80) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:51:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0xfffffffffffffffc, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x6d, 0x20000000000001, 0x0, 0x0}, 0xbe) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) [ 350.089811] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 02:51:39 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) socketpair(0x10, 0x8080e, 0x10000, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x2}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 02:51:39 executing program 0: msgrcv(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x101000, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x1, 0x4) 02:51:39 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000080)=0x1) read(r0, 0x0, 0xe2) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x2001) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x5) 02:51:39 executing program 0: clock_adjtime(0x3, 0x0) 02:51:39 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendto$rxrpc(r1, &(0x7f0000000040)="8faf4228dbb74d0b553f048f6565b4b4c4c58c189331c8921fa29a05206172c0881a3ca5513f18dc1bda1261850afcd3d628d679c08e", 0x36, 0x4000000, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) r2 = userfaultfd(0x0) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)={0x14000000}) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) preadv(r3, &(0x7f0000000080), 0x8, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r0, 0x10d, 0xd, &(0x7f0000013ff4)={@remote, @loopback}, 0xc) close(r0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x2, 0xffff, 0x8000000, 0x9, 0x3, 0x8, 0xffffffff, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x140, 0x200, 0x7fff, 0x8000, 0x8}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={r4, 0x31f, 0xfff, 0xd974, 0x2, 0x3, 0x1, 0x875, {r5, @in={{0x2, 0x4e21, @multicast1}}, 0x40, 0x8, 0xec, 0x72e, 0xfffffffffffffe31}}, &(0x7f0000000300)=0xb0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup3(r0, r2, 0x0) 02:51:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000009c0)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}, 0x30, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000980)='yam0\x00', 0x3, 0x4, 0x9}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x0, 'ip6gre0\x00', 'gre0\x00', 'bridge_slave_1\x00', 'veth1_to_bridge\x00', @remote, [], @remote, [], 0xb0, 0xb0, 0xe8, [@mark_m={'mark_m\x00', 0x18, {{0x0, 0x0, 0x0, 0x2}}}]}}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}}, {{{0x15, 0x0, 0x0, 'ip_vti0\x00', 'syz_tun\x00', 'sit0\x00', 'bond0\x00', @remote, [], @local, [], 0xc0, 0xc0, 0xf0, [@helper={'helper\x00', 0x28, {{0x0, 'RAS\x00'}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x2e0) poll(&(0x7f0000000840)=[{r0, 0x80d2}], 0x1, 0x0) mkdir(0x0, 0x0) ioctl(r0, 0x8, &(0x7f0000000880)="5e288b9c545b677204251fa6749b13d39aebab3c85514c60fd9a809a71ec0fa65220979bda1ba307b501e0697d1bb63aa7b92e2aadca34e5523c33003dda7f73c5282cd8774c2a968f2034258b27503de96b429a47fadc30954d71f9f7ec1f84bec42515f21ff47a1cc263c01e1c3e26f901d5a165d1d202cd7bf19c43b8d11b62330af0c38873fe77894abfdec3700c93d648820d4cc12c76bec290de5548b45480ebae751d03e6884cc504d2ce2b0302a849c04dbd47ff66cd7418d3872db16bdf") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000007c0)=@nat={'nat\x00', 0x19, 0x3, 0x458, [0x200000c0, 0x0, 0x0, 0x200003e0, 0x200004e8], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x13, 0x40, 0x4, 'netdevsim0\x00', 'veth0_to_bond\x00', 'vcan0\x00', 'bond_slave_1\x00', @dev={[], 0x19}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], @random="aa360060b7e0", [], 0xa8, 0x128, 0x160, [@mac={'mac\x00', 0x10, {{@dev={[], 0x14}}}}]}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x7, 0xae}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}]}, @snat={'snat\x00', 0x10, {{@dev={[], 0x23}, 0xfffffffffffffffd}}}}, {{{0x17, 0x1, 0xfbff, 'team0\x00', 'ip6tnl0\x00', 'veth1_to_bond\x00', 'rose0\x00', @dev={[], 0x21}, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x158, 0x158, 0x190, [@ipvs={'ipvs\x00', 0x28, {{@ipv4=@multicast1, [0xff, 0xffffff00, 0xff000000, 0xff], 0x4e24, 0x3d, 0x1, 0x4e21, 0x1, 0x8}}}, @physdev={'physdev\x00', 0x70, {{'veth0_to_team\x00', {}, 'veth0\x00', {0xff}, 0x16, 0x10}}}]}}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x0, 0x20, 0x10, 'ip6tnl0\x00', 'nlmon0\x00', 'veth1_to_hsr\x00', 'veth1_to_team\x00', @broadcast, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xa0, 0xd8}, [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}]}, @snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x4d0) [ 350.693506] [drm:drm_calc_timestamping_constants] *ERROR* crtc 31: Can't calculate constants, dotclock = 0! [ 350.703800] hrtimer: interrupt took 216229 ns [ 350.818507] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 350.829658] xt_helper: cannot load conntrack support for proto=7 [ 350.869037] xt_helper: cannot load conntrack support for proto=7 [ 350.880278] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 02:51:40 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xfffffffffffffffd, 0x2, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRESDEC], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x2880) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 02:51:40 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0x40042) write$UHID_INPUT(r0, &(0x7f00000000c0)={0x8, "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", 0x1000}, 0x2c5) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa07040006000881003900080045980957192aaf93ee80b706f2e20000240000000000219078ac1414bbac1414ea000000"], 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000001100)=""/165) 02:51:40 executing program 1: syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x1, 0x200) r0 = socket$inet6(0xa, 0x80a, 0x7) ftruncate(r0, 0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xffffffff, 0xfffffffffffffff9, 0x83f, 0x19c, 0xff}, &(0x7f0000000080)=0x14) r1 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x7, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/udmabuf\x00', 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000001c0)='syz1\x00') r3 = dup2(r1, r2) ioctl$SG_GET_PACK_ID(r3, 0x2205, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x400, 0x200140) fallocate(r1, 0x40, 0x1, 0x4c1) 02:51:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="eaed6c4170f40d5288050000000000000051e2259001000080488922be9442a24477b6f61d90d455d974aaf36292011e9af102d259d8ec1b9231e9da00b0a71ca44dc0f198a48fdb571c0603047fe6e3452f94fc077b657be454c363758e73611b2a24e8aa098e76c0f6841253020b2eb269c1f9f5c051f5c67296bf39a5eaa123685d879adf0bb106e5020000000000000004"], 0x1}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key(0x0, 0x0, &(0x7f0000000340)="b6bac2834eb5ce858cf511f487db9f96b27f72f77c6b31f14a03e89b3e7c908cfa6d4fe3cdbfb54b798391f6b7a6aa8ddc065a9c2672a75f98be2d3e4b1af36107e9cd1fe0bac840a15ffbf1df26e59354a4eddd29a9443c3e9a5a413717db103dc0fb7a7df49c07b4eec989fa332d12d249448c3caa3864942c4bef05ad55e4885448a33e22d59b0e03d956a6859a039f", 0x91, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x802, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000000c0), 0x4) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 02:51:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x201) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) 02:51:40 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2001, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x200, 0x5, 0x1, 0x1000}, 0x10) getsockopt$inet_int(r0, 0x10d, 0x100001000000ea, &(0x7f00000000c0), &(0x7f0000000080)=0x21d) [ 351.728186] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:51:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt(r0, 0x3, 0x6, &(0x7f00000002c0)=""/249, &(0x7f0000000000)=0xf9) 02:51:41 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1) 02:51:41 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f0000000680)={&(0x7f0000000a00)={0x24, 0x2e, 0x109, 0x0, 0x0, {}, [@nested={0x10, 0x0, [@typed={0x4, 0x0, @binary}, @typed={0x8, 0x0, @uid}]}]}, 0x24}}, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000300)='posix_acl_ac\xe3ess!\x99\x97Y\x8cS\x1a\x87\\\xcc\xdc\x94*\xf3#3\x01\f\x14S\x9d\xb0%\xa4g\xf6\xb0\xd4\xc9h\xea8T\xaf\xcc)A\xe6\x10\x1e\x9f\xc0\x1f\xad\xc4^\xe2S\xde\x7f\xe4\xf7&DC3\a\x10-|M\xb2\xed-\xd5\xf9\xc6\xa1\xbb\x92\xe48Fb8\xb6\xf6G*G\xc2\x88\x96\xe8\"\xba\x16\x17\xea\xf1\xca\x13\xdc^\xd7@\x80b\xfa\xac\x13\x8f2\xa9$\\\xb6\x1a.a\xed4U\xd0'}, 0x30) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={[], 0x5, 0x3, 0x1, 0x8001, 0x79, r1}) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 02:51:41 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0x18, 0x7, 0x3, 0x0, [{}, {}, {[@empty=0x1100]}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x9, 0x3}, 0x14) 02:51:41 executing program 1: r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1e, 0x0, 0x64}}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x10000003}) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 02:51:41 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0x18, 0x7, 0x3, 0x0, [{}, {}, {[@empty=0x1100]}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r0, 0x9, 0x3}, 0x14) 02:51:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x10000, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f0000000540)={{}, {r3, r4+30000000}}, &(0x7f0000000580)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x9, @remote, 0x2}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0x22b, @remote, 0xb81}, @in6={0xa, 0x4e20, 0x1, @remote, 0x8}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x3ff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x101}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x1000}, @in6={0xa, 0x4e21, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7fffffff}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x6}}, @in={0x2, 0x4e24, @multicast2}], 0xe8) ioctl$KVM_REINJECT_CONTROL(r6, 0xae71, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000100)={[0x1e, 0x9, 0x10001, 0x0, 0x100000000, 0x6, 0x4, 0x7fffffff, 0x2, 0x8, 0x80000001, 0x80000000, 0x3, 0x0, 0x1, 0x33], 0x7000, 0x120100}) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$KVM_GET_SREGS(r6, 0x8138ae83, &(0x7f0000000400)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r7, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x4b564d03, 0x1, 0x101]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$TIOCCBRK(r6, 0x5428) 02:51:41 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, 0x0) 02:51:42 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x0, 0x4000000000080, 0x7}, 0x10) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(&(0x7f0000000380)=ANY=[], &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f0000000200)) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="04"], 0x1) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x6007, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) sendfile(r0, r1, &(0x7f0000000780), 0xbb1) chdir(&(0x7f0000000280)='./file0\x00') ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000140)={r0, 0x2, 0x1ff, "d31db51503c75cd57a6bc77209152b50e9272537192853dacf0c1b3f7e8472ea47dc646db312113b26898b7a6ae9ee51e95fdb3354a0a0cbb7774455339649e10885c1"}) creat(&(0x7f0000000000)='./bus\x00', 0x0) 02:51:42 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101840, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000140)={0x7, @output={0x0, 0x1, {0x0, 0x7ff}, 0x81, 0xe9}}) fallocate(r0, 0x2, 0x8, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800000000000000000000012b0df578719b58a714110504907800000000400000000039413d084163411b4d0a00000000330000ac2314aaac141400084600000000000000000000e0000000000000000000000100000000000000007f00"], &(0x7f00000028c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 02:51:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0xfffffffffffffffe, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ix6_\x81ti0\x00', 0x403}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'rose0\x00', 0x400}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) epoll_wait(r2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0x5) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1be) 02:51:42 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x100) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000040)={0x0, 0x3, 0x0, [], &(0x7f0000000000)={0x980913, 0x0, [], @p_u16=0x0}}) 02:51:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='yeah\x00', 0x5) write$binfmt_elf64(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f"], 0x1) write$binfmt_elf64(r0, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "", [[], []]}, 0x278) sendto$inet(r0, &(0x7f0000000f40)="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", 0x413, 0x0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 02:51:42 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000001800810ae00f80ecdb4cb92e0a060ac0fe0cd302e8bd6efb120009000e0005fe02000000060005c0fc00", 0x2e}], 0x1, 0x0, 0x0, 0xfec0}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfffffffffffffff7, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000000c0)={0x6, [0x2, 0x6, 0x0, 0x3, 0x4, 0x401]}) [ 353.721650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.728382] IPv6: NLM_F_CREATE should be set when creating new route [ 353.737573] IPv6: NLM_F_CREATE should be set when creating new route [ 353.744438] IPv6: NLM_F_CREATE should be set when creating new route 02:51:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xffffffffffffff4c, 0x400000) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e24, 0x4, @ipv4={[], [], @multicast1}, 0x3}}, 0x0, 0xd507, 0x0, "1ce2163d1cee49d8dc5bfede6f4f3ea3c1017f2c234266845be3c9a1b9532e704b45abf3f712f345a8ffe766c4f0e3843a42d571d58efeb01d86f1e7fb2df1bb437e655e1c6132e2e491b6f9dfa62cd3"}, 0xd8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") sendto$inet(r0, 0x0, 0x0, 0x40020000802, &(0x7f00000000c0)={0x2, 0x8010084e23, @local}, 0x10) 02:51:43 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x3) pipe(&(0x7f0000000080)) 02:51:43 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000200)) r1 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af21, &(0x7f0000000180)={0x0, r1}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x119000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000240)={0x4, 0x277b5e66, 0xfff, 'queue0\x00', 0x4}) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x6) close(r0) 02:51:43 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001d00)) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/dev/ashmem\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x48) 02:51:43 executing program 1: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0}, 0x20) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2000, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="391ad0d69c897ffaa78951e5a364870718386125b36b7b94d0f3c7cc17480eac20f0bd7abf1a2622f45906e909946ef0ed8a8c6409b7e73bd977cb31ed1186d890239e11e17ec819cb3cdd4c602c761437dddedc1211c71dbc", 0x59}, {&(0x7f00000001c0)="88ee9a6ab44f9c142fd60692c10b967d84e236", 0x13}, {&(0x7f0000000200)="7609afc607207b4383d542928e8c30a2a181035967e614ecd951e7df004dd865f1cc16ed8ba7a089810a3321d26d1e46a5ed9acf748c569ec64aed946b4212441e233abdfcba6d00bf03a8ce0af31bd9067781cadea7bc6315c9cc5c53f6bf62ffa6fb319801ee9e3225c9681fab5e9fc2237110020eb9a55311e717f92d10bbe6e964066204970c12c49bb002eea9bd060bf474ab628be30124df2440b32d56d0e5da63e655751351c4eeb88fd7f03f5e983fdcbf5664dd0f074b9cbbf8f4fc542a2dd12c62487ee48054f383bfd94c65c0b8a957b2f350bc2064835a67e115e5", 0xe1}, {&(0x7f0000000340)="802bb439ae4fcae0553f348b943e3f5f6c88c7c65bc721ddfc3a95d9d4e6808d3b8031cf5de5bee826ff0a6238c37b0418d7d2e8b1bbc5c162b5b3a65533290ebb9c81da26b97dbf289b20eb070b7bcdc363d0f9feeb9c9248b4", 0x5a}, {&(0x7f00000003c0)="9cf00cb88e3bddf97b80305ebf9e5fabadf26e5e35aa5fad4f69e504d362241e7157eff7ca97859973c220b36fd9d59f1c954409755ced7ca175070ce0acddcce666d8955ef282460c6416884572bbafdefb584b0a047f72d7b57e343c317f2fdb9af224c8e97dcafc52d0df833192b4ed470d46cae62b0c306b1a8b06966111e89cd347b14306ff95516deb79f7286914f6df4ed5f4", 0x96}, {&(0x7f0000000480)="af31dd4913f1c79c8665ff279d4dd9ced1d4dd9382b1ec8183115428b5051e51b351e76d7795b047aabbf43d7c8e9273102f8a1c2b53539301a6b030d937b9677a2cd8148a97c6427a6340f14e9d199ecc4b9af2d952b837b1f22786d85f2786e5f3d36078ffc81a1d42ea8015a90c87da37fcfd032353c672f6", 0x7a}, {&(0x7f0000000500)="d15b7e5eb6b34ea015695a73fa8ed9782e34f0e1f872347603a522cbbed60cb770d68152c26d8cd4caa2b60a21ebaafedef8b0c347752a2752cb67b6da64ebfdb8cd34a1cf589a8991dfea9bf812b90bc3831aa5bf72501637f7b1a5789ae12bff469659a5c69ee63139b01ee00e35681951d6988ac6e9a6598583f99ee100579717e7ad4b9bfb35de11cd1b59e3e6e10762b82ab120860619", 0x99}], 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x11e0}, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000300)='gre0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000300)='gre0\x00') getsockopt$inet6_buf(r1, 0x29, 0xca, &(0x7f0000000000)=""/177, &(0x7f00000000c0)=0xb1) 02:51:43 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = request_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='{vmnet0bdev\x03-wlan1+]wlan0cgroup{\x00', 0xfffffffffffffff9) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="b258aec684d41744a40986fcc345084b20499a3c5b00d4762bb733ac639c95a5ce647077e05c4f3edab7c5f012d07ef16b4d3d2efab91116b3a4c32440b93b5682297e17493adea47f48d2dd2cff0104bcff465bfd883de0e837eeb0fcd41a80b0834e0f5ae0acd29ff8c895639f9de69b5a0440e0c4c410c70742199a0646402a98c8087a3fd15693c6d7baac0d95019164240ab5a56762d7e8881e06167e52e0272309a853408c0f7aa6403db095900a15dfca69dd0a6ebe0d02d786744e9054a284063495e48cd7dacf9199b7645977b3b56e964edf4dfc624ed96f1e821c3f1234f98433e879dcdf87d65e3818f01a0d", 0xf2, r2) setsockopt$inet_mreqsrc(r0, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0x6) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@dstopts, 0x8) socket$inet6(0xa, 0x0, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) dup3(r0, r1, 0x0) [ 354.558248] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 02:51:43 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x70, 0x4, 0x5f, 0x3, 0x3f, 0x0, 0x3ff, 0x40, 0x1, 0x1, 0x3, 0xe82, 0xa, 0x1, 0x5, 0x7f, 0x4, 0x2, 0x3, 0xc4e, 0x5, 0x8000000000000000, 0x7ff, 0x4, 0x1, 0x6, 0x8, 0x2, 0x2, 0x42ec, 0x3, 0x2, 0x400, 0x6, 0x0, 0x1, 0x6, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x100, 0x0, 0x101, 0x6, 0x6, 0x8, 0x7}, 0xffffffffffffff9c, 0x2, 0xffffffffffffff9c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r1, 0x8004510b, &(0x7f0000a07fff)) 02:51:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xf9) unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x9, @empty, 0xe2}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x2, @loopback, 0x9}], 0x48) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000040)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 02:51:44 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) tkill(r0, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x800) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f00000001c0)={0x10, 0x40, &(0x7f00000000c0)="e82d585d0df45d9042072a719552ab71b5dd461dc24be726ff4cc2c1f132b54c7de6f931099e87cd987435731ea1396f2838623c43cdfc1d81cdb192c64473ddf28328ca5cffd387900c8f04c24c9cd5332becf12894fc756b1301af8327a6a6fb386f7e7217df273136ec9acebcd73b2abf1059ab73057684bd473cb6b74ff419a8005abb3e17daa1dc8a2ca494a797aea06578d9b8957c53ec4af257ac0c2ab05c6e8f1c00eb7dabc18680fc13d22ee6ecda42d3a0af5040634d2914760e4428e5d68d22817c85686a8826cbd07cba874ff965a3eaf28155f0", {0x8, 0x6, 0x7c3b5f5e, 0x7, 0xef, 0x6, 0xf, 0xffffffff}}) r2 = gettid() process_vm_writev(r2, &(0x7f0000000300)=[{&(0x7f0000000040)=""/64, 0x40}], 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)=""/217, 0xd9}], 0x1, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) [ 355.055741] IPVS: ftp: loaded support on port[0] = 21 02:51:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) epoll_wait(r1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], 0x6, 0x101) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000380)=0x1000000, 0x4) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0xa4) 02:51:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x2, r2, 0x9}) dup2(r0, r1) 02:51:45 executing program 0: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/threuaf-self/atcr/current\x00Y\t\x14\xcd\x7f\xe2t\x06\x8f\xdbuX6\xa4\xca\x9fH\x02n\xa5\xff\xd4\xd8\xff\x01!\xa9\xad\xa5\xf2V\x0f\xe6\xce1\x987d\xb3y\rc\x10$3\x92s\x16\x13\x80\xc66\xb2\xaf\x11\x173\xe3\xa5GQ9\x15w-1;3\xb5#\xfeQ\xb4\x16\x8a\xaf\x02\x16\xc9x\x01\xd1\x86\xf5\x0e\xfaE\xf2\xc0\xc3d\xddo\x81\xef\xc2#\x06s\xa1\xba;\xd97\x85\x1b\xfb\xe8|\x9f3\xc2@=\xf3\xfd\xc99\xbd\"\xcf\xa0^\xe4\xd8e\xa0\xdd\x04\x89:UAx(a\x90D\xa2\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) waitid(0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x2, 0x401, 0x0, 0x6, 0xb, 0x0, 0x1, 0x7}}) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid\x00') 02:51:45 executing program 0: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) unshare(0x28020400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000000)=0x55) 02:51:45 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) flock(r0, 0xb) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80000, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000380)={0x7f}, &(0x7f0000000400), 0x0) 02:51:45 executing program 0: r0 = socket(0x20, 0x20000000a, 0xffff) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x10000, 0x0, 0x0, 0x1ff}, 0x1c) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x400840, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000200)={0x1, [0xfffffffffffffffb]}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r2, 0x710, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xea}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) bind(r0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x320, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000804) write$binfmt_elf32(r0, 0x0, 0x1ba0d27f6d3efd7c) 02:51:46 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@getneigh={0x14}, 0x1d5}}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x10010, r0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005", 0x18}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f00000000c0)="95cac624e8ea52fc2fcd4e6e05b6e95992a86a047f1a256c2c3f9c84ec4c216113daff55650541973ece15e85d1ec5c22b02a2ee7e776c26a1e7a18c29f3", 0x3e) r3 = socket(0x4000000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x41, &(0x7f0000000100)}], 0x492492492492805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000280)) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000200), &(0x7f0000000240)=0x4) 02:51:46 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x8, 0x3f, 0x1, 0x8}, 0x8) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000100), 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) write$FUSE_ENTRY(r0, &(0x7f0000000340)={0x90, 0xffffffffffffffda, 0x3, {0x5, 0x0, 0xfff, 0x8, 0x2, 0x800, {0x2, 0x9, 0x9, 0x3, 0x9, 0x20, 0x3, 0x3, 0x9, 0x8000, 0x1, r1, r2, 0x800, 0xffff}}}, 0x90) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$FICLONE(r0, 0x40049409, r3) pwritev(r0, &(0x7f0000000680)=[{&(0x7f0000000440)="2a31c5654b8eaf9cb087de0300bf4151778e094e1c01faf8b6edd22a565dd648c23e76da50b2bba0c586df2977def48930efd249d5116e9713cfa4ec57d50de8bfe4710eaf2c99a782774e03d66c7a8ad1bdcba70f8bab7b3d955dfcd1fd1783881343ffad815ee9ae1a13e2fa0bcf1bcf46f7a56294611eda316633043c8271b3a40bc1978f349471ac79af39a3256de0edff158484ad02a323c531eaf1fefb27fd69306f85", 0xa6}, {&(0x7f0000000500)="774511a334dac35bcaf10a44f9def17f3eb79e8c0590906ae636fbb500ed4e619731ce13b24f841e0117ff5f8a85eb8edea7ee57656cdb4028893a244fb40ddb1f5e63f024fb5fd2ee3e11272d2028bad536cdd2791fb9469d7c5aaabb49e4a9cfa2ad0354ee5fe2eba5a845299b2f179932d9161cfe780c9fc16492ee0124467faf9b578949198b4bcb48081882c4832f5f23456ded6f4322793303fd7a28676458dd9ca76cb1a07251699dc8aa9b3ed0dcf6192109e9a04c38997b711c24cc053d672aa841b0dd2482d08a45ce97013a", 0xd1}, {&(0x7f0000000600)="1b43295e7e9c2ec1c07029e892ae99764ea1b4232480d57355b327b401b25df016a0c12a462c6a7893ed430e22f8423a1b355dd6ec8f17d8a1e9fdaf454d218f9783c0e124c3cf028e5dd8119a4b44dfee426665cd2e229ede", 0x59}], 0x3, 0x0) r4 = syz_open_dev$cec(&(0x7f00000006c0)='/dev/cec#\x00', 0x2, 0x2) kexec_load(0x6, 0x8, &(0x7f0000000b00)=[{&(0x7f0000000700), 0x0, 0x40, 0x3}, {&(0x7f0000000740)="004c43ef5a675d90d21fe6b69054da72562c619fa628462a09a3a160d8ade46fce338c55ffe44ab962b80f0a70fd31ac91f9df13ebd4ce9bbdf8f55229ec65d850f7ee0c20ac90c98010cc94deb99379f54c3009aa74a5809407354f41baf44fe3bb", 0x62, 0x0, 0x9}, {&(0x7f00000007c0)="221dd4dcb55a728177a99a549b7569d2129f2f93c400f104ef53ffd28245e6931ee064cf634ea5741930c871402f5884f88c7f056f84366098953330020dfd359e020588ca6aa0717ef6ee3bf5240f2bd96b1ec940529fbe711aeb", 0x5b, 0x1ff}, {&(0x7f0000000840)="06d8c9256463ad370a78cd4f816160f60a718ec5b1d272b7e26619cd74c59d391c336c331cd14b1f7709b7c0ca1cfb97120beadc96ff4e19249ecd063426074a245867d4ccfdd735ce0b79fe5cbdf1098d5f41", 0x53, 0xffffffffffffff6d, 0x5}, {&(0x7f00000008c0), 0x0, 0x80000001, 0x100000000}, {&(0x7f0000000900)="135d09c00cad022d484ac9c874f24ddf0eeaa2f1ad30f54fb4f0614b6f6ce95048f1002a505119f9105ca25238aa142f83890e1dc6937c7cf455f6ebf8b4d37e21380d2d429d9ab051c23a871c0e1a7d4fba9b08", 0x54, 0x4000000000000, 0x200}, {&(0x7f0000000980)="bb58c0e8516a1cacdb36d7d3e9fed1f8ada83b067af81eaad35341bdb69069ad1149dc3017d2497282037ce3f3ea758267cf8bd370488163708811d1a3078be6d58d95cab812439e2216831b8b46021b65f926b994c40ae41486c880489de5c70a1559416f4cf2dc0079d283a122c2", 0x6f, 0x9, 0x8}, {&(0x7f0000000a00)="e86fe8286a6229d6e9cf1a4f58ed9f2456d7bb81e0be50c7dd2d05ae53b3d9b046cbaf946d6068913f1f247e3d04657b5c0e806e954c535a5beaab4b150b634db53c9ebdc1d763c0492a26478dad0e13129672fba3ccb129c7dd7f2ad5de8daaf97a3cecc62dd0037aada1e6efca0c9fa74dbdf6062295c6861629123275292ec60d193aabd47fe4c3fd3c7351da46fb338e16276b01bffc12b4373525d1f9731a3dab85f61e5d08cb59db56ae791d55caeb580b2cdf17e35c7b60aa97496386f2cfe3c66dbb68fbed6c373faccf09e4a242991448bb3e59862149bd81c8d583ae194ebb4810", 0xe6, 0x3ff, 0xeb}], 0x3e0000) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, &(0x7f0000000c00)=""/222, &(0x7f0000000d00)=0xde) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000d40)=""/80) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e00)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x54, r5, 0x0, 0x2, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x4001) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000f80)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001080)='/dev/qat_adf_ctl\x00', 0x44880, 0x0) ioctl$SG_SCSI_RESET(r4, 0x2284, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/capi/capi20\x00', 0x40000, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001100)='/dev/nullb0\x00', 0x0, 0x0) r8 = syz_open_dev$media(&(0x7f0000001140)='/dev/media#\x00', 0x3, 0x80) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000001180)) openat$cgroup_ro(r7, &(0x7f00000011c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000001240)='fou\x00') sendmsg$FOU_CMD_ADD(r8, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x4004000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x64, r9, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x33}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x89}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000040}, 0x800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001440)={0x0, 0x88, &(0x7f0000001380)=[@in6={0xa, 0x4e22, 0xa8, @dev={0xfe, 0x80, [], 0x27}, 0x1}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @rand_addr=0x4}, @in6={0xa, 0x4e23, 0x1, @local, 0x7fff}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000001480)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000014c0)={r10, @in6={{0xa, 0x4e23, 0x8001, @empty}}}, 0x84) 02:51:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) write(r3, &(0x7f00000003c0)="186e315c16fb81697908a58e8a62ba33ccfcdca512945f58cc7f7d806b8b1eee6bc3e84efd29bed1c8da19d672ad03750fd963133063d81a697f3208063ded3dff37e24d29d3f5b3d1cc4860f9734ae65e3c54b531d01200fd8c04e02f2306f822d149ab91c4280da4f4591010f9c2930a9de942b757a73cd9bd4d7581a48db071a12a71389ebe2e", 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xee, "b622a7909ea45a6b5dc27648733e97086f902329d58915852e0d541bcde468fa4b1ffc8904bbf06c1402dfa86fdad59abcfcd645ddbc3bba32488c8c6cf7c2b1467dd1c091032426fc6974512ada158a8a887ec759e6db50a281ea0be2eb7dec043f88342e504dc16f3994151b119ce5438127f1e75da3feb838d10c599c87db0ff3dc54120b20192fcf1621f4e191b5a2ba0fde4fa9f99be810f2a8d07e6fbdb11609c71334ee6bbcf4723c76c85515e4e61d5b8586ad1be3eece500946664316e789f1348e13b16ba3cc5524b1931d90b26cc3af3faf852f97e50e57d4149330c3a1d0b51b12e6371d0cdec64b"}, &(0x7f0000000100)=0xf6) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000180)={0x1, 0x8004, 0x2, 0x8, 0x0}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000280)={r6, 0x80000000, 0x20, 0x7fff, 0x3, 0x1000, 0xad, 0x0, {r7, @in6={{0xa, 0x4e22, 0x9a, @ipv4={[], [], @remote}, 0x2}}, 0x4, 0x74, 0x1e9400, 0x8}}, &(0x7f0000000200)=0xb0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 02:51:46 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='veth0_to_bond\x00'}) bind$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) r1 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x5d, 0x4001) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000340)={0x4, 0x4, 0x6c85, 0x9, 0x0}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000480)=0x84) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/176, &(0x7f00000001c0)=0xb0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x3, 0x0, 0xffffffffffffffb1) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000080)=0x9dd) 02:51:47 executing program 0: modify_ldt$write2(0x11, &(0x7f0000000000)={0x400, 0x0, 0x7400, 0xdc00000000000000, 0x7fffffff, 0x0, 0x2, 0x8, 0x4, 0xd54b}, 0x10) socketpair$unix(0x1, 0x200000002, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8000, 0x10001) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x89, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)='veth0_to_bridge\x00', 0x4, 0x4, 0xfffffffffffff001}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'eql\x00', 0x2001}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) [ 358.142975] IPVS: ftp: loaded support on port[0] = 21 [ 358.394179] chnl_net:caif_netlink_parms(): no params data found [ 358.475105] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.482055] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.490726] device bridge_slave_0 entered promiscuous mode 02:51:47 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00') r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)=@random={'osx.', 'IPVS\x00'}) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRES64=r3, @ANYBLOB="7b5dd7d5435506e8256a13804890f9d491339fe97d4552a3dd6f873bb3a21594ea9c9fdf73e3530a0296535d210804e15712138823101a357af36ab0b7b689b32b04a091636f3d0d612a0088393da9634db1e7c97f3fe8c502f628623f7ecec85636bc6db404305b44221115484c53bf872972e95e5e3ea0b42aad49f61ae13dd4a504f2d26c8997aff8c3dbc271314652c373dd5baeffe39a6d7d293325879499c9e70f10bf6a34514636e35952899c84c13e47aed2dda98986597bcee35232d5f21f16b5a1d0f8d3dd8785b8a0dcd4340780c8224e1448721e2cf3df1f3592acb87c1e0170284d265017cc45bdfdf6", @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r1, @ANYRES16]], 0x3}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) ioctl(r0, 0x8912, &(0x7f0000000180)="07006234488dd25d766070") r4 = epoll_create1(0x0) fcntl$lock(r4, 0x6, &(0x7f0000000080)={0x2, 0x0, 0x7fffffffffffffff, 0x3ff}) 02:51:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0xffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @loopback}, @in6=@mcast1}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008240)={0x0, @loopback, @loopback}, &(0x7f0000008280)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000008380)={@loopback, @multicast2, 0x0}, &(0x7f00000083c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000008400)={'sit0\x00', r1}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0ffffffffffff}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}}, 0x0) [ 358.523089] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.529691] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.538749] device bridge_slave_1 entered promiscuous mode [ 358.655349] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 358.668030] bond0: Enslaving bond_slave_1 as an active interface with an up link 02:51:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x6a8bdbee74d45d91) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_NMI(r2, 0xae9a) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x2}, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff4d, 0x40, 0x0, 0xfffffffffffffdff) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 358.716134] team0: Port device team_slave_0 added [ 358.755942] team0: Port device team_slave_1 added 02:51:47 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000002c0)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0x0, @my=0x0}, 0x10, 0x80000) fsetxattr$security_selinux(r2, &(0x7f0000000380)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:cron_spool_t:s0\x00', 0x14, 0x4) keyctl$dh_compute(0x17, &(0x7f0000000100)={r1, r0, r1}, &(0x7f0000000080)=""/107, 0x6b, &(0x7f0000000280)={&(0x7f0000000580)={'rmd128-generic\x00'}, &(0x7f0000000240)}) [ 358.907108] device hsr_slave_0 entered promiscuous mode [ 358.942902] device hsr_slave_1 entered promiscuous mode 02:51:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8) r2 = geteuid() fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000003c0)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usb(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x200000) write$rfkill(r4, &(0x7f0000000440)={0x1ff, 0x8, 0x0, 0x0, 0x1}, 0x8) r5 = getegid() write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'veth1_to_bridge\x00'}, {0x20, 'physdev\x00'}, {0x20, '\x00'}, {0x20, 'pkttype\x00'}, {0x20, 'owner\x00'}, {0x20, 'veth0_to_bridge\x00'}, {0x20, 'vboxnet1'}, {0x20, 'ip6gre0\x00'}, {0x20, 'NFLOG\x00'}, {0x20, 'yam0\x00'}], 0xa, "420eec2384fef95fb546e805cdf68b94ccd1f50c3dc7629b1301f753d1e03bc641eab83ac7fbb73561d4da2be2f650c80a77e024b027f9136f6985aa8c658dcefb0cacca3e59e4fb0aa57c40506e3701617c109c6b345f535678d2eaff9100a672c34a9fd372b697e10bd4da3e7cd0df7cf692a2254c01acfdfef9a30566ee7de4df3450a286e62b1e2f842f7b85237779cf2a0f204574519bf12a001191e0cf61194a7337a65dafa6d1c165bada22a0593aaca820af3b98acee82a13a3854e2b9692a91"}, 0x12b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x25, 0x2, 0x400, [0x200005c0, 0x0, 0x20000960, 0x0, 0x0, 0x20000990], 0x0, 0x0, &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{{{0x1d, 0x9, 0x6, 'ip6gretap0\x00', 'ip6gre0\x00', 'veth0_to_bridge\x00', 'tunl0\x00', @dev={[], 0x27}, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0xff], 0x148, 0x198, 0x1c8, [@owner={'owner\x00', 0x18, {{r1, r2, r3, r5, 0x6, 0x4}}}, @physdev={'physdev\x00', 0x70, {{'veth1_to_bridge\x00', {0xff}, 'vcan0\x00', {0xff}, 0xc, 0x1b}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7fffffff, 'syz1\x00', 0x4}}}]}, @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}, {{{0x1f, 0x4, 0x88b5, 'yam0\x00', 'team_slave_1\x00', 'gre0\x00', 'bond0\x00', @empty, [0xff, 0x0, 0xff], @dev={[], 0x18}, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0xe8, 0x160, 0x1a8, [@pkttype={'pkttype\x00', 0x8, {{0x3, 0x1}}}, @limit={'limit\x00', 0x20, {{0x9, 0x1, 0xe9f, 0x1, 0x2, 0x659}}}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x6, 0x9, 0xce, 0x0, 0x0, "c6ee6aa2f35313a2e8427dfe3e24c8434453bc15140fa294f64d2f206dfdc6d0d7fa2bc01a118f881c1d126e1bee6217a088c2e9a1560bd78b3525a4945e996c"}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"df5316ba712dcab07947bbe9c14d8b4bd33a796c71132eef5868618c0816"}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2}]}, 0x478) socket$inet_tcp(0x2, 0x1, 0x0) 02:51:48 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f0000000180)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'md5\x00'}}}]}, 0xffffffffffffffcf}}, 0x0) [ 359.073098] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.079723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.087155] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.093839] bridge0: port 1(bridge_slave_0) entered forwarding state 02:51:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) statx(r0, &(0x7f0000000540)='\x00', 0x5000, 0x0, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000000)={0x7, 0x1cf, 0x9, 'queue1\x00'}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00000000c0)={0x7fffffff, 0x301e, 0xfff, 0x3, 0x10, 0x8}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000100)={0x8, 0x1, 0x3}) 02:51:48 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000080)={0x8, @raw_data="a4520ae056b2506c6f8af7dd331c2b0511785844ea89ae7db592eea4926992f6d34ea87e36e6bfe99d212e5fc9df58dc53e5b9b1312fdae265390008bd79158924166d3ad6fdec4709d365f88d6606a00b567d74868d1725d6420f42884204eb3d976b6a49fd757d68b8975068639c8054dbfcbf444579bb1c91267ad9442211d1155250b6e1198cd775d0d124f0eebeb622f97abfe47a4ea7e37bea4bfd4f57e05505a6f120c2d5fe7249a3fe38c0946642f0bbf0223b8ecc4f992d9b48970bcafc5ec969d07927"}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000180)={0x9, 0x5, 0x9, 'queue1\x00', 0x1ff}) [ 359.320049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.366977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 359.404822] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.433938] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.466932] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 359.494654] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.524026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 359.533697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 359.542173] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.548730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.612223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 359.621015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 359.629472] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.636128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.645371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 359.654769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 359.664352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 359.673519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.682530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.691778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.700835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.709437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.717966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 359.726653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.738146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 359.746344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.806765] 8021q: adding VLAN 0 to HW filter on device batadv0 02:51:49 executing program 2: unshare(0x20400) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) connect$packet(r3, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x5, 0x6, @dev={[], 0x1d}}, 0x14) 02:51:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) statx(r0, &(0x7f0000000540)='\x00', 0x5000, 0x0, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000000)={0x7, 0x1cf, 0x9, 'queue1\x00'}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00000000c0)={0x7fffffff, 0x301e, 0xfff, 0x3, 0x10, 0x8}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000100)={0x8, 0x1, 0x3}) 02:51:49 executing program 0: r0 = socket$inet(0x10, 0x7, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x400) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f00000000c0)={0x8, 0x3, 0x8}) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007041dfffd946f610500070000001f00000000000400060005000067ff7e", 0x24}], 0x1}, 0x0) 02:51:49 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000240), &(0x7f0000000280)=0x40) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x53200}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="dc1b5400", @ANYRES16=r1, @ANYBLOB="00032abd7000fbdbdf250100000008000400ffffffff0c000200080005004906000008000600050000004c000300080003000300000008000800ff000000140002006970365f76746930000000000000000008000100000000001400060091800c8b124b25019215f851a5edf74c08000300030000000800040000000100080005000300000050000200080004000200000008000700ff010000080002004e210000080007000100000014000100ffffffff00000000000000000000000008000700010000000800060008000000080005001f000000"], 0xdc}}, 0x4000000) 02:51:49 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x2000000000005, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x80000) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0585611, &(0x7f0000000180)={0x1, 0x9, "2a8f5865af49c7250671f832f1ce9782bf915349fd6618fbaf11b15f24f44d12", 0x0, 0x0, 0x0, 0x70effc, 0x100000001, 0x0, 0x0, 0x1000000000, [0xfffffffffffffffe, 0x0, 0x1000000000000000]}) [ 360.182766] protocol 88fb is buggy, dev hsr_slave_0 [ 360.188663] protocol 88fb is buggy, dev hsr_slave_1 02:51:49 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000080)="ea082bb504cf374d", 0x8}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000580)=""/246) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x80) ioctl$EVIOCGREP(r1, 0x4010744d, &(0x7f0000001000)=""/174) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 02:51:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000), 0xc, &(0x7f00008a7000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000001040101ff20070401000000000000000c000300000000007f4fc5010c0004000000000080000000"], 0x2c}}, 0x0) 02:51:49 executing program 1: r0 = socket$inet(0x2, 0x2, 0x800000000000004) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x8) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7ff, 0x448700) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x6) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000001140)={0x0, 0x133}, &(0x7f0000001180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000011c0)={r2, 0x1}, 0x8) creat(&(0x7f0000000040)='./file0\x00', 0x0) getcwd(&(0x7f0000000100)=""/4096, 0x1000) openat$vsock(0xffffffffffffff9c, &(0x7f0000001100)='/dev/vsock\x00', 0x0, 0x0) 02:51:49 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) sendto$packet(r1, &(0x7f0000000040)='R', 0x1, 0x3ffffff, 0x0, 0x0) [ 360.570160] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 360.660081] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 360.668041] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 02:51:49 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x20000000101) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='ext2\x00', 0x0, 0x0) [ 360.720526] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 360.743142] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 360.750740] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 02:51:49 executing program 1: socket$netlink(0x10, 0x3, 0x0) 02:51:50 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl(r0, 0x9, &(0x7f00000001c0)="17711631e2eae3866619cc4dd92cc3ad19f9f421af281dc735595b0d7dfbc52b6af8dc414b3b7e4ed7fbdc5107d5d29459a995c46c3dc4016b757c849ddc6678d17e6e15d0b37a63b59fb0611b9b94a6306beaf3c560766257ba6fda4891533a6f4ac5f96cb150da8d74adb9936e29085a6a3e221a066b040fb4a2ec7d3da5ac5c8beb93c3b23dd8f13c2b63c2356980874fc400a4869614f29cb91a5b235942f5fb3577ad4db2beb7169173e60d37d9b3a405ab42") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x6, &(0x7f0000000000)="1d0000") r2 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="fe3300ab508136cd1a3a96c5363cfb09b89eb6f5a7d48a"], 0x1}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000280)=""/172, &(0x7f0000000340)=0xac) 02:51:50 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x440000) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x4, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8081) socketpair(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") recvmsg$kcm(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f0000003b40)=""/245, 0xf5}], 0x1, &(0x7f0000004280)=""/202, 0xca}, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x0, 0x30, 0x5}, &(0x7f0000000280)=0x18) socket(0x2, 0x800, 0xffffffffffff7fff) truncate(&(0x7f0000000440)='./file0\x00', 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000002c0)={r5, 0x6f, "697f76892c645ac90517011fa1871c5b26378b3e0f70e81c6887318858ccbd7ac0189921e6e43929ae9c1f2aebc724e7f5c6679417482a1e30377bc18fd5256afe12fd8f7f337ab9d5530db73dbff623abc7294ed60e98f6e1a7c9f9cd3cbd197d64643e20dc0c44c98d8fcb7f5e9a"}, &(0x7f0000000340)=0x77) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000200)={0x4, 0x7fff, 0x24, 0x1, 0x8}) close(r2) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000003c0)=""/74) 02:51:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="e012a616d95287cab2caa9eb6ab3aa9de0a129eb09c7ccbc2029d9b6b55e37f51670696f93afb382345078d0421306658c5d5d93e71dba5a3cabbcbee2b1f8b81f21e6113f47d26f12", 0x49, 0xfffffffffffffff8) keyctl$get_keyring_id(0x0, r3, 0x3ff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:51:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00\x00\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='mem\x00\x01y7swaS\x81cur\x89\xc9\x02\xab\xe3\xfarent\x00\x1aw\xb7\xc3B\xef\xf0\xd5\xf34|\x98.\x85,Y\xab[[\xf1\x83\xdf\xc6\xf3\xb5\xab\xbb\xa6y\xe7\xff\x87o\xb2\xfe\xd0\x9d\x9a\x89\xfe\xc4\x1d\x92|z\xbc\nl%\x97,#\xab3aEW\x18A3@\x94\x05%', 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0xff, 0x3, 0x2}) 02:51:50 executing program 2: unshare(0x8000400) truncate(&(0x7f0000000000)='./file0\x00', 0x8000) fsync(0xffffffffffffffff) 02:51:50 executing program 0: unshare(0x20400) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0) ioctl$PPPOEIOCDFWD(r0, 0x80045104, 0x70e000) socket$bt_bnep(0x1f, 0x3, 0x4) 02:51:50 executing program 2: r0 = open(&(0x7f0000000280)='./bus\x00', 0x81, 0x0) close(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r5, 0x120, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) write(r4, &(0x7f00000004c0)="2f870eed6cd70034c104ad27984f785e406d15bae577c704132524bf74d036105d3b4b4100000073b307af20b49c26a28f15d72b631cfc91c66ac992fd2e41da7438873677acf21b32f047fea69547999c8de21852b3666692f9df071b88ce233630f45e1aa1427aff656a40f72b86724c67e50b31bec86c565b38f53ab19d1bdc4d9cb957e22bdb4c59186483d109bf3d2455ea834f", 0xfffffffffffffe26) read(r4, &(0x7f0000000580)=""/250, 0x101ba) sendfile(r1, r2, 0x0, 0x400000080003) 02:51:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x101840, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8202, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r5, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000280)=[{r4, 0x210}], 0x1, 0x100000001) ioctl(r0, 0x6, &(0x7f0000000640)="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") ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) socket$vsock_dgram(0x28, 0x2, 0x0) io_submit(r5, 0x2000000000000002, &(0x7f0000000600)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f0000000140), 0x700000000000}]) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000002c0)={0xa, 0x8, 0x0, 0x3}, 0xa) r6 = creat(&(0x7f0000000040)='./file0\x00', 0xc) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000080)=""/109) 02:51:51 executing program 1: r0 = getpid() r1 = syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x1, 0x2, 0x9, 0xfffffffffffffff8, r0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@local, 0x5c, r3}) r4 = dup2(r1, r1) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000040)={0x800000000200005, 0x2f, 0x40, 0x100000000000007}, 0x2) [ 361.909737] QAT: Invalid ioctl 02:51:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000080)={0x76, 0x0, [0x200000489]}) [ 361.947492] QAT: Invalid ioctl 02:51:51 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000080)={0x31d, 0x8, 0x400}, 0xc) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000000)={0x2, 0x2a, "1d548aac7e3d1a47fd3ad128de3c8ae2de42eb783d929785b06e57ed146f5fb8f62b604fea1f2725bb61"}) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000040)="441f080300000000c94ee06491ee54be0e1c20749727c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r1, 0x0, 0x400000000000004, &(0x7f0000002000)=""/4096, &(0x7f00000000c0)=0x1000) 02:51:51 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) write$input_event(r1, &(0x7f00000000c0), 0x45c) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xfffffffffffffffc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xa5, "b763d5239c43643a646f0dd77998d2e5c1a62f213902bc8512626f36ff0192b51c89b9b367723a9eef0e4304bf768cc2e314545724dfe5fa8f41ae72d801b11537d804b8c7d2cb4a40cee88fa6a110ea6bd0e81a5dc7a8f226314c243c455c4bc20c8ae9041f9e02050eae7ab336513447463950bb2fe72ef683816ccca120e74ca0c745b32d5e51d95430fd98ff77ff596c4c2b4194b2db6c7f7d0536857ae5b34c875bc8"}, &(0x7f0000000040)=0xad) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x6, 0x1, 0x80000001, 0x80, r3}, 0x10) r4 = getpid() ptrace$peekuser(0x3, r4, 0xffffffff) 02:51:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000001c0)={0x80000010}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x4, 0x80007, 0x8bc3) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000240)=0x1, 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r5 = semget$private(0x0, 0x0, 0x40) semctl$SEM_INFO(r5, 0x3, 0x13, &(0x7f0000000140)=""/92) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000"], 0x0, 0x0, 0x0}) 02:51:51 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x80002, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000780)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="1900"]) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x40000103) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x10000000000001}}, 0x30) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1, 0x83) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10) inotify_rm_watch(r2, r3) 02:51:51 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") write$binfmt_elf32(r1, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xe4e, 0x2, 0x1, 0x2, 0x3, 0x3, 0x8, 0x1dd, 0x38, 0x1ba, 0x6, 0x7, 0x20, 0x2, 0x8, 0x3f}, [{0x60000003, 0x100000000, 0x101, 0x2, 0x3, 0xff, 0x1, 0x5}], "e4656208b8895ae9aa4178c6cf4c24d9450fa3df4e3374e84503ad8681fbf690c1b1c7becb2f5e74f94503cff39036f4fbbf18230aaffc41a75ac47c4534caee4da36c2f526c8cb8f6ab66e64ecb028265240b45175ef9b1170c2478b1225a9cc11ea70f6b084b341490f63882ab641f1ac1", [[], [], []]}, 0x3ca) fsetxattr(r1, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000080)='cgroupsecurity-keyring#mime_type}mime_typeself^$\'.cpuset:}\x00', 0x3b, 0x3) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x2, 0x0) splice(r3, 0x0, r2, 0x0, 0xced1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 362.456275] binder_alloc: 10971: binder_alloc_buf size 4629809268588019712 failed, no address space [ 362.466120] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 362.475290] binder: 10971:10975 transaction failed 29201/-28, size 0-0 line 3035 02:51:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="420f3566baf80cb82c08768fef66bafc0cb000ee400f01f80f20d835200000000f22d8c422c5907483002626420f01ca460f20c566b888008ec8660f3808d2b9800000c00f3235000400000f30", 0x4d}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x8}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:51:51 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x5fc, 0x181801) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000080)="b5", 0x1}], 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 362.664327] binder: undelivered TRANSACTION_ERROR: 29201 02:51:52 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x8400, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000240)={0xb2, "e9044be525fbbc8028e6b9812fe7e5c8f36127cf2398e008f1698ddeeaf24047", 0x7, 0x4, 0x7, 0x9, 0x2, 0x2, 0x800, 0x9}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x302000, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x3, 0xf, 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r2}}, 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') sendfile(r4, r4, &(0x7f00000000c0)=0x4d, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast1}, r2}}, 0x48) 02:51:52 executing program 0: mknod(&(0x7f0000000040)='./file1\x00', 0x8280, 0x7) lsetxattr(&(0x7f0000fc0000)='./file1\x00', &(0x7f00000000c0)=@random={'security.', '\x00'}, &(0x7f0000000000)='//selinux\x00\x00\x01\x01', 0x5, 0x1) 02:51:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'e \x00\b\x00', 0x4}, 0x18) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl(r1, 0x8936, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="57000000cea15f106df89d03c771c2f3ec0ff3520a73f4ca5ec0d2c8b9cf4c0ca426c16e6e1b4327d5c8a6bd83255443a0fb872ac61e411a2076a37004813910ae1eaf639d46f610b095d7c485b6170a684d9875dc1dc12e612badd3d584748c40144bd53fc5f2686b8779d1470f00000000000000f137be152f5e5c39fb24b4c3425bf3d2fa88756093a8bc54ca6ca14b0f75e946f1213490a393"], &(0x7f0000000140)=0x5f) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e22, 0x1, @mcast2, 0x8}}}, 0x84) 02:51:52 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x240801, 0x100) r1 = accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000000000, 0x40031, r1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ipddp0\x00', 0x233) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x28, 0x6, &(0x7f0000581000)={{{@in, @in6=@mcast2}}}, &(0x7f0000000000)=0xe8) 02:51:52 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80202, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000003c0)={0xfffffe86, &(0x7f00000002c0)="163d3a0d9e33c8356cd64292b0e71e11b5e5f5e5ac2da2028b067d554635d6455fbc9ac3545fcd789b55d5660801581262dec0352ce898e66f4b501dd22df2bf1daff6ff3bc8febae3ebbc88a69cf0db960700b39567ce4978df7f7349e63b95d1db2fd3016b7225f9f5d6f38c41dab60a8379fdc17281e7aa91e255cd9d9913ed89d88880bb273b09a7ae35ca5a51424fa53ea6dd0ada778a4a788966c8dc3cdbda310e227044c6f309f4e95810b4ebed9fc1c177d97b533430016e4234b724dd64b5543539868654fb375fa67372e6b88501c4f8e21dd90854c4d76da84b13"}) r1 = timerfd_create(0x7, 0x0) unshare(0x800) dup(r1) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x40085400, &(0x7f0000000000)={0x20000000000001, 0x6, 0xfffffffffffffffc, 0x5f6d, 0xfff}) 02:51:52 executing program 0: r0 = socket(0x40100000015, 0x805, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x10000, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) getsockopt(r0, 0x114, 0x2711, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0x31e8) 02:51:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20000000002000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000000c0)={0x0, 0x0, 0x2080}) 02:51:52 executing program 0: unshare(0x2000400) r0 = dup(0xffffffffffffffff) getsockopt$inet_dccp_int(r0, 0x21, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af13, &(0x7f0000000140)={0x0, 0x2000000}) 02:51:52 executing program 2: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x6, 0x4, 0x5, 0xfffffffffffff5d8, 0x6, 0x10001, 0x8, {0x0, @in6={{0xa, 0x4e20, 0x1, @local, 0x9}}, 0xfff, 0x7fff, 0x7fff, 0x9}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x9}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000300)={r1, 0x2, 0x2, 0x6, 0x9, 0x2, 0x9, 0x401, {r2, @in6={{0xa, 0x4e23, 0x7, @loopback, 0x3f}}, 0x7, 0xee03, 0x1, 0xfffffffffffff2fa, 0xffffffff7fffffff}}, &(0x7f00000003c0)=0xb0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000140)=0x7, 0x4) r3 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x10, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=[{}, {}, {}]}, 0x108) [ 363.958347] kernel msg: ebtables bug: please report to author: bad policy [ 363.982530] kernel msg: ebtables bug: please report to author: bad policy 02:51:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 02:51:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000090c000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c3812000c00010069706870000000000c0002000800090000001000"], 0x3c}}, 0x0) 02:51:54 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/stat\x00') ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000000c0)) 02:51:54 executing program 3: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) prlimit64(r0, 0xc, &(0x7f0000000080)={0x2e, 0x3}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000001100)={0x1000, &(0x7f0000000100)=""/4096}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000001140)={0xff, 0x2, 0xffff, 'queue0\x00', 0x8}) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000001200), &(0x7f0000001240)=0x4) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000012c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x60, r2, 0x108, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x32}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x2e}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000041}, 0x1) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000001400)) r3 = dup2(r1, r1) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001440)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000001480), &(0x7f00000014c0)) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000001500)={{0x2, 0x63, @multicast1}, {0x0, @remote}, 0x2, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth1\x00'}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000015c0)={'bpq0\x00', &(0x7f0000001580)=@ethtool_rxfh={0x47, 0xffffffffffffffe0, 0x7, 0x0, 0x7, "b4c60f", 0xd14b4fd, [0xff, 0x4, 0x10000, 0x2, 0x1]}}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000001600)={0x9, 0x0, 0x1, 0x5}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000001640)={r4, 0x6}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000001680)={r4, 0x1}) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00000016c0)=""/8, &(0x7f0000001700)=0x8) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000001740)) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000001780)={r4, 0x81}) syz_open_dev$sndseq(&(0x7f00000017c0)='/dev/snd/seq\x00', 0x0, 0x8000) getpeername$inet6(r1, &(0x7f0000001800)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001840)=0x1c) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000001880)=0x4) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f00000018c0)=0x4, 0x4) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000001900)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000001940)=0x2, 0x4) syz_open_dev$sndseq(&(0x7f0000001980)='/dev/snd/seq\x00', 0x0, 0x20901) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000001a40)={0x0, 0x7f, 0x20}, &(0x7f0000001a80)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001ac0)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x9, 0x7fffffff, 0x3, 0x81}, &(0x7f0000001b80)=0x98) [ 365.635409] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 02:51:54 executing program 0: r0 = socket$unix(0x1, 0x4000000002, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_flags}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x7c84, 0x30314247, 0x3, @discrete={0x9, 0x1ff}}) clock_gettime(0x0, &(0x7f0000003c80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003b00)=[{{&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/141, 0x8d}, {&(0x7f0000000200)=""/209, 0xd1}, {&(0x7f0000000300)=""/36, 0x24}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000440)=""/224, 0xe0}], 0x5, &(0x7f00000005c0)=""/93, 0x5d}, 0x6}, {{&(0x7f0000000640)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000006c0)=""/15, 0xf}, {&(0x7f0000000700)=""/178, 0xb2}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/251, 0xfb}, {&(0x7f0000000900)=""/236, 0xec}, {&(0x7f0000000a00)=""/204, 0xcc}, {&(0x7f0000000b00)=""/135, 0x87}, {&(0x7f0000000bc0)=""/62, 0x3e}], 0x8, &(0x7f0000000c80)=""/4096, 0x1000}, 0xfff}, {{&(0x7f0000001c80)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/207, 0xcf}, {&(0x7f0000002e00)=""/154, 0x9a}, {&(0x7f0000002ec0)=""/65, 0x41}, {&(0x7f0000002f40)=""/26, 0x1a}, {&(0x7f0000002f80)=""/61, 0x3d}, {&(0x7f0000002fc0)=""/204, 0xcc}, {&(0x7f00000030c0)=""/246, 0xf6}], 0x8, &(0x7f0000003240)=""/216, 0xd8}, 0x20}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003340)=""/247, 0xf7}, {&(0x7f0000003440)=""/11, 0xb}], 0x2, &(0x7f00000034c0)=""/160, 0xa0}, 0x9}, {{&(0x7f0000003580)=@un=@abs, 0x80, &(0x7f00000037c0)=[{&(0x7f0000003600)=""/127, 0x7f}, {&(0x7f0000003680)=""/70, 0x46}, {&(0x7f0000003700)=""/151, 0x97}], 0x3, &(0x7f0000003800)=""/196, 0xc4}, 0x8}, {{&(0x7f0000003900)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003980)=""/55, 0x37}], 0x1, &(0x7f0000003a00)=""/211, 0xd3}, 0x2}], 0x6, 0x12021, &(0x7f0000003cc0)={r2, r3+30000000}) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000007c0)) 02:51:54 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f00000000c0)="153f6234418dd25d769470") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000007c0)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8d\x1a{\xb0\x00'}, 0x3, 0x102, 0x7f, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000780), 0x0, [], [0x8000000000000000]}) 02:51:55 executing program 1: r0 = socket(0x40000000015, 0x805, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x80101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000040)=""/193) getsockopt(r0, 0x114, 0x271c, 0x0, &(0x7f000033bffc)) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000180)=0x3, 0x4) 02:51:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x84, @multicast1, 0x0, 0x1102, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0x0, 0x2, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x1f, 0x80000001, 0xfe, &(0x7f0000000180)="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"}) setsockopt$inet6_int(r1, 0x29, 0x4f, &(0x7f0000000080)=0x100000001, 0x4) 02:51:55 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="eb280a1a75511eb82753cf3edb473d6a", 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x6287}, 0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 02:51:55 executing program 1: pipe2(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000001980)={0x8, 0x7, 0x9, 0x5b, '\x00', 0x4b7af3f0}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x9) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="07314eb4bcb7331ca790998beecd339efb7001df65b9a7c09ebe5283ca55316f4c1300eea05227f78f489a3db8636a10cd41b82d877a70dbb8440c95683fb9c35b3973193bbffa11c1db3d8c641879b12f929b13a938a09275c982ce10", 0x5d, 0xfffffffffffffffe) eventfd(0x7) keyctl$set_timeout(0xf, r3, 0x4) r4 = getuid() fcntl$getownex(r2, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r6 = gettid() sendmsg$nl_netfilter(r2, &(0x7f0000001900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f00000018c0)={&(0x7f0000000200)={0x16b0, 0x2, 0x5, 0x502, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x7}, [@generic="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", @nested={0x18c, 0x12, [@generic="7a1662908e2052b4a5948c97c66dfb8edbcc0255e192891778375ffba763b15fc2df748a98b4eff128fe64464388a144", @typed={0x14, 0x61, @ipv6=@empty}, @generic="c553be35d4b5b310d1716e309d037f6ef41bab5baf0cbf5beb828c904e", @generic="d03d8c891c51f02d28b524f6359566a5e647346e580b45c681eb114a5d94cec1d9fd6912f4c3e347c9f787a6e1a25bcf452cae725d6967e1b4f8540249c75e32c3bc30b6d7d4193b1d56b2fe987ccc9c76f91dfd1f3eb4d81c1df3296a9111841cccd36c51e1445d89303a8ca39af64b32ffcab1a5786640", @typed={0xac, 0xe, @binary="99800dfc8ce99a02fa83705931cc0682d3bd8eb429f0544e576d69310d6ed99b0e1b9ef8511324932865e86edb2d77a64b28512ea0905f22bc8261661bf511f647330ab75cc4ea66da87483d7949ae215553a96467500671c0d920df238ff1b0cb19a04758e9289aa8a0d188a42e2879e80601de398d44e79132e1b743dfa9d8c0d72d1dd8926250c50c5257aaea455a9fd835cde75de2777d43c2eeb1e30883feaac98b8c1c"}]}, @nested={0x74, 0x1, [@generic="ea28de36e6739e736bf7f9d014686a31cca2f518a263a3a05fe2dfd16012a31fc8850569155b09b5467e843ec9", @generic="d0494051820260d5aec9bb2039e31da6d4dbbee546ac2f55b50cd2e234835dad2a630bb4226051d6297074f8bb42458486e8de2784b188f98e01b91c05724a6434e0"]}, @nested={0x228, 0x32, [@typed={0x8, 0x10, @u32=0x727}, @generic="bbceaf1bb0fd40edd5f5026769dca7b2dd802bde4448c84c45fcf2931a2540c81c70c84ed465057390c7347303ce7ffb0362440bce0ee02141802e7de416d4a83fdc78942231ed33d87329f94eb3d1bb76da16b8c0a7ef0a99afc1b4b6090aac24ce2970eabcd886e1dcc4864a8ff6169e1e604d4a0ae42758f968bc51efb5d4d22b02a0dcee0858e1ce106f7668c42f13c5e1d862500424f034efb15958a29e9f2d3b19763291cb8000eadbe529251114789adb8e07d36d14ab3343987cf9364d2f9b98be", @generic="34d5365768a1276031cf0b94caed691bb45320f0cfa6bb7873fc5c5a011a44db6387910bcd5693ff8f47837395ef9f33f3e0be75d517d99d23b6a30753", @generic="f95f5eeb5f7a86f58f6d742781f0912681d7074c53e9d64d4c5d8d286a2de3ca46c96d4bc5e72bc39cd9fe7c77c4ba53cafd30658172a81a0a1e003c5de133734aa6689d58118e7af4672da635b29110ef5bd48f1544c5c702a9e4cd15849255e520f8fe2dffb72c0277788dd83ac24a46bafca4aada81a6e2b8bfa7a534327fcff8cbf16080172fbcd82de0d96933efe914b0c8b256119defebf3ffb1f5b354e9fc86465c439dfc", @typed={0x8, 0x2c, @uid=r4}, @generic="be412668abd76b9ec2fc05331990ef", @generic="7acea57a4db09fcd2f277c0a9192fe7200ac6c510dbb133500c130b95f983b8161c317764e90a905164997369c425f91c4c517f20008a2aa7a960ffbf744f89261ed992048fdae6b31cd94fde4a2bad07fdca451e2fdab47"]}, @typed={0x8, 0x8a, @u32=0xd4}, @typed={0x74, 0x70, @binary="a7aec2c32253c3f36c302e17ccd5a0062e9a0f97f14ed74949a382dea475a06705f1c23e6cbcf7a2472e882916ded0d752d7b412236ec7d39ccac54cf3ddad53117a2e007229d5840926c38db6855574fffe75af073529560b346d4f12c69c0c63130eff7c8411877705a3b3a6a1ff4c"}, @nested={0x1c0, 0x66, [@generic="4cc5d85af6e50c4a0d6883dfd0c7700c8c304dd32f64077e4ef4e8ee621a66d73469d7fd5c1cc00f4497ecac1d5774d7d550b0914141aac58e5863ce588cd355f89455e2f74f7b85eb406fa84b14dc3b20cb998506ab3be542f690454826e09050689dd6541e3405d4d2f4f52fb4ad4e9b6d45bf05361d9b162300879f182d2d478793ca42f256e0977dfccae8bdab444f069fc0b751662498dbfcf0e6aa0f38818be57e99658c866f12784367b6bdca04cf369c213e0d3e152843094400d556f256f9a917a0bf2379f94f3163ad9b473d10ad31785141e0af721b44dfa20962206fe9f99f1a68", @typed={0x8, 0x43, @fd=r2}, @generic="43414c13305cd3b93738f7e46dfca9de3c0793f13942f4c0868723a0b1e2b1f4e8e92a", @generic="17b1c062cca3272ff8dfcf0c18aa3b4847b09e9cc7e770cc88c29aa9899b094b7388ca03057b3ec8f022d2f6600cd0efdc55cca95f2bbb125412b47218b8095602a3cba20524c8a840185c877fa9807f5a5ff5e2ea86f4eb632d50dd86872d26adfb08be537a196c1d5d47dc6020da9a8ff15ffde25becf86c2a2fb4980c484e6f0a66f89fc9", @typed={0x8, 0x21, @fd=r2}, @typed={0xc, 0x55, @u64=0x7}, @typed={0x8, 0x74, @pid=r5}, @typed={0x8, 0x39, @fd=r2}]}, @typed={0x8, 0x73, @pid=r6}, @generic="3a2aff8d1d98dff9c041178018a20adc7e29760fdf3ae39442b985ea97081049bc210fcc4c03da", @typed={0x8, 0x3e, @ipv4=@loopback}]}, 0x16b0}, 0x1, 0x0, 0x0, 0x1}, 0x20000811) ioctl$VHOST_GET_FEATURES(r2, 0xc0044d04, &(0x7f0000000080)) 02:51:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x84, @multicast1, 0x0, 0x1102, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @empty, 0x0, 0x2, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$BLKPG(r1, 0x1269, &(0x7f00000000c0)={0x1f, 0x80000001, 0xfe, &(0x7f0000000180)="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"}) setsockopt$inet6_int(r1, 0x29, 0x4f, &(0x7f0000000080)=0x100000001, 0x4) [ 366.447002] IPVS: ftp: loaded support on port[0] = 21 02:51:55 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0x4, 0x80000000}}, 0x28) socket$can_raw(0x1d, 0x3, 0x1) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffc) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x3707, 0x137bb803}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r2, 0x3, 0x20}, 0xc) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000180)={0x7, 0x3, 0x7, 0x100000001}) 02:51:55 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x5, 0x9, 0x3d, 0x8000000001}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x2, 0x20c002) ioctl$KIOCSOUND(r1, 0x4b2f, 0x3) r2 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r2, &(0x7f0000000040)="fd", 0x0}, 0x18) 02:51:55 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000100)=""/87) readv(r0, &(0x7f0000001240)=[{0x0}, {&(0x7f0000001080)=""/89, 0x59}, {&(0x7f0000001100)=""/108, 0x6c}, {&(0x7f0000001180)=""/106, 0x6a}], 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000040)='/dev/input/event#\x00', 0xffffffffffffffff}, 0x30) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/psched\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) 02:51:55 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000f40)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x32314752}}) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 366.911233] chnl_net:caif_netlink_parms(): no params data found [ 367.035310] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.042234] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.051063] device bridge_slave_0 entered promiscuous mode [ 367.102508] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.109115] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.118034] device bridge_slave_1 entered promiscuous mode [ 367.164137] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 367.176554] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 367.213446] team0: Port device team_slave_0 added [ 367.223056] team0: Port device team_slave_1 added [ 367.418275] device hsr_slave_0 entered promiscuous mode [ 367.543135] device hsr_slave_1 entered promiscuous mode [ 367.614014] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.620671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.628134] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.634874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.735497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.768431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.787269] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.813362] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.833230] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 367.874490] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.917945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 367.928588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 367.937173] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.943851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.996604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.005849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.014631] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.021308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.029480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 368.039070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 368.049127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 368.058776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 368.067905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 368.077299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 368.086387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 368.095176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 368.110261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 368.118875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 368.127735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.142913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 368.189476] 8021q: adding VLAN 0 to HW filter on device batadv0 02:51:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xffffffffffffff1f, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="bed51fd6"], 0xff9b}, 0xffbffffffffffffd) close(r2) close(r1) 02:51:57 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x400002, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000280)=""/67) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400000, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000200)=""/16) sendmsg$can_bcm(r3, &(0x7f0000000140)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x7, 0x103, 0x6, {0x0, 0x7530}, {}, {0x4, 0x98, 0x9, 0xa8}, 0x1, @can={{0x2, 0x3, 0xffffffff, 0x3}, 0x2, 0x1, 0x0, 0x0, "49e9bc3f9e53e97e"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$l2tp(r2, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x2, 0x0, {0xa, 0x4e24, 0x800, @ipv4={[], [], @multicast2}, 0x400}}}, 0xfffffffffffffe63) 02:51:57 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000040)=""/100) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/150, &(0x7f00000001c0)=0x96) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000200)={&(0x7f000073d000/0x4000)=nil, 0x4000}) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x200, 0x0, 0x533, 0xffffffffffffff00, 0x0, 0x9, 0x4, 0x0, 0x13d8200, 0x9eb8, 0xf2, 0x1, 0xfffffffffffffffa, 0x0, 0xf8, 0xc00000000000, 0x400, 0x9b, 0x1, 0x4, 0xfffffffffffffe01, 0x7c7b, 0x400, 0x5e835442, 0x9, 0x7ff, 0xfffffffffffffff7, 0x6, 0x1e, 0x5, 0xae0, 0x9, 0x8, 0x6, 0x4, 0xffffffff, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x20, 0x1, 0x8, 0x8, 0x0, 0x8, 0x1}, 0x0, 0xd, r0, 0x2) 02:51:57 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:cgroup_t:s0\x00', 0x1e, 0x2) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffc, 0x280) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000200)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RLOCK(r2, &(0x7f0000000040)={0x8}, 0x8) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 02:51:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x3, 0x200000000004) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e24, 0x8000, @empty, 0x3}}, [0x8000, 0x9, 0x0, 0x927, 0x800, 0x8, 0x100000001, 0x4d, 0x0, 0x8f4f, 0x2, 0x206, 0x6, 0x6365, 0xae]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000400)={r2, 0xda, "b776773b8ba271dc1f52f3ed9864de15a83431930124e620eb5dfc85a805d4f5340b8fd93efe0bb1b544cee9380c7561a85cf31a005114037878006bc80d909ac6c0443e5f14724b7b20b897acaa17732f9ce6e4a431fcdcbf5f4c7a6325308b89fec72e6f5ebc1f0319ba00d4c59a901a14aece54188a72d1af1ba0363703af175fddd74011c20af9a39ea84318bbfd36da9b064dbd118faf6c8dda8230f7f8e78bb4d51aaaac5f36b2bc71d96d48feff9e930450ac8a8fc033b5378c6dd6ecfefa42c7d9a6321e2184b7a91bc4ac91840689219d6c910a5bcc"}, &(0x7f0000000500)=0xe2) fcntl$getflags(r0, 0xb) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x4, 0x400) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @rand_addr=0x80000001}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @empty}, 0x1c, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='nr0\x00', 0x7c3, 0x3, 0x2}) write$9p(r3, 0x0, 0xfffffffffffffde5) finit_module(r1, &(0x7f0000000380)='/dev/snd/controlC#\x00', 0x3) 02:51:57 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-net\x00', 0x2, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x400000000000000) ftruncate(r0, 0x0) signalfd4(r0, &(0x7f0000000000)={0x7}, 0x8, 0x800) sendfile(r0, r1, 0x0, 0x8080fffffffe) 02:51:57 executing program 0: r0 = memfd_create(&(0x7f0000000300)='-B\xd5NI\xc5j\xbappR\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(!0\xc2\x061\x02\xa3\xba\x80c+`X\xaf^\xaa\xc45\xe6\xcf\x1e\xb60\xee\xaa\x97\xba\x8cg-\xea>\xe7\x88Q\xda\xdf\xb0tY\xc20xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lseek(r0, 0x0, 0x2) sendfile(r0, r0, &(0x7f0000317000), 0x7f8) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000001c0)='./file0\x00') stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000000c0)={0xfffffffffffffc01, 0x7ff, 0x0, 0xfffffffffffffff9, 0xd, 0x8, 0x20, 0x4, 0x1, 0x2}) 02:51:57 executing program 3: mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x200032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)) prctl$PR_SET_FPEMU(0xa, 0x3) getdents(r0, &(0x7f00000000c0)=""/217, 0xd9) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x1, 0xffffffff}, 0xc) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000280)={0x0, r0}) getdents64(r0, &(0x7f0000000500)=""/528, 0x5cd) 02:51:57 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) mremap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000013000/0x4000)=nil) dup2(r0, r1) 02:51:58 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) socket$inet6_sctp(0xa, 0x10005, 0x84) 02:51:58 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x2, 0x0) fallocate(r0, 0x10, 0x0, 0x1000200) 02:51:58 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000500)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0x3, 0x0, 0x0, 0x3}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x111402, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0xc}, 0xfffffffffffffffe}}}, &(0x7f0000000200)=0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x2}, 0x8) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {&(0x7f0000000380)}}, 0x10) 02:51:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f00000000c0)={{0x7fffffff, 0x3}}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/4096) 02:51:58 executing program 1: r0 = socket(0x0, 0x80003, 0xfff) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x102, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x2c}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x3d, 0x4, 0x0, "17606e0f2b5c2be2db5a0f9cc0fbda7643ed12de15d50361bbc3331fa077e485"}) 02:51:58 executing program 0: socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000013000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x84, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x9b) close(r2) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) close(r1) 02:51:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) unshare(0x4000400) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2, 0x0) setns(r1, 0xc000000) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000a0040000800200008002000040010000b8030000b8030000b803000004000000", @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000c399f700000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="ac14140eac1414bb000000ff000000ff0180c200000000000000000000000000000000000000000000ff00ffff0000000000000000000000000000000000000000000000000000000000000000000000ffffffff00ff00000000000000000000000600000007ffff00810003677265746170300000000000000000006263736630000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510100000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000180c20000000000000000000000000000000000000000000000000000000000e0000001e00000020f000000ffffffffe0000001ac14142200000000ffffffff000000000000000000000000000000000000000000000000000000ffffff000000000000000000005e08aeea6b5f00000000000000000000000000000000000000ff0000ffff00000000000000000000080000030006010113ee0006626f6e645f736c6176655f31000000006272696467653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100100000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f000001ac1414bb0100000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000600000073797a3100000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4f0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="497c46ae406229e2f50fda68a3bd2ae1", 0x10) fchdir(r0) 02:51:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r1 = shmget$private(0x0, 0x2000, 0x83564ea96e569c70, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x1) r2 = accept(r0, &(0x7f0000000380)=@sco, &(0x7f0000000300)=0x80) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0x4) setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x416001, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000200)=0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) poll(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@mss, @sack_perm, @mss, @window, @sack_perm], 0x20000000000001f4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x40000007ffe, 0x80000000}, 0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f00000005c0)=0xe8) quotactl(0x1, &(0x7f0000000480)='./file0\x00', r4, &(0x7f0000000600)="70628e06d2f3b0339500a72e9e4c70be19ef") shutdown(r0, 0x2) 02:51:58 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x77777b7a, 0x0, @stepwise}) 02:51:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00\x00\x9e\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000013000502000000000000000000008000", @ANYRES32=r1, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) 02:51:59 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getresuid(&(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) getgroups(0x4, &(0x7f0000000240)=[0xee01, 0xee01, 0x0, 0xffffffffffffffff]) chown(&(0x7f0000000100)='./file0\x00', r1, r2) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x3be) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x20, 0x406001) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x80000004e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0xfffffffffffffd67) write$binfmt_elf32(r0, &(0x7f0000000880)=ANY=[], 0x8408) 02:51:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000040)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000001c0)={'filter\x00', 0x0, 0x3, 0x47, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=""/71}, &(0x7f0000000140)=0x78) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000180)) [ 370.115600] bond0: cannot enslave bond to itself. 02:51:59 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'lapb0\x00', 0x1}) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000000080)) 02:51:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a) recvmsg(r0, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00000a000000ff000000000000002b38d59a0ab3b5342dcef73a6f970dff2e9526b67fce2c3f5d0d49ca8e"], 0x1c}}, 0x0) 02:51:59 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="f3690c299e6da09eb9859b9774855123cd0c5da96045f0711b9db482ae18537491c359435b388833972517b650cb7ef90d2228eb423caf88332c4ee5e7d36bcbab6a88a2e59f829a004658d642c44afb2ae1d80a5c735f2e"], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, &(0x7f0000000040)) 02:51:59 executing program 2: mlockall(0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = socket$rds(0x15, 0x5, 0x0) unshare(0x2000001) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, 0x0, 0x0) 02:51:59 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x42002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x200031, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000040)='/dev/urandom\x00'}, 0x30) rt_tgsigqueueinfo(r1, r2, 0x3e, &(0x7f00000000c0)={0x4, 0x10002}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000100180000009300000008000000ffffffff060000000200000007000000"]) write$binfmt_elf32(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 02:51:59 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0xf, 0x0, @thr={&(0x7f0000000000)="5ca3e43e91f4ec79bc6c4ac0ef304deec41821b47a55ac6bfa3313eec8e83f63b4a1887a129e029da92e67fd61506a3a6a43672aac8b3c164ab62fb2", &(0x7f0000000100)="61b0e184741a9dc9fe7b04377196aa6bd1f84bcffc89cd092b27f023389d30888eaa878fd5e4085fc6630478acae42b42453eefb4c49c044a4f3c0a0484af76aa82ec95bb2122522fabc420b6406ec3fe20abd0689dc71731be07c363a593d8011b5cee569a4818ee2431538caf3177d094021df62f31efc68681905bfad4a1c705a0dca8726f4097f37e2d2426ea95d42c7bb30ee6a791f88d4012473a5bd38ed16ed02da6b75edc565e3c11e48b8896a9c09d31750dbd4c1dcf3ea92a6f57a48"}}, &(0x7f0000044000)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYRES64], 0x8) ioctl$int_in(r1, 0x280081000005001, 0x0) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14}, 0x14) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x1a, 0x81, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000240)) tkill(r0, 0x1004000000016) 02:51:59 executing program 2: r0 = socket(0x40000000015, 0x805, 0x0) set_mempolicy(0x4003, &(0x7f0000000040)=0xfffffffffffffffd, 0x3f) getsockopt(r0, 0x114, 0x2713, 0xfffffffffffffffe, &(0x7f0000000000)=0x7ffff000) clock_gettime(0xfffffffffffffc03, &(0x7f0000000340)) 02:51:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x3ff}, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaac41, 0x0, 0x0, 0x181) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000340)={0x1, 0x0, @pic={0x0, 0x9d, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb06}}) 02:52:00 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext={0xcd84}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) 02:52:00 executing program 1: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) r3 = getpgid(0x0) mq_notify(r0, &(0x7f0000000000)={0x0, 0x2f, 0x0, @tid=r3}) r4 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x400, 0x100000000000000) ioctl$KVM_SET_NR_MMU_PAGES(r4, 0x9205, 0xfffffffffffffffe) 02:52:00 executing program 2: creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext={0xcd84}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) 02:52:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0ae5a83f3188a070000000") r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000200)={0x0, 0x0}) get_robust_list(r2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) 02:52:00 executing program 2: unshare(0x60040000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') lseek(r0, 0x0, 0x0) 02:52:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x2080) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x120, r2, 0x518, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)={0xb, 'syz0\x00', 'syz0\x00', 'syz0\x00', 0xe7, 0x2, 0x0, 0x7, 0x8001, 0x1, "357279a1b8b489681f99eeda8549e870079c45d472439205fc5fa6ec14d6d2957f8ff8a60b725a59e67a6ac62193d22984fa0883436f8952719225b6256ebd0686d469ebc6f8164d7f88fda2a05b58aaa6b8db4132f4098a75391bd8c17249157e01e1becafc71858cf76a618bb3ced1a74f595e66756db43ee8979ab4ec587948fdfdda14a0b4d6c858108df5683c4a6ad23b79902f8a9ed7bcd5f92530ae0d26ec89d4ad2d27283fbe481ca964fb21c3ca72791c57bad1f6d9c096188cee2b70daa0f9ea8371051a238bb73f58303cbf2f34e512561450b35bd92cea1d8caeb2232442629488"}, 0x1ff) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) fcntl$dupfd(r0, 0x0, r1) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @random="e3512277f661", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @local}, @icmp=@timestamp}}}}, 0x0) [ 371.587456] IPVS: ftp: loaded support on port[0] = 21 02:52:00 executing program 1: socket$inet6(0xa, 0x8000000001, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) unshare(0x20400) select(0x40, &(0x7f0000001300), 0x0, &(0x7f0000001380)={0x3f}, &(0x7f00000013c0)={0x0, 0x2710}) 02:52:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) clock_gettime(0x7, &(0x7f0000000180)={0x0, 0x0}) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00') getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x3f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={r3, 0xc2, "b8a96cef1a4ef7092b1c341ac805b04f1be7f24cee7b8327ee13b2ff88ebc5f1136cd3db0638b12679be7edef434d2315e5244761d33fbe677ccac7b1912f15726b4f14cabe5d7d36eaf84c19b15743667d7b53defdfe0e827467bc93c17020ed0fc9ced5a64903391e02cb90b1867dd64b138b2302cb45ba2c074aacd3d506572e896b7f5e50935f69d72d8faeba3894b9de5102dc01e159419174fa08285dbe26f0d22ff3011bd9410c52163b9c5b82d3076d98ac8088226a03842ab0b0c336bba"}, &(0x7f0000000140)=0xca) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={r1, r2/1000+30000}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8921, &(0x7f0000000300)={'veth1_to_bond:\x00', 0x0}) 02:52:00 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2b, 0x801, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x283) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x90, 0x40000) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000100)={0x7fffffff, 0x1, 0x2, 0x1, 0xd67, 0x8}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23}, 0x10) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3, 0x10b042) ioctl$KDENABIO(r3, 0x4b36) recvmmsg(r1, &(0x7f000000a500), 0x400000000000259, 0x0, &(0x7f000000a780)={0x77359400}) 02:52:02 executing program 3: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xb9b, 0x80000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88220000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00062dbd7000fcdbdf25010000000000000008410000004c0018000100007564700000000000000000000000dd0000000000000000000000000000000000000000a4dfa88e0000000000000000000000000000000000000000000000000005000000"], 0x68}}, 0x20004840) capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000300)=0x8, 0x4) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f00000002c0)) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64008000f0fffeffe809000000fff5dd0000000a0001000a0a0c00410400000000fcff000000000000000000000000000000", 0x58}], 0x1) 02:52:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) seccomp(0x3, 0x1, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) r1 = getpid() r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f00000001c0)=0x6) r3 = socket$inet(0x2, 0x80007, 0x3) getsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) select(0x40, &(0x7f0000000200)={0xffffffff, 0x9a, 0xd4, 0x0, 0x7ff, 0x2, 0x0, 0xffff}, &(0x7f0000000240)={0x2, 0x1, 0xffffffffffff98f7, 0x9, 0x0, 0x2, 0x41, 0x5}, &(0x7f0000000280)={0x6, 0x7f, 0x10001, 0x100000001, 0x81, 0x9, 0x0, 0xff}, &(0x7f00000002c0)) fadvise64(r0, 0x0, 0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x4, 0x800000032, 0xffffffffffffffff, 0x0) r4 = dup(r3) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000100)) fstatfs(r3, &(0x7f0000000300)=""/172) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffff, 0x80000) ioctl$TIOCNOTTY(r5, 0x5422) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000140)) 02:52:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff04040000000000000a00000006"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x38f}]}) 02:52:02 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2000, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYPTR64, @ANYBLOB="e70546da0cc3dbc83490178ac6a4f8b2e6628af8c0016ed997f84723116423ba995a199e03318c848e4e1f77f19b2cb71bcd0bc6db65363d09ace92463bf8880a789aea3a475e8884a6e7f69cf0257", @ANYRESHEX], 0xfffffffffffffe97) r1 = mq_open(&(0x7f0000000000)='/systemselinux\x00', 0xc0, 0xb, &(0x7f0000000040)={0x4, 0x1, 0x80000000, 0x81, 0x0, 0x7fffffff, 0x1, 0x100}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000080)) 02:52:02 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x109081, 0x0) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x2, 0x3, 0x6}, 0x3}}, 0x18) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) io_setup(0x1ff, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x0, r0, &(0x7f00000001c0)="667a1e6299ca2e761998a4a637eb7dba29b4d2ee26a11652f459b6fd618d2ec8de6d30ac8e2c71246f51ab4cea666a08371a7747c11c88b35abfbc2b21a562c2b0fbdd9edea8d6c76e6ea921dc230fa1bb643c888dae090dae107511994c96c4a4a2f00b3ff771efc676be8b5302829fb6af5f204dfce5ca345e0321efabc62414041dac459dfbb291e7988f28f79eee0b24f382296f8b0bca7cb606c5b9328088333bf8b9ba7b66e0ff74750a854e0cd5b85cbe0e232c60253254adeef2cdf5fd8b3bd2f2d953318d2b70fb7eba220f", 0xd0, 0xffffffffffffffc0, 0x0, 0x3, 0xffffffffffffff9c}]) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000340)={'broute\x00'}, &(0x7f00000003c0)=0x78) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000400)={0xffffffff, 0x392ea76500000, 0x1}) io_cancel(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x94b, r1, &(0x7f0000000440)="dc9710740e374a510bdfdbe4bda63fc5837068ffeb5b4e2cd2c8b74826d5d19716839d143f19edcbf84157007c77ccd28e0fa996892090bb5b545fbb8aac5a6db2c5259779c72deaa3bfff167462852e", 0x50, 0x6, 0x0, 0x1, r0}, &(0x7f0000000500)) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000540)={'filter\x00'}, &(0x7f00000005c0)=0x44) socket$kcm(0x29, 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0xd) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000640)=[{0xfffffffffffffffb, 0x85b, 0xe3c, 0x3, @tick=0x1, {0x3, 0x8}, {0x0, 0x6}, @addr={0x81, 0x5d83}}, {0x6, 0x100000001, 0x401, 0x7, @time={0x77359400}, {0x6, 0x8}, {0xe4, 0x3f}, @note={0x7ff, 0x5, 0x3, 0x48, 0x1}}, {0x3ff, 0xff, 0x7ff, 0x1, @tick=0x7, {0x20, 0x4}, {0x94d, 0x3d5}, @queue={0x9, {0x7, 0x581}}}, {0x4, 0x9, 0x5, 0x7fffffff, @tick=0x7, {0x1, 0x9}, {0x3f, 0x3}, @quote={{0x4, 0x8}, 0xffffffff}}, {0x4, 0x0, 0xd22d, 0x35498fe9, @time={r3, r4+30000000}, {0x7, 0x40}, {0x3, 0x1}, @queue={0x0, {0x182b, 0x3}}}, {0x200, 0x0, 0x63, 0x1, @time={0x0, 0x1c9c380}, {0x8, 0x1}, {0x1, 0xd53d}, @connect={{0x2, 0x5}, {0x3ff, 0x6}}}, {0x7, 0x1000, 0x1ff, 0xffffffffffffffcd, @time={0x77359400}, {0x5, 0xffff}, {0x5, 0x7}, @raw32={[0x1, 0x92, 0x3af]}}], 0x150) uselib(&(0x7f00000007c0)='./file0\x00') ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000800)={0x8, 0x7, {0x57, 0x9, 0x4, {0x80000000, 0x6}, {0x8001, 0x3ff}, @rumble={0x4, 0x8d}}, {0x51, 0xbf0, 0xe0, {0x5, 0x5}, {0x8}, @cond=[{0x7, 0x5, 0x8000, 0x2, 0xa000000000000000, 0x9}, {0x7fff, 0x528, 0xff, 0x4, 0x264c, 0x3}]}}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000880)={0x1, 0x0, 0x103, 0x4, {0x77e, 0x5b1e0702, 0xf269, 0x7}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x17, 0xa, 0xd, "9bd24fd1f1fae8366276d68b1bebeda2ff894bc604a53a4b2a67be2005ccc9fe08763a4bf4f1f362de588184a2c2560296b8ded45d7140890274dfa79f42c147", "51544334793d11174e31bb72292edcf71b8230c4cbdf6ed246c36d672b572d36a551e9e0bce0ff6f9723f32126cd21a38871b77bce38b8d600ed1e1e0d7b3bbb", "689a09b4e15a750a453bd9d20ddbb9f898a4b62c60acf71787fcc3334fcdf140", [0x10000, 0x3f]}) setxattr$trusted_overlay_redirect(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='trusted.overlay.redirect\x00', &(0x7f0000000a40)='./file0\x00', 0x8, 0x3) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000a80)={0x2, 0x6}) write$UHID_CREATE2(r0, &(0x7f0000000ac0)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0xf2, 0x100000001, 0x1f, 0x7, 0x7, 0xb46, "8401ef43cf332e433534f9ffc8bea7f2cbd41abc2da3a7dec2e229608e6559aa2484caca083a1594989c64e7dae3601beb474cda0cf061409133c2441b479aaf5a18557fe420a6d4ec00f055e8482b8ebe4faf3fd74197b494abec667f17b36f86213e77180cdcfdbc4a19c021314510cf600b470c9dfc29743ffa9617b836fe9b3e3c5c792838858ed21518c1851e146ae679190b27ba389a9cacfb100d5212319c9f366c5270d1ac10d1332835d65be2fac36f6783b0b7a1c18794a92bbd16d02d901b36e9ea5cd8b1c9e531ac4b7b1f9e6c4a7c39966c33b4790ef5488250259bf4d559b1a91d39c2496b4e2431f0138e"}, 0x20a) timer_create(0x5, &(0x7f0000000dc0)={0x0, 0x20, 0x6, @thr={&(0x7f0000000d00)="91e45b15e5434f1e18594511e88d67dbac92a4e4c2922de1fe066cb2915da4d6f9e540bba37c95b4ef653eef98ffd88dac72ab160a061167be8a2d5b80f2f5a6ddfbd98c4bbe021ada3b9ce1d7cae27a985126b1aa7e728f8ced087620831648b03c0d23008ac69472226149a255dbfed2b03b201a2c15a63a81fe", &(0x7f0000000d80)="0fd7e3154a92ff9736639ca2ec433a04b1531dcd71c6f07b2458f5090661c480a776fefab2f0083445f306eee59634a4543f13790263e1e39316be4cae"}}, &(0x7f0000000e00)=0x0) timer_getoverrun(r5) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) modify_ldt$write2(0x11, &(0x7f0000000e40)={0x7, 0x20001800, 0x0, 0xfffffffffffffff7, 0x8, 0x6, 0x10000, 0x5, 0x7aa6, 0xfffffffffffffffd}, 0x10) socket$bt_cmtp(0x1f, 0x3, 0x5) write$P9_RFSYNC(r0, &(0x7f0000000e80)={0x7, 0x33, 0x2}, 0x7) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000ec0)=0x1) 02:52:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="153f6234488dd25d766070") r1 = socket$inet(0x2, 0x805, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000280)="0000000000c0e99376f6e64a8f3a3b4227c51f7b8639aac49a848269fc83561fa10bcab67b9d7c78bbe8060b0b9fd27574353619e8f157319c84d4a2b2928499ebfb9648aed5bee15bcb04dcc2233e20e23653a8d3fdcca3d0962f8c89f29bb2fc2af504fdb062990faf594e2e4c8d6336793700091ebdc023ef8382326b4ca9871cbc0655e7bf6a85519b85ae2f57026f74efc951f9c783851f3861c6dd0e55cba1a0cd9e08be66b83bcc3106360b1d7cbe2bf4da7a5ea85b657dc928708c52823cf2da4a619f8337b4e0326ec9a67ea3c0915acfd87a6faad7a6634321972ab3ae3cd7207dc630e4983dc769e4a7197183782074d670a9cf687dab55adbf94c275ae6eeb70305beea176dd12904aca5f88fb55", 0x114) sendto$inet(r1, &(0x7f0000000000)="f1", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r2, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/13}, {&(0x7f0000000080)=""/31}, {&(0x7f0000000100)=""/34}, {&(0x7f0000000580)=""/216}, {&(0x7f00000003c0)=""/217}, {&(0x7f00000004c0)=""/175}], 0x0, &(0x7f00000007c0)=""/160, 0xa0}}], 0x234, 0x8802, &(0x7f00000083c0)={0x77359400}) writev(r2, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 374.044385] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure 02:52:03 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x5, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xa5fa, 0x113440) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, {0x100d}}) 02:52:03 executing program 3: r0 = socket$inet6(0xa, 0x8000e, 0x2) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x2000000000000002, &(0x7f0000000000)={@remote}, 0xc) 02:52:03 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#') socketpair$unix(0x1, 0x200000000001, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_NAME(0xf, &(0x7f00000000c0)='em8>0\x80\n\xd4evW#\\m\xac~\xc2{typmG-\x00\x00\x00\xa3\x05\x97\xa7M\xd1\x91\xa9\x03\xe0\xa7\xe9qy\xc7?\xee\xae\xec\xad\x96@/,\x95\xb4&K:\x9bE\xd6\x11\x8d\x99\x8f\x14c\x850\xf7\xf0\x98\xbbH :W\xf6\x92.Y\b\xb8\x99\xc2\x9d\x87\xda\xbf\xab\xdc\xaaAi\rN\xf2\x81\x10V;L~\xd9\xdf/K\x19\x1baW\xdf\x7f.\xd0|xP\xd2\xbf\xf7\xd3\x97&\xdc\xbd\x008>\x8d\xe7\x8d\x0f\x81)\xd7\x95Wg\xc4\xf0\x92`\xa7\xd8a\xfb\x01\xe4o\xb4\xda\xca\xcd\xf2\x8dZ\x9d\xbf\xe7&\x9fA~Y\xa5\x99\xa9b\x9c0\x16B&\xa4\xc5\xcc(\xfd\xcf+_\xff\x1c\xe3N\x7fr5h\xdd@\x87\x00\xc9N\xfd_\x06\xaao\x9a@\x9d)\x19\xaa\xdd\x03\x80\xba\xc5}\x1cUf\x87o79?\xf8\x9aM\x8f\x86\xcc\vp\x11 |\xb1DF2\x91\xf4\fef\f\x93\xc1\xb4') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r0, 0x0, 0x71c) 02:52:03 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x84159e8a) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="44d88dc6456e039b131c1033fc79a20f0731e5cbf579efb1", 0x18}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 02:52:03 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xe7262d954e8f3580}) 02:52:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_bond\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x84201010}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x12c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="883250795d2ed373fb9093ec26a29ce9"}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xa7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000780)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6=@remote}}, &(0x7f0000000880)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'gretap0\x00', r3}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in=@remote}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) sendmsg$alg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001180)}, 0x2004c800) getrlimit(0xc, &(0x7f0000000000)) 02:52:03 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80) shutdown(r0, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000400)='D', 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x800) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0xe, 0x4) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000140)=""/172) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3ff) recvmmsg(r0, &(0x7f0000000180), 0x400000000000370, 0x0, &(0x7f0000000100)={0x77359400}) 02:52:04 executing program 1: unshare(0x100) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x801, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x4000004) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xca) getsockopt$inet6_tcp_buf(r0, 0x11a, 0x1, &(0x7f0000000680)=""/4096, &(0x7f0000000180)=0x1000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000280)={0x0, @reserved}) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000340)={0x7fffffff, 0x9abf, 0x8000, 0xb83f, 0xf, 0xfffffffffffffffb}) 02:52:04 executing program 3: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f00004fd000), 0x4) prctl$PR_SET_UNALIGN(0x6, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 02:52:04 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x800, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0xfffffffffffffcda) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}, {0x2, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000300), r1, 0x2}}, 0x18) [ 375.262419] IPVS: ftp: loaded support on port[0] = 21 [ 375.751866] chnl_net:caif_netlink_parms(): no params data found [ 375.827910] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.834671] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.843663] device bridge_slave_0 entered promiscuous mode [ 375.853582] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.860178] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.869135] device bridge_slave_1 entered promiscuous mode [ 375.909134] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 375.922010] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 375.958763] team0: Port device team_slave_0 added [ 375.968573] team0: Port device team_slave_1 added [ 376.069685] device hsr_slave_0 entered promiscuous mode [ 376.192657] device hsr_slave_1 entered promiscuous mode [ 376.298389] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.305150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.312558] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.319171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.431548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.459036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.470736] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.481498] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.498203] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 376.522618] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.547470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.557101] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.563862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.625664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.634785] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.641366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.653240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.662975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.677698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.687369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.707490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.733420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 376.784479] 8021q: adding VLAN 0 to HW filter on device batadv0 02:52:06 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0xb, 0x4}) 02:52:06 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@broadcast, @random="f44337778cba", [{[], {0x8100, 0x80, 0x8000, 0x4}}], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff2f, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x0, 0x2600) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000000c0)={0x10001, 0xffffffffffffffff}) 02:52:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x100}}) 02:52:06 executing program 0: bpf$BPF_TASK_FD_QUERY(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x8001008, 0x100000000, 0x2}) 02:52:06 executing program 3: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) rmdir(&(0x7f00000001c0)='./file0/bus\x00') creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0/bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000340)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000380)={r1}) mkdirat(r0, &(0x7f0000000200)='./file0\x00', 0x8d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f00000001c0)) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getpeername$unix(r0, &(0x7f00000002c0), &(0x7f0000000140)=0x6e) r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) 02:52:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket(0xa, 0x803, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000004b40)={0x0, @empty, @local}, &(0x7f0000004b80)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000004bc0)={@loopback, @broadcast, 0x0}, &(0x7f0000004c00)=0xc) getpeername$packet(r1, &(0x7f0000004c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004c80)=0xffffffffffffffda) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f000000af00)={@loopback, @empty, 0x0}, &(0x7f000000af40)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000b080)={'bond_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f000000b0c0)={'vcan0\x00', 0x0}) getsockname$packet(r1, &(0x7f000000b140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000b180)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000159c0)={'bridge_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000015d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001}, 0xc, &(0x7f0000015cc0)={&(0x7f0000015a00)={0x284, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x11c, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x93}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0xfc, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xcad}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r9}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) close(r1) 02:52:06 executing program 1: r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) connect$tipc(r0, &(0x7f0000000040)=@name, 0x10) 02:52:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x205, 0x2401) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8004551a, &(0x7f00000000c0)) fallocate(r0, 0x5, 0x7fff, 0x20) 02:52:06 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x20}, 0x1c) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000180)=0x81, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) listen(r1, 0x146) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r2 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000000)="480000001400190a20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ffbf510040041feff5aff2b000000000000070000000000", 0x48}], 0x1) 02:52:06 executing program 3: unshare(0x24020400) unshare(0x24020400) r0 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x113, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [], @multicast2}, 0x80000000}}}, 0x90) 02:52:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x20) exit(0x0) close(r0) 02:52:06 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000140)=""/4096) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ppoll(&(0x7f0000000100)=[{r1}], 0x1, 0x0, 0x0, 0x0) 02:52:06 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20400) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000000c0)=ANY=[@ANYBLOB="c9872e2a10c739fe92be8e568612fc00"], 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 02:52:07 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa0000000000400003000001000000000000002560b700fff0ffff0403fffffff300000a00000006ed"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x186, 0x0, 0x403000}]}) 02:52:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xaa) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0xc01}, 0x20}}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000000440)=""/179, 0xb3}], 0x2}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x201}, 0x24}}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x280) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1, 0x3, 0x6, 0x3, 0xfffffffffffff274}}) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x400, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x127c, 0x200000000000002) [ 378.156548] kvm_pmu: event creation failed -2 02:52:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x481fff, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0x10001, 0x7, [], &(0x7f00000000c0)=0x8}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000080)) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000f8d000), 0xc, &(0x7f00008a7000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000001040101ff20070401000000000000000c000300000000007f4fc5010c0004000000000000000000ec11421048761657d1a146024bb6634ef85959a35e991900bd7ea22258c0b768a69cd1e596220282848d72d500bc5ae7c1079c52d9f65b60ce99c29fa8899eb1953a977d99507e9c48b87007d270d61c1de0ea3fb80efaf3a9db8256a1307aa752cef091395748dda31f3836a1fdc60887a1308b1499ed54ba6c19d06573203cc751837093806c2cd789cd3146b92915e5104051070ba1c54950c0a830c2afbc51f8bd69316dfbad76c960979dd76e5deb4576cbabe8b085ba53520000000000"], 0x2c}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') getitimer(0x2, &(0x7f0000000000)) 02:52:07 executing program 0: socket(0x10, 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x103, 0x0, {0x3, 0x100000000, 0x7, 0x6}}) syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) pipe2(&(0x7f0000000680), 0x0) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f0000000080), 0x8}) [ 378.425185] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 378.463217] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 02:52:07 executing program 3: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, r0, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x1, 0x2) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000100)=""/4096) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000040), 0x3e1) [ 378.470748] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 378.488505] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 378.502180] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 378.509982] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 02:52:07 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001000)='/dev/full\x00', 0x40, 0x0) setns(r0, 0x20000) syz_emit_ethernet(0x0, &(0x7f0000000000)=ANY=[], 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096) 02:52:07 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x80040) write$P9_RCLUNK(r3, &(0x7f0000000040)={0x7, 0x79, 0x1}, 0x7) bind$unix(r0, &(0x7f0000003100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000140)) r4 = dup3(r1, r2, 0x4) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2d, 'rdma'}, {0x0, 'rdma'}, {0x2b, 'pids'}, {0x2f, 'io'}, {0x2b, 'rdma'}, {0x2f, 'pids'}]}, 0x22) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'gre0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}}) 02:52:07 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000480)={{0xa496, 0x9}, 'port0\x00', 0x20, 0x0, 0x862, 0x5, 0x7, 0x100000001, 0x5, 0x0, 0x1, 0x81}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000280)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 02:52:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x20) exit(0x0) close(r0) 02:52:08 executing program 2: r0 = socket$packet(0x11, 0x40000000003, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0x1000, 0x4, 0x1000, 0x4}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100008000011, r2, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0), 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0xb21, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_NET_NS_FD={0x8, 0x1c, r4}]}, 0x28}}, 0x0) 02:52:08 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x802000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x2, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x40, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000340)={0x2d, 0x3, 0x0, {0x4, 0xc, 0x0, '/dev/video#\x00'}}, 0x2d) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x400000c03, 0x111bff) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x20c) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000000c0)=""/125) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000180)={0xc, 0x1, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) 02:52:08 executing program 4: fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x200, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) setresgid(r0, r1, 0x0) [ 379.202291] protocol 88fb is buggy, dev hsr_slave_0 [ 379.208032] protocol 88fb is buggy, dev hsr_slave_1 02:52:08 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x100, 0x206000) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x201100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x8000) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x8, 0x204000) ioctl$VIDIOC_ENUMAUDOUT(r1, 0xc0345642, &(0x7f00000002c0)={0x7fff, "fdd938cb4b93c1e5007fbb145b9846543cf94c395050a420830c85b6b4502c7e", 0x2}) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) dup3(r4, r3, 0x80000) 02:52:08 executing program 4: move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000003000/0x4000)=nil], &(0x7f0000000140)=[0x0], 0xfffffffffffffffd, 0x0) r0 = add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)="21dd4bbc9aaa24f5e9af4324f76e9c49cc99f60b3b8f200aef8556556dcdd8c28137c115ddfa04dc4ea3957d53b5b6e579aef3a9b13038c485ddde51ee5067f64ada9ea1922bfcf197c07286c6d5c346c2fdeb0b05765408a2a85934cbb87e25247ffc9dcbce169238ae8b099576f66dfe6a13009cf7b3e18d4d40eb3e49ab15c5cba3b4ccc0f587578569c2baeb2516f81c796ccb75a3665337883dcd064e4b399fb819da74a38aeb7c24d3003fd050b4a5eb51288f55c81a06719ebb93fdc6e6c993f97237754b50eed96075ad4512ba6c16d55aa4619075300269f08d4f41c1d8d92025e4dd7081", 0xe9, 0xfffffffffffffff8) keyctl$reject(0x13, 0x0, 0x9, 0x3, r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x20000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x400, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)="507b065d9583f6807da8ecd1f0de37957a3d5704e99fd91946bbd0f36098ebeb1ae52e3cd79e14fb71b9aa7ff58fc8f282e14097986daf91596fe0ba815bf5ea442cae569a7e838f62dca3b230ab2d7204d6c50b4226e9f009c8257b22a6e5acdcc28d3822e7dc59007db5ff66c5f40ad94c18177dee063aabb6e1fd683ef5dd5bbe2b9d1bc6dedadb4b8c74efff9799c119", 0x92}, {&(0x7f0000000440)="2b84d4a64c748cbe416bbe36f8db6a8734107c6e01e689635a99622afffdc23f2c7b9b1826df3120c3ff929de5646a14f179e0d7725ce9b19f74732cbf749c26dbc3e142e73db3dd477a95663785005dc122a6e937aaffee20e34a218c45a46a817f57608877bad09b483c3d4456b8bbf38a3e8d97ddbcf7bec38deefbf44b295c29d0ed14d4ded7b3d287c6ecb02f8cf39c2398e51470db5368fe8a08e364ac5f78f823e8df88a6b797e2b13a6fab6842c396ead10067274e942a7bf39381dd97090388d09b99466260295422f573d56653d8b7d144867ae3d2", 0xda}, {&(0x7f0000000000)="5ca92034d1c9b26928d23973bacfb0b148f76a7b67b1653c19c332973be61ee67cc2d04bc48a1104934628772bf4495176546972c7ce3bebd65c971415fa39f5977764d047dc", 0x46}], 0x3) 02:52:08 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000040)='mime_type[\'\x00', 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 02:52:08 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f00000002c0)=0x24f) r3 = socket(0xa, 0x1, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180), 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000000100)=""/4096) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000016ffc)=0xfffff7fffffffffd, 0x4) sendto$inet(r5, &(0x7f0000001100)="18c0854ca130749fce2948e4c0388e22083558cbd49680079745ec447f084fa407c23b4e52983ece607c257b8f8b7457f40265020fef46d114e839e97874a91a06c44553777f0c46c549eea7932a1fd1abf490b400046872d158fbf7792e3ebb48632ca283a29e1de87e22f71486291729f20e6059eb8472b0879b569e474a6d83fe68f93443175068c7414a65014d28e5847021f149b41d376b7a96236e733e72a78ef4e4d05192d245e82d9f941f17a360537a86dc84", 0xb7, 0x810, &(0x7f00000011c0)={0x2, 0x4e22}, 0x10) setsockopt$sock_int(r5, 0x1, 0x800000000f, &(0x7f0000000080)=0x100000001004, 0x4) bind$inet(r4, &(0x7f0000008ff0)={0x2, 0x4e20, @multicast1}, 0x10) listen(r5, 0x0) 02:52:08 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind$can_raw(r0, &(0x7f0000000080), 0x10) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$TCSETSF(r0, 0x5404, 0x0) write$sndseq(r0, &(0x7f000086afd0)=[{0x10081, 0x8}], 0x30) 02:52:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) prlimit64(r1, 0xb, &(0x7f00000000c0)={0x7, 0x20}, &(0x7f0000000100)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x4, 0x200000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x5, 0x1, 0xfffffffffffffffd) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x3, 0x3, 0x1, 0x5}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040)=0x100, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000240)={0xffffffffffff0000, 0x9, 0x6, 0x10000, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) 02:52:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000040)={0x8, 0x80, "13f03d4f7018f69870521a69bad677aef8a2186d80ca495d", {0x8000, 0x4}, 0x2}) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@getae={0x4c, 0x1f, 0x225, 0x0, 0x0, {{@in=@loopback}, @in6=@mcast2}, [@mark={0xc}]}, 0x4c}, 0x8}, 0x0) 02:52:09 executing program 1: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0x330, 0x0, 0x0, 0xf8, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x98, 0xf8}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0xffffffff, 0xff000000, 0xff000000, 0xff], 0x4e23, 0x4e20, 0x4e24, 0x4e20, 0x2, 0xffffffffffffffff, 0x164000, 0x2, 0x2d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xff000000, 'irlan0\x00', 'bond_slave_1\x00', {}, {}, 0xc, 0x1, 0x50}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x6, [0xfffffffffffffff7, 0x0, 0x800, 0x4, 0x6, 0x7], 0xff, 0x5}, {0x9fd, [0x0, 0x0, 0x9791, 0x9, 0x5, 0x9], 0xffff, 0xa8}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0xd9d, 0xd4}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x800}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) madvise(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x3) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000100)=""/81, 0x51}, &(0x7f0000000080), 0x1}, 0x20) 02:52:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001640)={'syzkaller1\x00', 0x401}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x27, &(0x7f00000000c0)=[{0x34}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/net/tun\x00', 0x0, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000140), &(0x7f00000001c0)=0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00', 0x43732e5398416f1a}) 02:52:09 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bcsf0\x00') r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x13, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24040885) 02:52:09 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xc000000000000000, 0x6]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file1\x00', 0x0, 0x10}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x6) 02:52:09 executing program 1: timer_create(0x7, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000000140)) 02:52:09 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0x1}, &(0x7f00000001c0)=0x8) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9}) r3 = syz_open_pts(r1, 0x4000000000000005) r4 = dup3(r3, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) writev(r0, &(0x7f00000024c0)=[{&(0x7f00000000c0)="0f", 0x1}], 0x1) write$P9_RMKDIR(r4, 0x0, 0xfc99) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x1) 02:52:09 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x131, &(0x7f0000000100), 0x0, &(0x7f0000000100), 0x279}}, {{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x16, &(0x7f0000000280), 0x0, &(0x7f0000000540)}}], 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000340)=0x7) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r3 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in=@multicast2, 0x4e22, 0x0, 0x4e21, 0x1, 0xa, 0x80, 0x20, 0xff, r2, r3}, {0x380000000000, 0x20, 0x0, 0x5, 0x5, 0x5, 0xd1, 0x3}, {0xdc6, 0x7fff, 0x800, 0x6}, 0x9, 0x0, 0x2, 0x0, 0x2, 0x2}, {{@in=@multicast1, 0x4d6, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x3, 0x3, 0x5c2a, 0xff, 0x1ff, 0xff}}, 0xe8) 02:52:09 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) lseek(r0, 0x0, 0x1) close(r0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) unshare(0x400) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) 02:52:09 executing program 1: r0 = dup(0xffffffffffffffff) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000180)=@ipx, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/223, 0xdf}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000340)=""/36, 0x24}], 0x3, &(0x7f00000003c0)=""/68, 0x44}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@link_local, @random="360e1bb6fc5c", [], {@ipv6={0x86dd, {0x0, 0x6, "eb0b7b", 0x18, 0x0, 0x0, @mcast1, @ipv4, {[], @tipc=@payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x0) 02:52:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xfffffffffffffffb}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x4, 0xf, 0x4, 0x70000, {0x77359400}, {0x7, 0x8, 0x1, 0xfff, 0x7c, 0x6, "4aff67bf"}, 0x4, 0x2, @userptr=0x4, 0x4}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r3, 0x9) 02:52:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000040)={0x80ffff, 0x0, @ioapic={0x5, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xc00]}]}}) 02:52:10 executing program 4: r0 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000440)={0x0, 0x0, 0x0, 'queue0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)}}, 0x20) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r0, r1, r1}, &(0x7f00000003c0)=""/83, 0x53, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif\x00'}, &(0x7f0000000280)}) [ 381.109553] Disabled LAPIC found during irq injection 02:52:10 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xab10, 0x0) preadv(r0, &(0x7f0000001100)=[{&(0x7f0000000040)=""/117, 0x75}, {&(0x7f0000000100)=""/4096, 0x1000}], 0x2, 0x0) 02:52:10 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8c, 0x220100) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1a016100", @ANYRES16=r1, @ANYBLOB="020029bd7000fbdbdf2504000000c400040054000700080004000900000008000200880000000800030001000000080001000b000000080001001f000000080003000900000008000300f4000000080003000900000008000400b30a000008000100180000000c00070008000200000000002c0007000800010015000000080001001500000008000400070000000800020005000000080003000100000034000700080001000c000000080002000700000008000100180000000800040000000300080004003f00000008000400001000002000020008000100000000000400040008000100030000000800020017000000"], 0xf8}, 0x1, 0x0, 0x0, 0x24008084}, 0x40004) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xb701, 0x0) getsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7) 02:52:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket(0x10, 0x20000000080003, 0xc) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) close(r2) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x400000004) write(r1, &(0x7f0000000340)="1f0000000202fffffd3b54c007110000f30501000b000600000423ca310000", 0x1f) 02:52:10 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7d9288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000000)="9df98037d31b55e49c8995607d1165744b76667244a6a4267773c1f016411292de", 0x21, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/124, 0x7c}], 0x1}}], 0x1, 0x0, 0x0) 02:52:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d5", 0x1) 02:52:10 executing program 1: syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) 02:52:10 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sync_file_range(r0, 0x0, 0x0, 0x2) 02:52:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000180)={0xa0001}) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000040)) 02:52:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fsetxattr$security_evm(r1, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@v2={0x7, 0x0, 0xb, 0x81, 0xb4, "9d75bfd5e94794d5f546131463abc05cb6e2815c7dd9adc2eb812233c61cb1463742aa5f2938bbf4870855c728c926bd09f77bfc21e2e7aa9386d88ab888391e8ffd77758cd9dd358316e6df9e3eb500d76712cdd0d6192ecbded0e09acd7a852ea4059b8053793f4a04bec716dbb3d2aed2187fa8f8a0f887645af5483a2e93c02d532b62e68fd5fae41677219cb12328b0f89221ad1ee9b352fc73a54e1aae4a5764f7034efc25527f3e52c082331ecd2b1aa3"}, 0xbe, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000100)={'icmp\x00'}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:11 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) 02:52:11 executing program 3: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000040), 0xc, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840008000000000000bd7000ffffffff0000dffc0c00000000000000000000005b65da62290ffc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bf501fb1bb949869c2984d914d9f04005e4fcd4dd3050bc1700912dbc3080c91745fa158cf0d70309f7f1969136edfd73294c0356675ffff000044f2a432a15b4ce568a166b5"], 0x81}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f000023f000)=ANY=[@ANYBLOB="84340000000000000000000000000001000000ff"], 0x14}}, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x7fff, 0x7f, [], &(0x7f00000000c0)}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b) 02:52:11 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdb, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000080)={0x7, {0x1, 0x80000000, 0x6, 0x6}, {0x8, 0x1, 0x1000, 0x7ff}, {0x1ff, 0x7}}) r2 = dup(r0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) fcntl$setflags(r2, 0x2, 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000000)={0x1, 0x8000}) 02:52:11 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000180)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3, 0x40, 0x0, 0x450, 0x0, 0x5, 0x100, 0x8, 0x2, 0x3, 0x3f, 0x31ef6f98, 0x0, 0x7c, 0x7691, 0xffff, 0x7fffffff, 0x0, 0x9, 0x40, 0x3, 0x10000, 0x9, 0xfff, 0x8, 0x9, 0x3ff, 0x8, 0x2, 0xfffffffffffffff7, 0x0, 0x376c, 0x3, 0x3, 0x10000, 0x0, 0x0, 0xc6c1, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x10, 0x8, 0x9, 0x8, 0x1, 0x1, 0x2}, r1, 0x0, r2, 0x2) clone(0x828002102011ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r4, r3, 0x0) 02:52:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x20, 0xc4000) perf_event_open(&(0x7f0000001000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0xfffffffffffffffe, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000180)={0xa, 0x18, 0x2, 0x7, 0x3, 0x38800000000, 0x2, 0x10f, 0xffffffffffffffff}) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x100, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105511, &(0x7f0000001000)) 02:52:11 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000707ff0)={0x0, 0x10, &(0x7f0000f3eff0)=[@in={0x2, 0x0, @local={0xac, 0x2c0, 0xffffffffffffffff}}]}, &(0x7f00000001c0)=0x10) shutdown(r0, 0x2000000000000002) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, &(0x7f0000000040)=0x1c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r1}, 0x8) 02:52:11 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdb, 0xa, 0xff00}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000080)={0x7, {0x1, 0x80000000, 0x6, 0x6}, {0x8, 0x1, 0x1000, 0x7ff}, {0x1ff, 0x7}}) r2 = dup(r0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) fcntl$setflags(r2, 0x2, 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000000)={0x1, 0x8000}) 02:52:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x84, 0x14, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) [ 382.955858] sctp: [Deprecated]: syz-executor.3 (pid 11609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.955858] Use struct sctp_sack_info instead 02:52:12 executing program 4: unshare(0x20400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) 02:52:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000140)={0x1000, 0x1000}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) futex(&(0x7f0000000440), 0x8b, 0x0, &(0x7f00000004c0)={r3, r4+10000000}, &(0x7f0000000500)=0x1, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x10003, 0x1, 0x106000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000040)={0x2029, 0x9}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x4e22, 0xffffffff, @local, 0xfd}}, 0x1, 0x9, [{{0xa, 0x4e20, 0x10000, @ipv4={[], [], @broadcast}, 0x100000001}}, {{0xa, 0x4e21, 0x4c1, @rand_addr="b488f29a575da31583058b7373693d4c", 0xaca9}}, {{0xa, 0x4e22, 0x5, @remote, 0x1}}, {{0xa, 0x4e20, 0x3, @mcast1, 0x8}}, {{0xa, 0x4e23, 0x0, @empty, 0xfcf}}, {{0xa, 0x4e21, 0x3ff, @mcast1, 0xffffffffffffb184}}, {{0xa, 0x4e23, 0x2, @loopback}}, {{0xa, 0x4e20, 0xffffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}, {{0xa, 0x4e20, 0x6d, @dev={0xfe, 0x80, [], 0x21}, 0x2}}]}, 0x510) getsockopt(r2, 0x4, 0x7fffffff, &(0x7f0000000280)=""/23, &(0x7f00000002c0)=0x17) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000400)) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f00000003c0)={0xba, &(0x7f0000000300)="e4a768a51e38398004cce8251006203b399470ad4ebd9753d28d96d10b4a98c3fa2c8080f24928ce0b46e73319fb9ca6f4e85f50c2f67392328093d7ae6a6b53338e0b200079887ea151e1efde632dc26f660900d0ad2fc955ce619e80c8587614e0a8987db27f62a8b056f2a086d435d482291912511c3a00c7af834771b728a1f4a571ce36877199a05207fc8036500e3b784e936e77a6964b63bd8be94f9f27659a928a78398fe250d34110121b2f6a1141725ee52cbf4881"}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x204) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000100)={0xa6, &(0x7f00000001c0)=""/166}) 02:52:12 executing program 1: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = socket$netlink(0x10, 0x3, 0x400000000000000f) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @empty}}, 0x1e) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) connect$rds(r1, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) 02:52:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') accept$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000c00)={@loopback, 0x0}, &(0x7f0000000c40)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c80)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000d80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000e80)={{{@in6=@ipv4={[], [], @dev}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000f80)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000fc0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001040)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000001140)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001180)={{{@in6=@ipv4={[], [], @dev}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000001280)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001300)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001340)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000001440)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001540)={0x0, @loopback, @remote}, &(0x7f0000001580)=0xc) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000015c0)={0x0, @multicast2, @dev}, &(0x7f0000001600)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001640)={0x0, @dev, @remote}, &(0x7f0000001680)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000017c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000018c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f00000019c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001a00)={{{@in6=@ipv4={[], [], @multicast1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000001b00)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001b40)={'rose0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000001b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001bc0)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001c00)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000001dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001e00)=0x14) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000025c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002580)={&(0x7f0000001e40)={0x708, r3, 0x401, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x87e}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x96c0}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r12}, {0xfc, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r18}, {0x134, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r20}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r21}, {0x1dc, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x1, 0x2, 0x2, 0x80000000}, {0xfffffffffffffffe, 0x7cef8ed0, 0x1, 0x9}, {0xe4b, 0x0, 0x1, 0x7fffffff}, {0x4, 0xb93, 0x80000000, 0x6}, {0xf976, 0x33c9, 0xff, 0x4}, {0xfffffffffffffffd, 0x8, 0x2e, 0x1}, {0x6, 0x8, 0x6, 0x1}, {0x6, 0x5, 0xb726, 0x3}, {0x4, 0x8001, 0xfffffffffffffe01, 0xb7}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r24}, {0xb4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}]}, 0x708}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x6c00000000000000, &(0x7f00000003c0)}) 02:52:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000240)=0x0) close(r1) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000140)={0x55, 0x8}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r3) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) munlockall() write$P9_RMKNOD(r3, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x2, 0x2, 0x7}}, 0x14) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000100)={0x2}, 0xfc79) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f00000001c0)) 02:52:12 executing program 1: openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) 02:52:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) listen(r0, 0x201) syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60d8652b00140600fe800078d3f1fffffef3000000000000aa00004e20000000000000000000000000fff500", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5007000090780000"], 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) [ 383.649582] binder: 11629:11632 ioctl c0306201 20000440 returned -14 [ 383.685553] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 383.717016] binder_alloc: binder_alloc_mmap_handler: 11629 20001000-20004000 already mapped failed -16 [ 383.742551] binder: BINDER_SET_CONTEXT_MGR already set 02:52:12 executing program 2: unshare(0x8020000) r0 = semget$private(0x0, 0x403, 0x0) semctl$SETALL(r0, 0x0, 0x14, &(0x7f0000000040)=[0x3f, 0x200000]) [ 383.748671] binder: 11629:11632 ioctl 40046207 0 returned -16 02:52:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000000000000f59c002d0000000004000000"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) close(r1) 02:52:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200001, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000080)={'bond_slave_0\x00', 0x1}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x1, 0x0, [0x0]}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000106000000d7b947db68a9a9de00", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c000200080001c006000000"], 0x3c}}, 0x0) 02:52:13 executing program 1: r0 = socket$inet(0x10, 0x100000, 0xffffffff) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000040a07121dfffd946fa2830020200a0009000300001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 02:52:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80000, 0x40) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000100)) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000000)='g', 0x1}], 0x1) [ 384.146577] binder_alloc: 11629: binder_alloc_buf, no vma [ 384.149800] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 384.154064] binder: 11629:11632 transaction failed 29189/-3, size 24-8 line 3035 [ 384.154138] binder: 11629:11632 ioctl c0306201 20000440 returned -14 02:52:13 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0x29b) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0xfffffe6b, &(0x7f0000003d00)=[{&(0x7f0000003940)=""/178, 0xb2}], 0x1}}, {{0x0, 0x180, &(0x7f0000005880)=[{&(0x7f0000001280)=""/241, 0xfec9}], 0x300}}], 0x2, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4e22, 0x3, 'fo\x00', 0x2, 0x2400000000000000, 0x52}, 0x2c) [ 384.246994] binder: send failed reply for transaction 9 to 11629:11632 [ 384.254873] binder: undelivered TRANSACTION_COMPLETE [ 384.260843] binder: undelivered TRANSACTION_ERROR: 29189 [ 384.369833] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 02:52:13 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x1, 0x7f, 0x8, 0xc8}, 0x2c) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x0, {0x0, 0x5, 0x4, 0x2}}) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) 02:52:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10040, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3c, 0x5}}) close(r3) close(r1) 02:52:13 executing program 2: socketpair$unix(0x1, 0x100040000000005, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8040, 0x140) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x10, 0x0}, 0x0) inotify_init1(0x800) 02:52:13 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xb, 0x8000) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x8, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='nodev\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 02:52:13 executing program 0: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0x29b) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0xfffffe6b, &(0x7f0000003d00)=[{&(0x7f0000003940)=""/178, 0xb2}], 0x1}}, {{0x0, 0x180, &(0x7f0000005880)=[{&(0x7f0000001280)=""/241, 0xfec9}], 0x300}}], 0x2, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x0, @dev={0xac, 0x14, 0x14, 0x1c}, 0x4e22, 0x3, 'fo\x00', 0x2, 0x2400000000000000, 0x52}, 0x2c) 02:52:13 executing program 1: r0 = socket$inet6(0xa, 0x80f, 0xb37) mmap(&(0x7f000025c000/0x4000)=nil, 0x4000, 0x4000000000000004, 0x10, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x40000000000d0, &(0x7f0000000080), 0x4) 02:52:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x3, &(0x7f0000000000), 0x20395dd4) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x80800) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) 02:52:14 executing program 3: unshare(0x2000400) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vsock\x00', 0x2c0401, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000080)=0xb) read(r1, &(0x7f0000001080)=""/4096, 0xbbe) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) fanotify_mark(r0, 0x80, 0x0, 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') r2 = getegid() setgroups(0x1, &(0x7f0000000000)=[r2]) 02:52:14 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x20000000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x6, 0x20011, r0, 0x0) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) 02:52:14 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000000c0)) setsockopt$sock_int(r0, 0x1, 0x100000000002, &(0x7f0000000000)=0x2, 0x28e) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1a, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x130, 0x130, 0x130, 0x0, 0x0, 0x218, 0x218, 0x218, 0x218, 0x218, 0x3, 0x0, {[{{@ipv6={@local, @local, [], [], 'teql0\x00', 'ifb0\x00'}, 0x0, 0xc8, 0x130}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@ipv4, @ipv4, [], [], 'lo\x00', 'vlan0\x00'}, 0x0, 0xc8, 0xe8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) 02:52:14 executing program 2: unshare(0x20400) r0 = memfd_create(&(0x7f0000000100)='\x00\x00\x8c\x00', 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:etc_runtime_t:s0\x00', 0x23, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 02:52:14 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_getrule={0x20, 0x22, 0x710, 0x70bd29, 0x25dfdbfd, {0x2, 0x10, 0x80, 0x5, 0xff, 0x0, 0x0, 0x7, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40001) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000000)=0x3) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)={0xfffffffffffffe87, 0x400, 0xffffffffffffff37}) 02:52:14 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000040)={0x0, 0x2, 0x45, 0x7, 0xfd5}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = geteuid() r2 = getegid() getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)=0x0) write$P9_RSTATu(r0, &(0x7f00000001c0)={0x96, 0x7d, 0x2, {{0x0, 0x66, 0x800, 0x2, {0x10, 0x2, 0x2}, 0x81000000, 0x101, 0x4, 0x1, 0x16, 'em0GPLwlan0em0eth1eth1', 0x4, '*)r(', 0x4, 'bdev', 0x15, '(GPL-posix_acl_access'}, 0x1b, '1-]\'md5sumem1nodevuser&-em0', r1, r2, r4}}, 0x96) r5 = shmget(0x2, 0x3000, 0x400, &(0x7f0000ffc000/0x3000)=nil) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r0, 0x0, 0x1, &(0x7f0000000280)='\x00', 0xffffffffffffffff}, 0x30) r8 = getpid() shmctl$IPC_SET(r5, 0x1, &(0x7f0000000300)={{0x7fff, r4, r2, r3, r2, 0x22, 0x6}, 0x8001, 0x1, 0x1000, 0x8, r6, r8, 0xffff}) shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) inotify_init1(0x800) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000380)={0x8001, "5d04468d5b88fc392cfd9dd78c889fe2beba78b6d03fbfe14fcd09e9c217797b", 0x2, 0x1}) fcntl$setsig(r7, 0xa, 0x7) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000003c0)={{0x6, 0x7, 0x7fffffff, 0x1, 'syz1\x00', 0x1}, 0x0, [0x0, 0xfffffffffffffff9, 0x0, 0x9, 0x0, 0x4, 0x1, 0xfff, 0x6, 0x8, 0x1, 0x3ff, 0x2, 0xd69, 0x31c7, 0x0, 0xb03, 0x926b, 0x8, 0x9, 0x40, 0x4, 0x5, 0x6, 0x8, 0x40, 0x2, 0x2, 0x7ff, 0xfe, 0x6, 0x7fff, 0xc5, 0x3, 0x1, 0x8001, 0x5cb7, 0xeb03, 0x80000000, 0x1, 0x4d9, 0x9, 0x2, 0x6, 0x7, 0x5, 0x4, 0x0, 0x7f, 0x5, 0x100000001, 0x9, 0x200, 0x4, 0x8000, 0x8001, 0xaa, 0x7, 0x8, 0x6, 0x80000000, 0x4, 0x5, 0x7fff, 0x0, 0x2, 0x2, 0x81, 0x3ff, 0x7ff, 0x0, 0xbd52, 0xfffffffffffff800, 0xff, 0x0, 0x80, 0x7, 0x1, 0x31, 0x20, 0x0, 0xf83, 0x7, 0xa8d, 0x95, 0x6, 0x4, 0x3, 0x6, 0x3, 0xd2f, 0x6, 0xfffffffffffeffff, 0x4, 0x7, 0x1, 0x9, 0x9, 0x3, 0x20, 0x1, 0x101, 0x10001, 0x5292, 0x4, 0x0, 0x81, 0x1a, 0x1ff, 0x6, 0x7, 0xeae, 0x401, 0x9, 0x3ff, 0x80000000, 0x3, 0x5e, 0x0, 0x6, 0x2, 0x2, 0x7fffffff, 0x4, 0x2, 0x9, 0xdd66, 0x5]}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000008c0), &(0x7f0000000900)=0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000940)=0x2, 0x4) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r9 = add_key$user(&(0x7f0000000980)='user\x00', &(0x7f00000009c0)={'syz', 0x3}, &(0x7f0000000a00)="abd03ff7c63dd9259e2693ab4e859c6b26c13b13e4bc55123e26baa5ee9fec94bff9b251829f5713923268f68db9fd4b5abe02d388e651ccb36052b6d3e39d9a25d478a06036fb3d41e50dc392514834acc9c962011fb17d53124041e8542007e34dbe", 0x63, 0xfffffffffffffffc) r10 = add_key(&(0x7f0000000a80)='trusted\x00', &(0x7f0000000ac0)={'syz', 0x2}, &(0x7f0000000b00)="619d6cc3d4b25401a417f724c34a7dfcb603ce613b07181faa57ddbd29c35585be0d2368dfa8ae81721b1fd6a4dcfdc4a0c54360cf334ac364ee70d5251e6eaa8128abf2918730fb657a9678217cbcfc7a8d23acbe412e9d8e3b8cd799d4aedfbdbbe96cadb5b597c18f440b6d0fcb872b7bb1ecf0e6db2c0ab8abe0d7da785b34a6c68b223cebe908955d01356e237e2dd7046e269375cc1174e935597cdddc63196dc2a8f7cad3b2215ca2ba", 0xad, 0xfffffffffffffff8) keyctl$negate(0xd, r9, 0x401, r10) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x3b1) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000bc0), &(0x7f0000000c00)=0x4) keyctl$link(0x8, r10, r10) getsockopt$inet_dccp_int(r0, 0x21, 0xf, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) ptrace$setregs(0xffffffffffffffff, r6, 0xec22, &(0x7f0000000cc0)="3207e19c37054cfbf5dfb276e4d2ca9c6f0aea1ae5d43dd4ada561ef7a24772669bf9561b3326939eab6e40dae6ff6d01827b8994af2a75851c6ba70c9cf18576ae67ac506fa9b3a3ffd712a9ed360c97063ea1d0c40371475d6d42d475491435c978ab80e40f1a157e9310c7dde4dbe257ec6e68b9264116b14ee23d3") ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000d40)={0x1, 0x8000}) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)) 02:52:14 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) connect$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x4}) fcntl$getown(r2, 0x9) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 02:52:14 executing program 2: unshare(0x20400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x202001, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x80, 0x7, 0x8000}, 0x3) fadvise64(r0, 0x0, 0x3, 0x4) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) 02:52:14 executing program 5: socketpair(0x9, 0x80000, 0x80000000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x401}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x7}, &(0x7f0000000100)=0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bcsh0\x00', 0x10) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="1ce14b431ab7ee34e3c7f644253e4e61068f80df15a377b88ffb0ff46112a1ebebfb2d9a506946fb7f648946db4bc11c0ee6809381cabea231ccca209d424bae8d2b3fdc311ca04e04193bbe7d249aaaea99c4198091c816364842b87cbe3186b8db0ee170e885ffe643fa686e2e499baec1be88413061fb2e01c4998f837a7caa2f09602b3b3ce6b752da38d7eab42748fde10aa0bfbd4bbea6aed4a574f0e5f5545d9fd838c6e24100e9553df57f024c1db1d10e8c5cdb75c7e9279ad084aa17672475e2a2f460c5594431ec61194748f903ee9e0862a5858f660d94b5a7d2465550f7e6", 0xe5}], 0x1, &(0x7f0000000340)=[{0x28, 0x11f, 0x7, "2543dd5233f9f161b0b42a3f0f754b8eb0f653e8c2a9"}, {0x90, 0x109, 0x10000, "a1c10eb5d3286350184eff1569ce23e12b878fbbb4db4f8a54f47ba4b9bea08566c89c7f630c893fa658c5aa3bce604675933c15c14170c78069f4d717ef6ae6280338fd77b590107ebdbe90c84906fa0dcb1a59e78af27f489a320c772a4ac0834dbb1457c14e17a85b7e05f686d32d63c0d7bd78a62f2a439a9e0811a9"}, {0x48, 0x114, 0x0, "3a4448b8270c5b1a8159b0acd39301b109fddc11c1d22a9272cf87712adb7978b34045ccf60b5c5226956e11df248a89da"}, {0xa8, 0x104, 0x800, "cd9057baa80415ac1901713b5c98afb04bf6adaaca7611eb985afa08c820bd20058b806f8142efc68536c8efe23a03c512bbcd8a526e7d49de00a3e018798f6e6e55409defe46488b24b2a07c645246ee53c2186ffb08bf5ca9b4da94d3d8114362827eb2a3292c2fbad09cc3f7c46398a5f9bbe0aca790ed8059de51f7959f70c848b7f6f9ed79e0e348f2476643f8cf894a6b4f5"}], 0x1a8}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000005c0)={'hwsim0\x00', &(0x7f0000000540)=@ethtool_gfeatures={0x3a, 0x5, [{0xfff, 0x1c000000, 0x5, 0x1}, {0xfffffffffffffffa, 0x1, 0x10001, 0x9}, {0x8, 0x7ff, 0x7f, 0x4d}, {0x9, 0x4, 0x901f, 0x7}, {0x3, 0x1000000, 0x9, 0x90000000}]}}) r3 = syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0xcc, 0x2) rt_sigreturn() getpeername$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000680)=0x14) bind$packet(r1, &(0x7f00000006c0)={0x11, 0x1f, r4, 0x1, 0x2, 0x6, @random="add099738d51"}, 0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000700)={r2, @in6={{0xa, 0x4e20, 0x3, @empty, 0x98d6}}, 0xfffffffffffffffa, 0x400}, &(0x7f00000007c0)=0x90) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000800)={0x3, 0x2ba7, 0x4e40, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000840)={r5, 0x100000000, 0x3, [0x1, 0x9941, 0x2]}, 0xe) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000880)=@assoc_id=r2, 0x4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/zero\x00', 0x0, 0x0) close(r1) ioctl$VIDIOC_G_STD(r3, 0x80085617, &(0x7f0000000900)) keyctl$set_reqkey_keyring(0xe, 0x4) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000940)=0x5, 0x4) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000009c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r7, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x84) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000ac0)={0x1, {0x7ff, 0x9, 0x53d, 0x5}}) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000b00)=@assoc_value={r2}, &(0x7f0000000b40)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000b80)={r2, 0xcf, "4971ec1cfa1b104dc07b7874a010d320213988f368c566337c641ec64069146b5c5091b82439cd16668cfcdf62959c96579b1da412cfaca53f00a9b8fd61b72d1d7ea10acc8ca26af8f54a1d1a52166aeefd58351fd507f321201283d0ec3c7e06bc3d2be4ff736913590fc71b5806e8a18f458260b4a4743818f101ff019d0b3cfb06bfc2238c34ceb2807e90d8f3f8dfeb3d956729c177d8b1669d8b2fa1c91b72d3692d8c68d306ef201e0d221d0ebf6e1c26c33b04bdd551a8ca52d154315068a9159cf8d2e1c86dcaa326595c"}, &(0x7f0000000c80)=0xd7) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000cc0)={'netdevsim0\x00', {0x2, 0x4e21, @multicast2}}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000d00)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) connect$inet(r3, &(0x7f0000000d40)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) openat$null(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/null\x00', 0x40000, 0x0) syslog(0x2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000dc0)={r8, 0x6, 0xffffffff, 0x95c, 0x8, 0x2, 0x0, 0x5, {r5, @in6={{0xa, 0x4e23, 0x6, @local, 0xffffffff}}, 0x2e86aed3, 0x7, 0xf381, 0x1, 0x1}}, &(0x7f0000000e80)=0xb0) 02:52:14 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0a5c2d023c126285718070") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) recvfrom$packet(r1, &(0x7f0000000040)=""/239, 0xef, 0x0, 0x0, 0x0) close(r1) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x40) shutdown(r2, 0x2) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000180)) 02:52:15 executing program 1: 02:52:15 executing program 0: 02:52:15 executing program 3: 02:52:15 executing program 2: 02:52:15 executing program 4: 02:52:15 executing program 1: 02:52:15 executing program 4: 02:52:15 executing program 0: 02:52:15 executing program 3: 02:52:15 executing program 2: [ 387.137858] IPVS: ftp: loaded support on port[0] = 21 [ 387.257648] chnl_net:caif_netlink_parms(): no params data found [ 387.326743] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.335267] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.344348] device bridge_slave_0 entered promiscuous mode [ 387.355389] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.364014] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.374649] device bridge_slave_1 entered promiscuous mode [ 387.404683] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 387.419073] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 387.449457] team0: Port device team_slave_0 added [ 387.458305] team0: Port device team_slave_1 added [ 387.526988] device hsr_slave_0 entered promiscuous mode [ 387.572930] device hsr_slave_1 entered promiscuous mode [ 387.639679] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.647581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.657236] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.664775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.738034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.774853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 387.785635] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.795841] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.805574] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 387.827045] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.841930] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 387.852271] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.860081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.882760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.891774] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.899278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.936525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 387.949946] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 387.969691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 387.990246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 388.008589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 388.025673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 388.060434] 8021q: adding VLAN 0 to HW filter on device batadv0 02:52:17 executing program 5: 02:52:17 executing program 1: 02:52:17 executing program 4: 02:52:17 executing program 0: 02:52:17 executing program 3: 02:52:17 executing program 2: 02:52:17 executing program 2: 02:52:17 executing program 0: 02:52:17 executing program 1: 02:52:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x26b, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff4d, 0x40, 0x0, 0xfffffffffffffdff) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x8, "3eda3136d1a4b1e6"}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x26b, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff4d, 0x40, 0x0, 0xfffffffffffffdff) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x28, "3eda3136d1a4b1e6b5c846c18d41bac73d1f9f7db8a23df6f962a5115ed5f1878db52e6de571a1ee"}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:17 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) write$P9_RSTATFS(r2, &(0x7f0000000280)={0x43}, 0x43) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 388.801080] kvm: emulating exchange as write 02:52:17 executing program 2: syz_genetlink_get_family_id$tipc(0x0) 02:52:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) sendmmsg(r0, &(0x7f0000007e00), 0x4d2, 0x4008000) 02:52:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00'}) 02:52:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x26b, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff4d, 0x40, 0x0, 0xfffffffffffffdff) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x4, "3eda3136"}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x240, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x0, 0x8000}) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20001, 0x0, [0x0, 0xfffffffffffff128, 0xffffffffffffffbb, 0x0, 0x0, 0x0, 0x0, 0x120]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002500)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x8}, 0xe, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0xf0ffff, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x102dd}}, 0x0) 02:52:18 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000001c0)={0x2, 0xe7}) 02:52:18 executing program 0: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) unshare(0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000480)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x9}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0}, 0x10) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) get_mempolicy(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2) clone(0x1006210f, 0x0, 0x0, &(0x7f0000000000), 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) 02:52:18 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000001c0)={0xa}) 02:52:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xffffffff00000001, 0x8, 0x2}, 0x2f) 02:52:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x5}, 0x14}}, 0x0) 02:52:19 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x66, &(0x7f0000000380)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x2, 0x0, 0x0, 0x0, 0x8847], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0x4, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 02:52:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x242, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x0, 0x8000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x3, &(0x7f0000000240)=[@dstype3], 0x1) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12a41d88b070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:19 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$adsp(0x0, 0x5, 0x400) socket$inet_udplite(0x2, 0x2, 0x88) close(0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6b9d, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 02:52:19 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x20000) fstat(r0, &(0x7f0000000200)) getegid() getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0xfffffffffffff120) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x18b5, 0xcd}) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) mmap(&(0x7f000098f000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$FUSE_IOCTL(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev', 0x20, 0x39}, 0x2c, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000000)="92", 0x1) 02:52:19 executing program 1: 02:52:19 executing program 4: 02:52:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x10262100, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/157, &(0x7f00000000c0)=0x9d) 02:52:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(0x0, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev', 0x20, 0x39}, 0x2c, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) keyctl$update(0x2, r0, &(0x7f0000000000)="92", 0x1) [ 390.691958] IPVS: length: 157 != 24 02:52:19 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6b9d, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) [ 390.737610] IPVS: length: 157 != 24 02:52:19 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x400) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) socket$inet(0x2, 0x3, 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x6b9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x297ef) 02:52:19 executing program 2: 02:52:19 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000106, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0x100000000000, 0x4, 0x9, 0x5fe23f11}, 0xb, [0x590d, 0xef5f, 0x9, 0x1, 0x0, 0x80000000, 0x5, 0x0, 0x0, 0x7fff, 0xe39, 0x80, 0x6, 0x0, 0x3, 0x10000, 0x8001, 0x1, 0x0, 0x63, 0x86, 0xb79, 0xda26, 0x8, 0x1, 0x11, 0xfff, 0x9, 0x3ff, 0x2a01, 0x0, 0x4, 0x87, 0xffffffff, 0x800, 0x6, 0x0, 0x3ff, 0x3, 0x7fff, 0x0, 0xe16b26e, 0x6f28181e, 0x6, 0x0, 0x1, 0x4, 0x100, 0x3, 0x8, 0x88, 0x101, 0x101, 0x0, 0x80000001, 0x36, 0x9, 0xb8, 0x1, 0x1f, 0x0, 0x4, 0x0, 0x101], [0x0, 0xe978, 0x7, 0x1000, 0x8, 0xd6, 0xd0, 0x1, 0x315, 0x7, 0x5, 0x80000000, 0x5, 0x5, 0x2, 0x6c, 0x40, 0x0, 0x4, 0x7, 0x3, 0x2, 0x3, 0x8, 0x7fffffff, 0x80, 0x1, 0x3, 0x1000, 0x77, 0x100000000, 0x8000, 0xc8, 0x0, 0x7, 0x1ff, 0x0, 0x3, 0x3, 0x2, 0x3, 0x0, 0x1ff, 0x4e5, 0x0, 0x8001, 0x0, 0x3ff, 0x8, 0x400, 0x9, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x8, 0x100000000, 0x200, 0x0, 0x800, 0x7fff, 0xfff, 0x1f, 0x8, 0x7ae3], [0xfffffffffffff800, 0x71, 0x0, 0x24a2, 0x800, 0xa9, 0x0, 0xc079, 0xffffffff, 0x0, 0x8, 0x8, 0x9, 0x0, 0xfffffffffffffffd, 0x81, 0xfff, 0x5, 0x5, 0x2, 0xc3e, 0x9, 0x2, 0x23c, 0x2, 0x1f, 0x7, 0x6, 0xdd0, 0x7, 0xffffffffffffffff, 0x0, 0xffffffff, 0x6, 0x7, 0x1, 0xf8, 0x2, 0x7, 0x4, 0x6f0, 0x74a0, 0xdb, 0x8001, 0x8, 0x800, 0xbc, 0x200, 0xff, 0xcd2, 0x8, 0x1dca, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffd4, 0xa4, 0x7ff, 0x400, 0x0, 0x5, 0x2, 0x5], [0x1f, 0x0, 0x9120, 0xacba, 0x5, 0x5, 0x4, 0x0, 0x3, 0x42d5, 0x7ff800000000, 0x0, 0x0, 0x0, 0x10001, 0xe4, 0x1000, 0x71a, 0xfff, 0xde, 0x0, 0xff8000000000, 0x0, 0x8b31, 0x10000, 0x40, 0x5024, 0x401, 0x26e, 0x6, 0x2, 0x6, 0x3, 0x0, 0x3, 0x3, 0xff, 0x1ff, 0x3f, 0x4, 0x44651282, 0x3, 0x4, 0x8, 0x2, 0x7, 0x66a, 0x7, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x7, 0x4, 0x0, 0xffffffff, 0x5, 0x0, 0x80000000, 0xfffffffffffffffc, 0xe15, 0x3f, 0x3]}, 0x45c) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x1) 02:52:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x4b564d04, 0x1]}) [ 391.060731] encrypted_key: insufficient parameters specified 02:52:20 executing program 2: 02:52:20 executing program 5: 02:52:20 executing program 0: 02:52:20 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x80000000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac14140f}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x14, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x11c) 02:52:20 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, 0x0) setpriority(0x0, r0, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) stat(0xffffffffffffffff, &(0x7f0000000200)) fsetxattr$system_posix_acl(r1, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[], 0x0, 0x1) alarm(0x8) readlink(0x0, &(0x7f0000000600)=""/16, 0x10) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) openat(0xffffffffffffffff, 0x0, 0x6040, 0x40) syslog(0x2, &(0x7f0000000440)=""/20, 0x14) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_open_dev$sndpcmc(0x0, 0xfffffffffffffffe, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x401) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000340)=[@in6={0xa, 0x4e22, 0x5, @ipv4={[], [], @multicast2}, 0x4}, @in6={0xa, 0x4e24, 0x9, @ipv4, 0xdc5}, @in={0x2, 0x0, @multicast1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}], 0x58) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40085112, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x200000000000000, 0x30}, &(0x7f0000000200)=0xc) 02:52:20 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x9) 02:52:20 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/.ache_bypass\x00', 0x4, 0x0) 02:52:20 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x80000000) r1 = socket$inet_sctp(0x2, 0x20200000001, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac14140f}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6d, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x11c) 02:52:20 executing program 5: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000100)="2300000052008152915a655067d7aee4050c0000136017edcaa30000000000008b1832", 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) 02:52:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) ioctl$EVIOCGNAME(r1, 0x80404506, 0x0) getpgid(0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x0) 02:52:21 executing program 3: openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) mknod(&(0x7f0000000ac0)='./file0\x00', 0x81c0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) open$dir(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000280)={[], 0x0, 0x3, 0xed33}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) dup(0xffffffffffffffff) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 02:52:21 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 02:52:21 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x80000000) r1 = socket$inet_sctp(0x2, 0x20200000001, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac14140f}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6d, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x11c) 02:52:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r1, r2, 0x0, 0x50000000000443) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x0) 02:52:21 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000140)='system_u:object_r:init_exec_t:s0\x00', 0xd) 02:52:21 executing program 3: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000140)='system_u:object_r:init_exec_t:s0\x00', 0x21) creat(&(0x7f0000000040)='./file0\x00', 0x0) 02:52:21 executing program 5: 02:52:21 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x80000000) r1 = socket$inet_sctp(0x2, 0x20200000001, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e23, @loopback=0xac14140f}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x6d, &(0x7f0000000240)={r2}, &(0x7f0000000280)=0x11c) 02:52:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1f, 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x240, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) 02:52:21 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044d76, &(0x7f0000000080)) 02:52:21 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044dfd, &(0x7f0000000080)) 02:52:22 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80044dff, &(0x7f0000000080)) 02:52:22 executing program 0: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r1 = fcntl$dupfd(r0, 0x0, r0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r2 = epoll_create1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001e40)) 02:52:22 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0xfffffe5e) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x25f, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r2, 0x0, 0x0) 02:52:22 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0xb8ef9e4c5c28237b, &(0x7f0000000000)={0x77359400}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000014) 02:52:22 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)="150000000800000000000000c86b652502", 0x11) 02:52:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x81000008912, &(0x7f0000000000)="0adc16123c00a41d88b070") fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002840)={{{@in6=@mcast1, @in6=@remote}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000002940)=0xe8) fcntl$getown(0xffffffffffffffff, 0x9) lstat(0x0, &(0x7f0000002bc0)) getpid() stat(0x0, &(0x7f0000003f80)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="b701000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7020000000000086a0a00fe00000000850000001c000000b700000000000000950000000000f500"], 0x0}, 0x48) 02:52:22 executing program 0: getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = request_key(0x0, &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffb) getuid() keyctl$chown(0x4, r0, 0x0, 0x0) r1 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00L\x00\x00\x00\x00`\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 02:52:22 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x101) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x100000000805, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000240), 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x6d, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b) 02:52:22 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000100)="dc", 0x0}, 0x20) 02:52:22 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) dup3(0xffffffffffffffff, r0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) syz_open_procfs(0xffffffffffffffff, 0x0) listen(r1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) getpid() writev(r2, &(0x7f0000001480), 0x0) 02:52:22 executing program 1: r0 = socket(0x1, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) io_setup(0x0, &(0x7f0000000300)=0x0) dup(r0) io_submit(r1, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 02:52:22 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x80304d65, &(0x7f0000000080)) 02:52:23 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0xc0044dff, &(0x7f0000000080)) 02:52:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000f000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="470f08b805000000b95e2800000f01d90f00dc450f21d3b9640800000f328f09f8980fc7442400748c0000c74424020bb76708c7442406000000000f011424456f66470f3881a800000100440f21c0", 0x4f}], 0x1, 0x4, &(0x7f0000000100)=[@cstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:23 executing program 4: r0 = memfd_create(&(0x7f0000000100)='-vmnet0\',^]$\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x20000057d) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) socketpair$unix(0x1, 0x20000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLINK(r2, &(0x7f0000000000)={0x7}, 0x285) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1c2}) 02:52:23 executing program 3: getpgid(0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x301040, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) 02:52:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000240)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, 0x0, 0x1, 0xfb, &(0x7f0000000100)=""/251, 0x3, 0x1}, 0x48) 02:52:23 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) [ 395.202487] device team0 entered promiscuous mode [ 395.207563] device team_slave_0 entered promiscuous mode [ 395.213730] device team_slave_1 entered promiscuous mode [ 395.222918] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.295520] device team0 left promiscuous mode [ 395.300377] device team_slave_0 left promiscuous mode [ 395.306278] device team_slave_1 left promiscuous mode [ 395.524480] device team0 entered promiscuous mode [ 395.529506] device team_slave_0 entered promiscuous mode [ 395.535679] device team_slave_1 entered promiscuous mode [ 395.544571] 8021q: adding VLAN 0 to HW filter on device team0 02:52:24 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000000140)='g', 0x1) 02:52:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x242, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00ff50"], 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x0, 0x8000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12a41d88b070") ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) 02:52:24 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 02:52:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="2e00000018008151e00f80ecdb4cb90401480cec9a246643b7abb4198528a46500003e0000000000000000000000", 0x2e}], 0x1}, 0x0) 02:52:24 executing program 2: socket$kcm(0x10, 0x800000000002, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r1, 0x0, 0x0) 02:52:24 executing program 4: r0 = memfd_create(&(0x7f0000000100)='-vmnet0\',^]$\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x20000057d) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00'}) socketpair$unix(0x1, 0x20000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLINK(r2, &(0x7f0000000000)={0x7}, 0x285) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x1c2}) [ 395.760880] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.772943] mmap: syz-executor.5 (12072) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 395.793530] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.3'. 02:52:24 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 02:52:25 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 02:52:25 executing program 0: timer_create(0x0, 0x0, &(0x7f0000000040)) clone(0x0, 0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) 02:52:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x0, 0xd}, 0x20) fcntl$setstatus(r0, 0x4, 0x42803) 02:52:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x8, &(0x7f00000000c0), 0x0) 02:52:25 executing program 5: r0 = socket$inet(0x10, 0x80803, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_hwaddr=@remote}) [ 396.203109] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 02:52:25 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400806e, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 396.260434] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 396.603875] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 02:52:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001a00e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) 02:52:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:25 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000140)=""/148, 0x94}], 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r1, &(0x7f0000000100), 0x2df, 0x80000000000) 02:52:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="c0045670256d"}, 0x14) sendto$inet6(r0, &(0x7f00000000c0)="0204030073bb600000000000fff55b42b90516db5e699502c855cfe757489ca44b29d9fd000000001af8792dfbf56bf14b9536a7293e5970edd666679d5a000000002ae39ba5f9ffff12234987b80148c182453171fa364931091b0060090000", 0x60, 0x8001, 0x0, 0x0) 02:52:25 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) 02:52:26 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c46000000d2000000000000000003003e0000001000000000000000000040000000000000000000000020000000000401000000380002b9"], 0x3a) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 02:52:26 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) [ 397.206047] protocol 88fb is buggy, dev hsr_slave_0 [ 397.212033] protocol 88fb is buggy, dev hsr_slave_1 02:52:26 executing program 5: socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000400)={0x0, 0x8d9c, 0x10001}, 0x14) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x656, 0x0) 02:52:26 executing program 0: sysinfo(&(0x7f0000000000)=""/22) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) getdents64(0xffffffffffffffff, 0x0, 0x0) 02:52:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:26 executing program 4: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff) ptrace$setopts(0x4206, r1, 0x0, 0x0) 02:52:26 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$isdn_base(0x22, 0x3, 0x0) dup3(r0, r1, 0x0) 02:52:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1000000000000191, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000106, 0x0) 02:52:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:26 executing program 0: clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f00000000c0)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x12) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace(0x18, r0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 397.800436] ptrace attach of "/root/syz-executor.4"[11327] was attempted by "/root/syz-executor.4"[12156] 02:52:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) get_mempolicy(&(0x7f00000001c0), &(0x7f00000000c0), 0x100000000, &(0x7f0000ffe000/0x1000)=nil, 0x80000000002) r1 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00L\x00\x00\x00\x00`\x00'}) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'team0\x00\xfd\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 02:52:27 executing program 4: r0 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, "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", 0x1000}, 0xfffffc41) fadvise64(r0, 0x0, 0x1000000000000000, 0x1000000004) 02:52:27 executing program 3: [ 398.034536] ptrace attach of "/root/syz-executor.0"[12171] was attempted by "/root/syz-executor.0"[12172] 02:52:27 executing program 0: [ 398.691140] device team0 entered promiscuous mode [ 398.696393] device team_slave_0 entered promiscuous mode [ 398.702451] device team_slave_1 entered promiscuous mode [ 398.711782] 8021q: adding VLAN 0 to HW filter on device team0 02:52:27 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000003c0)}) 02:52:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:27 executing program 0: 02:52:27 executing program 3: [ 398.778884] device team0 left promiscuous mode [ 398.783892] device team_slave_0 left promiscuous mode [ 398.789530] device team_slave_1 left promiscuous mode 02:52:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80041, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 02:52:28 executing program 0: [ 399.016652] binder: 12198:12200 transaction failed 29189/-22, size 0-0 line 2896 [ 399.107793] binder: undelivered TRANSACTION_ERROR: 29189 02:52:28 executing program 5: 02:52:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:28 executing program 1: 02:52:28 executing program 4: 02:52:28 executing program 0: 02:52:28 executing program 3: 02:52:28 executing program 5: 02:52:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:29 executing program 4: 02:52:29 executing program 5: 02:52:29 executing program 1: 02:52:29 executing program 0: 02:52:29 executing program 3: 02:52:29 executing program 1: 02:52:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:29 executing program 4: 02:52:29 executing program 5: 02:52:29 executing program 3: 02:52:29 executing program 0: 02:52:29 executing program 1: 02:52:29 executing program 5: 02:52:29 executing program 4: 02:52:29 executing program 3: 02:52:29 executing program 0: 02:52:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:30 executing program 1: 02:52:30 executing program 3: 02:52:30 executing program 4: 02:52:30 executing program 5: 02:52:30 executing program 0: 02:52:30 executing program 3: 02:52:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:30 executing program 4: 02:52:30 executing program 1: 02:52:30 executing program 5: 02:52:30 executing program 4: 02:52:30 executing program 3: 02:52:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:30 executing program 0: 02:52:30 executing program 1: 02:52:31 executing program 5: 02:52:31 executing program 4: 02:52:31 executing program 3: 02:52:31 executing program 0: 02:52:31 executing program 1: 02:52:31 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:31 executing program 5: 02:52:31 executing program 4: 02:52:31 executing program 3: 02:52:31 executing program 0: 02:52:31 executing program 1: 02:52:31 executing program 5: 02:52:31 executing program 4: 02:52:31 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:31 executing program 3: 02:52:31 executing program 1: 02:52:31 executing program 5: 02:52:32 executing program 0: 02:52:32 executing program 4: 02:52:32 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:32 executing program 5: 02:52:32 executing program 4: 02:52:32 executing program 1: 02:52:32 executing program 3: 02:52:32 executing program 0: 02:52:32 executing program 5: 02:52:32 executing program 4: 02:52:32 executing program 1: 02:52:32 executing program 0: 02:52:32 executing program 3: 02:52:32 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:32 executing program 1: 02:52:32 executing program 5: 02:52:33 executing program 4: 02:52:33 executing program 0: 02:52:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x800010b, 0x18) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000001c0)=""/118) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, 0x0) munlockall() prctl$PR_GET_TIMERSLACK(0x1e) msgget$private(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000400)=0xffffffffffffffba) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4) 02:52:33 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000040)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) r4 = socket(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000180)={0x0, 0x0, {0x34, 0x6, 0xb, 0x1d, 0x8, 0xff}}) write(r4, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) times(0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write$FUSE_POLL(r1, &(0x7f00000001c0)={0x18, 0x0, 0x6}, 0x18) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendfile(r0, r3, &(0x7f0000000140), 0x8fff) 02:52:33 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000190007021dfffd946f6105000a0000001f00000000000100080015001200ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:52:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002500)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x8}, 0xe, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0xf0ffff, 0xffffff9e}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x102dd}}, 0x0) 02:52:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xe, &(0x7f0000000340), 0x229) [ 404.459164] netlink: 'syz-executor.5': attribute type 21 has an invalid length. [ 404.467377] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 404.549512] sock: process `syz-executor.0' is using obsolete setsockopt SO_BSDCOMPAT 02:52:33 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x242, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)='ip6gretap0\x00') ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x0, 0x8000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 02:52:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000190007021dfffd946f6105000a0000001f00000000000100080015001200ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:52:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000740)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x103, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}}, 0x0) [ 405.060026] netlink: 'syz-executor.5': attribute type 21 has an invalid length. [ 405.068117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 02:52:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80041, 0x0) rt_sigsuspend(0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) 02:52:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000008a80)=[{{&(0x7f0000008640)=@xdp, 0x3f9c0, &(0x7f0000008800), 0x2b, &(0x7f0000008840), 0xd2}}], 0x4000000000002e5, 0x0) 02:52:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000190007021dfffd946f6105000a0000001f00000000000100080015001200ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:52:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x240, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x0, 0x8000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20001, 0x0, [0x0, 0x0, 0xffffffffffffffbb, 0x0, 0x0, 0x0, 0x100000001, 0x120]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:39 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') exit(0x0) read$alg(r0, 0x0, 0x0) 02:52:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1000000000000191, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw6\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000106, 0x0) [ 410.975750] netlink: 'syz-executor.5': attribute type 21 has an invalid length. [ 410.983824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 02:52:40 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3ff, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) syz_open_procfs(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) mkdir(0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, 0x0, &(0x7f0000000480)='y\x00', 0x2, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x7, 0x3, 0x1, "46780efc75ebb70a74d63a452b6a5e5f92f0bcb5b39ec5aa505f682f4c8f72b3"}) preadv(r1, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 02:52:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="24000000190007021dfffd946f6105000a0000001f00000000000100080015001200ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 02:52:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) [ 411.495809] netlink: 'syz-executor.5': attribute type 21 has an invalid length. [ 411.503772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 02:52:40 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="e80f0000000000000000000000000000517cf81bb40eee8f510ba7d43b7d00d511003389bf9958f60082b98cc222769495400d1a738ff21ce86e7c70182586966968a37ea19dd8977a2f2866893d52c3a482ea2338c92ba7817c51e45dbe294fac8740d6574d53d4ffdbad16a218c3d1640907cad09da87a057df8c33296ab9e21cb7887b1413c27e7dc5eb86950c6902773b143ea75bed959a8b273fb21a08833f439b31c60379009894f0174d266c5e6d5acf0b69aa3180649df29d4fbbf798e1aff9fbcd05bce2b99df098a3d669be1f64996bac55c98692ac9d3058dbba7f4b2da60704e53eebea7dcfd776b6a79bad9633509ed0072cad181145ead8d2f0ddf5781833ceacb66f981179e3ae8d32fea3fd619d86c939050743d7e9d822f38858c8b6e01d0d307c0d31f36c2d5afcc45cbcb0e354d1845af9e2b893384d0bec88116cd3be7d4e8c157591d230ac04d00497694d9ad9c07280ed6d4a40df19aa531efd20fc6026193faa7798beb010035fdb2093cf3b56893a1d2f938300e6f781793b191c08097fa4190b3f199a8e209f6747eb48c5c5cd15b1098a85fb28c50d61905d30b86ce2e37e15e987524bcbb5ac1253b9afbff67cf3ca3091a7762c065a5e4500f1cd6355efe81ab619b2ca8a650930da789d109e6e3595c797f9653a269f79c7b05d29cd3f9c555db8f6a920e0296577470d46d5a89c0f3ae80e44e0a3646c7764da7833811d0f967fa0a81a1b642a2006623ed204909f5e0d45b130cc988cfdad54e4a94ff54ae87e62c6446ed211d0b35f3985dfaf41d6151b5519dbf9502add14d99b7db1056d03302e77a8bad8816d80569788f97e6e7f214b3643da7b437ddaac60997c857535e6e93c1e6fec09e180e096736257961fc0134bfbd4c6232f437222063f46fccc54e7d928a23a3aea8ee146a5ab53988031085879812574b078c8437e54deb6c043476730fe3317a8d021f1394a087e722acfd92b20e791099d7ac7d715567db7e816a8a36438cca159acef890942c4a8266a52f5892d0358f6630c1503320eda0f348968ddeb575d4ad850fce1b65de0e83a4452b62cee87df9246fce5c27b89456913fc1d1e9df7d9686ac0c0c9073f5150a215d879d712c0003f7ab866f91c1caa5aac78fe5684400181d9a8d10557b9907c5b63b750bcaddcf95d4665f971c2a1986a6ac957577a3cfae15899e85de135968fdc798537cd1878117ca80b916dc538a7e161347c72d1f0387344a878ce4fa1e30e7ce94a6d8e1299ef8fb292e42cdffcdf2997a77a4d64da99678408b8dd09360c60a789669466e887ec0fad5035afb1c71bff3532f9b5a0b895add06a96666461eaa33dc20fdc78c208c89e758a9af9bef022e782d787f76aa86754bf699fe3cc7030d620fdb5eab822ed42c8b5c19ae0c1e2d9160c2405af893d279f0c9629c60ea3c4403e4676e6791899acade656b67fdcae7e4c86113d8769f1b54bb372311e006b5b2f5852db86d2b9f9dbb5bb46b2e274336e6e65007ffee28156d0ea1630aea3be1d412e2f0689fc00ea8095c0eafe5e038375955c714e07c6b354fcd6d22e31cfbdbe07e0ff0989060b410aaa0c8fe776af2d08a0daa54152ae81d134df1e99612c21f5836bc31b3f02ae7404df304883e35db1dbb594cdf80df8c94d0a06bc8115cb15eff67ac4372085b41e8dde27e00e2d5056e65b30e896897a3d1a89d9e1939322363dcb94b9a6b4c6407bdc241e68833ed0682888a1c1766fbfd22f6669a4ddc74e6774cc4c8892421df76acfb767a3614e50a31e5b213f42b055825b91697a78e46659707f064d946cddb783f63167907f64eb336975c9174e47796a194613ab77ab3f42085dff17bb0dbf6a184ab851a5a02f09144cd14ed85a0be8d73f8361970f4a0e171abfaec56d9de98c0f1a32d48ce77236453d36c2af62cdf04a706b57d80a8360eaaf720b74d9f79a3a8e8ec0e82e5ad9a8111974812f5fe7a619d57fa9e6c1fbad4afacf8b635eaaf2f5dac688c37cabab5e123b559bde258d30a427c537677f80785382a45180e97bf713afc8545bf9cdb0523da3c5ab40581f99f86287c8f6214e6aeb71970cabd1dc1676dea699d45b99b34329b639b230f262be82fb0ca581be55995789a9b3ce8f773ed2702da945ce9eb2c580c1641e403b4d5e0e0353fae3066ebf8ac555571a330e9236c416d56aaf7f001b7983c2ba29a937f360bdf47f8807613f0c41a13d8e53df0feebb9831bb97fbd3d067de35708482f2f7cee5d7b210bb2321e4fb4532fad436e91abd4475bd7921de17d275f0abed1694202c9bf3a69f5dd11a866bade2c1c9bfdf145ce0801be03526e28d6a05a3a218369f5367dc56f552ce560b2a457e9c7818cc87513b7e3f117bec1114d15084c4672c411efd39b3af519b129d2565ccfe1ad47d4f35b0d6113ea773e812b9515a574ac86a6ecd9b3c4a6d60c064ada3ea6788027349fa0af828ddd75f7249e9e59c82df9e9273623a1d1fe2de285350e31a9e4b0b5fa0140abf7ee47f6db996a75e2f09ed1c80ed60cf817ea711988ef6a9dd751010f8897c58e8794060da36f06acbabab1b5b3439e217019a91d1c0a52234643f6a26d798a11f788bf5c8ab4c774dda5fb302bb9b480b3f73d127a15e18fe3898179316b48b6f6439a94444a5ef5841a15364fd181f8f72f55587208019f933ea4b2ff967272e31d3592203c21dce3c17fe4f85f87fef44230a34bcb66507ee3bc1d83fcc9241b7a2399f7cb392c87b5cced967bb10861ee5a1c8c2bb19a46303ce5ff7b3e9c2067a652ff93dd8ca4688c40fb8704bcd2644d031143b0278644ceb9e1d82e26432e06a5b6f9f87b282d1fead48a5fb2ea89dd835c69590fa951af42e4187b74db41aa35fcac06382f1cdbfb1210d86b6929447c20590651e813780d22c3dc8ef2b7709a9618517e8385081a7f5355e250ef01f17640b4bf48eeec4c184f66ad489c01d8cde7626e089fd86f3c08b573086b75e65e6549235dc8d1543c41fb988368cc1df3af5590c049747a2587c0ba59272dbe0185b7b49f7c0b16eee80ead9b91c2d48f7ee7489713b4b7a2c3b1864bc85b25910bf6a4f89d403d22fedc6a56fc8b60d3c7b9c4cc9fee6e50a24c7e784b27660788760d74e28c5e0b78f8d9676bad2c85ce2d7b59819931c31123a557ff93c2edfd84225aac6a4a444df52d9273bf872594ada65e030a3e0e0ebd8fd9e885f06d3786c1f13ce402dbec4921c4379ee5d0a2db1d2199244b7cd9322d9eae980605dd594e0c2277e85c26fb50aaea54d992c6cdb3d78f0052c1e669b29af8014ad83c91d2a5b724a9ca02e032584713a090d008e2b932152370ba2065da2b2236e7fe91461ebe9adaafe8ffa4bbff460e50d44739c22e91e02a493a1383f582550d5d4c2ce1c258fd11eb16484f6034d02d0732716f5031bf598c097ec644aedfdee2a12d8c8eb622312dd5a80e0a24e5da5980d44af4cd6bf7d67e9062930f0575b4579d4d4d1920da995843c212e06cb0667dfb278a19db308d70ef08bdc41f34866dc1b9fe3399c8358407c28d91b4ff0fd968e4da9162a9cc4cea70c3170a538be42b891a208e3bd833d90afc827cbba6640e77bd2a7a7e8cf4aa101e532b11813c224d5d7f24c6bb7653954400979ae269fdb79863726f61e2ceb5f7ee651d42ee53f8a648e22aef0dade0a19eb744d1b8baffc5a2f9332ab5cabb36cb6f09e9e0b2336875f93cec2efca684611ee3ee37c063f9b9acea885368cdff7c66685725304d3b3cb3a306d82ccaf390186d5edbd0b2eadcd85066ce66385152ab11e1c77b5f5c9d4a0ebf3a521bc81d7cc64150aacd64fdf32ae7a1de1383f1834a237cdd9d1c480aadf26f02f82fb102b4ca4417e6c2c73fa79b53b26aefd0e1f1671b1d7833a007c43f3a0c81cb92549d1bcf05d46db6d65d79bccfcf1db223c0f6b3d2052417b3608637a2e6fb23ead20d50b1cb788870308756ab243162890532b3d8f1031c35f376655c16bd4ad9fa3efc95a3e78f4335ea61cd522807ee941f05c4aa21e3a8c0658f7541747e13facae84c5602e457f0e77fe69565910beeca93a9f6e3c87de57c4b79025a1c9b11e506014c57b3f2d36f19cdaa3e8b66fc3c3d43e3dbe216d3e5d8fe5222d90e2d350bfdc04d8dfe990db97325cb3e6854ff308088d793a7db309827ae4cf1e27c1ac480ad75800e042e25147d3dff047b58876f68683faddb298b5cde59924157925c3f0c2efc7253e706f2f87a84be6001f726d93ebfd82bbee4a2129fbffde824d98a6daaf2fa94cdbd005030aa71363f495b948b8fe7033321cadaf4038c7c40cbfec6d38f0f89df169936f600999f29aa9dfee598630989ca19be049e13f0832edb620adf4cc263666e19dadd7e5f6800b594d7805778b9f1235ae4dd07fd6e87e99f3b838c740c4fff38597fd29fdff572677790202f23c089e217e24db152d80a66205e460ad9275b9756862d1d4e07545ecb7b7aae49c2ae11abd62548663af4dc464e5278b6b38df54088f6501b8803a4082fb7eea7ba9a14c383823a0db930462ad0c7d190fb545d79bcfbcb5cccf7e9226fbdfa332bcb99de5be2f2b218ea6922152a352f92585b5ac0fa997dc3a97a48e1a0792c13d0e68892f21d3bd1aa10b617103efa241cf3644bd1dfb09f39e60bf400bace20d9c96dac71b287e917c0927ebacea411354ecb774db0f91e691a0edd3d01f9e10fc9e7f9b564e441905fc52440fe5d3b35088fe68f7b0ba0a60e0312a38bfd70e739ab2e7b9a2f6ed5234aadddd13588c0410d079dfeb1418d0db6eee412abaf36fa5c4351dfef90c1eaf0e7c1a786cfe5bb45a1e87f652bc90e835652bd70353d18e22f806c19e3ab3bee0eb0640f1715d7199a6b454d2ae416bfee0eb8072bf502745482c03968de058960209f6d8d5000a6ce714dcdb6b0140ea7b6441c09feae7915cee0d25d184f9c14422c1400d60a2545571e2ff6fcc54b38e80f0e2de57a3469ed2fa47a83f707477bad339f389c24f1e7f24ebc5981a45ef241d721d269e446c7eba4304cae6619f92fdfe29d16c87228c939f6527fff3f5ae45900f08ee00ccfe00c382a971781312408ebd9894da659b65c0a1bcf1f9d50fee2ff4ed5c88dcfb454950e5000fea67149fec017e31d65bae38a0260b331b110f3ff62b4449a84dec9b007619dc578c32945e52dfbf5e27b898d8ea68353f14a729f8dea5959916bad408ed4eed019b623de4f18f6608fe86ccf7782bb468769553272f9b52097dacc37c91f9a4c631b0707634e8146f461b6abcf"], 0xec1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) 02:52:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x153, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0adc1f123c12a41d88b070") ioctl$KVM_NMI(r2, 0xae9a) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:40 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) [ 411.896588] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 02:52:41 executing program 4: 02:52:41 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000440)=""/11, 0x215) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)) dup2(r1, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000280), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x20) ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0) 02:52:41 executing program 1: syz_execute_func(&(0x7f0000000340)="3666440f50f564ff0941c30f0f441e04a4c4c27d794e0066420fe2e33e0f1110c442019dcc6f") clone(0x200, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x98) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x0) 02:52:41 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:41 executing program 4: 02:52:41 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:41 executing program 5: 02:52:41 executing program 4: 02:52:42 executing program 0: 02:52:42 executing program 3: 02:52:42 executing program 5: 02:52:42 executing program 1: 02:52:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:42 executing program 4: 02:52:42 executing program 1: 02:52:42 executing program 5: 02:52:42 executing program 3: 02:52:42 executing program 0: 02:52:42 executing program 4: 02:52:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:42 executing program 3: 02:52:42 executing program 4: 02:52:42 executing program 1: 02:52:42 executing program 0: 02:52:43 executing program 5: 02:52:43 executing program 3: 02:52:43 executing program 4: 02:52:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:43 executing program 1: 02:52:43 executing program 0: 02:52:43 executing program 5: 02:52:43 executing program 3: 02:52:43 executing program 1: 02:52:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:43 executing program 4: 02:52:43 executing program 0: 02:52:43 executing program 1: 02:52:43 executing program 3: 02:52:43 executing program 5: 02:52:44 executing program 4: 02:52:44 executing program 0: 02:52:44 executing program 3: 02:52:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:44 executing program 1: 02:52:44 executing program 5: 02:52:44 executing program 0: 02:52:44 executing program 4: 02:52:44 executing program 3: 02:52:44 executing program 1: 02:52:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:44 executing program 0: 02:52:44 executing program 4: 02:52:44 executing program 3: 02:52:44 executing program 5: 02:52:44 executing program 1: 02:52:45 executing program 3: 02:52:45 executing program 0: 02:52:45 executing program 5: 02:52:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:45 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0) mmap(&(0x7f000060b000/0x1000)=nil, 0x1000, 0x0, 0x8000000000000033, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000200)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x0, 0x20000000000001, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000bc0)='SEG6\x00') r1 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000140)='./bus\x00', 0x4000, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) creat(&(0x7f0000000680)='./bus\x00', 0x0) 02:52:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp\x00') sendfile(r0, r1, &(0x7f0000000040)=0x96, 0x4) 02:52:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 02:52:45 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f000000b000/0x1000)=nil, 0x1000) 02:52:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:45 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) 02:52:45 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f00000004c0)=""/184, 0xfffffe4c, 0x10100, 0x0, 0xfffffffffffffcec) 02:52:45 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="e6265922295a44f573ed42"], 0xb) 02:52:45 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) recvmsg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002840)=""/109, 0x6d}], 0x1}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f0000000a40), 0x8000000000000b0, 0x0) 02:52:46 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') lseek(r0, 0x0, 0x1) 02:52:46 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000140)=""/255, 0xff, 0x0) 02:52:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x400000000000007b, 0x0, [0x20000048d]}) 02:52:46 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f0000000240)="11d988914b227ac33f34e66a62805493bb6bdc24ef809416d722d881a4bff371", 0x0}, 0x18) 02:52:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)) 02:52:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") sendto$inet(r0, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') sendfile(r0, r2, 0x0, 0x500) 02:52:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, 0x0) 02:52:46 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x5452, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x229) 02:52:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x244103, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x88500200}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x68, r3, 0xa00, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x6, 0x8e5b, 0x1, 0x3f1, 0x0, 0x0, 0x20100, 0x4, 0x7, 0x7, 0x3f, 0x2, 0x400, 0x6, 0x9, 0x6, 0x7, 0x5, 0x8, 0x200, 0x1ff, 0x0, 0x8, 0x10001, 0x3, 0xac6, 0x8, 0x1, 0x6e8, 0xfaf, 0x3, 0x8000, 0xfff, 0x401, 0x4f9, 0x5, 0x0, 0x2, 0x6, @perf_bp={0x0, 0x2}, 0x8000, 0x8, 0x4, 0x4, 0x5, 0x4, 0x2}, 0xffffffffffffffff, 0xe, r1, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 02:52:47 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/215, 0xd7}], 0x1) 02:52:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x1f, 0x4) 02:52:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x240, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x0, 0x8000}) ioctl$KVM_NMI(r2, 0xae9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done={0x40046307}], 0x0, 0xfffffdfd, 0x0}) 02:52:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, 0x0) [ 418.239430] binder: 12717:12719 Acquire 1 refcount change on invalid ref 0 ret -22 02:52:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@delsa={0x3c, 0x11, 0x101, 0x0, 0x0, {@in=@multicast1, 0x0, 0xa}, [@srcaddr={0x14}]}, 0x3c}, 0x8}, 0x0) [ 418.306854] binder: 12717:12719 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 418.315094] binder: 12717:12719 unknown command 0 [ 418.320033] binder: 12717:12719 ioctl c0306201 200005c0 returned -22 [ 418.421115] binder: 12717:12724 Acquire 1 refcount change on invalid ref 0 ret -22 02:52:47 executing program 4: syz_emit_ethernet(0x67, &(0x7f0000000040)={@broadcast, @random="e05460fda70d", [], {@ipv6={0x86dd, {0x0, 0x6, "3119c9", 0x31, 0x0, 0x0, @dev, @empty, {[], @tipc=@payload_mcast={{{{{{0x31, 0x0, 0x10001, 0x100, 0x4, 0xb, 0x3, 0x2, 0x8, 0x0, 0x3, 0xfffffffffffffff8, 0x1, 0x1, 0x9, 0x8, 0x3, 0x4e24, 0x4e20}, 0x4, 0x1}, 0x0, 0x1}}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) 02:52:47 executing program 0: semget(0xffffffffffffffff, 0x2, 0x100) semctl$IPC_RMID(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) semget$private(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000000)=[{}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100), 0x4) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000280)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x6, 0x5, @tid=r0}, &(0x7f00000000c0)=0x0) timer_getoverrun(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000180)) timer_settime(r1, 0x0, &(0x7f0000000440)={{}, {0x77359400}}, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000100)) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) syz_open_pts(r2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) unshare(0x0) 02:52:47 executing program 3: accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x300000000000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000000000000002000900400000000000000000000000030006000000000002000000e0000059d8fd57186fe8a010020001000000000000000002d8c77dda030005000000000002000000f00004000000000000000000"], 0x60}}, 0x0) 02:52:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, 0x0) 02:52:47 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) unshare(0x800) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000480)) r2 = syz_open_dev$usb(&(0x7f0000000340)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2400000000000801) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) fcntl$setlease(r2, 0x400, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000180)}, 0xfffffffffffffcfb) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) get_mempolicy(&(0x7f0000000040), 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2) clone(0x1006210f, 0x0, 0x0, &(0x7f0000000000), 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) 02:52:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x26b, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff4d, 0x40, 0x0, 0xfffffffffffffdff) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x29, "3eda3136d1a4b1e6b5c846c18d41bac73d1f9f7db8a23df6f962a5115ed5f1878db52e6de571a1ee0a"}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:52:48 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80041, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) 02:52:48 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='pagemap\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x100000000) 02:52:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x0, 0x0, [0x20000048d]}) [ 423.424189] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large: [ 423.436131] clocksource: 'acpi_pm' wd_now: 4b1532 wd_last: 74d80b mask: ffffff [ 423.445671] clocksource: 'tsc' cs_now: e68220bfdc cs_last: e46867cb85 mask: ffffffffffffffff [ 423.456342] tsc: Marking TSC unstable due to clocksource watchdog [ 423.466698] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 423.475670] sched_clock: Marking unstable (423535118878, -68449278)<-(423587141350, -120471553) 02:52:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0xb21, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_FD={0x8, 0x1c, r3}]}, 0x28}}, 0x0) 02:52:53 executing program 4: pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x0) 02:52:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x0, 0x0, [0x20000048d]}) [ 424.202178] clocksource: Switched to clocksource acpi_pm 02:52:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000100)={0x0, 0x0, [0x20000048d]}) 02:52:53 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 02:52:53 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)=""/105, 0x69}], 0x1, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) readv(r1, &(0x7f00000002c0), 0x195) 02:52:53 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\x00\x05\x00\x00\x10\x00', 0x802}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) [ 424.604451] kvm: SMP vm created on host with unstable TSC; guest TSC will not be reliable [ 424.743971] ================================================================== [ 424.751510] BUG: KMSAN: uninit-value in memcmp+0x117/0x180 [ 424.751665] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.0.0+ #17 [ 424.751665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.764815] Workqueue: ipv6_addrconf addrconf_dad_work [ 424.764815] Call Trace: [ 424.764815] dump_stack+0x173/0x1d0 [ 424.764815] kmsan_report+0x131/0x2a0 [ 424.764815] __msan_warning+0x7a/0xf0 [ 424.764815] memcmp+0x117/0x180 [ 424.764815] __dev_mc_add+0x1f9/0x8c0 [ 424.764815] dev_mc_add+0x6d/0x80 [ 424.764815] igmp6_group_added+0x2d4/0xad0 [ 424.764815] __ipv6_dev_mc_inc+0xdc7/0xfa0 [ 424.764815] ipv6_dev_mc_inc+0x70/0x80 [ 424.764815] addrconf_dad_work+0x50c/0x26e0 [ 424.764815] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 424.764815] ? ipv6_get_saddr_eval+0x1440/0x1440 [ 424.764815] process_one_work+0x1607/0x2010 [ 424.764815] worker_thread+0x111c/0x2460 [ 424.764815] kthread+0x4a1/0x4e0 [ 424.764815] ? process_one_work+0x2010/0x2010 [ 424.764815] ? schedule_tail+0x1b2/0x410 [ 424.764815] ? kthread_blkcg+0xf0/0xf0 [ 424.764815] ret_from_fork+0x35/0x40 [ 424.764815] [ 424.764815] Local variable description: ----buf@igmp6_group_added [ 424.764815] Variable was created at: [ 424.764815] igmp6_group_added+0x57/0xad0 [ 424.764815] __ipv6_dev_mc_inc+0xdc7/0xfa0 [ 424.764815] ================================================================== [ 424.764815] Disabling lock debugging due to kernel taint [ 424.764815] Kernel panic - not syncing: panic_on_warn set ... [ 424.764815] CPU: 0 PID: 12 Comm: kworker/0:1 Tainted: G B 5.0.0+ #17 [ 424.764815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.764815] Workqueue: ipv6_addrconf addrconf_dad_work [ 424.764815] Call Trace: [ 424.764815] dump_stack+0x173/0x1d0 [ 424.764815] panic+0x3d1/0xb01 [ 424.764815] kmsan_report+0x29a/0x2a0 [ 424.764815] __msan_warning+0x7a/0xf0 [ 424.764815] memcmp+0x117/0x180 [ 424.764815] __dev_mc_add+0x1f9/0x8c0 [ 424.764815] dev_mc_add+0x6d/0x80 [ 424.764815] igmp6_group_added+0x2d4/0xad0 [ 424.764815] __ipv6_dev_mc_inc+0xdc7/0xfa0 [ 424.764815] ipv6_dev_mc_inc+0x70/0x80 [ 424.764815] addrconf_dad_work+0x50c/0x26e0 [ 424.764815] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 424.764815] ? ipv6_get_saddr_eval+0x1440/0x1440 [ 424.764815] process_one_work+0x1607/0x2010 [ 424.764815] worker_thread+0x111c/0x2460 [ 424.764815] kthread+0x4a1/0x4e0 [ 424.764815] ? process_one_work+0x2010/0x2010 [ 424.764815] ? schedule_tail+0x1b2/0x410 [ 424.764815] ? kthread_blkcg+0xf0/0xf0 [ 424.764815] ret_from_fork+0x35/0x40 [ 424.764815] Kernel Offset: disabled [ 424.764815] Rebooting in 86400 seconds..