Warning: Permanently added '10.128.0.189' (ECDSA) to the list of known hosts. 2019/09/04 13:53:09 fuzzer started 2019/09/04 13:53:12 dialing manager at 10.128.0.26:36635 2019/09/04 13:53:13 syscalls: 2376 2019/09/04 13:53:13 code coverage: enabled 2019/09/04 13:53:13 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/04 13:53:13 extra coverage: enabled 2019/09/04 13:53:13 setuid sandbox: enabled 2019/09/04 13:53:13 namespace sandbox: enabled 2019/09/04 13:53:13 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/04 13:53:13 fault injection: enabled 2019/09/04 13:53:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/04 13:53:13 net packet injection: enabled 2019/09/04 13:53:13 net device setup: enabled 13:55:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmmsg(r0, &(0x7f0000009fc0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000200)='/', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002b00)='-', 0x1}], 0x1}}], 0x2, 0x0) syzkaller login: [ 248.906077][T11315] IPVS: ftp: loaded support on port[0] = 21 [ 249.045613][T11315] chnl_net:caif_netlink_parms(): no params data found [ 249.101212][T11315] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.108644][T11315] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.117403][T11315] device bridge_slave_0 entered promiscuous mode [ 249.126977][T11315] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.134267][T11315] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.143035][T11315] device bridge_slave_1 entered promiscuous mode [ 249.178218][T11315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.191169][T11315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.224481][T11315] team0: Port device team_slave_0 added [ 249.233952][T11315] team0: Port device team_slave_1 added [ 249.317327][T11315] device hsr_slave_0 entered promiscuous mode [ 249.573467][T11315] device hsr_slave_1 entered promiscuous mode [ 249.852898][T11315] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.860144][T11315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.867948][T11315] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.875169][T11315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.953136][T11315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.973160][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.987652][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.997456][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.013854][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 250.034260][T11315] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.070451][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.079548][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.086791][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.095605][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.104764][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.111925][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.146473][T11315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.157321][T11315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.194935][T11315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.204502][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.214300][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.223764][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.234532][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.244102][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.253283][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.262934][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.272048][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.285055][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.294113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 13:55:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x23) sendmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="29ea1eff4b64069ab19fcdd1f3c03ec213a6a8776fd2d9a66fc4ba7e87419e20cbdf8804ea", 0xfd9a}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x0) 13:55:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'vcan0\x00', &(0x7f0000000780)=@ethtool_rxnfc={0x0, 0x0, 0x7, {0x0, @sctp_ip6_spec={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}, {0x0, @broadcast}, @hdata="9127a55e2c20bcda0d6c6d4cfec844e38c4b87209b537175c08d9fa4701232ec1da8f1207258706fe7184070b903feb897dd67e2", {0x0, @broadcast}}}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 251.395474][T11332] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 13:55:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) 13:55:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") madvise(&(0x7f000026f000/0x2000)=nil, 0x2000, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 13:55:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x400, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f00000017c0), 0x333, 0x0) 13:55:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x806, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9]}, 0x45c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000040)={0x20, 0x0, 0x3, {0xdcdd, 0x0, 0x0, 0x1ff}}, 0x20) 13:55:49 executing program 1: r0 = creat(&(0x7f0000001540)='./file0\x00', 0x140) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000001580)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8, 0x3ff, 0x32}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001600)='/dev/vsock\x00', 0x101000, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001680)=0x14, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000016c0)={@ipv4={[], [], @multicast1}, 0xa, r2}) r3 = fcntl$dupfd(0xffffffffffffffff, 0xc0a, 0xffffffffffffffff) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000001700)={0x800, 0x100000000}) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000001740)={0x3, 0x1}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000017c0)={0x7, 0x2a, 0x12, 0x15, 0x3, 0x80, 0x3, 0x88, 0xffffffffffffffff}) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001800)='/dev/dlm-monitor\x00', 0x90000, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000001880)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001900)={{{@in6=@empty, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000001a00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001a40)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001ac0)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001c40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0xd2e4ffa36efbeb3b}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b00)={0xe4, r6, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2ad8}}, {0x8, 0x6, r9}}}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0xc000020) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001cc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000001e40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x8002602c}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d00)={0xe0, r10, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4a18}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x982}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x34420be7}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x69}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x4}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x20811) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000001e80)={0x0, 0x0, 0x103, 0x0, {0x2, 0x185, 0x2, 0x8}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001ec0)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001fc0)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f00000020c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000002100)={@loopback, 0x68, r12}) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002140)='net/netfilter\x00') ioctl$SCSI_IOCTL_SEND_COMMAND(r13, 0x1, &(0x7f0000002180)={0x78, 0x9, 0x2, "9f7fc5433b414afafdd507add58d5dc82577e5d032c0db8bee54e86a668bb2c4f6872bb5c2fafcbb599b6d795940c924e6ce7ba3d45fef03c7435cb9f0d5ca71fc16998e4bd394efdf46e3fc81c0cae94428a43972fa9e1a972dc2f9e62062b24ca0c99dfdc4adc9f08272ba26fdf8ac2c697769f3bb5ec6"}) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000002240)='/dev/zero\x00', 0x40000, 0x0) fcntl$setsig(r14, 0xa, 0xb) write$uinput_user_dev(r5, &(0x7f0000002280)={'syz1\x00', {0x2, 0x8, 0x2, 0x100}, 0x1c, [0x8, 0x70a37f49, 0xfffffffffffffffc, 0x0, 0x3, 0x6, 0x1, 0x80, 0x2, 0xfff, 0x101, 0x9, 0x8000, 0x7, 0x1, 0xef, 0x7b9, 0xb79, 0x800, 0x5, 0x4, 0x8, 0x1, 0xb3, 0x1, 0x23a, 0xfffffffffffffffc, 0x3f, 0x6, 0x3, 0x4, 0xfffffffffffffeff, 0x101, 0x9, 0x7fff, 0x8, 0x8, 0x100000000, 0x9, 0x100, 0x8, 0x0, 0x8000, 0x1, 0x8001, 0x9, 0x5, 0x2b27, 0x8, 0x3, 0x101, 0x2f5, 0xffff, 0x6, 0x4, 0x7, 0xffffffff, 0x3, 0x5, 0x2, 0xffff, 0x3, 0x9], [0x8, 0x40, 0x1000, 0x100, 0x1ff, 0x8, 0x0, 0x4, 0x6, 0x3, 0x3, 0x5, 0x1ff, 0x1ff, 0x2, 0x1, 0x0, 0x4, 0x4, 0x3, 0x0, 0x3, 0xffffffff, 0x4, 0x2, 0x32, 0x8, 0x6, 0x74, 0x200, 0x7, 0xfffffffffffffffe, 0x81, 0xa5000000, 0x9, 0x7, 0x400, 0x101, 0x8bbf, 0x9a4, 0x5, 0x1, 0x100000001, 0x7, 0x0, 0xfffffffffffffffa, 0x2, 0x1, 0x1f, 0x3f, 0x5, 0x9, 0x5, 0x24, 0x80000001, 0x8, 0xfffffffffffffffe, 0x3, 0x5, 0x4, 0x0, 0x7, 0x50, 0x7f], [0x85, 0x9, 0x7, 0x6, 0x80, 0x0, 0x3db9, 0x9, 0x1f, 0x5, 0x204000000, 0xfff, 0x8, 0x0, 0x3, 0x7467263c, 0x4, 0x3, 0x1, 0x8, 0x8, 0x4, 0x1000, 0x2, 0x1f, 0x6, 0x80000000, 0x6, 0x3, 0x5, 0x81, 0x6, 0x3, 0x10001, 0x8, 0x4, 0x96, 0xa192, 0x1649, 0x100000000, 0xfff, 0x1, 0x1, 0x1, 0x2, 0xfffffffffffffffe, 0x7f, 0x6, 0xfff, 0x2, 0x8, 0x5, 0xffffffffffffffff, 0x1, 0x9, 0x582c, 0x6, 0x1, 0x1, 0x8, 0x4, 0x8001, 0x6, 0x7], [0x894b, 0x7f, 0x8, 0x400, 0x4, 0xff0, 0x0, 0x10001, 0x80000000, 0x8, 0x1, 0x8, 0x7, 0x7, 0x8, 0x5, 0x1, 0x6, 0x1ff, 0x8, 0x7, 0x7, 0xffffffffffff8001, 0xffffffffffffff1b, 0x1, 0x4, 0x2, 0xffff, 0x3, 0x0, 0xfffffffffffffff9, 0xf62f, 0x1ba0, 0x1, 0xfffffffffffffffb, 0x17c, 0x1, 0x372, 0x1, 0x7ff, 0x18e, 0xff, 0x80, 0x3ff, 0xbc, 0x0, 0x0, 0x8, 0x9, 0x20, 0xf52, 0x9, 0x2, 0x100000001, 0x3, 0x4, 0x10001, 0x551b, 0x5, 0x1f, 0x3ff, 0x9, 0x1000, 0x1000]}, 0x45c) r15 = accept4(0xffffffffffffffff, &(0x7f00000027c0)=@sco, &(0x7f0000002840)=0x80, 0x80000) r16 = syz_genetlink_get_family_id$team(&(0x7f00000028c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002900)={'team0\x00', r7}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002940)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000002a40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000002a80)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002ac0)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000002b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002b80)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000002e40)={@loopback, 0x0}, &(0x7f0000002e80)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002ec0)={0x0, @initdev, @dev}, &(0x7f0000002f00)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f00000030c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003100)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000003140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003180)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r15, &(0x7f0000003640)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0xc00030}, 0xc, &(0x7f0000003600)={&(0x7f00000031c0)={0x434, r16, 0x10, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r17}, {0x178, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4c57}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}]}}, {{0x8, 0x1, r22}, {0x250, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5b9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x64}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r25}}}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x11}, 0x8016) [ 252.138059][T11347] input: syz1 as /devices/virtual/input/input5 [ 252.514945][T11350] IPVS: ftp: loaded support on port[0] = 21 [ 252.657678][T11350] chnl_net:caif_netlink_parms(): no params data found [ 252.713144][T11350] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.720365][T11350] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.729242][T11350] device bridge_slave_0 entered promiscuous mode [ 252.738531][T11350] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.745853][T11350] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.754627][T11350] device bridge_slave_1 entered promiscuous mode [ 252.786420][T11350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.799283][T11350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.832133][T11350] team0: Port device team_slave_0 added [ 252.841555][T11350] team0: Port device team_slave_1 added [ 252.977166][T11350] device hsr_slave_0 entered promiscuous mode [ 253.013124][T11350] device hsr_slave_1 entered promiscuous mode [ 253.112364][T11350] debugfs: Directory 'hsr0' with parent '/' already present! [ 253.142412][T11350] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.149639][T11350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.157446][T11350] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.164705][T11350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.247734][T11350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.269552][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.281326][ T3898] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.292344][ T3898] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.306013][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 253.328136][T11350] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.346374][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.355828][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.363133][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.380871][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 253.389860][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.397098][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.436340][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 253.446873][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.471629][T11350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.482483][T11350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.498238][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.507233][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.517452][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.550925][T11350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.560154][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.653788][T11357] Unknown ioctl 35096 [ 253.675127][T11358] Unknown ioctl 35096 13:55:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000002c000)=@mpls_newroute={0x24, 0x18, 0x21, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x12}]}, 0x7b}}, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x401) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket$inet(0x10, 0x2, 0x1c) sendmsg(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000200007041dfffd946f610500810000e81f0000030000080008000c0004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0x16) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@remote, @in=@empty, 0x4e24, 0xbe, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x6c, r4, r5}, {0x6, 0x800, 0x0, 0xffff, 0x2, 0x6, 0x2, 0x8}, {0x7ff, 0x200, 0x3133, 0x3}, 0x9, 0x6e6bbb, 0x3, 0x1, 0x2, 0x1}, {{@in=@empty, 0x4d4}, 0xa, @in6=@loopback, 0x3506, 0x3, 0x0, 0x3f, 0xc9f, 0x8, 0xff}}, 0xe8) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000080)={@broadcast, @multicast2, r4}, 0xc) mkdir(&(0x7f0000000300)='./file0\x00', 0xe0) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000000c0)=0x19ec13ed) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x4e23, 0x9, 0x4e23, 0x3, 0x2, 0x20, 0x20, 0x3a, 0x0, r5}, {0x101, 0x6, 0x3, 0x8, 0x5, 0x10001, 0x80, 0xfffffffffffffff8}, {0x8, 0xffffffffffffff80, 0x77, 0x9}, 0x84f4, 0x6e6bb4, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x4d5, 0xff}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3507, 0x1, 0x2, 0x60, 0x3, 0xb93a, 0x4}}, 0xe8) 13:55:51 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e20, 0x7, @mcast2, 0x1}, {0xa, 0x4e20, 0x60000000000000, @dev={0xfe, 0x80, [], 0x28}, 0x6}, 0x5959, [0xfff, 0x81, 0x4, 0xfffffffffffffffd, 0x2, 0x80000000, 0x6, 0x7f]}, 0x5c) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f0000000080)=0x1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r3}], 0x1, 0x0) getdents64(r3, &(0x7f0000000240)=""/124, 0x7c) ioctl$int_in(r1, 0x800040c004500a, &(0x7f0000000140)=0x80000002) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x2, 0x10000000d000000, {0x300000000000010}}, 0xfffffefd) 13:55:52 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x1, 0x400, 0x3, 0x10001, 0x2, 0x1, 0x80000001, 0x4, 0x40, 0x3ff, 0x9, 0x3, 0x10000, 0x10000, 0x1f, 0x4], 0x0, 0x890}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') r6 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r6, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r6, 0x4, 0xb, &(0x7f0000000180)=""/107) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:55:52 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x1, 0x400, 0x3, 0x10001, 0x2, 0x1, 0x80000001, 0x4, 0x40, 0x3ff, 0x9, 0x3, 0x10000, 0x10000, 0x1f, 0x4], 0x0, 0x890}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') r6 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r6, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r6, 0x4, 0xb, &(0x7f0000000180)=""/107) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:55:52 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x1, 0x400, 0x3, 0x10001, 0x2, 0x1, 0x80000001, 0x4, 0x40, 0x3ff, 0x9, 0x3, 0x10000, 0x10000, 0x1f, 0x4], 0x0, 0x890}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') r6 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r6, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r6, 0x4, 0xb, &(0x7f0000000180)=""/107) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:55:52 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x1, 0x400, 0x3, 0x10001, 0x2, 0x1, 0x80000001, 0x4, 0x40, 0x3ff, 0x9, 0x3, 0x10000, 0x10000, 0x1f, 0x4], 0x0, 0x890}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') r6 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r6, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r6, 0x4, 0xb, &(0x7f0000000180)=""/107) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:55:53 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x1, 0x400, 0x3, 0x10001, 0x2, 0x1, 0x80000001, 0x4, 0x40, 0x3ff, 0x9, 0x3, 0x10000, 0x10000, 0x1f, 0x4], 0x0, 0x890}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') r6 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r6, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r6, 0x4, 0xb, &(0x7f0000000180)=""/107) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) 13:55:53 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x1, 0x400, 0x3, 0x10001, 0x2, 0x1, 0x80000001, 0x4, 0x40, 0x3ff, 0x9, 0x3, 0x10000, 0x10000, 0x1f, 0x4], 0x0, 0x890}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') r6 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r6, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r6, 0x4, 0xb, &(0x7f0000000180)=""/107) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:55:53 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x1, 0x400, 0x3, 0x10001, 0x2, 0x1, 0x80000001, 0x4, 0x40, 0x3ff, 0x9, 0x3, 0x10000, 0x10000, 0x1f, 0x4], 0x0, 0x890}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') r6 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r6, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r6, 0x4, 0xb, &(0x7f0000000180)=""/107) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:55:53 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x1, 0x400, 0x3, 0x10001, 0x2, 0x1, 0x80000001, 0x4, 0x40, 0x3ff, 0x9, 0x3, 0x10000, 0x10000, 0x1f, 0x4], 0x0, 0x890}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') r6 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r6, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r6, 0x4, 0xb, &(0x7f0000000180)=""/107) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000), &(0x7f0000000080)=0x4) 13:55:53 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x1, 0x400, 0x3, 0x10001, 0x2, 0x1, 0x80000001, 0x4, 0x40, 0x3ff, 0x9, 0x3, 0x10000, 0x10000, 0x1f, 0x4], 0x0, 0x890}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') r6 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r6, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r6, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:53 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x1, 0x400, 0x3, 0x10001, 0x2, 0x1, 0x80000001, 0x4, 0x40, 0x3ff, 0x9, 0x3, 0x10000, 0x10000, 0x1f, 0x4], 0x0, 0x890}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') r6 = semget$private(0x0, 0x5, 0x0) semctl$GETPID(r6, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:53 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x9440, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000140)={0x10, 0x1, &(0x7f00000000c0)="b76471c663743e1c5d75bfe8e7c75aded6a520461e513575c942f3c3123068e732e11b080cbaf6626b5582d24916708cffa412e28ee3aea766e96ac82f80e684f68ac18a4ea287c9954abe8cca82ae19f2acf20ccc0aec7097acdfedbf0ebaadeb1581c3d5eb3b302a4a3b11021d85c50acdb86eb2f4", {0x7, 0xf7e9, 0x32314d54, 0x8, 0x101, 0x0, 0x4, 0x8001}}) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x202000, 0x40) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000001c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000480)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000580)=0xe8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x321044e, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1600}}, {@allow_other='allow_other'}], [{@euid_eq={'euid', 0x3d, r4}}]}}) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/null\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000007c0)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000840)={0xb, 0x10, 0xfa00, {&(0x7f0000000700), r6, 0x3}}, 0x18) keyctl$read(0xb, 0x0, &(0x7f0000000880)=""/4096, 0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000001880), 0x111, 0xdef2af69bcdcbeb8}}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001940)={&(0x7f0000001900)='./file0\x00', r5}, 0x10) r7 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000001980)={'hsr0\x00', {0x2, 0x4e21, @empty}}) getpeername$inet(r1, &(0x7f00000019c0)={0x2, 0x0, @remote}, &(0x7f0000001a00)=0x10) add_key(&(0x7f0000001a40)='rxrpc_s\x00', &(0x7f0000001a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r8 = syz_open_dev$usbmon(&(0x7f0000001ac0)='/dev/usbmon#\x00', 0x0, 0x240) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001b00)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x8, 0x3, 0x1f, 0x10000, 0x8}, &(0x7f0000001bc0)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000001c00)={r9, @in={{0x2, 0x4e21, @remote}}, 0x5, 0x80, 0x0, 0x6, 0x80000000}, &(0x7f0000001cc0)=0x98) r10 = syz_open_dev$adsp(&(0x7f0000001d00)='/dev/adsp#\x00', 0x800, 0x40000) ioctl$NBD_DISCONNECT(r10, 0xab08) openat$cuse(0xffffffffffffff9c, &(0x7f0000001d40)='/dev/cuse\x00', 0x2, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000001d80)='/dev/userio\x00', 0x406102, 0x0) bind(r5, &(0x7f0000001dc0)=@in={0x2, 0x4e24, @remote}, 0x80) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000001e40)=[@sack_perm, @mss={0x2, 0x400}, @timestamp, @sack_perm, @timestamp, @window={0x3, 0x100000000}, @mss={0x2, 0x4}, @sack_perm, @sack_perm, @mss={0x2, 0x7ff}], 0xa) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001ec0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000001f00)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x6d50, @empty, 0x9}, r6}}, 0x30) [ 257.158146][T11404] IPVS: ftp: loaded support on port[0] = 21 [ 257.304082][T11404] chnl_net:caif_netlink_parms(): no params data found [ 257.363907][T11404] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.371124][T11404] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.379986][T11404] device bridge_slave_0 entered promiscuous mode [ 257.392393][T11404] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.399594][T11404] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.408394][T11404] device bridge_slave_1 entered promiscuous mode [ 257.442966][T11404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.457364][T11404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.491251][T11404] team0: Port device team_slave_0 added [ 257.501029][T11404] team0: Port device team_slave_1 added [ 257.677127][T11404] device hsr_slave_0 entered promiscuous mode [ 257.843077][T11404] device hsr_slave_1 entered promiscuous mode 13:55:55 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x1, 0x400, 0x3, 0x10001, 0x2, 0x1, 0x80000001, 0x4, 0x40, 0x3ff, 0x9, 0x3, 0x10000, 0x10000, 0x1f, 0x4], 0x0, 0x890}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) [ 257.982331][T11404] debugfs: Directory 'hsr0' with parent '/' already present! [ 258.091602][T11404] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.099052][T11404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.106958][T11404] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.114247][T11404] bridge0: port 1(bridge_slave_0) entered forwarding state 13:55:55 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x1, 0x400, 0x3, 0x10001, 0x2, 0x1, 0x80000001, 0x4, 0x40, 0x3ff, 0x9, 0x3, 0x10000, 0x10000, 0x1f, 0x4], 0x0, 0x890}) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) [ 258.319381][T11404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.358435][ T12] bridge0: port 1(bridge_slave_0) entered disabled state 13:55:55 executing program 1: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x80, 0x400480) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r5 = socket$inet(0x10, 0x4000000000000002, 0x0) sendmsg(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000200007041dfffd946f610500810000e81f0000030000080008000c0004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xffffffffffffff30) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@remote, @in=@empty, 0x4e24, 0xbe, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x6c, r6, r7}, {0x6, 0x800, 0x0, 0xffff, 0x2, 0x6, 0x2, 0x8}, {0x7ff, 0x200, 0x3133, 0x3}, 0x9, 0x6e6bbb, 0x3, 0x1, 0x2, 0x1}, {{@in=@empty, 0x4d4}, 0xa, @in6=@loopback, 0x3506, 0x3, 0x0, 0x3f, 0xc9f, 0x8, 0xff}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', r6}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', r8}) setxattr$security_smack_transmute(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000440)='TRUE', 0x4, 0x4) ftruncate(r2, 0xffffff7f) [ 258.370532][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.406517][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 13:55:55 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) [ 258.445800][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.454308][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.484224][T11404] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.498949][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 13:55:55 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) [ 258.723222][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.732657][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.741624][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.748879][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state 13:55:55 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x200000) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@loopback, @broadcast, @loopback}, &(0x7f0000000080)=0xc) clone(0x40108000, 0x0, 0x0, 0x0, 0x0) [ 258.811582][T11404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 258.823041][T11404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.885293][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.895214][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.904301][ T3371] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.911666][ T3371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.920194][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 258.930163][T11423] IPVS: ftp: loaded support on port[0] = 21 [ 258.930204][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 258.946151][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 258.956038][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 258.965730][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 258.975534][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 13:55:56 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) [ 258.984937][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.994243][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.003763][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.012915][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.100968][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.110428][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.124516][T11404] 8021q: adding VLAN 0 to HW filter on device batadv0 13:55:56 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:56 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x101, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x200000) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@loopback, @broadcast, @loopback}, &(0x7f0000000080)=0xc) clone(0x40108000, 0x0, 0x0, 0x0, 0x0) 13:55:56 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) [ 259.455264][T11438] IPVS: ftp: loaded support on port[0] = 21 13:55:56 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x8001, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r5, 0x2000000000, 0x3d, 0x4) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000100)={0x4, 0x10000}) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 13:55:56 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:56 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x10000, 0x0) fremovexattr(r0, &(0x7f0000000240)=@random={'trusted.', 'posix_acl_accessnodev\'\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x10, 0x93}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x7f\x00'/248}, 0x48) 13:55:56 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00\xab\xd4\xf0\xdd\xa4\xf5\x7f\xd0\x97\xe1\x01T\xb7s\x1a\xba\xacfK\xed\xa4\x01bG\xc5q\xaa\xfa\xe8\r\x00\tu\xbc\x8em!\xdau\xf1;\xd7\x8a\x9a\xbfJ$ 0\x17\x9a\v\xc6\xf3m\x9d\xfa\xc9\xcalo\xa6') r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80000, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = socket$inet(0x10, 0x2, 0x0) timerfd_create(0x3, 0x80000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(r4, 0x0) r5 = getegid() sendmsg$unix(r1, &(0x7f0000000400)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000000c0)="a318f7673c11a7f1a69b85f14a61001de1708090a4ab0ccbdbc17885f74f5c48cdd11b3fdd6ffbed91944a44cf3305a82493bdb8b1cb11244bba6a6c", 0x3c}, {&(0x7f0000000140)="3de9bffd2ceeef963c07cd643d01b5858fb40eff34c24f071379d41dc34f8ad9039dadb42860ee4a9f263927af2e9ae8cab9b5ad655fac2e975b7246", 0x3c}, {&(0x7f0000000180)="34c8142326ec157819a3c69718622126e2b397756f69", 0x16}, {&(0x7f0000000240)="5dc38a9164b5bba027f24e3562bb0b0e3ba5132ded33b1f323ac7e245db2f9854bf06a900dcc2dfb", 0x28}, {&(0x7f0000000280)="b83465ce862c83c45bc65e0465dbca33b7d770f65e3068d54c6362bdfd51664e978a514195c0f20d2972ffc5221fa7592c4fff4ede83ebd693a892f012456b27374a7894d1019e705d4c71592d9f7d997ca4e1f0d07d3cc38426ebf5791db6d8c31d64363da5c1827664c28ed93a29770d2ec32c6b89c3b3fa93b02890aa7bde9a0280f8be7efa1b9bd0f9bd76598490dc4e84d86f9fab7dc435cebb11b97c9965be6edb25af9406142e7c0d3ceadf978f47292f51b01bd90f95f302bf", 0xbd}], 0x5, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r2, r4, r5}}}], 0x20}, 0x8000) getdents(r0, &(0x7f0000000100)=""/63, 0x24) getdents(r0, &(0x7f0000000ea9)=""/407, 0x197) 13:55:57 executing program 1: r0 = socket(0x10, 0x800000000080003, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a0003080000000029030000000000000000010008000100911af50cc72631a5f00b567d146c0fd0a3f8012720582a26c4afde4835ea24271b6d3a95ba8f6073930967e7ac7833f451014f9a7df39b01fa7f60d2", @ANYRES32=0x0], 0x20}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}, {}], 0x0, [{}]}, 0x88) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 13:55:57 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:57 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x28}, 0x1}, {0xa, 0x4e23, 0x1, @mcast1, 0x9}, r2, 0x2000}}, 0x48) 13:55:57 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:57 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:57 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x70}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x82}]}) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:57 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x8001, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r5, 0x2000000000, 0x3d, 0x4) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000100)={0x4, 0x10000}) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 13:55:57 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:57 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:57 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:58 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:58 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:58 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:55:58 executing program 0: semctl$GETPID(0x0, 0x4, 0xb, &(0x7f0000000180)=""/107) 13:56:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x5, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2, 0x20000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_emit_ethernet(0x66, &(0x7f0000000440)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x6, 0x0, @ipv4={[0x2, 0x2, 0x543, 0x0, 0x60], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff89, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) write$binfmt_elf32(r2, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x400, 0x1, 0x2, 0x892e49078cb8b635, 0x3, 0x9, 0xd6, 0x38, 0xe3, 0xfffffffffffffff7, 0x486, 0x20, 0x2, 0x8, 0x2, 0x200}, [{0x6474e550, 0x275b, 0x5, 0x6384, 0x4, 0x3ff, 0x1}, {0x2, 0xb61, 0x0, 0x0, 0x6, 0x6, 0x8, 0x9}], "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", [[], [], [], [], [], [], [], [], [], []]}, 0x1a78) 13:56:00 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, &(0x7f0000000180)=""/107) 13:56:00 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x8001, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r5, 0x2000000000, 0x3d, 0x4) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000100)={0x4, 0x10000}) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 13:56:00 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x4000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800044}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_getneigh={0xc8, 0x1e, 0x20, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x202, 0x20840}, [@IFLA_PROTO_DOWN={0x8, 0x27, 0xc9}, @IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_GROUP={0x8, 0x1b, 0xff}, @IFLA_VFINFO_LIST={0x90, 0x16, [{0x38, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x400, 0x492}}, @IFLA_VF_MAC={0x28, 0x1, {0xfffffffffffffffb, @random="3995ef389f19"}}]}, {0x44, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xff, @broadcast}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x8001}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x100}}]}, {0x10, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x7fff}}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x440}, 0x40) io_setup(0x400, &(0x7f0000000240)=0x0) r3 = openat$usbmon(0xffffffffffffff9c, &(0x7f0000000280)='/dev/usbmon0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80, 0x1a3) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x7701}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={r5, 0x5b}, 0x8) r6 = signalfd4(r3, &(0x7f00000003c0)={0x3}, 0x8, 0x800) fcntl$dupfd(r4, 0x0, r6) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000400)=')proc-.ppp0\x00') r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x4000, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r7, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r8, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffff779}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3e}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40020) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x100, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000640)={0x0, 0x1, 0x1, 0x3}) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000680)='oom_adj\x00') ioctl$KVM_KVMCLOCK_CTRL(r10, 0xaead) r11 = syz_open_dev$mouse(&(0x7f00000006c0)='/dev/input/mouse#\x00', 0x1, 0x88000) getsockopt$inet6_mtu(r11, 0x29, 0x17, &(0x7f0000000700), &(0x7f0000000740)=0x4) r12 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r7, 0x4c80, r12) r13 = syz_open_dev$sndpcmc(&(0x7f0000000780)='/dev/snd/pcmC#D#c\x00', 0x7, 0x101000) ioctl$RTC_EPOCH_READ(r13, 0x8008700d, &(0x7f00000007c0)) syz_open_dev$sndpcmc(&(0x7f0000000800)='/dev/snd/pcmC#D#c\x00', 0x800, 0x101000) r14 = syz_open_dev$cec(&(0x7f0000000840)='/dev/cec#\x00', 0x0, 0x2) sync_file_range(r14, 0x1fc00, 0x7167ff02, 0xc) io_cancel(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x4119, r3, &(0x7f0000000880)="fe1237c7a370b548f2c3eda0341d04a77c559916b85a7924b8a6a132214ad3aee63640ec899cb21dcb4ae4fd928f2a36aa77aeb2b04e7bfe6b9ddf92ee3e", 0x3e, 0x6, 0x0, 0x2}, &(0x7f0000000900)) r15 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r15, 0xb, &(0x7f0000000940)=""/254) 13:56:00 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) 13:56:00 executing program 0 (fault-call:0 fault-nth:0): semctl$GETPID(0x0, 0x0, 0xb, 0x0) 13:56:00 executing program 0: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x0, [], [{0x0, 0x89, 0x71d3cc2, 0x1, 0x1000, 0x9}, {0x8, 0x3, 0x4, 0x3, 0x24, 0x4}], [[], [], []]}) 13:56:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xcc6, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @multicast2}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="7f45484600000000000000000000000000000000000000000000000038000000000000000000000000003d74e0200000000000000000000000000000000000000000000000000000000000000000000000000000000000002757b2dbd4c22ddb3dcbfc4db882a990bc451dd2a952813948cdff01513ad27eca048963fa32fc8185f6612b9652bb9da5a565425ab4164c9cb061c689ce6e70526d17622db4dd833aff8ff6b24f737daaabccae4b3770a16cf6c73369a90fb0d4503b1c881e778b7a34eebeac65f89f89d8992673711569c79ee1f45859b77f066510a4b947bb2b7e495d3a20fd5e3236efca28ce690b1c0e854d0ed16ce4d3f3de262bbad1d525a372515020cfcc062ef6e59f813f9ffa0e4c6f1863ea94ae6960abbcc75a96229e2ff9465b4fc150270c1d8ba96979799aefc6a5"], 0x58) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x40, 0x0) bind$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0xfffffffffffffde7) 13:56:00 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x38000, 0x44800) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000001c0)=""/152) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$tipc(0x1e, 0x2, 0x0) 13:56:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f00000000c0)={{0x6}, {0x50c13769, 0x7}, 0x0, 0xbfbcb76c9f3601d5, 0x3e}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200000000000042) ioctl$FS_IOC_FSGETXATTR(r2, 0x80045510, 0x0) 13:56:01 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0xffffff0e, 0x0}}], 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x200}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000}, 0x14) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/163, &(0x7f00000000c0)=0xa3) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) r6 = dup3(0xffffffffffffffff, r5, 0x140000) r7 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0xffffffffffff8000, 0x410900) ioctl$DRM_IOCTL_GET_STATS(r7, 0x80f86406, &(0x7f0000000280)=""/33) ioctl$SCSI_IOCTL_STOP_UNIT(r6, 0x6) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) [ 264.024269][T11543] IPVS: ftp: loaded support on port[0] = 21 13:56:01 executing program 1: modify_ldt$write2(0x11, &(0x7f00000016c0), 0x10) clone(0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ptrace(0x4207, r0) [ 264.073367][T11546] IPVS: length: 163 != 8 13:56:01 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x8001, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r5, 0x2000000000, 0x3d, 0x4) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000100)={0x4, 0x10000}) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) 13:56:01 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = msgget(0x2, 0x0) msgctl$IPC_STAT(r0, 0x2, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/100}, 0x6c, 0x4, 0x800) 13:56:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000340)={0x70, 0x0, 'client0\x00', 0x0, "ecded75689071550", "8cb325891806f5e50c80c6ffc3877947e115692ca5e56792b0e5696a95f5ee21"}) gettid() timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000008031, 0xffffffffffffffff, 0x0) poll(0x0, 0x100, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000352000/0x4000)=nil], &(0x7f0000000000), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 264.383380][T11543] chnl_net:caif_netlink_parms(): no params data found [ 264.479333][T11543] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.486775][T11543] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.496863][T11543] device bridge_slave_0 entered promiscuous mode [ 264.525036][T11543] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.532768][T11543] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.541519][T11543] device bridge_slave_1 entered promiscuous mode [ 264.599892][T11543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.613255][T11543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.657024][T11543] team0: Port device team_slave_0 added [ 264.672127][T11543] team0: Port device team_slave_1 added [ 264.797793][T11543] device hsr_slave_0 entered promiscuous mode [ 264.843106][T11543] device hsr_slave_1 entered promiscuous mode [ 264.932485][T11543] debugfs: Directory 'hsr0' with parent '/' already present! [ 264.986793][T11543] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.994069][T11543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.001779][T11543] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.009042][T11543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.175724][T11543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.227148][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.254806][ T3371] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.272796][ T3371] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.290312][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 265.326474][T11543] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.344208][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.353614][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.363486][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.370655][ T3371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.424656][T11543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.435578][T11543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.454991][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.464391][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.473703][ T3371] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.480905][ T3371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.489266][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 265.499286][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 265.509230][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 265.519087][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 265.528626][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.538497][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.548138][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.557414][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.567008][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.576198][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.591797][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.600746][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.661703][T11543] 8021q: adding VLAN 0 to HW filter on device batadv0 13:56:03 executing program 3: prlimit64(0x0, 0xb, &(0x7f00000000c0), 0x0) personality(0x5000007) timer_create(0x0, 0x0, 0x0) 13:56:03 executing program 0: semget$private(0x0, 0x4, 0x400) semget(0x3, 0x1, 0x20) r0 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(r1, 0x0) r2 = getegid() lchown(&(0x7f0000000000)='./file0\x00', r1, r2) r3 = semget$private(0x0, 0x3, 0x0) semctl$SEM_STAT(r3, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r3, 0x1, 0xb, 0x0) 13:56:03 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x8001, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r5, 0x2000000000, 0x3d, 0x4) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000100)={0x4, 0x10000}) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 13:56:03 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000040)=""/16) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0x2, 0x100}) 13:56:03 executing program 3: r0 = socket(0x10, 0x2, 0x801) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3d}, {&(0x7f00000000c0)=""/85, 0xa83}, {&(0x7f00000024c0)=""/4096, 0x1038}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x89}, {&(0x7f0000000340)=""/22, 0x1de}], 0x357, &(0x7f0000002400)=""/191, 0x1f9}, 0x6}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) 13:56:03 executing program 0: semget$private(0x0, 0x1, 0xa00) semget$private(0x0, 0x3, 0x80) r0 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000100)=""/168) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000002c0)=@get={0x1, &(0x7f0000000080)=""/100}) r4 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r4, 0x0, 0x12, &(0x7f0000000100)=""/168) r5 = semget$private(0x0, 0x5, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xb0, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x40) ioctl$HIDIOCGSTRING(r7, 0x81044804, &(0x7f00000001c0)={0xc9, "6284c8724ba85230ef3fbb7bed4becfffd519e748dcc5c949a35c89c0a3407c1bbfb7bb0042b776ea7026a61bffe206c776f378893607a0bdfa886c0bff3fdc45de4215544936716e24d8a83a08e9732f21a4c05ec32689f3f7982bc7694a90751cc5a2f7fab25175f4bd045843b70e2cfbe79b97aad8f95fb07d288cf03ca11bc62e96ce299592a184e606daf0638b14ef47a8312958f4a2278465cf9ff915b5bf6d7cfd755f68d0756ce7c0d11c5db4a76f26ca4ce503ecaa56362db29bb71449f1c46b1efeebab7"}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) semctl$SEM_STAT(r5, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r5, 0x3, 0xb, 0x0) 13:56:03 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[0xffffffffffffffff, r2, r3, r4], 0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x6, 0x1, {0x5, @sdr}}) 13:56:03 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) 13:56:03 executing program 0: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket(0xa, 0x1, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000300)="717ce3c6dfd416b25e62d5c173f9eeab139e9d8ad1516172f86d5dbbc384dffd49ce41cf6146fde88900fb89ba28079b98a9b82c5d75aa03937be8fc0375751d1b71b287014404acd8f315da9fed8dcec1857c1a743b4e7bdf1a297c6e98fa3a6a24bc720265df629185d741974e3bef714dfa050eb7abbcfb864774105315f8e4792ee45a6814e305fbd10dcfc73c07279d6d9fa81b483ca657d9c0aa85171bdecb9f8f8089f2fe82ae76c1e091486cead5a09204c09544a85c17bc21190b2f426d4c4dc070a0cd221fb78e2c2281d2fef065b20baebb58a605278c8ae9e8b936ff0ea6d99dec89d33404812d160ae36de9806d4958859f7c014b2f90446fd3") setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="ef5e2c5b4bfc0000000000000000009eae0d20614ceac5b6b634f2a3065ddb000000009ddbbbb507d901617a3014306fb4e39f0fc02ccd3169435a1d89bcc4d7cc3f0879f13f744e70c3d6589fabea5095dab17e55f5a8cfd88c95018bca2a56df21f5ab09feff1ff0d49d1ffea80946bbb7db55b62c8b2ea3035176e794752ba88e615b38c4c1c9314912bbfa88e1b615322ca43a75e9608469b5f4446bab29e351ee1f2e0b3035c9f26654c3376bb486148a172fa9d9152a60f09279b27ff817a54ce9aaa85e68a66ea2456194f8116f05cead629dfdf422a18837795b87f675fbcff9388481ba8c6885116bf0fb325b70", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000002c0)={r5, 0x0, 0x30}, &(0x7f0000001880)=0x18) getsockname$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x1ff, 0x8, 0x2, 0x7, 0x648c, 0x189, 0x5, 0x80, r5}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r6, 0x5}, &(0x7f00000000c0)=0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) getsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000100), &(0x7f0000000140)=0x10) semctl$GETPID(0x0, 0x0, 0xb, 0x0) chroot(&(0x7f0000000180)='./file0\x00') 13:56:04 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x8001, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r5, 0x2000000000, 0x3d, 0x4) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000100)={0x4, 0x10000}) socket(0xa, 0x1, 0x0) 13:56:04 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") semctl$GETPID(0x0, 0x0, 0xb, 0x0) semget$private(0x0, 0x1, 0x21) 13:56:04 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x400000000) connect$inet(r0, &(0x7f0000000040), 0x10) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x800) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:04 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000100)=""/168) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000280)=""/168) semctl$GETPID(r1, 0x4, 0xb, 0x0) 13:56:04 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x400000000) connect$inet(r0, &(0x7f0000000040), 0x10) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x800) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:04 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000100)=""/168) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r3 = open(0x0, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) write$P9_RSTATu(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6], 0xc) r7 = geteuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r9 = open(0x0, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) write$P9_RSTATu(r9, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12], 0xc) getgroups(0x2, &(0x7f00000000c0)=[0xee00, r11]) r14 = gettid() ptrace$setopts(0x4206, r14, 0x0, 0x0) tkill(r14, 0x38) ptrace$cont(0x18, r14, 0x0, 0x0) ptrace$setregs(0xd, r14, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r14, 0x0, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000001c0)={0x1e, 0x37, 0x2, {0x0, 0x4, 0x4, r14}}, 0x1e) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x78d0, r1, r5, r7, r13, 0x80, 0x8}, 0x1, 0x4, 0x9}) 13:56:04 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x400000000) connect$inet(r0, &(0x7f0000000040), 0x10) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x800) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:04 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x20100, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x298004, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000003c0)={0xd4a0, 0x3}) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10100080}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c3428624", @ANYRES16=r1, @ANYBLOB="00012bbd7000fddbdf250a0000001c0007000c000400860a0000000000000c0003000000000001000000380001000800030002000000080003000400000014000200080001000800000008000400060000001000010069623a726f73653000000000e4000500080001006574680044000200080001000d00000008000200010000000800040001000000080001001b000000080002000300000008000200040000000800020007000000080003000300000008000100696200000800010069620000140002000800030005000000080001000400000008000100696200002c00020008000200ab00000008000300020000000800040000000000080003003d0d000008000100030000003c000200080004000500000008000100160000000800030088000000080004000700000008000300ff7f0000080001000900000008000400420000001c000500080001007564700008000100756470000800010075647000bc0004000c00010073797a31000000001400070008000300ffffff7f08000300000400001400010062726f6164636173742d6c696e6b00000c00010073797a30000000001400010062726f6164636173742d6c696e6b000024000700080004000900000008000400d746cb4508000200c500000008000200030000001c00070008000100110000000800040000000000080001001f00000024000700080002000700000008000400f3dd000008000400758c00000800040005000000"], 0x224}, 0x1, 0x0, 0x0, 0x4000800}, 0x24004080) 13:56:04 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x400000000) connect$inet(r0, &(0x7f0000000040), 0x10) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x800) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:06 executing program 3: socket$kcm(0x2, 0x200000000000001, 0x0) 13:56:06 executing program 4: r0 = semget(0x2, 0x4, 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x3, 0x7, 0xffff, 0x2178df76]) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x5c0, [0x0, 0x200000c0, 0x200000f0, 0x20000314], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0x1}, {0x0, '\x00', 0x0, 0x2, 0x2, [{0x9, 0x3, 0x6007, 'bcsh0\x00', 'veth0_to_team\x00', 'rose0\x00', 'ipddp0\x00', @dev={[], 0x28}, [0x0, 0x0, 0x0, 0x1fe, 0xff, 0xff], @local, [0x0, 0x101], 0x6e, 0xd6, 0x106, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffe0, 0xfffffffffffffffe}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}, {0x5, 0x10, 0x4305, 'vxcan1\x00', 'ip_vti0\x00', 'netdevsim0\x00', 'rose0\x00', @empty, [0xbd6790e3dcc65c43, 0xff, 0x0, 0xff, 0x0, 0xff], @random="99229c126a07", [0xff, 0xff, 0x7f, 0xff, 0xff], 0x6e, 0xa6, 0xee, [], [@common=@mark={'mark\x00', 0x10, {{0xffffffd0, 0xfffffffffffffffe}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3, 0x0, 0x326}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x3, 0x8, 0x8848, 'eql\x00', 'ip6_vti0\x00', 'veth1_to_bond\x00', 'veth1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x101, 0x2fad30d5360bfc7, 0x0, 0xff, 0xff], @remote, [0x7f, 0x0, 0x0, 0xff, 0x0, 0x7f], 0x6e, 0x6e, 0x9e, [], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffc}}}}, {0x11, 0x40, 0x1a, 'veth0_to_bond\x00', 'vxcan1\x00', 'gretap0\x00', 'hsr0\x00', @empty, [], @local, [0xff, 0xff, 0x0, 0xff, 0xff], 0x10e, 0x23e, 0x26e, [@quota={'quota\x00', 0x18, {{0x1, 0x0, 0x80000000, 0x8001}}}, @arp={'arp\x00', 0x38, {{0x205, 0x0, 0x3, @broadcast, 0xffffffff, @broadcast, 0xffffffff, @local, [0x44189920135aff8d, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={[], 0x22}, [0xff, 0x0, 0x0, 0x0, 0x17e, 0x17e], 0x0, 0x3c3ccc5207f85f94}}}], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x5, 'system_u:object_r:newrole_exec_t:s0\x00'}}}], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}]}, 0x638) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000700)='trusted.overlay.origin\x00', &(0x7f0000000740)='y\x00', 0x2, 0x1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000780)='/dev/mixer\x00', 0x400, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x8000) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/capi/capi20\x00', 0x280c1, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000800)) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000900)={0x0, 0x0, 0x7187}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000940)={r5, 0x0, 0x8}) r6 = syz_open_dev$usbmon(&(0x7f0000000980)='/dev/usbmon#\x00', 0xc3, 0x4400) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000009c0)={0x0, 0x9}, &(0x7f0000000a00)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000a40)={r7, 0x3, 0x8001, 0x9, 0xd79, 0x8}, &(0x7f0000000a80)=0x14) r8 = accept4(r3, &(0x7f0000000ac0)=@l2, &(0x7f0000000b40)=0x80, 0x800) getsockopt$bt_rfcomm_RFCOMM_LM(r8, 0x12, 0x3, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) r9 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) bind$inet6(r9, &(0x7f0000000c00)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x16}, 0x5}, 0x1c) recvmmsg(r8, &(0x7f0000002580)=[{{&(0x7f0000000c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002140)=[{&(0x7f0000000cc0)=""/25, 0x19}, {&(0x7f0000000d00)=""/73, 0x49}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/18, 0x12}, {&(0x7f0000001dc0)=""/144, 0x90}, {&(0x7f0000001e80)=""/217, 0xd9}, {&(0x7f0000001f80)=""/194, 0xc2}, {&(0x7f0000002080)=""/144, 0x90}], 0x8, &(0x7f00000021c0)=""/192, 0xc0}, 0xffffffff}, {{&(0x7f0000002280)=@hci, 0x80, &(0x7f0000002440)=[{&(0x7f0000002300)=""/252, 0xfc}, {&(0x7f0000002400)=""/15, 0xf}], 0x2, &(0x7f0000002480)=""/219, 0xdb}, 0xdb4}], 0x2, 0x10000, &(0x7f0000002600)={0x77359400}) getsockopt$inet6_udp_int(r10, 0x11, 0x1, &(0x7f0000002640), &(0x7f0000002680)=0x4) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002700)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x1c020008}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x74, r11, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xa0000000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @broadcast}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x80) r12 = semget$private(0x0, 0x6, 0x4) semctl$SETVAL(r12, 0x1, 0x10, &(0x7f0000002840)=0x9) r13 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002880)='/dev/sequencer\x00', 0x123443, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r13, 0x400443c8, &(0x7f00000028c0)={r9, 0x3}) r14 = gettid() setpriority(0x0, r14, 0x1) r15 = syz_open_dev$dspn(&(0x7f0000002900)='/dev/dsp#\x00', 0x5, 0x101000) ioctl$KDSKBLED(r15, 0x4b65, 0x20) 13:56:06 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x8001, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r5, 0x2000000000, 0x3d, 0x4) ioctl$BLKRESETZONE(r5, 0x40101283, &(0x7f0000000100)={0x4, 0x10000}) 13:56:06 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x400000000) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:06 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x1) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xacbc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xd8dfbc7cb5c24b6a}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40081}, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40008801}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="64008f0084091b719a7f7ab57c3364909a604ee02b37d48129d2e34257b749179cae1f0c5fc9b49e46b71ff305c9af0ea86349d04cfcf18f1199f5bef230f0c60653aab2b783df55117ccdafb3b71dbc92624b363bf595c9e2fde418217878c8a67c218f277b37e390ba7a7e9d2d4a99ed571dd13255c7ce92449de1c4169ef892cae470df2fcb5d45ff018f7511e6f61714704fd3676c61651307ebc2a8c87e3465d7073f17be70e28cc7177aef29b73a3afe8afeb300"/196, @ANYRES16=r1, @ANYBLOB="00012bbd7000ffdbdf25060000000800040002000001000c0007000200000001000000080005000800000008000400ffffffff14000200080002004e230000080002004e230000080006000180000004000200"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x880) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000004c0)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x224102, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000480)=0x8, 0x4) r4 = openat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x1, 0x2c) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r6 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(r7, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'lapb0\x00', 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r10 = socket$inet(0x10, 0x4000000000000002, 0x0) sendmsg(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000200007041dfffd946f610500810000e81f0000030000080008000c0004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xffffffffffffff30) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@remote, @in=@empty, 0x4e24, 0xbe, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x6c, r11, r12}, {0x6, 0x800, 0x0, 0xffff, 0x2, 0x6, 0x2, 0x8}, {0x7ff, 0x200, 0x3133, 0x3}, 0x9, 0x6e6bbb, 0x3, 0x1, 0x2, 0x1}, {{@in=@empty, 0x4d4}, 0xa, @in6=@loopback, 0x3506, 0x3, 0x0, 0x3f, 0xc9f, 0x8, 0xff}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'vcan0\x00', r11}) r14 = socket$inet(0x10, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(r15, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000b00)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1800020}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000680)=@newpolicy={0x42c, 0x13, 0x1, 0x70bd28, 0x25dfdbfe, {{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e22, 0x4, 0x4e20, 0x5, 0xa, 0x0, 0x1c0, 0x0, 0x0, r7}, {0xfffffffffffffffd, 0x1152, 0x9, 0x36, 0xc00000000000, 0x4, 0x800, 0x80000001}, {0x1000, 0x7, 0xffff, 0x8000}, 0x3, 0x6e6bb3, 0x1, 0x1, 0x3}, [@tmpl={0xc4, 0x5, [{{@in6=@mcast1, 0x4d2, 0x2b}, 0x0, @in=@multicast2, 0x34ff, 0x1, 0x2, 0x200, 0xfffffffffffffc01, 0x2, 0x2}, {{@in=@rand_addr=0x9, 0x4d3, 0x2b}, 0x0, @in6=@loopback, 0x3507, 0x2, 0x2, 0x13, 0x0, 0x34, 0xd0}, {{@in=@broadcast, 0x4d6, 0x32}, 0xa, @in6=@local, 0x3504, 0x4, 0x2, 0x200, 0x9, 0xbb, 0x3}]}, @ipv6_hthresh={0x8, 0x4, {0x5d, 0x78}}, @offload={0xc, 0x1c, {r8, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in=@remote, @in6=@empty, 0x0, 0x2}}, @policy={0xac, 0x7, {{@in=@empty, @in6=@local, 0x4e20, 0x7fff, 0x4e21, 0x2, 0xa, 0xa0, 0x80, 0x0, r13, r15}, {0x9, 0xfffffffffffffa12, 0x400, 0x80000001, 0x5293, 0x6278, 0xffffffff, 0x8}, {0x200, 0xbc, 0x5, 0x9a6}, 0xc1c, 0x6e6bbb, 0x1, 0xcb0a128ac818fdf1, 0x3, 0x4f2032148f952212}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2b, 0x2}}, @algo_crypt={0x88, 0x2, {{'xts-camellia-asm\x00'}, 0x1f8, "15a1f4e78fd67ad7139f4b9c3aa01ae530ecad4f0ceba403efcf5d55f97e7c32eef6a37650d7a677b2084d9bd42e540c7c9a2c2728bac68781d11f75e96031"}}, @ipv6_hthresh={0x8, 0x4, {0x11, 0x4e}}, @algo_aead={0x124, 0x12, {{'rfc4543(rfc7539(ctr(aes-aesni),crct10dif-generic))\x00'}, 0x6b0, 0x0, "3f7a91104920f4ba3b74c8a52874f02d08a7168618cef457e3a263077bc5a2d8090a6dd78293100076e94e0c53ae97d7e288564ddcefe59c03bd84e24bd9634c48a4110554295007ea30f0e6ebf2b49abd7106d9379da0ae8d1ce97eda44fead488f48a98f157749be65c9c78280731bdfc7887d71d242965154dd0f5c7db2d404e8d06b1af8a85c85c07c3bbf99184ff6615a8a47004322eb4bc168dbfff0441f0130a1cfa2b80cc75b23605b9905645c1673c7a9de1af9c8ed3364aa4ef5fcaa439723994b58d8aa63d9eeefffbf0f2d94e5ef3338"}}]}, 0x42c}, 0x1, 0x0, 0x0, 0x80d8}, 0x10) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f00000000c0)=0x8) 13:56:06 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x400000000) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) [ 269.682772][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 13:56:06 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) getsockopt$inet6_tcp_int(r3, 0x6, 0x1a, 0x0, &(0x7f0000012ffc)=0x80fb268a) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) 13:56:06 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x400000000) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:07 executing program 3: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8993, &(0x7f0000000180)={'ip_vti0\x00'}) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x40) 13:56:07 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x400000000) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:07 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 13:56:07 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:07 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x111) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000002c0)={r4, 0x0, 0x30}, &(0x7f0000001880)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r4, 0x4) name_to_handle_at(r0, &(0x7f0000000040)='.\x00', &(0x7f0000000280)={0x7}, 0x0, 0x0) [ 270.466802][T11680] IPVS: ftp: loaded support on port[0] = 21 [ 270.679079][T11680] chnl_net:caif_netlink_parms(): no params data found [ 270.749145][T11680] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.756493][T11680] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.765385][T11680] device bridge_slave_0 entered promiscuous mode [ 270.777232][T11680] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.784570][T11680] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.793496][T11680] device bridge_slave_1 entered promiscuous mode [ 270.830915][T11680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.844702][T11680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.881230][T11680] team0: Port device team_slave_0 added [ 270.890735][T11680] team0: Port device team_slave_1 added [ 270.997637][T11680] device hsr_slave_0 entered promiscuous mode [ 271.124814][T11680] device hsr_slave_1 entered promiscuous mode [ 271.312448][T11680] debugfs: Directory 'hsr0' with parent '/' already present! [ 271.346691][T11680] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.353962][T11680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.361680][T11680] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.368927][T11680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.463285][T11680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.487970][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.499626][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.511902][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.526007][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 271.550839][T11680] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.571737][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.581407][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.588649][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.661473][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.670632][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.677877][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.689212][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 271.699401][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 271.709123][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.718385][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 271.730357][T11680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 271.739090][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 271.797256][T11680] 8021q: adding VLAN 0 to HW filter on device batadv0 13:56:09 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:09 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x8001, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) fadvise64(r5, 0x2000000000, 0x3d, 0x4) 13:56:09 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0xed5d269552328fbf, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x1, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7e3}) unshare(0x8050000) eventfd2(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) poll(&(0x7f0000000180)=[{r2}], 0x1, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$netlink(r3, 0x10e, 0x7, &(0x7f0000000000)=""/105, &(0x7f0000000080)=0x69) 13:56:09 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:09 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0xe0901, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x4004743d, &(0x7f0000000440)=""/246) close(r0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400, 0x0) read(0xffffffffffffffff, 0x0, 0xfffffffffffffee3) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x30, r1, 0x0) 13:56:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xbb, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], 0x392) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000200)=0x200) getpid() r3 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r3, &(0x7f0000000180)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r5}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x20f, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffffffffffffcd) poll(&(0x7f0000000040)=[{r4}], 0x1, 0x0) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f0000000500)={{0x1, 0x1, 0xa2c, 0x1, 0x1ff, 0x3ff}, 0x67, [0x2, 0x4, 0x6917de58, 0xaa, 0x5, 0x2, 0x101, 0x22, 0x200, 0x6, 0x3, 0x3e, 0xcb, 0x5, 0x92, 0x1000, 0x8, 0x38f, 0x400, 0x8, 0x44, 0x1f, 0x7, 0x1, 0xffffffffffffffe0, 0x78, 0xffffffffffffddb7, 0x7, 0xfffffffffffffff8, 0x1000, 0x6, 0x200, 0x862, 0xf0e, 0xffff, 0x10001, 0x4, 0x6, 0x92, 0x272, 0x1, 0x4, 0x7, 0x7fff, 0x10001, 0x10000, 0x10000, 0x3f, 0x8001, 0x1, 0x4, 0xb155, 0x0, 0x6, 0x5, 0x4, 0x5, 0x1, 0x4, 0x5, 0x8000, 0x1, 0x40, 0x4, 0x76, 0x2, 0x5, 0x12ba, 0x4, 0x5, 0x7ff, 0x8001, 0x3812, 0x7, 0x7, 0x6, 0x6, 0x2, 0x2, 0x1, 0x3e6, 0x1, 0x7f, 0x10001, 0x0, 0x8, 0x9fc, 0x7, 0x5, 0x6, 0x4, 0x0, 0xf84f, 0x6, 0x2, 0xb9, 0x8, 0x595, 0x50000, 0x8, 0x7f, 0x273, 0x9, 0x8, 0x2, 0xad, 0x5, 0x7, 0x33e4b90a, 0xffffffffffffffc0, 0x7, 0xfffffffffffffffe, 0x5, 0x7fffffff, 0x1400000, 0x3, 0x3f, 0x0, 0xac95, 0x401, 0x30000000000, 0x1000, 0x3, 0x8000, 0x40, 0xfffffffffffffff7, 0x0, 0xfffffffffffffff9, 0x76eb643d, 0x6, 0x3, 0xfffffffffffffffb, 0x0, 0xda, 0x2, 0x2, 0x76d, 0x5c, 0x6, 0xfffffffffffffffa, 0x5, 0x0, 0x5, 0x9, 0x2, 0x7f, 0xfffffffffffffff7, 0x7e0, 0x7, 0x7, 0x40, 0x100000001, 0x10001, 0x6, 0x9, 0x7, 0x1f, 0x4, 0x200, 0x1a, 0x5, 0x7b08, 0x9, 0x0, 0x1, 0x1, 0xffff, 0x8e, 0x8001, 0x7, 0x5, 0x1, 0x7f, 0x7, 0xffffffff, 0xb5, 0x8, 0x9, 0x1ff, 0x2, 0xffffffff, 0x6, 0x3, 0x10001, 0x20, 0x80, 0x3, 0x5, 0x8001, 0x7, 0x2, 0xc98, 0x6, 0x5, 0x1, 0x0, 0x8, 0x6, 0x8, 0x0, 0x7fff, 0x80, 0x9, 0x50, 0x401, 0x101, 0x7, 0x4, 0x5, 0x2, 0x3, 0xffffffffffff57f9, 0x2, 0x8, 0x800, 0x0, 0x4, 0x8001, 0x1, 0x80000000, 0x7, 0x1, 0x8, 0x800, 0x1, 0x7fff, 0x1, 0x6, 0x3b, 0x6e, 0xbf10, 0x4, 0x7, 0x7252, 0x5, 0x5, 0x3, 0x3, 0xffffffff80000001, 0x10000, 0x7f, 0x5, 0x200, 0x3, 0xfe, 0x30e, 0x80000001, 0x7, 0x3, 0x7fff, 0x42a, 0x6, 0x67e2, 0x7, 0xfffffffffffffbff, 0x10000, 0x1, 0x200, 0x4, 0x200, 0x3685d8f1, 0x1, 0x7, 0x9ff4, 0x0, 0xff, 0x4, 0x0, 0x3, 0x1000, 0x4, 0x9, 0x1, 0x3, 0x5, 0x5, 0x32ac, 0x97b000, 0x90f, 0x37, 0x9, 0xffffffffffff1fbc, 0x1, 0x5, 0x100000000, 0x0, 0xfffffffffffffffb, 0x2fd, 0x7bd, 0x8000, 0x1, 0x40, 0x1000, 0x8, 0x5, 0x0, 0x3f, 0x2, 0xbf, 0x10000, 0x4, 0x2, 0x7, 0x0, 0x5, 0x20, 0x200, 0x1000, 0xffff, 0x3ff, 0x7, 0x3800000, 0x401, 0x200, 0x3, 0x5fa0, 0x8, 0xfffffffffffffffa, 0x1, 0x80000001, 0x4, 0x2, 0x7fff, 0x800, 0x80000001, 0x4, 0xffff0, 0x8, 0x30e8, 0x8, 0x7, 0x80000000, 0x5, 0x1, 0xa2ff, 0x3, 0x1f, 0x2, 0x696, 0x3ff, 0xffffffff00000000, 0x5, 0xfff, 0x2, 0x0, 0x7ff, 0x101, 0xadf, 0x7, 0x2, 0x5, 0x82, 0x0, 0x7, 0xfffffffffffeffff, 0xffff, 0x8000, 0x991, 0xc1, 0x9, 0x80000000, 0x0, 0x8000, 0xfffffffffffffffa, 0x5, 0xfffffffffffffff8, 0x7fffffff, 0x9, 0x7, 0x8, 0x4, 0x3000, 0x0, 0x101, 0x0, 0xc5a2, 0x80, 0x3, 0x3, 0x0, 0x6, 0x9335, 0x9, 0x217, 0x65df, 0x3, 0xbaa, 0x5, 0x0, 0x800, 0x30f, 0x25a5, 0x6, 0x8001, 0x1, 0x101, 0x8, 0x6, 0x1, 0x100000001, 0x391dca5e, 0xfffffffffffffffb, 0x1, 0x1, 0x100, 0x10001, 0x38000000000000, 0x10000, 0x100, 0x80, 0x9, 0x31, 0x1000, 0x3ff, 0x0, 0x6, 0x1, 0xffffffffffffff22, 0x9, 0xff, 0xffffffffffff15ec, 0x2, 0x35d3, 0x8, 0x3, 0x8e9e, 0x7, 0x8001, 0x4, 0x5, 0x3, 0xd584, 0x80, 0x7, 0x10000, 0x5, 0x4, 0x400, 0x9, 0x80, 0x9, 0x852, 0x1, 0x0, 0x3f83, 0x9, 0x5, 0xffffffff, 0x8, 0x4, 0x0, 0x8, 0x7f, 0x7fffffff, 0x7, 0xf75, 0x1ff, 0x7, 0x4, 0x2, 0xffff, 0xffff, 0x0, 0xfffffffffffffff9, 0x4, 0xee, 0x759, 0x2, 0x400, 0x1, 0x1, 0x2ae, 0x8, 0xff, 0x9, 0x4, 0xffffffff, 0x1, 0x73f538fe, 0x0, 0x2, 0x1, 0x2, 0x1, 0x7, 0x9, 0x3, 0x0, 0x4, 0x3ff, 0x3, 0xf6, 0x0, 0xfff, 0x5, 0x1f, 0x3, 0x4dd8000000000, 0x1, 0x8, 0x7fff, 0x0, 0x6, 0x0, 0x100000001, 0x0, 0xaee4, 0x4, 0x1, 0x8000, 0x53, 0x401, 0x400, 0xfffffffffffffbff, 0x4, 0x602, 0x1000, 0x8, 0xfffffffffffffff9, 0xc27, 0x8, 0x4cf3, 0xff, 0x0, 0x3, 0x0, 0x9, 0x9, 0x4, 0xff, 0x5, 0xffff, 0xfffffffffffff801, 0x5, 0x8, 0x48c5, 0xffff, 0x2, 0x1, 0x9, 0x101, 0x0, 0x4, 0x4, 0x0, 0x101, 0x100000001, 0x8, 0xe404, 0xfa, 0xcb, 0xead, 0x1, 0x4, 0x5, 0x4, 0x8, 0x4, 0x0, 0xffffffff, 0x4, 0x3, 0xddf0, 0x4, 0x6, 0x80, 0x100000001, 0x0, 0x3, 0x9, 0x4, 0x101, 0x6, 0x10000, 0xd5, 0x20, 0x1, 0xfffffffffffffe01, 0x80000000, 0x6, 0x78, 0x9, 0x401, 0x88, 0x7, 0x5, 0x1, 0xffffffff, 0x7, 0x5, 0x5, 0x4a5b461f, 0xd9, 0x3, 0x6, 0x1, 0xffffffff, 0x3ff, 0x3ff, 0x3ff, 0x0, 0x0, 0xfffffffffffff285, 0x2, 0x1000000, 0x0, 0x2, 0x318379db, 0x341, 0x6, 0x5e19, 0x10001, 0xff, 0x200, 0x5, 0x5, 0x4, 0x80000000, 0x7, 0x8, 0x4, 0x1, 0x1, 0x3, 0x5, 0x4, 0x9, 0x81, 0x0, 0x3f, 0x7, 0x43, 0x1ff, 0x4, 0xfffffffffffff001, 0x4, 0x3, 0x2d1f, 0xb5, 0x1f, 0x3ff, 0x0, 0x10001, 0x2, 0x100000000, 0x3, 0x6da8, 0x10000, 0x7, 0x1, 0x3, 0x2, 0x0, 0xfff, 0x16c, 0x7ae, 0x80000000, 0x1, 0x7, 0x83d0, 0x1f, 0x0, 0x80, 0x4, 0x4, 0x18, 0x1360, 0x1, 0x1f, 0x11, 0x200, 0xfffffffffffff800, 0xf1a6, 0x4, 0xffffffffffffffdb, 0x6a8, 0x0, 0x7, 0xffffffff80000001, 0x9, 0x31, 0x4e, 0x8, 0x4, 0x1ff, 0x100, 0x5, 0xba, 0x100, 0x0, 0x3, 0xc1b, 0x1, 0x0, 0x4, 0x9, 0x7, 0x0, 0x7, 0x9, 0x0, 0x1f, 0x8, 0x7, 0x3, 0x1, 0x9, 0x9, 0x9, 0x80, 0x5c2c, 0xf5, 0x0, 0x2008000000, 0x1, 0x400, 0x800, 0x3, 0xffffffffffffff00, 0x1, 0x1, 0x3, 0x24f, 0x2, 0x5, 0xff, 0x100, 0x5e7, 0x6, 0x5, 0x4, 0x2, 0xff, 0x1, 0xffffffff, 0xf3, 0x1, 0x4, 0x5, 0x0, 0x4, 0x3f, 0x7, 0x0, 0xffffffff, 0x101, 0x5, 0x6b8, 0x3f, 0x1, 0x3ff, 0x100000000, 0x8000000000000, 0xffffffff, 0x0, 0x0, 0x5d2f1eab, 0x100000000, 0x200, 0x6, 0x1, 0x80000000, 0x7, 0x0, 0x236c, 0x8, 0xffffffff, 0x0, 0xfff, 0x7f, 0x3, 0x0, 0x5, 0xe370, 0x6, 0x57, 0x5, 0x9, 0xffffffffffff0001, 0x401, 0x7f206279, 0x3, 0x1000, 0x5, 0x100, 0x8, 0x7, 0x4, 0x6, 0x0, 0x100, 0x1, 0xff, 0x1, 0x7, 0x3, 0xd9, 0x400, 0x101, 0x8, 0x5, 0x576b, 0x3, 0x1, 0x0, 0x1, 0x8, 0x7, 0x0, 0x177, 0x2b8d4, 0x6, 0x9, 0x7, 0xcf9d, 0xb6e, 0x1, 0x5, 0x2, 0x81, 0x1, 0x5, 0x6, 0xc8f, 0x40, 0x1f, 0x0, 0x4a0, 0x1, 0x3, 0x8, 0x5ffe, 0x7, 0x4, 0xfff, 0x2, 0x401, 0x6, 0x4d4f, 0x3, 0x7, 0x4, 0xa1b, 0xffff, 0x9, 0x7f, 0x3ff, 0x1, 0x400, 0x0, 0xeecc, 0xd1f, 0x7f, 0x6, 0x8000, 0x7, 0x0, 0x8, 0xffffffff80000001, 0x9, 0x6, 0xfffffffffffffeff, 0x9, 0x1ff, 0x5, 0x7, 0x3, 0x810000, 0x6, 0x1, 0x100, 0x6, 0x4, 0xfffffffffffffff9, 0x9f0f, 0x9, 0x7ff, 0xad81, 0x5, 0x6, 0x0, 0x3, 0x0, 0x8f, 0x8, 0x80000000, 0x8, 0x1, 0xffffffffffffbb11, 0x1, 0x0, 0x964b, 0x2, 0xfffffffffffffffb, 0x8, 0x101, 0x8001, 0x9, 0x9, 0x863, 0xffff, 0x0, 0x6, 0x6, 0x5, 0x8001, 0x100, 0xffff, 0x88, 0x2, 0x10000, 0x7, 0x200, 0x8, 0x1, 0x0, 0x7, 0x38, 0x1, 0x7fffffff, 0x2, 0x1f, 0x5, 0xd1, 0x1, 0x7, 0x1, 0x20, 0x800, 0x0, 0x200, 0x800, 0x9, 0x80, 0x5, 0xdc1e, 0x8, 0x7fff, 0x0, 0x3, 0x8, 0x0, 0x100, 0x8, 0x6, 0x1dbf, 0x1000, 0x6, 0x80000000, 0x8, 0x5, 0xfffffffffffffff8, 0x1, 0x7fffffff, 0x5, 0x145e2cae, 0xffffffff, 0xffffffffffff26ae, 0x6, 0x6, 0x5, 0x10001, 0x7, 0x8001, 0x3, 0x2, 0x400, 0x7, 0x7ff, 0x94, 0x3, 0x8001, 0x96, 0x4c28, 0x1f, 0x400, 0x2, 0xffffffffffffffd8, 0x5, 0x3, 0x20, 0x40, 0x6230, 0x3ff, 0x3, 0x0, 0x1, 0x7fff, 0x2000000000000000, 0xec, 0x7, 0x400, 0x8, 0x206, 0x3, 0x0, 0x2, 0x200, 0x6, 0x7, 0x80000001, 0x0, 0x5, 0x7fff, 0x1ff, 0x4, 0x0, 0x100000000, 0x20, 0x80000001, 0x7fffffff, 0x3, 0xa96d, 0xfffffffffffffffd, 0x8, 0x3, 0x1, 0x5c58, 0x80000001, 0x0, 0x8, 0x525c, 0x0, 0x8]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f00000002c0)={0x1, 'nr0\x00', 0x3}, 0x18) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0505350, &(0x7f0000000440)={0xa01, 0x0, 'client0\x00', 0x0, "7ae1a546bba538be", "8dcf7735bdd48b4cd5823162d8dae025d609ffde34c3ceec3a9c910039df42bd"}) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) gettid() mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2, 0x0) tkill(0x0, 0x1000000000013) 13:56:09 executing program 1: r0 = socket$inet(0x2b, 0x0, 0x400000000) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:09 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x20, 0x80000) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000080)={0x9, 0x8}) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x3) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f00000000c0)={0x7, 0x7, 0x1}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000100)=0x200050, 0x4) 13:56:09 executing program 1: r0 = socket$inet(0x2b, 0x0, 0x400000000) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:10 executing program 5: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x20000, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x4) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180800) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000000c0)={0x9, 0x1}) write$P9_RFSYNC(r1, &(0x7f0000000100)={0x7, 0x33, 0x2}, 0x7) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x80400, 0x0) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000180)=""/210) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x8, 0x24900) ioctl$PPPIOCDISCONN(r5, 0x7439) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f00000002c0)=0x1) fsetxattr$trusted_overlay_nlink(r6, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000340)={'U-'}, 0x28, 0x1) ioctl$EVIOCGABS0(r6, 0x80184540, &(0x7f0000000380)=""/95) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000400)=""/115) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f00000004c0)={0x1}, 0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r8, 0x0, &(0x7f0000000500), 0x1000) r9 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000540)={0x0, 0x1}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f00000005c0)=@assoc_id=r10, &(0x7f0000000600)=0x4) ioctl$TCGETS2(r7, 0x802c542a, &(0x7f0000000640)) fsetxattr(r8, &(0x7f0000000680)=@known='security.apparmor\x00', &(0x7f00000006c0)='/dev/dmmidi#\x00', 0xd, 0x0) r11 = syz_open_dev$adsp(&(0x7f0000000700)='/dev/adsp#\x00', 0xdc, 0x400) ioctl$EXT4_IOC_SWAP_BOOT(r11, 0x6611) r12 = syz_open_dev$media(&(0x7f0000000740)='/dev/media#\x00', 0x1, 0x50600) ioctl$KVM_SET_TSS_ADDR(r12, 0xae47, 0xe58a5268f5152408) 13:56:10 executing program 1: r0 = socket$inet(0x2b, 0x0, 0x400000000) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:10 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x8001, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) 13:56:10 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r0, 0x0, 0xb, 0x0) 13:56:10 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:10 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = semget(0x3, 0x4, 0x10) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000000)=""/133) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f00000000c0)=0x7fffffff) 13:56:10 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:10 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = getpgrp(0x0) ptrace$peekuser(0x3, r0, 0x8) [ 273.809642][T11747] IPVS: ftp: loaded support on port[0] = 21 [ 273.907240][T11747] chnl_net:caif_netlink_parms(): no params data found [ 273.948806][T11747] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.956002][T11747] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.964590][T11747] device bridge_slave_0 entered promiscuous mode [ 273.973761][T11747] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.981016][T11747] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.989662][T11747] device bridge_slave_1 entered promiscuous mode [ 274.014557][T11747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.026890][T11747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.053296][T11747] team0: Port device team_slave_0 added [ 274.061320][T11747] team0: Port device team_slave_1 added [ 274.146910][T11747] device hsr_slave_0 entered promiscuous mode [ 274.173692][T11747] device hsr_slave_1 entered promiscuous mode [ 274.222556][T11747] debugfs: Directory 'hsr0' with parent '/' already present! [ 274.244414][T11747] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.251560][T11747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.259266][T11747] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.266609][T11747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.321419][T11747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.338670][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.347987][ T3898] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.356637][ T3898] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.366810][ T3898] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 274.383986][T11747] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.397463][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.406248][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.413495][ T3371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.427174][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.436424][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.443666][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.470388][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.479627][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.504388][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.514945][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.524180][ T3371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.538310][T11747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.566306][T11747] 8021q: adding VLAN 0 to HW filter on device batadv0 13:56:12 executing program 0: r0 = semget(0x0, 0x0, 0x82) semctl$GETPID(r0, 0x0, 0xb, 0x0) 13:56:12 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:12 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RWALK(r0, &(0x7f0000000000)=ANY=[@ANYPTR], 0x8) r2 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0) pread64(r2, &(0x7f0000005000)=""/4096, 0x1000, 0x0) 13:56:12 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x8001, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) 13:56:12 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28}, 0x28) 13:56:12 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000089c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() select(0xf4, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2a) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x7, 0x0, 0x9}) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000000200fd000005"], 0x49}}, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 13:56:12 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040), 0x10) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:12 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xffff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x0, 0x34324142, 0x140}) pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_dccp_buf(r1, 0x21, 0xd, &(0x7f0000001140)="0474c9788340b4191ac74ee6f3f9a3cf5dd4e5773a58db4ea19cb0bea0a48358e37599ca1bd00e04a75aafd3a66b0dd6a4e51fe14d3ca29c090885dc8612c25caeb66dff365ebb17b2afe0bfdaadee2f7878474e48090a4e00ce10d774ba0574d559", 0x62) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) ioctl$HIDIOCGUSAGES(r2, 0xd01c4813, &(0x7f00000000c0)={{0x2, 0xffffffff, 0x8, 0xa0, 0xfff, 0x8001}, 0x206, [0x3, 0x9, 0x9, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffc, 0x2, 0x36ef, 0x2, 0x5, 0x8000, 0x20, 0x6, 0x0, 0x5, 0x6, 0x1, 0xe3, 0xa5, 0x8001, 0x3e7, 0x2, 0xaa81, 0x3f, 0x3, 0x1d07, 0x9, 0xa6, 0x5, 0x6, 0x400, 0x5, 0x1f, 0x5, 0x9, 0x4, 0x20, 0x1, 0x3c00, 0x7, 0xfff, 0x7, 0x0, 0x8000, 0x6cf10aaa, 0x6, 0x200, 0x2, 0x3, 0x7, 0x1, 0x3, 0x0, 0x4, 0x4, 0x3f, 0xfffffffffffffe01, 0x40, 0x3, 0x400, 0x4, 0xfffffffffffffffd, 0x0, 0x3, 0x111, 0x9, 0x4, 0x100000000, 0x8, 0xffffffffffff910b, 0x6, 0x7fff800000000000, 0x1, 0xe, 0x883, 0x4, 0x7, 0x1ff, 0x7, 0x3f, 0x5, 0x6, 0x6, 0x0, 0x0, 0x10000, 0x6, 0xfff, 0xfffffffffffff237, 0x0, 0x0, 0x5, 0x5e112015, 0x82, 0x1fffe00000000000, 0x7, 0xd1f8, 0x6, 0x4, 0xa060, 0x3, 0x7, 0x3750, 0x1, 0x6, 0xf9, 0x4, 0x0, 0x4, 0x3, 0x80, 0x80, 0x4, 0x4c4, 0x10000, 0x0, 0xfffffffffffff001, 0x0, 0x1, 0x2ed, 0x4000000000000, 0x8001, 0x800, 0x7fffffff, 0x0, 0x9, 0x7, 0x0, 0x2, 0x8, 0x401, 0x0, 0x6, 0x8, 0xffffffffffff0001, 0xe09, 0x0, 0x7, 0xf3, 0x0, 0x5, 0x10001, 0x9, 0x400, 0x6, 0x8, 0x200, 0x7, 0x4, 0x6, 0x3, 0x20, 0x9, 0x2, 0x4, 0xffff, 0x3, 0x9, 0x80000000, 0x7d9, 0x0, 0x7fff, 0x40, 0xfff, 0xfffffffffffffffa, 0x25, 0x8, 0xaf40, 0x2, 0x9, 0x4, 0x7, 0x8, 0xd8f1, 0x9, 0x0, 0x8, 0x7, 0xfffffffffffffffd, 0x81, 0x6, 0xffffffff80000000, 0x4, 0x6, 0x2, 0x4, 0x8, 0x9, 0xff, 0xe6, 0x5, 0x81, 0x2, 0xffffffff93df53cc, 0x7, 0x4dab58c3, 0x4a, 0x9, 0x100000000, 0x1, 0x9d, 0x2, 0x89, 0x1, 0x7, 0x37f3, 0x6, 0xffff0, 0x9, 0xfce, 0x800, 0x8, 0x72000000, 0x101, 0x18a1, 0x800, 0x1, 0x6, 0x3, 0xd93, 0x5, 0x4, 0x1, 0x200, 0x5, 0xa27, 0x9, 0x3, 0x43c, 0x8006, 0x4, 0x328, 0x400, 0x200, 0x4, 0x5, 0x8001, 0x9, 0x20, 0x2, 0x8, 0x0, 0x6, 0x3460, 0xfb, 0x8, 0x4, 0x1f, 0x4, 0x100, 0x7, 0xa6, 0xffe0000000000000, 0xf692, 0x3, 0x0, 0xfe8, 0x40000000400, 0x7, 0x4, 0xc1a8, 0x8001, 0x8, 0x79b2212a, 0x0, 0x420, 0x0, 0xdf, 0xa734, 0x8, 0xc3, 0x7fff, 0x9, 0x401, 0x3, 0x1, 0x14, 0x5, 0xffff, 0x7fff, 0x8000, 0x9, 0x2, 0x3ff, 0x8, 0x0, 0xd4b, 0x5, 0x0, 0x8000, 0x5, 0x7, 0x1f, 0x7, 0x5, 0x800, 0xdf70, 0x10001, 0x7, 0x6, 0xc2, 0xffffffffffff8001, 0x2, 0x400, 0x1000, 0x4, 0x6c8000, 0x100, 0x223a, 0xc0000000000, 0x0, 0x7, 0x9, 0x9, 0xf3fb, 0xd34, 0x0, 0x4, 0x5, 0x74ef, 0x5, 0x7, 0xfff, 0xfffffffffffffffe, 0x7, 0x81, 0xf4, 0x7, 0x3ff, 0x8000, 0x3, 0x20, 0x0, 0x7, 0x1ff, 0x3f, 0x0, 0x100000001, 0x1ff, 0x1, 0x9, 0x6, 0x7, 0x9, 0x0, 0x3, 0x1, 0x7, 0x0, 0x4, 0xffffffff, 0x0, 0x401, 0xcc9f, 0x100000, 0x97d4506, 0x100000000, 0x80000000, 0x7, 0x5, 0x7267, 0x7f, 0xcd8, 0x7, 0x8, 0x100000001, 0x7ff, 0x7fff, 0x1, 0x7354, 0x2, 0xc00000000000000, 0xf44e, 0x70000, 0x8, 0x57, 0x1, 0x20, 0x4, 0x80000000, 0x1f, 0xbcfd, 0x5, 0x71eb3cbb, 0x40000, 0x40, 0x1, 0x8, 0x3, 0xffffffffffffff02, 0x3c0f, 0xfffffffffffff6b5, 0x6, 0x4, 0x27, 0x3043, 0x2723, 0x1ff, 0x5, 0x1, 0x3ff, 0x1, 0x3, 0x6, 0xffffffffffffff81, 0x4000800000, 0x9, 0xffffffff, 0x200, 0x29, 0x27, 0x1, 0x9, 0x7, 0x7, 0x8, 0x71a435ad, 0x80, 0x0, 0x3, 0x1, 0x0, 0x200, 0x0, 0x2, 0x9, 0x6cc, 0x3, 0x101, 0x3, 0x61d, 0x2, 0x4, 0x100000000, 0x7, 0x100, 0x400, 0x10001, 0xffffffff80000000, 0x7, 0x9, 0x7, 0x9, 0x0, 0x5, 0x400, 0x2, 0x4, 0x3, 0x4, 0x0, 0x6, 0xff, 0x5c, 0x7f, 0x11, 0xfffffffffffeffff, 0x5, 0x8001, 0x1, 0x100000000, 0x7ff, 0xfffffffffffffeff, 0x8, 0x7fff, 0x9, 0x40, 0x101, 0x1, 0x1, 0x6, 0xffffffffffffffff, 0x0, 0x6, 0x4, 0x2, 0x2, 0x9000000000000, 0x4, 0xffff, 0x7, 0x3, 0x8, 0x1, 0x0, 0x20e, 0x7fff, 0x5, 0x27dd3920, 0x5, 0xc8b, 0x10000, 0x4, 0x2, 0x65a, 0x8, 0x15, 0x7, 0x2, 0x4, 0x6, 0x400, 0x7, 0x511b91d6, 0xb128, 0x7f, 0x400, 0x2, 0xfff, 0x1ff, 0x7, 0x3, 0x538a833b, 0x24, 0xa8, 0xfffffffffffffffb, 0x5, 0x7f, 0x9, 0x0, 0x9, 0x7, 0xffffffffffffffe1, 0xb9, 0xffffffff, 0x43, 0x3, 0x5, 0xfffffffffffffffd, 0x6, 0x7f, 0x8, 0x1, 0x1fa, 0xfffffffffffffffd, 0x3, 0xffff, 0xffffffffffffffe0, 0x9, 0x8000, 0x5, 0x9000000000000, 0x7fff, 0x1, 0x2, 0x400, 0x8001, 0xa0a, 0x7, 0x1, 0x9, 0x6, 0x2, 0x6, 0x100, 0x1f, 0x8aae, 0x1, 0x100000001, 0x5, 0xfff, 0x54, 0x1ff, 0xdc, 0x0, 0xf9fc, 0x192, 0x2, 0x4, 0x440d, 0x3, 0xc8d1, 0x4b2d, 0x8, 0xad0, 0xfffffffffffffe00, 0x4, 0x4, 0x283, 0x100000000, 0x3, 0x3, 0x8001, 0x974a, 0x6, 0x3, 0xddbc, 0x5, 0x5, 0x9, 0x3, 0x2f39, 0x800, 0x0, 0xff, 0x3, 0x9, 0xf9, 0x80000000, 0x6, 0x2, 0x46, 0xb18e, 0x2, 0x149, 0x8000, 0xc3b1, 0x1, 0x0, 0x0, 0x6, 0x40000000000000, 0x2, 0x400, 0x40000, 0xc98e, 0xffffffff, 0x80000000, 0xfffffffffffffff9, 0x8, 0x9, 0x1c00000000, 0xef1, 0x8, 0x1, 0x6459, 0xfffffffffffffff9, 0x20, 0x64, 0x7, 0x9, 0x9, 0x7992, 0x7, 0x1000, 0x80000000, 0xfffffffffffffff7, 0x200, 0x8, 0x7, 0x9, 0x2, 0xfffffffffffff800, 0x9, 0x8, 0x3, 0xfffffffffffffff7, 0x40, 0xffffffffffffff7f, 0x3ff, 0x3f80000000, 0x7fffffff, 0x7, 0x5, 0x8, 0xd7af, 0x7411, 0x4, 0x8, 0x3f, 0x20, 0x4, 0x2, 0x81, 0x5, 0x5, 0x9, 0x7, 0x43a, 0x1, 0x7367, 0x7fff, 0x6, 0x17, 0x5, 0x1, 0x1, 0x8, 0x80000001, 0x10000, 0x3ff, 0x926, 0x3, 0x8, 0xfffffffffffffffa, 0xff, 0x1c00, 0x200, 0x6, 0xffffffffffffffff, 0xaf16, 0x2, 0x4, 0x9, 0xc3b3, 0x2, 0x9, 0x3, 0x949a, 0x81, 0x2, 0x232, 0x0, 0x7, 0xefd, 0x2, 0x7fff, 0x401, 0x6, 0x401, 0x100, 0x100000000, 0x9, 0x6, 0x6, 0x7fff, 0x1ff, 0x0, 0xfffffffffffffffd, 0x2, 0x9, 0x7, 0x6, 0x74e, 0x1, 0xd4d6, 0xca, 0x4, 0x1, 0x3, 0x200, 0x6, 0x8, 0x8, 0x1f, 0x20, 0x8ab6, 0xffffffffffffff80, 0x3f, 0xaa, 0x81, 0x3, 0x45d, 0x7, 0xffffffff, 0x1, 0xffd, 0xffffffffffffffe1, 0x5, 0x4, 0x1, 0x5, 0x1ff, 0x6, 0x95f, 0x3077, 0x5, 0x81c4, 0x9, 0x4, 0x80, 0x4, 0xa45, 0x7, 0x9, 0x2, 0x8, 0xfff, 0x1, 0x7fffffff, 0x1000, 0x3, 0xff, 0xffffffff, 0xe103, 0x6, 0x5, 0x1, 0x6, 0x401, 0xa305, 0x1, 0xfff, 0x3bca, 0x81, 0x3ff, 0x100, 0x9, 0x0, 0x3, 0xffffffffffffffff, 0x8, 0x826, 0x3, 0x5, 0x10000, 0x3, 0xb0cf, 0x100000001, 0x0, 0x6, 0x7, 0x1f, 0xb, 0x1, 0x9, 0x1f, 0x4, 0x7, 0x9, 0x42, 0x7, 0x0, 0x74, 0x1e2, 0x101, 0xfffffffffffffffc, 0x7, 0x40, 0x7, 0x40, 0x8, 0x5, 0x6, 0xfff, 0x5, 0x9, 0xfffffffffffffffa, 0xdd31, 0xf08, 0x5a, 0x2, 0x4, 0x10001, 0x3ff, 0x20, 0x20, 0x1, 0x0, 0xffff, 0x1, 0xffffffffffffffff, 0x10000, 0x5, 0x7, 0x3, 0x0, 0x2, 0x1, 0x5, 0xfffffffffffffffd, 0x81, 0x8, 0x4, 0x3ff, 0x7fff, 0x5, 0x3, 0x4, 0xb8, 0x2, 0xcd2, 0x60945921, 0x200, 0x81, 0x8000, 0x2, 0x3a3, 0x6, 0x3, 0x55, 0x8, 0x1, 0x7fffffff, 0x4, 0x7, 0x1, 0x5, 0x3ff, 0x9, 0xfffffffffffffff7, 0x8001, 0x8, 0x1, 0x8, 0x800, 0x0, 0x0, 0x26, 0x4, 0x81, 0x6, 0x4, 0x101, 0x2, 0x100000000, 0x9, 0x2, 0xfffffffffffffe01, 0x100, 0x81, 0xa2, 0x3, 0x0, 0x279, 0x2, 0x8000, 0xfffffffffffffc01, 0x2, 0x0, 0x0, 0x4, 0x1, 0x7, 0x800, 0x100, 0x7, 0x100, 0x4, 0x0, 0x3ff, 0x91b6, 0x101, 0x8, 0x7ff, 0x79, 0x7, 0xfff, 0x1, 0x5, 0x6, 0x5, 0x6, 0x6, 0x688a, 0x6, 0x1011, 0x3, 0x4, 0x0, 0x200, 0xaf7, 0x3, 0x7, 0x8000, 0x8, 0x1, 0x8, 0x2, 0x8, 0x7ff, 0x6, 0x1ff, 0x11, 0x2, 0xcadc, 0xeb, 0x5, 0x2, 0x80000000, 0xfffffffffffffccd, 0x73, 0x401, 0x1, 0x5, 0x6e89, 0x7f, 0x4, 0x78, 0x2, 0x8, 0x6, 0x5, 0x0, 0xfffffffffffffff7, 0xc35f, 0x5, 0x2, 0xfbd4, 0x6c, 0x0, 0x7, 0xf959, 0x9096, 0xffffffff, 0x4, 0x4, 0x5, 0x80000001, 0x7, 0x3, 0x8b2, 0x12ed, 0x8, 0x0, 0x8001, 0x6, 0xe55e, 0x400, 0x3ff, 0x1, 0x8, 0x3919f619, 0x8, 0xffffffff, 0x80, 0x8, 0x6, 0x5, 0x3, 0x1, 0x4, 0xab9, 0x4, 0x0, 0x0, 0x20, 0x8, 0x8, 0x75, 0x0, 0x5, 0x800000000000000, 0x7]}) semctl$GETPID(0x0, 0x0, 0xb, 0x0) [ 275.546328][T11769] vivid-001: ================= START STATUS ================= [ 275.554217][T11769] vivid-001: Test Pattern: 75% Colorbar [ 275.559841][T11769] vivid-001: Fill Percentage of Frame: 100 [ 275.565894][T11769] vivid-001: Horizontal Movement: No Movement [ 275.572031][T11769] vivid-001: Vertical Movement: No Movement [ 275.578083][T11769] vivid-001: OSD Text Mode: All [ 275.583049][T11769] vivid-001: Show Border: false [ 275.587946][T11769] vivid-001: Show Square: false [ 275.592944][T11769] vivid-001: Sensor Flipped Horizontally: false [ 275.599236][T11769] vivid-001: Sensor Flipped Vertically: false [ 275.605462][T11769] vivid-001: Insert SAV Code in Image: false [ 275.611499][T11769] vivid-001: Insert EAV Code in Image: false [ 275.619266][T11769] vivid-001: Reduced Framerate: false [ 275.624907][T11769] vivid-001: Enable Capture Cropping: true [ 275.630770][T11769] vivid-001: Enable Capture Composing: true [ 275.636824][T11769] vivid-001: Enable Capture Scaler: true [ 275.642572][T11769] vivid-001: Timestamp Source: End of Frame [ 275.648515][T11769] vivid-001: Colorspace: sRGB [ 275.653352][T11769] vivid-001: Transfer Function: Default [ 275.658960][T11769] vivid-001: Y'CbCr Encoding: Default [ 275.664490][T11769] vivid-001: HSV Encoding: Hue 0-179 [ 275.669831][T11769] vivid-001: Quantization: Default [ 275.675179][T11769] vivid-001: Apply Alpha To Red Only: false [ 275.681133][T11769] vivid-001: Standard Aspect Ratio: 4x3 [ 275.686835][T11769] vivid-001: DV Timings Signal Mode: Current DV Timings inactive 13:56:12 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28}, 0x28) [ 275.694665][T11769] vivid-001: DV Timings: 640x480p59 inactive [ 275.700704][T11769] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 275.708126][T11769] vivid-001: Maximum EDID Blocks: 2 [ 275.713434][T11769] vivid-001: Limited RGB Range (16-235): false [ 275.719983][T11769] vivid-001: Rx RGB Quantization Range: Automatic [ 275.726532][T11769] vivid-001: Power Present: 0x00000001 [ 275.732086][T11769] tpg source WxH: 640x360 (Y'CbCr) [ 275.737402][T11769] tpg field: 1 [ 275.740853][T11769] tpg crop: 640x360@0x0 13:56:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)=ANY=[@ANYBLOB="44000000100001060000080000000000000d0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012001000010069703665727370616e000000100002000400120008000200f0000000"], 0x44}}, 0x0) [ 275.745193][T11769] tpg compose: 640x360@0x0 [ 275.749656][T11769] tpg colorspace: 8 [ 275.753586][T11769] tpg transfer function: 0/0 [ 275.758209][T11769] tpg Y'CbCr encoding: 0/0 [ 275.762746][T11769] tpg quantization: 0/0 [ 275.766934][T11769] tpg RGB range: 0/2 [ 275.770857][T11769] vivid-001: ================== END STATUS ================== 13:56:12 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000800)=@delsa={0x28, 0x11, 0x49a5a5ab237e1943, 0x0, 0x0, {@in6=@remote, 0x0, 0x0, 0xff}}, 0x28}}, 0x0) [ 275.826400][T11784] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 275.844419][T11769] vivid-001: ================= START STATUS ================= [ 275.852897][T11769] vivid-001: Test Pattern: 75% Colorbar [ 275.858515][T11769] vivid-001: Fill Percentage of Frame: 100 [ 275.864497][T11769] vivid-001: Horizontal Movement: No Movement [ 275.870623][T11769] vivid-001: Vertical Movement: No Movement [ 275.876715][T11769] vivid-001: OSD Text Mode: All [ 275.881626][T11769] vivid-001: Show Border: false [ 275.886648][T11769] vivid-001: Show Square: false [ 275.891546][T11769] vivid-001: Sensor Flipped Horizontally: false [ 275.897944][T11769] vivid-001: Sensor Flipped Vertically: false [ 275.904166][T11769] vivid-001: Insert SAV Code in Image: false [ 275.910239][T11769] vivid-001: Insert EAV Code in Image: false [ 275.916351][T11769] vivid-001: Reduced Framerate: false [ 275.921778][T11769] vivid-001: Enable Capture Cropping: true [ 275.927792][T11769] vivid-001: Enable Capture Composing: true [ 275.933814][T11769] vivid-001: Enable Capture Scaler: true [ 275.939556][T11769] vivid-001: Timestamp Source: End of Frame [ 275.945570][T11769] vivid-001: Colorspace: sRGB [ 275.950303][T11769] vivid-001: Transfer Function: Default [ 275.956024][T11769] vivid-001: Y'CbCr Encoding: Default [ 275.961454][T11769] vivid-001: HSV Encoding: Hue 0-179 [ 275.966953][T11769] vivid-001: Quantization: Default [ 275.972110][T11769] vivid-001: Apply Alpha To Red Only: false [ 275.978177][T11769] vivid-001: Standard Aspect Ratio: 4x3 [ 275.983866][T11769] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 275.991643][T11769] vivid-001: DV Timings: 640x480p59 inactive [ 275.997806][T11769] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 276.005223][T11769] vivid-001: Maximum EDID Blocks: 2 [ 276.010492][T11769] vivid-001: Limited RGB Range (16-235): false [ 276.016823][T11769] vivid-001: Rx RGB Quantization Range: Automatic [ 276.023411][T11769] vivid-001: Power Present: 0x00000001 [ 276.028971][T11769] tpg source WxH: 640x360 (Y'CbCr) [ 276.034223][T11769] tpg field: 1 [ 276.037702][T11769] tpg crop: 640x360@0x0 [ 276.041921][T11769] tpg compose: 640x360@0x0 [ 276.046486][T11769] tpg colorspace: 8 [ 276.050364][T11769] tpg transfer function: 0/0 [ 276.055125][T11769] tpg Y'CbCr encoding: 0/0 [ 276.059626][T11769] tpg quantization: 0/0 [ 276.063888][T11769] tpg RGB range: 0/2 [ 276.067853][T11769] vivid-001: ================== END STATUS ================== 13:56:13 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:13 executing program 3: r0 = gettid() futex(0x0, 0x4, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x2) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xc0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x20000000) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x40}}, 0x14) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_TSC(0x1a, 0x2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 13:56:13 executing program 3: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bcc6fc135d0a863fff0fd3768e9e"], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:56:13 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x8001, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 13:56:13 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup2(r1, r0) 13:56:13 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:13 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:15 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:15 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000ec0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) 13:56:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'\x00a\xa4\x00\x00\xff\xeb\xf9\x00\x00\x00\x00\x02\x00', 0x9d01}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'syzkaller1\x00', 0x400}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d000000000008001b0000000000"], 0x3cb}}, 0x0) 13:56:15 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x8001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) 13:56:15 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r0, 0x0, 0xb, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0xa87, &(0x7f0000000040)=""/141) semget$private(0x0, 0x3, 0x4) 13:56:15 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) 13:56:15 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') [ 278.684005][T11838] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:56:15 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x3, 0x7fffffff]) semctl$GETPID(0x0, 0x4, 0xb, 0x0) 13:56:16 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=0x1000000000000080, 0x442) [ 279.010203][T11863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 13:56:16 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040), 0x10) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 13:56:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) socketpair$unix(0x1, 0x40000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup2(r1, r0) 13:56:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) [ 279.425319][T11875] l2tp_ppp: sess 4/2: set debug=464c457f [ 279.445366][ T1471] l2tp_core: sess 4/2: closing session 13:56:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:18 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x4) accept4(r1, 0x0, 0x0, 0x0) 13:56:18 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x8001, 0x0) 13:56:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:18 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) socket$rxrpc(0x21, 0x2, 0xa) r0 = accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000004980), &(0x7f00000049c0)=0x14) syz_genetlink_get_family_id$ipvs(0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.stat\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x0, 0x808, 0xc) sendmmsg$alg(r1, &(0x7f0000000140), 0xffffffffffffff68, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000540)={0x8, 0x8e, "b6bcd1a7467200f880d009fd98f439b548545f4aa44fab5e5b09b3f9ad52e18b97950b59e2ace7266c068c95e1a3198f3467a66c28c7705c972c7c780c7f4870fcc30109d8eab6bdb10b60620ce6538fd0a93cca78d0be1f89931cf540af0c617457ff1c6dbf99923f21c256a34a3c91004272d142daf360a07950e8bde80af05d50a21538c294974253a7c9a74e"}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000340)={0x20}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfffffe04) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x2}, 0x0, 0x0, &(0x7f0000000140)={0x3, 0xb, 0x2b, 0x800}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=0x9092}}, 0x10) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x10076) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000001c0)) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000440)) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000001300)={0x2880008, r2, 0x0, 0x8}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) bind$packet(r0, &(0x7f0000004a00)={0x11, 0xf7, 0x0, 0x1, 0x3}, 0x14) [ 281.634683][T11891] l2tp_ppp: sess 4/2: set debug=464c457f [ 281.644653][ T1026] l2tp_core: sess 4/2: closing session 13:56:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:18 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:18 executing program 0: bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002740)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x0, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes128, 0x0, "df0345151066b7fe"}) [ 281.826404][T11905] l2tp_ppp: sess 4/2: set debug=464c457f [ 281.859512][ T1026] l2tp_core: sess 4/2: closing session 13:56:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:19 executing program 0: utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xffffffffffffff8c, 0xfffffffffffffffe}) semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f00000000c0)={0x1, 0x0, {0xfc83, 0x8, 0x7}}) [ 282.017216][T11921] l2tp_ppp: sess 4/2: set debug=464c457f 13:56:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) [ 282.080271][T11924] l2tp_ppp: sess 4/2: set debug=464c457f [ 282.104602][ T1471] l2tp_core: sess 4/2: closing session 13:56:19 executing program 0: r0 = semget(0x2, 0x1, 0x305402bfd126fe83) semctl$GETPID(r0, 0x0, 0xb, 0x0) r1 = io_uring_setup(0x5f7, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x4e}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x38) mkdir(&(0x7f00000000c0)='./file0\x00', 0x8) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r2, 0x0, 0x0) fcntl$lock(r1, 0x5, &(0x7f0000000080)={0x1, 0x4, 0x1, 0x6, r2}) 13:56:19 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) recvmmsg(0xffffffffffffffff, &(0x7f0000006780)=[{{&(0x7f00000002c0)=@nfc_llcp, 0x80, 0x0}}, {{&(0x7f0000001440)=@in={0x2, 0x0, @initdev}, 0x80, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 13:56:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc000000190001090000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}}, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 13:56:19 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 282.520140][T11941] l2tp_ppp: sess 4/2: set debug=464c457f [ 282.553776][ T1026] l2tp_core: sess 4/2: closing session 13:56:21 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:21 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000040)={0x3, 0x800, 0x5, 0x4}) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 13:56:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e10ffffffa9308b0ebd825de7c1787f00000000bd0000ef676f96094bdac534049016507dab3a4600"], 0x2c) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', '.', [{0x20, '+'}, {0x20, '#'}], 0xa, "8890e9b0848ae8c41c8bd00317bd6044a9f1a37f7a5564669a1f145addc30f78789c27"}, 0x2c) 13:56:21 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 13:56:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$l2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x400000, 0x28d) [ 284.834921][T11963] l2tp_ppp: sess 4/2: set debug=464c457f [ 284.863624][ T1471] l2tp_core: sess 4/2: closing session 13:56:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e10ffffffa9308b0ebd825de7c1787f00000000bd0000ef676f96094bdac534049016507dab3a4600"], 0x2c) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', '.', [{0x20, '+'}, {0x20, '#'}], 0xa, "8890e9b0848ae8c41c8bd00317bd6044a9f1a37f7a5564669a1f145addc30f78789c27"}, 0x2c) 13:56:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:22 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="fefff0ff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000002c0)={r4, 0x0, 0x30}, &(0x7f0000001880)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r4, 0x101}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000140)=0x4) 13:56:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$l2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x400000, 0x28d) 13:56:22 executing program 3: [ 285.095807][T11986] l2tp_ppp: sess 4/2: set debug=464c457f [ 285.109475][ T1026] l2tp_core: sess 4/2: closing session 13:56:24 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:24 executing program 0: semget$private(0x0, 0x3, 0x100) r0 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000100)=""/168) semget(0x2, 0x1, 0x1a0) r1 = semget$private(0x0, 0x0, 0x2c) semctl$GETPID(r1, 0x0, 0xb, 0x0) 13:56:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$l2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x400000, 0x28d) 13:56:24 executing program 3: 13:56:24 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r3 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x4, 0x4) 13:56:25 executing program 3: 13:56:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:25 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x400000, 0x28d) 13:56:25 executing program 0: r0 = semget$private(0x0, 0x1, 0x1c8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x6400, 0x0) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000040)={0xfffffffffffffbff}) semctl$GETPID(r0, 0x4, 0xb, 0x0) 13:56:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:25 executing program 3: 13:56:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:25 executing program 3: 13:56:25 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x400000, 0x28d) 13:56:25 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:25 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000100)=""/168) semget$private(0x0, 0x7, 0x82) semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x0, 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000040)=0x6) semctl$GETPID(r1, 0x0, 0xb, 0x0) 13:56:25 executing program 3: 13:56:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$l2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x400000, 0x28d) 13:56:25 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) accept$packet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x14) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000100)=0x1) 13:56:25 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") socket(0x10, 0x803, 0x0) 13:56:25 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x400000, 0x28d) 13:56:25 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:56:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:25 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$l2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x400000, 0x28d) 13:56:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$l2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x400000, 0x28d) 13:56:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:28 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) write(r0, &(0x7f0000000080)="29000000140003b7ff000000040860eb0100100806a40e07fff00fd57fc29d1d25ff0efaa2a5210cec953adc", 0xfe5a) 13:56:28 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:28 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000340)="bfbf9e2bf8b1ccebbde28e1f22450e01b42b288965cd7bff684829196c7eedf5d53144b42654d0627ae29ed4331ec22071cebc40ed45e375f4e97dbf5fa71488641b63385dbd853ed2857842d75400fe12c829360423a8988e37c02abafc68429e70865e8351e7bb13246e6c1cce72f5d383019276", 0xfffffffffffffe1a) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x6, 0xb8}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000002c0)=0x7fff, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={r2, 0x3ff}, 0x8) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000280)={0x7fffffff, 0xda7, 0x200, 0x5, 0x78a, 0x6, 0x9, 0xfffffffffffffffa, r3}, 0x20) semctl$GETPID(0x0, 0x0, 0xb, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000001c0)=@generic={0x3, 0x0, 0x5}) 13:56:28 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:28 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 13:56:28 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:28 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x2c, 0x10, 0x15, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xc, 0x1, @broadcast}]}, 0x2c}}, 0x0) 13:56:28 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x18, 0x0, &(0x7f0000000140)) 13:56:29 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:29 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000100)=""/168) semget$private(0x0, 0x0, 0x80) r1 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r1, 0x0, 0x12, &(0x7f0000000100)=""/168) r2 = semget(0x0, 0x1, 0x322) semctl$GETPID(r2, 0x1, 0xb, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x180, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x4985dd7d) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x1, 0x8, 0x7, 0x3}, {0x16, 0x0, 0x7}, {0x46ce, 0x1, 0x1, 0x1}, {0x2, 0xfff, 0x6, 0x10001}, {0x1f, 0x70000, 0xffffffffffffffff, 0x5}]}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [{0x2e1, 0x0, 0x1f}, {0xa87, 0x0, 0xfffffffffffffffa}]}) r8 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1, 0x80) connect$vsock_stream(r8, &(0x7f0000000280)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) poll(&(0x7f0000000040)=[{r4}], 0x1, 0x0) write$P9_ROPEN(r4, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x8, 0x3}, 0xfffffffffffffffb}}, 0x18) 13:56:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x8201, 0x0) write(r0, &(0x7f0000000100), 0x2a) [ 292.160782][T12132] QAT: Invalid ioctl [ 292.174613][T12132] QAT: Invalid ioctl 13:56:29 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000180)=0x6, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000001100)={0xa, 0x4004e20, 0x0, @remote}, 0x1c) 13:56:31 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) socket$inet_udplite(0x2, 0x2, 0x88) 13:56:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:31 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 294.829672][T12151] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 13:56:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:31 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:32 executing program 0: semget(0x3, 0x0, 0x100) semctl$GETPID(0xffffffffffffffff, 0x6, 0xb, 0x0) 13:56:32 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="7ace9d72c4a49e69b90500000072d7e7"], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:56:32 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:32 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:32 executing program 0: getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'r\x00\x00\x80\x00'}, &(0x7f0000000200)=0xfffffffffffffeb9) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = getpgid(r0) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x7, 0x3}) timer_create(0xe, &(0x7f0000000000)={0x0, 0x40, 0x0, @tid=r1}, &(0x7f0000000040)) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 13:56:32 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) write(r0, &(0x7f0000000140)="2000000012005f30923c59839900000000000000000000200000000000000000", 0x20) 13:56:32 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:32 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:35 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x40040, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x1, 0x100, 0x7f, 0x0, 0xffffffffffff8001, 0xfff, 0xfffffffffffffffd, 0x0, 0x200, 0x1, 0x2, 0x5, 0x0, 0x5, 0x2dc, 0xe2d4, 0x5, 0x1, 0x5}) semctl$GETPID(r0, 0x4, 0xb, 0x0) 13:56:35 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x2f23, 0x2, {0x1, 0x0, 0x1f7620, 0x0, 0xd1d0}}) 13:56:35 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:56:35 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:35 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:35 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:35 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) [ 298.031937][T12209] l2tp_ppp: sess 4/2: set debug=464c457f [ 298.054549][ T1026] l2tp_core: sess 4/2: closing session 13:56:35 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:35 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x400000, 0x28d) 13:56:35 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000001a40)='/dev/loop#\x00', 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb21a63794c7fa92c, "fa71ca12880e1f75b87187a2ba4dc3bd55d4a462b92a2c00fd7a3cc5aaf45e6b009c302a027a305da4a7d9fc9a460de69e23f08fa809a983d071f25d38b1978c", "f83c0f2ca28b2f3829463149455e07669686a39606824f28df3ba53313827c00cc50afcfc638bb491fcec6565f4e658373ccfdaad198d9cf0acdf6c169d79921", "2e4fc451b270daa4892406454d95b940ecc1bc6e2586e7c90f1dcf80f6938c00", [0x10001, 0x4]}) [ 298.285271][T12228] l2tp_ppp: sess 4/2: set debug=464c457f [ 298.291792][ T1026] l2tp_core: sess 4/2: closing session 13:56:35 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:35 executing program 3: syz_genetlink_get_family_id$tipc2(0x0) [ 298.492695][T12235] l2tp_ppp: sess 4/2: set debug=464c457f [ 298.519406][ T1471] l2tp_core: sess 4/2: closing session 13:56:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:38 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:38 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) pivot_root(&(0x7f0000000080)='./file0/file1\x00', 0x0) read$FUSE(r0, &(0x7f0000003000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000001500)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000000480), 0x1000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000000340)={0x90, 0x0, 0x2, {0x0, 0x0, 0x1}}, 0x90) 13:56:38 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) 13:56:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000005c0)={0x10, 0x0, 0x0, 0x14000200}, 0xc) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000003940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003900)={&(0x7f0000003780)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = socket$inet(0x10, 0x4000000000000002, 0x0) sendmsg(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="24000000200007041dfffd946f610500810000e81f0000030000080008000c0004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xffffffffffffff30) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@remote, @in=@empty, 0x4e24, 0xbe, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x6c, r5, r6}, {0x6, 0x800, 0x0, 0xffff, 0x2, 0x6, 0x2, 0x8}, {0x7ff, 0x200, 0x3133, 0x3}, 0x9, 0x6e6bbb, 0x3, 0x1, 0x2, 0x1}, {{@in=@empty, 0x4d4}, 0xa, @in6=@loopback, 0x3506, 0x3, 0x0, 0x3f, 0xc9f, 0x8, 0xff}}, 0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x100, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0xe4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7915}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4d99}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x8040}, 0x4) semctl$GETPID(0x0, 0x0, 0xb, 0x0) [ 301.065492][T12250] l2tp_ppp: sess 4/2: set debug=464c457f [ 301.100692][ T176] l2tp_core: sess 4/2: closing session 13:56:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:38 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) [ 301.125227][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 13:56:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:38 executing program 0: [ 301.294647][T12274] l2tp_ppp: sess 4/2: set debug=464c457f [ 301.311132][ T176] l2tp_core: sess 4/2: closing session 13:56:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:38 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:38 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x85802, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f00000000c0)=0x1) time(&(0x7f0000000000)) r1 = dup(r0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000040)=0x3) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x440, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xffff) 13:56:38 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 301.586059][T12291] l2tp_ppp: sess 4/2: set debug=464c457f 13:56:39 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x802102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x800, 0x139}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) 13:56:39 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:39 executing program 0: r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4000, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000040)={0x13, 0x7, 0x1, {{0x6, 'system'}, 0x101}}, 0x13) fcntl$lock(r3, 0x26, &(0x7f0000000180)={0x3}) sync_file_range(r1, 0x5, 0x2, 0x4) 13:56:39 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) 13:56:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) [ 302.022819][T12307] l2tp_ppp: sess 4/2: set debug=464c457f [ 302.060442][ T176] l2tp_core: sess 4/2: closing session 13:56:39 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:39 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x215) write$FUSE_INIT(r0, &(0x7f0000001500)={0x50, 0x0, 0x1}, 0x50) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000000480), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000340)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x100000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd7}}}, 0x90) 13:56:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) [ 302.204038][T12320] l2tp_ppp: sess 4/2: set debug=464c457f [ 302.221184][ T176] l2tp_core: sess 4/2: closing session 13:56:39 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) [ 302.358105][T12330] l2tp_ppp: sess 4/2: set debug=464c457f 13:56:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:41 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:41 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) 13:56:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) [ 304.745951][T12345] l2tp_ppp: sess 4/2: set debug=464c457f [ 304.762532][ T176] l2tp_core: sess 4/2: closing session 13:56:42 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = dup(0xffffffffffffffff) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/77, 0x4d}) 13:56:42 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYBLOB="bae87ef7"], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:56:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x0, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:42 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) 13:56:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) [ 305.045523][T12359] l2tp_ppp: sess 4/2: set debug=464c457f [ 305.073245][ T176] l2tp_core: sess 4/2: closing session 13:56:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x0, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:42 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:42 executing program 0: semget$private(0x0, 0x0, 0xa) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x5b0) semctl$GETPID(0x0, 0x1, 0xb, 0x0) 13:56:42 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) [ 305.311253][T12376] l2tp_ppp: sess 4/2: set debug=464c457f 13:56:44 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:44 executing program 0: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r0) add_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000003c0)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb23032892b9d5e46183e31deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab012cb50c3362201a307df03000", 0x7e, r1) keyctl$clear(0x7, r1) add_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="101bb56e3fe6cd18caba621498b8971a563c83ae422e016073fbe72fc023251bd5bed918a1b640c10e31740b99c37b428da4db76f776ab05f6be73be29a1d3779a9d303b4523f4ef13f1a0c38787681cdad16c5d8d8e706c0d2abe5f5cde7a9ab731c744fc5bbddf7ce4644531bc550a75dcec2093fa3d7c84b261e2a4ef281d75b60ec5c3d4c05c35dda1649285ebe9aa6af019bd25", 0x96, r1) semctl$GETPID(0x0, 0x0, 0xb, 0x0) r2 = syz_open_dev$video(&(0x7f0000000340)='/dev/video#\x00', 0x10007, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000000)={0x0, 0x34324142, 0x140}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000440)) r3 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$get_security(0x11, r3, &(0x7f0000000080)=""/79, 0x4f) 13:56:44 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{}], 0x1, 0x0) 13:56:44 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000002000), 0x215) write$FUSE_INIT(r0, &(0x7f0000001500)={0x50, 0x0, 0x1}, 0x50) stat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000000480), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000000340)={0x90, 0x0, 0x2, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bd7, 0x0, 0x0, 0x0, 0x0, 0x91}}}, 0x90) 13:56:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x0, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) [ 307.799741][T12390] l2tp_ppp: sess 4/2: set debug=464c457f [ 307.827865][ T176] l2tp_core: sess 4/2: closing session 13:56:44 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{}], 0x1, 0x0) 13:56:44 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:44 executing program 0: r0 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000100)=""/168) semget$private(0x0, 0x1, 0x20) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000040)={0x8, 0x1, 'client0\x00', 0x2, "1a2ca4446b338bf5", "808e3ce9c12a9ed1c809a5a06d6dfdc9089221d25e0e9e798837ad3dd285e85e", 0x40, 0x4}) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000000)) semctl$GETPID(0x0, 0x3, 0xb, 0x0) 13:56:45 executing program 2: r0 = socket(0x1, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{}], 0x1, 0x0) [ 308.033116][T12412] l2tp_ppp: sess 4/2: set debug=464c457f 13:56:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:47 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:47 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:47 executing program 2: socket(0x1, 0x800, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 13:56:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x400000, 0x28d) 13:56:47 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0)="54915f90488e5bd405cf7b97", 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:56:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x400000, 0x28d) [ 310.908938][T12425] l2tp_ppp: sess 4/2: set debug=464c457f 13:56:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:48 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 13:56:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x400000, 0x28d) [ 311.141996][T12451] l2tp_ppp: sess 4/2: set debug=464c457f 13:56:48 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0)="54915f90488e5bd405cf7b97", 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:56:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 311.185941][ T1471] l2tp_core: sess 4/2: closing session 13:56:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x400000, 0x28d) [ 311.438691][T12465] l2tp_ppp: sess 4/2: set debug=464c457f 13:56:48 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0)="54915f90488e5bd405cf7b97", 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:56:48 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 13:56:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 13:56:48 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x0, 0x28d) 13:56:48 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) [ 311.718185][T12473] l2tp_ppp: sess 4/2: set debug=464c457f [ 311.774148][ T176] l2tp_core: sess 4/2: closing session 13:56:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x38) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, 0x0, 0x0, 0x0) 13:56:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x0, 0x28d) 13:56:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:51 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0)="54915f90488e5bd405cf7b97", 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:56:51 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 13:56:51 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x5e31) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x5) [ 314.212716][T12499] l2tp_ppp: sess 4/2: set debug=464c457f 13:56:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:51 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 13:56:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x0, 0x28d) 13:56:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 314.418980][T12513] l2tp_ppp: sess 4/2: set debug=464c457f 13:56:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:51 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0)="54915f90488e5bd405cf7b97", 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:56:51 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 13:56:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000b, 0x0, 0x0) 13:56:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:51 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 314.697586][T12532] l2tp_ppp: sess 4/2: set debug=464c457f [ 314.715769][ T176] l2tp_core: sess 4/2: closing session 13:56:51 executing program 1: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000009031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) madvise(&(0x7f0000077000/0x2000)=nil, 0x2000, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 314.748871][T12529] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:56:54 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000000)=""/98) 13:56:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47b") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:54 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 13:56:54 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0)="54915f90488e5bd405cf7b97", 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:56:54 executing program 4: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) [ 317.280500][T12561] ptrace attach of "/root/syz-executor.4"[12554] was attempted by "/root/syz-executor.4"[12561] [ 317.294969][T12560] l2tp_ppp: sess 4/2: set debug=464c457f 13:56:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\xf1\x00 \x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'lo\x00\x00\x00\x00\x00\x00\x00`\x00'}) 13:56:54 executing program 4: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:54 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) [ 317.377188][T12558] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 13:56:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47b") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:54 executing program 4: clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 317.546005][T12577] ptrace attach of "/root/syz-executor.4"[12576] was attempted by "/root/syz-executor.4"[12577] [ 317.551857][T12571] device lo entered promiscuous mode 13:56:54 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0)="54915f90488e5bd405cf7b97", 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:56:54 executing program 0: semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002740)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000880)={0x2, 0x4e23}, 0x10, 0x0}}], 0x2, 0x0) read(r0, &(0x7f0000000000)=""/76, 0x4c) r1 = dup(0xffffffffffffffff) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={0x6}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x3000201d}) 13:56:54 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) [ 317.615527][T12579] l2tp_ppp: sess 4/2: set debug=464c457f [ 317.628125][T12571] device lo left promiscuous mode [ 317.699759][T12585] ptrace attach of "/root/syz-executor.4"[12584] was attempted by "/root/syz-executor.4"[12585] 13:56:54 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47b") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:54 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 317.853627][T12595] device lo entered promiscuous mode 13:56:55 executing program 1: 13:56:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) [ 317.900913][T12588] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 317.911591][T12598] l2tp_ppp: sess 4/2: set debug=464c457f [ 317.928598][ T1471] l2tp_core: sess 4/2: closing session 13:56:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf0") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:55 executing program 1: 13:56:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 13:56:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:55 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0)="54915f90488e5bd405cf7b97", 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:56:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffdd8, 0xfa00, {0x0, 0x0, 0x13f}}, 0xffffff53) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) [ 318.327350][T12617] l2tp_ppp: sess 4/2: set debug=464c457f 13:56:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf0") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:55 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x79, 0x1a, 0x78, 0x8, 0xb95, 0x772a, 0x55cd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x77, 0x0, 0x0, 0x77, 0x2d, 0x35}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000900)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000004c0)={0xb4, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000003280)={0x14, 0x0, 0x0}, &(0x7f0000000600)={0x34, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001f00)={0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0x40, 0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ethernet(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x40, 0x0, 0x3e, {0x3e, 0xf, "a73753360cf5944234387aaeed5ea3d5b7bd3d9c5e11c27e5e99fae55b1e10bf27b27f9e85c5191956710ccd5c24ed871ec0e51562af5deb1b6db064"}}, 0x0, &(0x7f0000000040)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x18, 0x0, 0xb0b8, "d0a09109", "38ca2947"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x60, 0x0, 0x0, 0x7fffffff, 0x8}}}, &(0x7f0000000a00)={0xac, &(0x7f0000000240)={0x40, 0x9}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1000}, &(0x7f00000003c0)={0x20, 0x81, 0x2, "3d9a"}, &(0x7f0000000400)={0x20, 0x82, 0x3, "e75cb0"}, &(0x7f0000000440)={0x20, 0x83, 0x1, 'd'}, &(0x7f0000000480)={0x20, 0x84, 0x1, ';'}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "bef6db"}, &(0x7f0000000640)={0x20, 0x0, 0x4}, 0x0, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x7fff}, &(0x7f0000000740)={0x40, 0xb, 0x2, "50dd"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x3}, &(0x7f00000007c0)={0x40, 0x13, 0x6, @dev={[], 0x1e}}, &(0x7f0000000840)={0x40, 0x17, 0x6, @random="3025f13e47e3"}, &(0x7f0000000880)={0x40, 0x19, 0x2, "c2fd"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2}, 0x0, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000009c0)={0x40, 0x21, 0x1}}) 13:56:55 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0)="54915f90488e5bd405cf7b97", 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:56:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 13:56:55 executing program 0: semget(0x2, 0x3, 0x8) semget(0x1, 0x0, 0x250) r0 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r0, 0x4, 0xb, 0x0) [ 318.680622][T12640] l2tp_ppp: sess 4/2: set debug=464c457f [ 318.708169][ T1471] l2tp_core: sess 4/2: closing session 13:56:55 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 13:56:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf0") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x4, 0x2}}, 0x26) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0x400000, 0x28d) 13:56:55 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0, 0x0, 0x0, 0x1b3}, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0)="54915f90488e5bd405cf7b97", 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:56:55 executing program 0: semget$private(0x0, 0x5, 0x0) r0 = semget$private(0x0, 0x5, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000100)=""/168) semctl$GETPID(r0, 0x4, 0xb, 0x0) 13:56:55 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 13:56:56 executing program 4: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000440)="a4ab12f728db4b2b4d2f2f3ff7ad273b1e89e46f905080af4c90ccb170e60b3a8bf56db763e3062d037dca291318d0a17270bbce74b46f4db2a92ba0c9fb228bc105af8c4a067888318b04aeb1747555ba16ea10e6ddb915ceb6397e514f3482ca3c4a1d3b9b3c08eaba138725c4fe54204eaa3a026ef9d3f316f9fb6e05b4eb24d9694ae311c93e10ff44910738fe220927cb13aeba91de1e10907f84356c9b6f44ddfa660100008000000000e4985731f95d9808000000811005c95ce7e0d4a3f9ec9eabb4c88c14a40c05a612c07f6a78", 0xd2}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x38) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) [ 318.953474][ T3371] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 318.993329][T12660] l2tp_ppp: sess 4/2: set debug=464c457f [ 319.043953][ T1026] l2tp_core: sess 4/2: closing session 13:56:56 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) [ 319.206683][ T3371] usb 2-1: Using ep0 maxpacket: 8 [ 319.333004][ T3371] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 319.341354][ T3371] usb 2-1: config 0 has no interface number 0 [ 319.347711][ T3371] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=55.cd [ 319.356899][ T3371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.366420][ T3371] usb 2-1: config 0 descriptor?? [ 319.632674][ T3371] asix 2-1:0.119 (unnamed net_device) (uninitialized): invalid hw address, using random [ 320.495537][T12635] ================================================================== [ 320.503674][T12635] BUG: KMSAN: kernel-infoleak in _copy_to_user+0x16b/0x1f0 [ 320.510857][T12635] CPU: 0 PID: 12635 Comm: syz-executor.1 Not tainted 5.3.0-rc6+ #0 [ 320.518729][T12635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.528771][T12635] Call Trace: [ 320.532118][T12635] dump_stack+0x191/0x1f0 [ 320.536457][T12635] kmsan_report+0x162/0x2d0 [ 320.540985][T12635] kmsan_internal_check_memory+0x455/0x8d0 [ 320.546830][T12635] kmsan_copy_to_user+0xa9/0xb0 [ 320.551676][T12635] _copy_to_user+0x16b/0x1f0 [ 320.556391][T12635] fuzzer_ioctl+0x2605/0x5690 [ 320.561066][T12635] ? refcount_inc_not_zero_checked+0x1a0/0x240 [ 320.567215][T12635] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 320.573186][T12635] ? next_event+0x6a0/0x6a0 [ 320.577688][T12635] full_proxy_unlocked_ioctl+0x1ca/0x380 [ 320.583364][T12635] ? full_proxy_poll+0x320/0x320 [ 320.588299][T12635] do_vfs_ioctl+0xea8/0x2c50 [ 320.592885][T12635] ? security_file_ioctl+0x1bd/0x200 [ 320.598169][T12635] __se_sys_ioctl+0x1da/0x270 [ 320.602859][T12635] __x64_sys_ioctl+0x4a/0x70 [ 320.607439][T12635] do_syscall_64+0xbc/0xf0 [ 320.611920][T12635] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 320.617821][T12635] RIP: 0033:0x4596e7 [ 320.621705][T12635] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 320.641304][T12635] RSP: 002b:00007fd43120c3e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 320.649816][T12635] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004596e7 [ 320.657788][T12635] RDX: 00007fd43120c830 RSI: 0000000080085502 RDI: 0000000000000003 [ 320.665755][T12635] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 320.673744][T12635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd43120d6d4 [ 320.681713][T12635] R13: 00000000004beee6 R14: 00000000004dffa0 R15: 00000000ffffffff [ 320.689681][T12635] [ 320.691986][T12635] Uninit was stored to memory at: [ 320.696996][T12635] kmsan_internal_chain_origin+0xcc/0x150 [ 320.702696][T12635] kmsan_memcpy_memmove_metadata+0x819/0xa80 [ 320.708653][T12635] kmsan_memcpy_metadata+0xb/0x10 [ 320.713659][T12635] __msan_memcpy+0x56/0x70 [ 320.718070][T12635] gadget_setup+0x498/0xb60 [ 320.722589][T12635] dummy_timer+0x1fba/0x6770 [ 320.727181][T12635] call_timer_fn+0x232/0x530 [ 320.731780][T12635] __run_timers+0xcdc/0x11a0 [ 320.736354][T12635] run_timer_softirq+0x2d/0x50 [ 320.741098][T12635] __do_softirq+0x4a1/0x83a [ 320.745583][T12635] irq_exit+0x230/0x280 [ 320.749730][T12635] exiting_irq+0xe/0x10 [ 320.753901][T12635] smp_apic_timer_interrupt+0x48/0x70 [ 320.759255][T12635] apic_timer_interrupt+0x2e/0x40 [ 320.764257][T12635] default_idle+0x53/0x90 [ 320.768566][T12635] arch_cpu_idle+0x25/0x30 [ 320.772961][T12635] do_idle+0x1d7/0x790 [ 320.777015][T12635] cpu_startup_entry+0x45/0x50 [ 320.781778][T12635] rest_init+0x1be/0x1f0 [ 320.786062][T12635] arch_call_rest_init+0x13/0x15 [ 320.791001][T12635] start_kernel+0x991/0xb61 [ 320.795493][T12635] x86_64_start_reservations+0x18/0x2e [ 320.800942][T12635] x86_64_start_kernel+0x81/0x84 [ 320.805865][T12635] secondary_startup_64+0xa4/0xb0 [ 320.810864][T12635] [ 320.813176][T12635] Uninit was stored to memory at: [ 320.818196][T12635] kmsan_internal_chain_origin+0xcc/0x150 [ 320.823950][T12635] __msan_chain_origin+0x6b/0xe0 [ 320.828871][T12635] dummy_timer+0x2d76/0x6770 [ 320.833439][T12635] call_timer_fn+0x232/0x530 [ 320.838008][T12635] __run_timers+0xcdc/0x11a0 [ 320.842578][T12635] run_timer_softirq+0x2d/0x50 [ 320.847323][T12635] __do_softirq+0x4a1/0x83a [ 320.851804][T12635] irq_exit+0x230/0x280 [ 320.855940][T12635] exiting_irq+0xe/0x10 [ 320.860075][T12635] smp_apic_timer_interrupt+0x48/0x70 [ 320.865441][T12635] apic_timer_interrupt+0x2e/0x40 [ 320.870447][T12635] default_idle+0x53/0x90 [ 320.874769][T12635] arch_cpu_idle+0x25/0x30 [ 320.879173][T12635] do_idle+0x1d7/0x790 [ 320.883220][T12635] cpu_startup_entry+0x45/0x50 [ 320.887969][T12635] rest_init+0x1be/0x1f0 [ 320.892201][T12635] arch_call_rest_init+0x13/0x15 [ 320.897144][T12635] start_kernel+0x991/0xb61 [ 320.901626][T12635] x86_64_start_reservations+0x18/0x2e [ 320.907087][T12635] x86_64_start_kernel+0x81/0x84 [ 320.912020][T12635] secondary_startup_64+0xa4/0xb0 [ 320.917017][T12635] [ 320.919327][T12635] Uninit was stored to memory at: [ 320.924335][T12635] kmsan_internal_chain_origin+0xcc/0x150 [ 320.930039][T12635] __msan_chain_origin+0x6b/0xe0 [ 320.934963][T12635] usb_control_msg+0x61b/0x7f0 [ 320.939720][T12635] usbnet_write_cmd+0x386/0x430 [ 320.944567][T12635] asix_write_cmd+0x155/0x270 [ 320.949237][T12635] ax88772_hw_reset+0x191/0xb40 [ 320.954065][T12635] ax88772_bind+0x6ad/0x11f0 [ 320.958649][T12635] usbnet_probe+0x10ae/0x3960 [ 320.963304][T12635] usb_probe_interface+0xd19/0x1310 [ 320.968483][T12635] really_probe+0x1373/0x1dc0 [ 320.973140][T12635] driver_probe_device+0x1ba/0x510 [ 320.978242][T12635] __device_attach_driver+0x5b8/0x790 [ 320.983602][T12635] bus_for_each_drv+0x28e/0x3b0 [ 320.988444][T12635] __device_attach+0x489/0x750 [ 320.993197][T12635] device_initial_probe+0x4a/0x60 [ 320.998199][T12635] bus_probe_device+0x131/0x390 [ 321.003027][T12635] device_add+0x25b5/0x2df0 [ 321.007507][T12635] usb_set_configuration+0x309f/0x3710 [ 321.012945][T12635] generic_probe+0xe7/0x280 [ 321.017441][T12635] usb_probe_device+0x146/0x200 [ 321.022270][T12635] really_probe+0x1373/0x1dc0 [ 321.026925][T12635] driver_probe_device+0x1ba/0x510 [ 321.032017][T12635] __device_attach_driver+0x5b8/0x790 [ 321.037371][T12635] bus_for_each_drv+0x28e/0x3b0 [ 321.042216][T12635] __device_attach+0x489/0x750 [ 321.046984][T12635] device_initial_probe+0x4a/0x60 [ 321.051996][T12635] bus_probe_device+0x131/0x390 [ 321.056837][T12635] device_add+0x25b5/0x2df0 [ 321.061327][T12635] usb_new_device+0x23e5/0x2fb0 [ 321.066154][T12635] hub_event+0x581d/0x72f0 [ 321.070551][T12635] process_one_work+0x1572/0x1ef0 [ 321.075554][T12635] worker_thread+0x111b/0x2460 [ 321.080297][T12635] kthread+0x4b5/0x4f0 [ 321.084370][T12635] ret_from_fork+0x35/0x40 [ 321.088772][T12635] [ 321.091086][T12635] Uninit was stored to memory at: [ 321.096103][T12635] kmsan_internal_chain_origin+0xcc/0x150 [ 321.101809][T12635] __msan_chain_origin+0x6b/0xe0 [ 321.106729][T12635] ax88772_bind+0xa12/0x11f0 [ 321.111315][T12635] usbnet_probe+0x10ae/0x3960 [ 321.115992][T12635] usb_probe_interface+0xd19/0x1310 [ 321.121209][T12635] really_probe+0x1373/0x1dc0 [ 321.125951][T12635] driver_probe_device+0x1ba/0x510 [ 321.131042][T12635] __device_attach_driver+0x5b8/0x790 [ 321.136398][T12635] bus_for_each_drv+0x28e/0x3b0 [ 321.141236][T12635] __device_attach+0x489/0x750 [ 321.145986][T12635] device_initial_probe+0x4a/0x60 [ 321.150993][T12635] bus_probe_device+0x131/0x390 [ 321.155833][T12635] device_add+0x25b5/0x2df0 [ 321.160336][T12635] usb_set_configuration+0x309f/0x3710 [ 321.165917][T12635] generic_probe+0xe7/0x280 [ 321.170508][T12635] usb_probe_device+0x146/0x200 [ 321.175343][T12635] really_probe+0x1373/0x1dc0 [ 321.180003][T12635] driver_probe_device+0x1ba/0x510 [ 321.185098][T12635] __device_attach_driver+0x5b8/0x790 [ 321.190626][T12635] bus_for_each_drv+0x28e/0x3b0 [ 321.195478][T12635] __device_attach+0x489/0x750 [ 321.200233][T12635] device_initial_probe+0x4a/0x60 [ 321.205287][T12635] bus_probe_device+0x131/0x390 [ 321.210121][T12635] device_add+0x25b5/0x2df0 [ 321.214611][T12635] usb_new_device+0x23e5/0x2fb0 [ 321.219447][T12635] hub_event+0x581d/0x72f0 [ 321.223850][T12635] process_one_work+0x1572/0x1ef0 [ 321.228855][T12635] worker_thread+0x111b/0x2460 [ 321.233600][T12635] kthread+0x4b5/0x4f0 [ 321.237661][T12635] ret_from_fork+0x35/0x40 [ 321.242050][T12635] [ 321.244359][T12635] Local variable description: ----buf.i@asix_get_phy_addr [ 321.251453][T12635] Variable was created at: [ 321.255853][T12635] asix_get_phy_addr+0x4d/0x280 [ 321.260686][T12635] ax88772_bind+0x472/0x11f0 [ 321.265250][T12635] [ 321.267558][T12635] Byte 10 of 16 is uninitialized [ 321.272475][T12635] Memory access of size 16 starts at ffff8880392a4dc0 [ 321.279225][T12635] Data copied to user address 00007fd43120c830 [ 321.285350][T12635] ================================================================== [ 321.293404][T12635] Disabling lock debugging due to kernel taint [ 321.299534][T12635] Kernel panic - not syncing: panic_on_warn set ... [ 321.306103][T12635] CPU: 0 PID: 12635 Comm: syz-executor.1 Tainted: G B 5.3.0-rc6+ #0 [ 321.315359][T12635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.325398][T12635] Call Trace: [ 321.328688][T12635] dump_stack+0x191/0x1f0 [ 321.333006][T12635] panic+0x3c9/0xc1e [ 321.336903][T12635] kmsan_report+0x2ca/0x2d0 [ 321.341393][T12635] kmsan_internal_check_memory+0x455/0x8d0 [ 321.347189][T12635] kmsan_copy_to_user+0xa9/0xb0 [ 321.352044][T12635] _copy_to_user+0x16b/0x1f0 [ 321.356664][T12635] fuzzer_ioctl+0x2605/0x5690 [ 321.361352][T12635] ? refcount_inc_not_zero_checked+0x1a0/0x240 [ 321.367513][T12635] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 321.373481][T12635] ? next_event+0x6a0/0x6a0 [ 321.377982][T12635] full_proxy_unlocked_ioctl+0x1ca/0x380 [ 321.383622][T12635] ? full_proxy_poll+0x320/0x320 [ 321.388550][T12635] do_vfs_ioctl+0xea8/0x2c50 [ 321.393167][T12635] ? security_file_ioctl+0x1bd/0x200 [ 321.398443][T12635] __se_sys_ioctl+0x1da/0x270 [ 321.403109][T12635] __x64_sys_ioctl+0x4a/0x70 [ 321.407682][T12635] do_syscall_64+0xbc/0xf0 [ 321.412086][T12635] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 321.417973][T12635] RIP: 0033:0x4596e7 [ 321.421849][T12635] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.441438][T12635] RSP: 002b:00007fd43120c3e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 321.449837][T12635] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004596e7 [ 321.457819][T12635] RDX: 00007fd43120c830 RSI: 0000000080085502 RDI: 0000000000000003 [ 321.465788][T12635] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 321.473746][T12635] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd43120d6d4 [ 321.481704][T12635] R13: 00000000004beee6 R14: 00000000004dffa0 R15: 00000000ffffffff [ 321.491005][T12635] Kernel Offset: disabled [ 321.495337][T12635] Rebooting in 86400 seconds..