syzkaller login: [ 107.875916] sshd (11282) used greatest stack depth: 53616 bytes left Warning: Permanently added '10.128.15.216' (ECDSA) to the list of known hosts. 2019/04/01 20:58:25 fuzzer started 2019/04/01 20:58:31 dialing manager at 10.128.0.26:34359 2019/04/01 20:58:31 syscalls: 1 2019/04/01 20:58:31 code coverage: enabled 2019/04/01 20:58:31 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/04/01 20:58:31 extra coverage: extra coverage is not supported by the kernel 2019/04/01 20:58:31 setuid sandbox: enabled 2019/04/01 20:58:31 namespace sandbox: enabled 2019/04/01 20:58:31 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/01 20:58:31 fault injection: enabled 2019/04/01 20:58:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/01 20:58:31 net packet injection: enabled 2019/04/01 20:58:31 net device setup: enabled 21:02:04 executing program 0: r0 = socket(0x1, 0x1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = gettid() setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev}, &(0x7f0000000180)=0xc) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@local, 0x4e20, 0x6, 0x4e21, 0x0, 0xa, 0x20, 0xa0, 0x73, r3, r4}, {0x1ff, 0x960, 0x3, 0x9575, 0x100000001, 0x8, 0x7, 0x6}, {0x8001, 0xeb9c, 0x3, 0x6}, 0x4, 0x6e6bbd, 0x1, 0x1, 0x3, 0x3}, {{@in6=@empty, 0x4d6, 0xff}, 0xa, @in=@remote, 0x34ff, 0x2, 0x2, 0x1ff, 0x400, 0x3, 0x4}}, 0xe8) tkill(r1, 0x1000000000016) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x4, 0x4, @tid=r1}, &(0x7f0000000100)) [ 338.026013] IPVS: ftp: loaded support on port[0] = 21 [ 338.190727] chnl_net:caif_netlink_parms(): no params data found [ 338.268691] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.275527] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.284265] device bridge_slave_0 entered promiscuous mode [ 338.293672] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.300486] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.310930] device bridge_slave_1 entered promiscuous mode [ 338.347625] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 338.359493] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 338.395206] team0: Port device team_slave_0 added [ 338.404471] team0: Port device team_slave_1 added [ 338.527623] device hsr_slave_0 entered promiscuous mode [ 338.653720] device hsr_slave_1 entered promiscuous mode [ 338.827083] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.833819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.841216] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.848014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.940161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.962755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.977489] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.986612] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.000385] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 339.021523] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.040456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.048927] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.055674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.098130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.106714] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.113554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.123818] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.138898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 339.148931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.165160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 339.173922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.193483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.205445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 339.214053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 339.223312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.267498] 8021q: adding VLAN 0 to HW filter on device batadv0 21:02:08 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x76, &(0x7f0000000140), &(0x7f0000000000)=0x90) [ 341.492932] IPVS: ftp: loaded support on port[0] = 21 [ 341.664672] chnl_net:caif_netlink_parms(): no params data found [ 341.746374] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.753137] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.761879] device bridge_slave_0 entered promiscuous mode [ 341.776653] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.783432] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.792110] device bridge_slave_1 entered promiscuous mode [ 341.828658] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 341.840484] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 341.875270] team0: Port device team_slave_0 added [ 341.884556] team0: Port device team_slave_1 added [ 341.958655] device hsr_slave_0 entered promiscuous mode [ 342.092774] device hsr_slave_1 entered promiscuous mode [ 342.219068] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.225797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.233239] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.239904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.340151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.364438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.376018] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.385549] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.398495] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 342.438520] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.470673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.482231] bridge0: port 1(bridge_slave_0) entered blocking state 21:02:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x5c832, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0xfffffc8f) splice(r5, 0x0, r7, 0x0, 0x100000000000a, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in=@remote, 0x4e22, 0x0, 0x4e23, 0x8, 0xa, 0xa0, 0xa0, 0x8, 0x0, r1}, {0x200, 0x528, 0xffff, 0x8001, 0xfff, 0x5, 0x8, 0x3f}, {0x1, 0x1c0000000000000, 0x1f, 0x7}, 0x3, 0x6e6bbc, 0x3, 0x0, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d5, 0x3f}, 0xa, @in6=@remote, 0x3507, 0x7, 0x0, 0x0, 0x4, 0x4, 0x88a8}}, 0xe8) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfffffc8f) splice(r2, 0x0, r8, 0x0, 0x100000000000a, 0x0) [ 342.488844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.554792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.563422] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.570040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.580302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.618500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 342.628401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.655732] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.664761] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.675259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.684203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.723912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.749472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 347.914837] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large: [ 347.926240] clocksource: 'acpi_pm' wd_now: 3ad5bb wd_last: 49ccf1 mask: ffffff [ 347.935667] clocksource: 'tsc' cs_now: be569323b4 cs_last: bbf999070e mask: ffffffffffffffff [ 347.946253] tsc: Marking TSC unstable due to clocksource watchdog [ 347.961254] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 347.970129] sched_clock: Marking unstable (348019548044, -58312317)<-(348082670555, -121434911) [ 347.992959] clocksource: Switched to clocksource acpi_pm 21:02:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000380)={0x79}) 21:02:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x2000021c) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendto$unix(r1, 0x0, 0x0, 0x80020003ffc, &(0x7f0000000200)=@abs, 0x6e) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, &(0x7f0000000380)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 348.188463] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 21:02:15 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000000) 21:02:15 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x80000000) 21:02:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x5, 0x4, 0x3, 0x8000000001}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77ffff, 0x0, 0x10020000000, 0x0}, 0x2c) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x501000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x18) fcntl$setflags(r0, 0x2, 0x1) 21:02:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10) r2 = socket(0x100000010, 0x3, 0x1) ioctl$sock_ifreq(r2, 0x8924, &(0x7f0000000040)={'veth0_to_hsr\x00', @ifru_settings={0x1, 0x8, @fr_pvc=0x0}}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000), 0x4) 21:02:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, 0x0) setxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x40001) r2 = socket$alg(0x26, 0x5, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000040)=0x67fce845) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 21:02:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="3ea9022ef85c939b0f11"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:02:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r2}], 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x8) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)) [ 349.095013] kvm: SMP vm created on host with unstable TSC; guest TSC will not be reliable 21:02:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="3ea9022ef85c939b0f11"], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:02:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = dup2(r1, r0) mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x8113, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xfffffffffffffff7}, &(0x7f0000000140)=0xc) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000540)=""/34) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x20a, 0x6, 0x9, 0x4, 0x4}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x4, 0x1, 0x6}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0x5}, &(0x7f0000000340)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000500)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x7, @mcast1, 0x3}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="8c9e182c6772e645cb28f27ccb6123feb4089be775a4c7fff6f0c964b48fc897a013d958032dd18bb3726e004937004e5970ed72e3b8c37d457662b9861a8a468695a2", 0x43}], 0x1, &(0x7f0000000380)=[@authinfo={0x18, 0x84, 0x6, {0x2}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8, 0x2, 0x1, r3}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x5}}, @sndrcv={0x30, 0x84, 0x1, {0x10000, 0x8, 0x820d, 0x6, 0x81, 0x6, 0x9, 0x3, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x4, 0x8, 0xff, 0x1, 0x10, 0x100000000, 0x7fffffff, r5}}, @sndrcv={0x30, 0x84, 0x1, {0xda17, 0x81, 0x8000, 0x80000000, 0x7f, 0x6, 0x400000000, 0x148, r6}}, @authinfo={0x18, 0x84, 0x6, {0x31280101}}], 0x150, 0x8040}, 0x84) add_key(&(0x7f0000000240)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) 21:02:16 executing program 1: move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000/0x3000)=nil], 0x0, &(0x7f0000000180), 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x81, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000400)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000440)=r1) sendmsg$rds(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/230, 0xe6}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000280)=""/181, 0xb5}], 0x4, &(0x7f0000000380)=[@rdma_dest={0x18, 0x114, 0x2, {0xb, 0x100000001}}], 0x18, 0x44090}, 0x4008881) 21:02:16 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgrou\x00\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) pread64(r1, 0x0, 0x311, 0x1000000) 21:02:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x12) socket$inet(0x10, 0x2, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="240000001a0007041dfffd946f6105000a0000001f000000002808000800030004000000280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x80000000000000) 21:02:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r2}], 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x8) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)) [ 350.049397] Unknown ioctl 1074025680 [ 350.065038] Unknown ioctl 19247 [ 350.073119] Unknown ioctl 1074025680 21:02:17 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) msgget$private(0x0, 0x2) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xc09, 0x40800) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000180)=0x54) msgget$private(0x0, 0x241) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5500000018007f1412fe01b2a4a280930a06000000a84306910000000a000f0035020000060003d91900154002000001d40240dc1338d54400009b84136ef75afb83de44110016000d0006000000060cec4faba7d4", 0x55}], 0x1}, 0x0) pause() [ 350.265091] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 350.272922] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 350.280509] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 350.881889] hrtimer: interrupt took 266514 ns 21:02:18 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400800) ioctl$KIOCSOUND(r0, 0x4b2f, 0xfffffffffffff31f) getsockopt$inet6_dccp_buf(r0, 0x21, 0xc, &(0x7f0000000040)=""/209, &(0x7f0000000140)=0xd1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000180)={0x7f, 0x1, 0x2, 'queue0\x00', 0xffffffff}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000240)={0x0, 0xfffffffffffffff9}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0)={r3, 0x55, "8a1ee95ad808b8d2de17a39892ace8d882c47c53e83dfc94c53f3f3ab887a34fbf8d5047836ab109ecb257823bc63c0e1d5ddff0a5d4857405c5a97281154b2d1dcad96344ef7f8115e1b0420d192e39415ee26940"}, &(0x7f0000000340)=0x5d) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000440)={r3, 0x6fbbbd4b}, 0x8) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = getpid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000500)=r5) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000540)={r4, 0x6, 0xffffffff}, 0x8) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000580)={0x5, 0x7}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000005c0)={r3, @in={{0x2, 0x4e21, @empty}}}, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) getsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000700)=""/80, &(0x7f0000000780)=0x50) pwritev(r0, &(0x7f0000000c80)=[{&(0x7f00000007c0)="ff47c91a0ddda287ba0d4f4af5bd0034fe6370e7ee5a9e", 0x17}, {&(0x7f0000000800)="f28a9d318d369874b4454a75a194e7cc6ac4e22d473ed3b91be7052a0f554a9053325e3a71d9058f05f26921b439dbdab340e42dfce7c66a6aad02ac5e2ad77cf3ab845a1af3268144f99ce03a1ed3946ce1a39f89cf258f0cd7d2d645c45e5bd397753f7b5e691a6a", 0x69}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="bcad0398fb0428caab20e5a9a132f198e53f241eea5a7e528bcf4e221c676e78738c96a918aa52328adb2cec", 0x2c}, {&(0x7f0000000900)="e4ea4c6c37d92df974a6cf6b9c17e94a17f0ccdc045bbe67b53d2abb64836b7c10280fca6838d218ab84a0df0761496a0788d53a9c867feea09bbdd1a116944396fd601c9902088f26d140736f4738da0d45cc8907ddc33cdab5b8b9701a35e68b27bf014a5ca73070401e42e594ae8713eb3e8afb747f36d84c5a97ec0166037e1930e12f51ce4e1f01b025acdc8abfed0727720712a7a4b40466b35cae61efc5e8ae9e54daceede3c81ca022db01", 0xaf}, {&(0x7f00000009c0)="d7cbb43c2df90aca1ad7a684b9bce350e8541fa0344e0e65cac45f76250552afa2560226496710c09ca5054f971a920cad52d71d700aee741da1faf4ce50bc724883149e6c6f5f03cddd675056a8cd5bdccd3d57f293fa39bdf3d51a28974475fff318b7c5a35faca7ffa0ace2d95c77b598cff983b9b94326bd06dcef31a50764e13e0c22554da048417c9c17758f8f905ebfbf2d0c54fde53a95e89a31af81bca0d81ef8bc58142259ca2e6240112b051b6a0251d9c4bc436e3fc02db7935b14", 0xc1}, {&(0x7f0000000ac0)="a7fdcba248caa21df127363ce3108cfd1362d0ea759001b6fd4e4307310916e1baaa67a6524171ac421bd45aa1d185da2aa6eb7d1f7390fe361bfd1532a35c550ecc5053b00afbc17692533b4b74fd4273c56dbe0f644c4719a0894e14cb8267de0707294ccfee6ecc7095a5e2009173004ef716b306c7b98973f4464c9180d404367459211f4e591fa6ccaf1ecdde2f9192f1a4fc6abda26f293d393c806dc6261723061190ca1adf86f2170d7533", 0xaf}, {&(0x7f0000000b80)="bec9eabb899de10e96097a4e93d4214e65da29cf5e38ce8817e52c82cc988b75e11cee6a5de30a90e81b26397669", 0x2e}, {&(0x7f0000000bc0)="302ad2e2d2987e1bfceef47a05186d63287fbf71b3797a30dd07097628690616ee77a8f2aa3c3de0a2267d3ff4c752816c81502beb87f9b00b7680960becb3fd8ebb17a795fa934ca424cb0b1f71e17ca71ac188a9864f60a0e3a8ae4817045ca3368f8ec5e5c242bc167cff03857f0d6f96969ea949897d91c547e87c794b11c855fb66b24a97bab92f431c50b5fe09b84ef9ac792db9", 0x97}], 0x9, 0x59) ioctl$KVM_SMI(r0, 0xaeb7) io_setup(0xb2, &(0x7f0000000d40)=0x0) io_submit(r6, 0x7, &(0x7f0000002300)=[&(0x7f0000000e80)={0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, r0, &(0x7f0000000d80)="7006ef1f3136946e0f9c7cfc26ef5b6fef0b20b8731a435c526b04de10c2837c24c42d888afb606940213808eb78aff956bab48cd8ebc5e9639068fd0c985523ffed0a6adcf31bef06ac3fa977190b281f6b538dd5f2e676d703fae2234a3dac7e84e1dce1444484648a614a14f2caadfdec436016884069353fc31840b1e3c851ff41c7aa140845fde904dccaf59e01e4f0eaea987b65bb4eab0021dcc1a0117650bc7c781d57c3382ba6015121563939b390d17fc561a15145fbdf4935875857b263008e9febc24525", 0xca, 0x915, 0x0, 0x1}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0xf, 0x2, r2, &(0x7f0000000ec0)="3caf9bf40571e196a3b31878147dd1965a6c", 0x12, 0x0, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x7, 0x5, r2, &(0x7f0000000f40)="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", 0x1000, 0x1, 0x0, 0x3, r0}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f0000001f80)="caaa827bbc3304e5ac24afe74b6d5ad5795b5e46778f17b6095936c3658a77f82c8bc19a06edcdd754f9eddcbda27e6c2ef7127dffa14d92c5b464fd447239706098b0d972a7ea955be13fd002b0cbcf094e9363cce9ab78b974c421bbc2be635ad63ce9712428e39a8704e91577420777ad32e37fc12c5c74ba45", 0x7b, 0xa2a, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x6, 0x1, r2, &(0x7f0000002040)="b5ffd2f50fc47c390ca0d18e7b6037170e162742b52a59e77db80a39852e0a63821b565db07cc9a44110de349de8cb11f34d80441bb50b91bc168bba3150a5ecaccc304a4c875b730377a5ab8aa69614f3c446c536425acf4b9d1db0d89727e114768810a7c2d716f8f63c86a3eb7692d15a353c375867f144fd7ef61e0a0729ed98d915f92c79eeb0a7ef6ea5eca7c0f6f8bcffd4947de46fd2e7d6e9bd0ab60ef738bf9d76e5f1cc67bcc3b57fe5cc82054b110fe78368025dab4a2f4af18d3e81e97c8a9d08c4f7f340277e96", 0xce, 0x401, 0x0, 0x1, r0}, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x7, 0x6, r0, &(0x7f0000002180)="42cc59e4ace71d77b961934432114b3df2b8d0dacea8dd497567d1844bfb8c57f4e15bc68f1f7dd162723bf9d561ea654a9d4de4673fce57efd9b10fc4bbcbc0c102710d3ecf3581e3817b972a1118f10dbeba8590804cc3ea7612138b86e4f182c311982781c8c3e58361a899ace3535c81d8867c17e306d58e0b08e47f921b673b6492571d5927b7eb840d14", 0x8d, 0x1, 0x0, 0x0, r0}, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000002280)="b86d6e5585d78c231c6c6ba39eec", 0xe, 0x4, 0x0, 0x2, r0}]) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000002340)=0x3) fstat(r1, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) clock_gettime(0x0, &(0x7f0000002440)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002480)={0x0, 0x0}) utimensat(r0, &(0x7f0000002400)='./file0\x00', &(0x7f00000024c0)={{r8, r9/1000+10000}, {r10, r11/1000+10000}}, 0x100) fcntl$getown(r2, 0x9) fanotify_mark(r0, 0x10, 0x10, r0, &(0x7f0000002500)='./file0\x00') 21:02:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r2}], 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x8) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)) [ 351.043542] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 351.051091] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 351.058929] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 21:02:18 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) accept(r1, 0x0, &(0x7f0000000100)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x4a0100, 0x0) pkey_alloc(0x0, 0x2) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000004c0)={0x2, @pix_mp={0x0, 0x0, 0x59455247}}) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x101000) 21:02:18 executing program 1: capset(&(0x7f0000000180)={0x19980330}, &(0x7f00009b3000)) r0 = socket(0xa, 0x802, 0x88) r1 = socket$netlink(0x10, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000000)="480000001400197f09004b0109048c590a88bfffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e0000000000d5a49b19007a9eace3dbe8b12c000000000000000000", 0x48}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'irlan0\x00', 0x1000}) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 351.475173] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 21:02:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x2, &(0x7f0000000240)=0x6697, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0xfffffffffffffce8) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x404) [ 351.768451] IPVS: ftp: loaded support on port[0] = 21 [ 351.982318] chnl_net:caif_netlink_parms(): no params data found 21:02:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r2}], 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x8) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)) [ 352.093075] protocol 88fb is buggy, dev hsr_slave_0 [ 352.098866] protocol 88fb is buggy, dev hsr_slave_1 [ 352.125357] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.132129] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.140752] device bridge_slave_0 entered promiscuous mode [ 352.186786] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.193593] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.202340] device bridge_slave_1 entered promiscuous mode [ 352.262824] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 352.277108] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 352.346230] team0: Port device team_slave_0 added [ 352.355482] team0: Port device team_slave_1 added [ 352.458240] device hsr_slave_0 entered promiscuous mode [ 352.492685] device hsr_slave_1 entered promiscuous mode [ 352.566167] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.572931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.580132] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.586937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.724781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.768245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.792273] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.807359] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.827025] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 352.861080] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.900282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.909986] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.916751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.989401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.997876] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.004566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.014503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 353.072388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.082225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.103908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 353.112941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 353.122098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.130681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 353.139111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.147839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 353.156292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 21:02:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x8) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") [ 353.252885] protocol 88fb is buggy, dev hsr_slave_0 [ 353.254898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.258630] protocol 88fb is buggy, dev hsr_slave_1 [ 353.272791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 353.372959] protocol 88fb is buggy, dev hsr_slave_0 [ 353.378808] protocol 88fb is buggy, dev hsr_slave_1 [ 353.385184] protocol 88fb is buggy, dev hsr_slave_0 [ 353.391021] protocol 88fb is buggy, dev hsr_slave_1 [ 353.502815] protocol 88fb is buggy, dev hsr_slave_0 [ 353.508576] protocol 88fb is buggy, dev hsr_slave_1 21:02:20 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x200000, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x240000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080427bd7000ffdbdf2502000000080003000100010008000200070000001000040001000000800000000100000014ca634b757e7f12868934fca8da7e3000040005"], 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x4048000) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) flock(r2, 0x5) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000280), 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000001c0)={0x0, @bt={0x3, 0x3, 0x1, 0x2, 0x1000000000000000, 0x7, 0xb0, 0x40, 0xff, 0xff, 0x53ae1a20, 0xdb7, 0x8, 0x0, 0x0, 0x21}}) fcntl$getownex(r2, 0x10, &(0x7f00000002c0)) r4 = semget(0x2, 0x0, 0x2) semctl$SETVAL(r4, 0x1, 0x10, &(0x7f0000000040)) ioctl(r3, 0x1000008912, &(0x7f0000000300)="0adc1f123c12a41d88b070") socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r5, 0x0, 0x0) 21:02:21 executing program 2: unshare(0x10000) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xfffc, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) r2 = accept4(r1, 0x0, &(0x7f0000000180)=0x33c, 0x80000) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000040, 0x0, 0x0, 0x20000070, 0x200000a0], 0xfeffff07, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000110000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000"]}, 0x108) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000002c0)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) 21:02:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) mq_notify(r0, &(0x7f0000000140)={0x20000000, 0x3, 0x2}) 21:02:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") 21:02:21 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x200400002, 0x0) userfaultfd(0x80800) r1 = userfaultfd(0x0) ioctl$KDSETLED(r0, 0x4b32, 0x7ffffffd) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)={0xaa, 0x3}) unshare(0x400) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000001000/0x1000)=nil, 0x1000}) 21:02:21 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='highspeed\x00', 0xa) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7959b8bfd59d1a516eccd424a386fc4b68308050942eca38dda2a1beb2437d42c3d31250cd630c6ae1f0626d52f879fd8395670d62271e8595c274c7685df93283096f33f7a5f9606691aae5ee4d2bf35d4c18b", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/112], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x78) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendto$packet(r1, &(0x7f0000000340), 0xffffffffffffffd4, 0x0, 0x0, 0xffffffffffffff9a) 21:02:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") 21:02:22 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='highspeed\x00', 0xa) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7959b8bfd59d1a516eccd424a386fc4b68308050942eca38dda2a1beb2437d42c3d31250cd630c6ae1f0626d52f879fd8395670d62271e8595c274c7685df93283096f33f7a5f9606691aae5ee4d2bf35d4c18b", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/112], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x78) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendto$packet(r1, &(0x7f0000000340), 0xffffffffffffffd4, 0x0, 0x0, 0xffffffffffffff9a) 21:02:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") [ 357.533033] net_ratelimit: 10 callbacks suppressed [ 357.533055] protocol 88fb is buggy, dev hsr_slave_0 [ 357.543917] protocol 88fb is buggy, dev hsr_slave_1 [ 357.772882] protocol 88fb is buggy, dev hsr_slave_0 [ 357.778740] protocol 88fb is buggy, dev hsr_slave_1 [ 358.333364] protocol 88fb is buggy, dev hsr_slave_0 [ 358.339126] protocol 88fb is buggy, dev hsr_slave_1 21:02:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x2, &(0x7f0000000240)=0x6697, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0xfffffffffffffce8) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x6000000, 0x3, 0x6000000, 0x3}, 0x404) 21:02:27 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='highspeed\x00', 0xa) splice(r1, 0x0, r0, 0x0, 0x1000000000000003, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7959b8bfd59d1a516eccd424a386fc4b68308050942eca38dda2a1beb2437d42c3d31250cd630c6ae1f0626d52f879fd8395670d62271e8595c274c7685df93283096f33f7a5f9606691aae5ee4d2bf35d4c18b", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/112], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x78) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") sendto$packet(r1, &(0x7f0000000340), 0xffffffffffffffd4, 0x0, 0x0, 0xffffffffffffff9a) 21:02:27 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") 21:02:27 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_GET_KEEPCAPS(0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/177, &(0x7f0000000100)=0xb1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000180)) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f00000001c0)=0x7fffffff, 0x4) fstat(r1, &(0x7f0000000200)) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x7fffffff, 0x30}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r2, @in={{0x2, 0x4e21, @local}}}, 0x84) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, r3) pkey_mprotect(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1, r3) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000003c0)) syz_open_dev$sndtimer(&(0x7f0000000400)='/dev/snd/timer\x00', 0x0, 0x8000) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000500)={r2, 0x4}, &(0x7f0000000540)=0x8) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000580)={0x2, "8a5a40b78c211cca70a280146b9005ce97017fe01a3214497d3c77d56f35468b", 0x3, 0x9, 0x6, 0x2002008, 0x2}) pwritev(r0, &(0x7f0000001780)=[{&(0x7f0000000600)="94acd056ba1c6069f8adbdf930338f89b4ce4688ce7e0e3226c928a370c9f6c46754bd5ff0f1c16d3016863dba4d8b5ce8504e08ba2fd9e5841df0ea205f4db3f7a7dc90669c8f8991e118150ab3240fa887051df93254a86977493f862e227d54a0ab9144f1bb93c3cb977dc640602cd1bc09ae341c82401814602f7e97", 0x7e}, {&(0x7f0000000680)="dd3bee195b7bb7a4bc4ab043280a332b8d97796df9a8df3aa0331ea60c313b18f362a597f4c53cd2f59c5d98755845143bed16aba0d004c812576666977e1b15e04a9964ef7cad0541bbce09d211816ed85994cdad2c34bf4f5b76016caefa51aef34bf91a70cb98443c15ec0b1b4f05e5bf94885ca15dd45bb223a7e78e93c8681664ce4e1473fd987673a54155bb31d2eb5a0ca1d002edae12b98f8026192b6c9fa1d026c9ae9a42feb6e34d726a1144c2633a59dc28b33610b8923b053dae9678e1", 0xc3}, {&(0x7f0000000780)="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", 0x1000}], 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000017c0)={0x3, 0x8004, 0x800, 0x7, r4}, 0x10) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)) r5 = add_key(&(0x7f00000018c0)='id_resolver\x00', &(0x7f0000001900)={'syz', 0x3}, &(0x7f0000001940)="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", 0x1000, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002940)={r5, 0x9, 0x200}, 0x0, &(0x7f0000002980)="7baacdc54cf93d9a7b181904c5607cf71411d90ca7f031f5c518b8d446953c2ac033fb5cd70ed476c186c701d1819bab2dd9fe5ee8ae", &(0x7f00000029c0)="092476b83544f2a77dffb521a147be6f1dec1ca8a772c73297879b9f4231a5e39fb5848b19a026dbe7a37bb0dede0d7a00f3") ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000002a00)) sendmsg$inet_sctp(r1, &(0x7f0000002f00)={&(0x7f0000002a40)=@in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x23}, 0x9}, 0x1c, &(0x7f0000002d80)=[{&(0x7f0000002a80)="aa5f036ac290c2db464d68ffda5f483974c7ede1b13cc1b4cb492941aeb1ef44531034dccf1d84247dcf1b93fe693a00c55820df568a6fc2c5af3b9586f5da460563671ef9e1257127f2d98fb1cf757c971bae7375c154d0473a6fd5ab8c38f69bcf9bc23dbdba436d5f5013ef6876102947b578dbf925b9d86ad7baa1b8ee1f50414dda997bb2cec0448ce3d08a395fa8b60db887eecd5afdd468dd7dee0e91f0a35cc3ef43c108e9b1c08b25278d396638286d6363aa49572bd6c051415eccd316e34e3dcfec12035a4f3767adf2fe9352dfca8fbee067185f38166ec42a799d29", 0xe2}, {&(0x7f0000002b80)="67ff39651af404fed7e405b2723375736dc9df5f477e67f3d4a86bdf1efd70c1fdd13705dc388db8d505e564a4ce4eda2add2f94c8bac794f795c192892c01fc719798d441e68dba12f9e9b19b897da07e974193ea1244383e050e7d1b8c8a05a4e9602dce771875963efa1d11319ad9e143aedd4431a01756a987c7ac719252d49703105cca45f785aac89a32a1a38133a3cf9761f041eeb2b86adcadb4b705e835d7e3e3e7c9d1", 0xa8}, {&(0x7f0000002c40)="0e30d3d92f5a44b64512ff8266f243b9c62fef6b8897cedc167d05fe866c861c8000961959368d1f2840f470c2a0d25afeb3326508df7bc34e1c8b52b8655338d87a07154403e8a4e64aef8b6227e0ed5a6a61b4", 0x54}, {&(0x7f0000002cc0)="a869e9e1d4c19b9d29d785d84781da7024af1d5039f6a555e4bbd3147a34e38ab6fc08eff02e256c2f067e602e16a49c86bc91f6d9b494bda8611483ad5b552bd19864613b", 0x45}, {&(0x7f0000002d40)="a3c5e65a824cc3be01ee3fa2be886a6c2ea55effdc97cf81f351d7e038742448", 0x20}], 0x5, &(0x7f0000002e00)=[@init={0x18, 0x84, 0x0, {0x80000001, 0x8, 0x9, 0xf2b}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x1, 0x41, 0x4, r2}}, @sndinfo={0x20, 0x84, 0x2, {0x768, 0x201, 0xfffffffffffffffb, 0x100000000, r4}}, @authinfo={0x18, 0x84, 0x6, {0x3}}, @prinfo={0x18}, @init={0x18, 0x84, 0x0, {0xe9, 0x5, 0xd86, 0xa5dd}}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @sndrcv={0x30, 0x84, 0x1, {0x3f3, 0x7, 0x1, 0x0, 0x7f, 0x1f, 0x5, 0x1, r4}}], 0xf0, 0x8000}, 0x8004) accept(r1, &(0x7f0000002f40)=@x25={0x9, @remote}, &(0x7f0000002fc0)=0x80) fdatasync(r0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000003000)={0x0, @reserved}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1f) 21:02:28 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x401, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={r2, 0xa18}, 0x8) write$UHID_CREATE2(r1, &(0x7f0000000200)={0xb, 'syz1\x00', 'syz0\x00', 'syz1\x00', 0x3f, 0x0, 0x1, 0x0, 0x5, 0xc2a, "914fecfa22b637ba3c772ed84e2329fd660ae47a055f64c2eb319ff4e84390e32bed2562e635f530257e9bd972e93d385f630e70a6b3c83f7c0553e6edc1b3"}, 0x157) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7, 0x2) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x9, 0x5e}}) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000100), 0x4) [ 361.317897] IPVS: ftp: loaded support on port[0] = 21 21:02:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") 21:02:28 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x200000) write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9) r1 = socket$inet(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f0000000500)=@ethtool_sset_info={0x37, 0x0, 0xfffffffffffffffc}}) [ 361.625757] chnl_net:caif_netlink_parms(): no params data found [ 361.692980] protocol 88fb is buggy, dev hsr_slave_0 [ 361.698868] protocol 88fb is buggy, dev hsr_slave_1 [ 361.752973] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.759631] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.768312] device bridge_slave_0 entered promiscuous mode [ 361.826797] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.834255] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.842881] device bridge_slave_1 entered promiscuous mode 21:02:28 executing program 2: r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='#! \t'], 0x4) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000001c0)=[&(0x7f0000000000)='\x00', &(0x7f0000000080)='GPL\x00', &(0x7f00000000c0)='ppp0proc\x00', &(0x7f0000000100)='wlan0\'[\x00', &(0x7f0000000140)='vmnet0\x00']) [ 361.933114] protocol 88fb is buggy, dev hsr_slave_0 [ 361.939050] protocol 88fb is buggy, dev hsr_slave_1 [ 361.988797] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 362.025203] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 362.090246] team0: Port device team_slave_0 added [ 362.116530] team0: Port device team_slave_1 added 21:02:29 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x200000001, 0x3, 0x2000000000000009, 0x1}, 0x2c) r1 = bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77ffff, 0x0, 0x10020000000, 0x0}, 0x2c) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000000), 0x0}, 0x18) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000080)={0x33ca, 0x5}) [ 362.277069] device hsr_slave_0 entered promiscuous mode [ 362.313512] device hsr_slave_1 entered promiscuous mode 21:02:29 executing program 2: ioprio_set$pid(0x3, 0x0, 0x10000800004000) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dlm-control\x00', 0x80c01, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000840)={0xffffffffffffffff, 0xbc6, 0x40}, 0xc) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x6, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup3(r1, r3, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x800, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000240)=0x2, 0x4) r7 = socket$inet6(0xa, 0x10000000003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in=@dev, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0xa}}, {{@in, 0x0, 0xff}, 0x0, @in6=@local}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60d8652b00140600feff00000000000000000000000000aa21810000b33b191656cdc6786b133be435dbea6feef8c1098f500eb3a5ee9ad4ec3298e17bc3e09a8b82f0683f02efb7dc4a55473ba7cc5ad56eaba983412e84d1af9d4b8ae6e0367ed29a4e64c1f3b41c05fabc1c437b468a6d5bd476fa8dcd20276c4e3fcf48cfe61e0bb74b3c473707ca6e3d26f128a173a6c27c6f7dc1790a58cdfd71d8decc32ab44b3c8ea00fc4b4733120e6da9b4e80831fb61364beded8fb016ce1b874f1f754c1a11daeb7342ab461e16385d942eb5df7bd01ac1da7ba5453c6ac686dacd5cd9da5da889495322e4f21e3aafefb0e91452c1012d62c2860c94", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) capget(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0x7fffffff, 0x8, 0x0, 0x1000, 0x7, 0x6}) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000000280)) ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f00000000c0)={&(0x7f0000000000)=""/173, 0xad}) unlink(&(0x7f00000007c0)='./file0\x00') 21:02:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r1}], 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0), 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") [ 362.448749] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.455489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.462865] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.469493] bridge0: port 1(bridge_slave_0) entered forwarding state 21:02:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) ioctl(r1, 0x9, &(0x7f0000000200)="0adc1f124a03e32b5f0b019e5f3c123f3188b0705778e8bf46e6ab9e2f6c98616a89ad") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x402c542c, &(0x7f0000000080)) [ 362.656452] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.682708] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.746902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.839033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.846846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.866728] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.913464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.922180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.930388] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.937083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.946975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.955695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.964096] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.970648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.042473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.052612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.086902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 363.096308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 363.105547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 363.117584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.126313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 363.135270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.144097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 363.152547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.161276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 363.169610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.214363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.262976] net_ratelimit: 2 callbacks suppressed [ 363.262998] protocol 88fb is buggy, dev hsr_slave_0 [ 363.273872] protocol 88fb is buggy, dev hsr_slave_1 [ 363.334133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 363.342500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 363.386344] protocol 88fb is buggy, dev hsr_slave_0 [ 363.392272] protocol 88fb is buggy, dev hsr_slave_1 [ 363.461442] QAT: Invalid ioctl [ 363.468458] QAT: Invalid ioctl [ 363.473702] QAT: Invalid ioctl [ 363.479118] QAT: Invalid ioctl [ 363.484746] QAT: Invalid ioctl [ 363.488561] QAT: Invalid ioctl [ 363.503017] protocol 88fb is buggy, dev hsr_slave_0 [ 363.508844] protocol 88fb is buggy, dev hsr_slave_1 [ 363.515441] QAT: Invalid ioctl [ 363.534634] QAT: Invalid ioctl [ 363.539450] QAT: Invalid ioctl [ 363.564273] QAT: Invalid ioctl [ 363.581068] QAT: Invalid ioctl [ 363.625372] protocol 88fb is buggy, dev hsr_slave_0 [ 363.631210] protocol 88fb is buggy, dev hsr_slave_1 [ 363.772941] protocol 88fb is buggy, dev hsr_slave_0 [ 363.778700] protocol 88fb is buggy, dev hsr_slave_1 21:02:34 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') getdents(r0, &(0x7f0000000000)=""/127, 0x7f) getdents(r0, &(0x7f00000000c0)=""/177, 0xb1) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/:#.em1'}, {}, {0x20, 'system'}, {0x20, 'map_files\x00'}, {}, {0x20, 'map_files\x00'}, {0x20, 'map_files\x00'}, {0x20, 'map_files\x00'}], 0xa, "020552cf5b0bc48ec3655170f7b58f61c98ab1d9"}, 0x5c) 21:02:34 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="e7ff00000030") ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000bc0)) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x1, 0x0, 0x0, @adapter={0x1}}]}) 21:02:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") 21:02:34 executing program 3: timer_create(0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x408002, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000080)=""/33, 0x21}, &(0x7f00000000c0), 0x8}, 0x20) timer_settime(0x0, 0x0, &(0x7f000002e000)={{}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000d43000)) 21:02:34 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0x81, "b9a44f8e5656cde9733ec3d928a3b5d58a917bbfa95a6aece1e5cc8a206eec3f", 0x0, 0x201, 0x14b, 0x10001, 0xb, 0x4, 0x5, 0xec5}) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='rdma.current\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100), 0x4) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0x100000000, 0x2, 0x9, 0x2, 0x19, 0x2, 0x0, 0x7, 0x0, 0x8000, 0x5, 0xa4}) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000180)={0x319, 0x200, 0x1}) fsetxattr$security_evm(r0, &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000200)=@md5={0x1, "6d83b1439ca3eb256e17436640d7b7b8"}, 0x11, 0x3) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) fcntl$setpipe(r0, 0x407, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x3) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000003c0)=0x9, 0x4) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000400)={0x7001, 0xf001, 0x3f, 0x10a, 0x3}) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x42, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580)={0xc0000000, 0x400, 0x1, 0x3, 0x4, 0x800, 0xb7a7, 0x8, 0x9, 0x2f, 0x8}, 0xb) r4 = syz_open_dev$amidi(&(0x7f00000005c0)='/dev/amidi#\x00', 0x20, 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000600)) fsetxattr$security_evm(r4, &(0x7f00000006c0)='security.evm\x00', &(0x7f0000000700)=@v1={0x2, "d7fa8d6ac328344de124ca"}, 0xc, 0x3) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000740)) getsockopt$inet6_udp_int(r4, 0x11, 0xb, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0206434, &(0x7f0000000800)={0x2, 0x0, 0x2, 0x8001}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000840)={0x3, r5}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000880)="a7ed4468781587034e0ff41f429a156e38bff929e653a40ad5ff0f1a45957de89ccbe0f7158aaed77fd7d91c90a55d49") rt_sigpending(&(0x7f00000008c0), 0x8) connect$caif(r4, &(0x7f0000000900)=@dgm={0x25, 0xe72b, 0x7}, 0x18) 21:02:34 executing program 2: mlock(&(0x7f0000f0a000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x9, 0x6, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x7fffffff, 0x3, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 21:02:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x40000) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000040)=0x3000) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x7d, 0x0, 0x0) close(r3) close(r2) 21:02:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0xadc3eb992b4339be, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000300)={0x5, 0x3, 0xec4, 0x40, 0x4, 0x1000, 0x2}) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000000c0)={0x16d, 0x0, 0x0, 0xfffffffffffffd80, 0xfdfd, 0x0}) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r2) r3 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in=@loopback, @in=@multicast2, 0x4e24, 0x400, 0x4e23, 0x0, 0xa, 0x20, 0x80, 0x7f, 0x0, r3}, {0xfffffffffffffffa, 0xa066, 0x7, 0x0, 0x7, 0x4, 0x8, 0x400}, {0x1, 0x0, 0x400}, 0x4, 0x6e6bb8, 0x3, 0x1, 0x1, 0x1}, {{@in6=@rand_addr="a17afe6c2480a685c5cab94d0011a1e6", 0x4d4, 0x2b}, 0x2, @in6=@rand_addr="262e12a53b6b9e324144a50270dc5a71", 0x3507, 0x2, 0x3, 0x1000000, 0x3b, 0xffffffffffffff28, 0x45}}, 0xe8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x204000, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x1b) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000340)={0x2, 0x1, [0x2, 0x80000000, 0x9, 0x7, 0x2, 0x9, 0xcf6, 0x5]}) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x7) syz_execute_func(&(0x7f0000000000)="43efc44179748600800000c422fd20d6c462b9961487403400c4414973f00fc4e1017cd1c401d558e2c402a592b4ae8f0000006566460fe8c4") 21:02:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000003000/0x1000)=nil, 0x1000, &(0x7f0000000100)=""/41) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) 21:02:35 executing program 2: unshare(0x20100) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@reserved}) r1 = socket(0x9, 0x6, 0xe02) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) 21:02:35 executing program 1: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2f}]}, 0x2) [ 368.493479] QAT: Invalid ioctl 21:02:35 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x7, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0x5101, 0x0) [ 368.549676] kvm: emulating exchange as write 21:02:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x4, &(0x7f0000000140)={0x6}, 0x0, 0x8) close(r1) splice(r0, 0x0, r2, 0x0, 0x200, 0x0) accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) [ 368.655785] QAT: Invalid ioctl 21:02:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") 21:02:35 executing program 2: unshare(0x2000400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x4}) sync_file_range(r0, 0x1ed, 0x9, 0x4) r2 = gettid() process_vm_writev(r2, &(0x7f0000000280)=[{&(0x7f0000000100)=""/253, 0xfd}, {&(0x7f0000000200)=""/97, 0x61}], 0x2, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/191, 0xbf}, {&(0x7f0000000380)=""/11, 0xb}, {&(0x7f00000003c0)=""/2, 0x2}, {&(0x7f0000000400)=""/55, 0x37}], 0x4, 0x0) 21:02:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000040)=0x78) bind$inet6(0xffffffffffffffff, &(0x7f000000d000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @empty}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local, {[], @tcp={{0x0, 0xfffffffe, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000080)) [ 368.907248] IPVS: ftp: loaded support on port[0] = 21 [ 369.093772] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 369.309246] chnl_net:caif_netlink_parms(): no params data found [ 369.464951] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.471541] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.480293] device bridge_slave_0 entered promiscuous mode [ 369.490782] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.497522] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.506044] device bridge_slave_1 entered promiscuous mode [ 369.541430] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 369.553564] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 369.588852] team0: Port device team_slave_0 added [ 369.606313] team0: Port device team_slave_1 added [ 369.687355] device hsr_slave_0 entered promiscuous mode [ 369.722899] device hsr_slave_1 entered promiscuous mode [ 369.943890] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.950523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.957912] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.964625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.049681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.071025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 370.080847] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.090657] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.103340] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 370.124392] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.146027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 370.154376] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.161187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.226784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.235238] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.241917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.253948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 370.263342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 370.272259] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 370.284208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 370.292883] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 370.301133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 370.313699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 370.358831] 8021q: adding VLAN 0 to HW filter on device batadv0 21:02:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400040, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe2000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f00000002c0)="440f350f01cac7442400b7000000c7442402a3170000c7442406000000000f011c240f20c035200000000f22c0422569000000f047812d0e000000be9a0000460f063e66440f38817fe766ba210066b88ef366efc7442400e36f0000c74424025c000000c7442406000000000f011c24", 0x70}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:02:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@empty, @dev, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bpq0\x00', r1}) r2 = socket(0x200000000000011, 0x4000000000080002, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r2, &(0x7f0000000d00), 0x400004e, 0x0) 21:02:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fchmod(r0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x400000b2}]}) 21:02:37 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)='/dev/udmabuf\x00'}, 0x30) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)=ANY=[@ANYBLOB="000000004a02009e9a886f513f00"]) r2 = syz_open_procfs(r0, &(0x7f00000000c0)='attr/exec\x00') listen(r2, 0x7) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000140)) 21:02:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") 21:02:37 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x800100000003) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000400)={0x100000001, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x220000) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000040)={0x40000000, 0x101, "ba63c2316ba515ca4d12fd54f8b09d0114bd567d848b88fdb464a2311178c0b5", 0x1, 0x1, 0x1, 0x7, 0x9, 0x10000000, 0x1, 0x100, [0x7, 0x2, 0x20, 0x8001]}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x4, &(0x7f0000000280)=[{0xffffffffffff0000, 0x100, 0x1, 0x3}, {0x2, 0x4, 0x100, 0x8000}, {0x3, 0x401, 0x6e, 0x7}, {0x7, 0x100000000, 0x6, 0x8099}]}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}]}, 0x110) 21:02:38 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x5d4, 0x0) r2 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000000)={{0x3, 0x3, 0x9, 0x3, 0x5}, 0x9c4, 0x9}) close(r0) 21:02:38 executing program 4: perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0xfffffffffffffffe, @mcast2}}, {{0xa, 0x0, 0x2, @ipv4}}}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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") preadv(r1, &(0x7f0000000100), 0x2df, 0x80000000000) 21:02:38 executing program 3: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='[\xc2\"\xba\x886v|M\xd5\xc6\x01sj\x8b\x8c\x19\xd4\xd5\x01\xa9V\xc3\xa8\xbd\x95\xa3\xe6\xff\x89\x18\xc6\xcb\xcd\xcfl\xee\xce\xe2\xe2\x14\x87\xe5\r\x02\xf2f\xe8\x1f\xb7\xbe!\xb7\xe2\a\xcb\xb1\xf3\x93\"P\x9d\x9d\xaf\xfd\xb3p\xfeKS\x12\x0f\xc6\xc5@\xa6\x9b(e,<\xe6k\xc9r\xd2U\xf5%\x8b\x98\xa4b/\\\xe58\xe3\xd4u\xa6\x9f)\xb4d-+W\xfa\x909\x88\r\xcaP\x16\xfa\xa65\a?n\xbacQk\x9f\x8a<\x11$[r\x9a\xd4\xbb\x8c\x83\xec$\xb4\xa2\x8a\xcd\xb9\x81\xb8\n\xac\xb0\xd4i`\x06\xc04\xc8\xbfe)Du\xe9j\"\x13\x98\xdc\xe6\xf3\x14\xbc\x8aK\x8f\xd9[\xc3R\xd2\\\xfd\xdfL&`\xc7\xc0I\x83\xc6\xa3\xcc\xdeb\x1e\f\xfe\xff&K\'$\xe1osX\x0e\xfb:\xc9QP\xa6\\:\x11f\xd9\xcf\xcb\xba\x84\x93\xe1\x06#\x84\xd4\xe9\x1fbVU\xecR@\xe9\xda\x13\xc0r\xac^\xc6G\xbe+\xc7Xj\x05o45\xd4c`\xa4~\xd1O') 21:02:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000040)={0xca4a, 'syz1\x00'}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'veth1_to_hsr\x00', {0x2, 0x4e24, @multicast2}}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="d800000018008100e00f80ecdb4cb904021965000b007c05e87c55a11200e1730000000000000000000000000000812fa8000800a40063e3e53db14ca0508ac1799d58f030035c3b61c1d67f6faf7d7134cf6efbe06bbace8017cbec4c2ee5a7cef4c02631631fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6dd457c0b03c10964c360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace80ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703db0de796ac5abeb3a79dd14678", 0xd8}], 0x1}, 0x0) 21:02:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000040)='./file0\x00', 0x1) 21:02:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") [ 371.736237] binder: release 11631:11633 transaction 2 out, still active [ 371.743300] binder: unexpected work type, 4, not freed [ 371.748628] binder: undelivered TRANSACTION_COMPLETE [ 371.759164] binder: 11631:11633 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 21:02:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5f}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x5f) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x2f}, {&(0x7f0000000780)=""/98, 0x91}], 0x2}}], 0x400000000000061, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x0) r3 = gettid() getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000002c0), &(0x7f0000000300)=0x30) r4 = semget(0x1, 0x1, 0x3) semop(r4, &(0x7f0000000340)=[{0x5, 0x9, 0x1800}, {0x0, 0x10000, 0x1800}, {0x0, 0x8, 0x800}, {0x1, 0x20, 0x1000}, {0x7, 0x3, 0x1800}, {0x0, 0x2, 0x800}, {0x7, 0x7, 0x1000}, {0x3, 0x4, 0x1000}, {0x1, 0x81, 0x1800}], 0x9) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xffffffffa6c6a7bc, 0x9, 0x400}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_id=r5, &(0x7f0000000280)=0x4) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000380)={0x7, 0x1}) write$FUSE_LK(r2, &(0x7f0000000140)={0x28, 0x0, 0x3, {{0xfffffffffffff6bf, 0x7, 0x2, r3}}}, 0x28) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000540)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x81}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2e}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004080}, 0x8015) [ 371.829416] binder_alloc: binder_alloc_mmap_handler: 11631 20001000-20004000 already mapped failed -16 [ 371.893373] binder: BINDER_SET_CONTEXT_MGR already set [ 371.898874] binder: 11631:11633 ioctl 40046207 0 returned -16 [ 371.968349] binder_alloc: 11631: binder_alloc_buf, no vma [ 371.974206] binder: 11631:11643 transaction failed 29189/-3, size 24-8 line 3147 [ 372.017347] binder: 11631:11637 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 372.037676] binder: undelivered TRANSACTION_ERROR: 29189 [ 372.046743] binder: send failed reply for transaction 2, target dead 21:02:39 executing program 1: unshare(0x40000000) r0 = msgget$private(0x0, 0x530) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/133) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x800000000000000c, 0x4, 0x4, 0x100000001, 0x0, 0x1}, 0x2c) 21:02:39 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x10000) getsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000140)=""/248, &(0x7f0000000240)=0xf8) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000100)={0xffffffff, 0x0, 0xffffffffffffffff}) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x410840) ioctl$KDADDIO(r2, 0x4b34, 0x6) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0206416, &(0x7f0000000080)={0x7, 0x1, 0x7fffffff, 0xc03, 0x0, 0xfff}) 21:02:39 executing program 4: r0 = getpid() ptrace(0x4208, r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0), 0x2) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000080)=0x2) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') exit(0x0) getdents(r2, &(0x7f0000000300)=""/202, 0xffffffffffffffd4) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000004c0)={0xd, @sdr={0x33765d4e}}) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) 21:02:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x0, 0xff7ffffffffffffd, 0x2, 0x1, 0x0, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt(r1, 0x1, 0xff, &(0x7f0000000200)=""/229, &(0x7f0000000080)=0xe5) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8001, 0x40) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000140)) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c36f995a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") [ 372.423945] IPVS: ftp: loaded support on port[0] = 21 21:02:39 executing program 2: socketpair$unix(0x1, 0x8000000000002, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x80200005, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x81}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff065b460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") timer_create(0x7, &(0x7f0000000080)={0x0, 0x2c, 0x3, @thr={&(0x7f0000000140)="025ce6861ba20793b662c42aab265fcbb7b3e562576eefc8d82a78d7102724caac26de1420844838e2ae8fb581793b96c6879e0ab5cbb23a0bec6ae4745684f8d610aa09d638e1148f232903702d5702914bcc881cb400d6d410b122bfffe0af4cd71f613057ae759f4603380e013929b5f605bd4af03f0d830983633d2a1089f88f57863d3114debe7231cb471af911120eec62264752a3e2e56dd1d51b8908", &(0x7f0000000040)="901913aabccd7bdcdaa883c730551e4d5636d6aae8cd8906d2eda8b1"}}, &(0x7f0000000240)=0x0) timer_delete(r1) 21:02:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x3f, 0x7fff, 0x0, 0x1}, {0x2, 0x9, 0x7, 0x7f}, {0x8, 0x40, 0x9, 0x3}]}, 0x3d8) 21:02:39 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) unshare(0x40400) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") [ 372.796088] IPVS: ftp: loaded support on port[0] = 21 [ 372.812778] net_ratelimit: 10 callbacks suppressed [ 372.812799] protocol 88fb is buggy, dev hsr_slave_0 [ 372.823989] protocol 88fb is buggy, dev hsr_slave_1 21:02:40 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x100) write$P9_RXATTRCREATE(r0, &(0x7f0000000140)={0x7, 0x21, 0x2}, 0x7) r1 = memfd_create(&(0x7f0000000380)='#vmnet1nodevem1\x00', 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8000, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@dev={0xfe, 0x80, [], 0x12}, @in=@multicast1, 0x4e23, 0x0, 0x4e23, 0x8, 0xa, 0x20, 0x20, 0x87, r4, r5}, {0x8001, 0x9, 0x9, 0x6, 0x4, 0x0, 0x4, 0x8001}, {0x0, 0x8000, 0x99, 0x2}, 0xb793, 0x6e6bbf, 0x2, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d3, 0xff}, 0x2, @in=@multicast2, 0x3507, 0x4, 0x3, 0x5, 0x8, 0x8, 0x693}}, 0xe8) ioctl$UFFDIO_REGISTER(r2, 0xc028aa03, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) mmap(&(0x7f0000628000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x100000, 0x4) 21:02:40 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000000)=""/4, &(0x7f0000000080)=0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) getresuid(&(0x7f0000000040), 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000100)=""/42) 21:02:40 executing program 1: r0 = gettid() madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) r2 = dup(r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x1f, 0x404417a7, 0x4, 0x1, 0x4, 0x3, 0x1, 0x400, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x101}}, 0xb0, 0x8000}, &(0x7f0000000180)=0x90) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000785000/0x3000)=nil, 0x3000, 0x4) 21:02:40 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x10) modify_ldt$read(0x0, 0x0, 0xfffffffffffffc5a) 21:02:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket(0x0, 0x0, 0x9) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x200) write$P9_RSYMLINK(r2, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x20, 0x1, 0x3}}, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) timer_create(0x3, &(0x7f0000000180)={0x0, 0x20, 0x2, @thr={&(0x7f0000000100)="f47e295b8aeac4ea7ddcc96df8424c0e3873b4007107bb8e68876666390d964a84d63c830365ed5797fdc5c3aee4fe9bc228d704bc7542877d6ff3b49855bd877296767748f813271147", &(0x7f0000000080)="dc18cdcf02272ec6aad61220e392cee43634515a073b93288c3d"}}, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000240)={'ip6_vti0\x00', {0x2, 0x4e21, @dev}}) 21:02:40 executing program 3: r0 = socket$caif_stream(0x25, 0x1, 0x2) fchmod(r0, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000603000/0x3000)=nil, 0x3000, &(0x7f0000000340)=""/163) 21:02:40 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000440)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0xffffffff00000001}}}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f0000000080)={0x100000001, 0x6, 0x6, 0x5, 0x4, 0xfffffffffba3fe99}) dup3(r2, r3, 0x0) 21:02:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") 21:02:41 executing program 1: r0 = socket(0x10, 0x803, 0xfffffffffffffffe) write(r0, &(0x7f0000000100)="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", 0x116) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000040)=0x10) 21:02:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1000000000) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [0x10000040000021, 0x9]}) r5 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000080)=0xa93) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21:02:41 executing program 2: r0 = socket(0x18, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x800}, &(0x7f0000000140)=0x8) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0xc, &(0x7f0000000000), 0x20a154cc) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f00000001c0)={0x3, 0x81, 0x758}) 21:02:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/97, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/181, 0x0}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x100000000) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80101, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000000c0)=0x8, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000000)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000006c0)=0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) 21:02:41 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000700)=""/213, &(0x7f0000000800)=0xd5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f00000000c0)='/dev/zero\x00'}, 0x30) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xe51) sendmsg$nl_netfilter(r0, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, 0x10, 0x7, 0x501, 0x70bd28, 0x25dfdbff, {0x2, 0x0, 0x6}, [@generic="014a0110bc160388", @typed={0x4, 0x63}, @nested={0x1d0, 0x30, [@typed={0x8, 0x33, @u32=0x1f}, @typed={0x8, 0x3f, @fd=r2}, @generic="d2af251b077ee67fc502d97de5c41a926d73d50b9cdd5caee17ac58d4b7631f2ba56e9c1b1074844031a3e179e0f0af12f3039f531a116ff595b73ca827982ed5fed532cfe2d38b430b83b383b10d258f1b9116872bb436d0bdb4ae25ea2439f5395fed8ef3ed486f6ba22fa5ebd41781ff7470f4955c61906cb5195ed58cdb54ef58bdc18d15a76899b59f461ace767720571f661b6582f1605b1c906552baa120c29181a7e20c9599dbdbffb7241fc31a55c6a3aaa1493ca362084dc3736d0e5", @generic="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"]}, @generic="282bdae8d1b6de082a9578217c52df4ac266d924622c91fda9e021f03c1c25c0f63181245b7c8dda90669a96dd0ac2feedf395ff55fe5a4139b21dad8ee2b7d621567107256d09d904e9b63193cdf6f9b7c329610ba9311f4e42595cbb9748e52f1385c68f6fa2b9d8694ad6be5579038c803b873c236d68a89ab6d3fcad599f910d6d8fd3ed7ea5779fd646f7f8d13788a915e3ed6128f80510a11fd77fa878f4b5c05661b0d7e71cc7d759fa6101dd9dc1f747c3392920d7b4e836b0b582edd9d5fc157d2fef24a699d4407efff103d7f1a5007f8ea962fb4c861c5fff7d08da85f8c2abb00b0f184b4ec79b20af37bbb675f69497"]}, 0x2e8}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) rt_sigqueueinfo(r1, 0x32, &(0x7f0000000180)={0x23, 0x9, 0x7}) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x9, 0x5, 0x9, 0x8, 0x3ff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbff}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) 21:02:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x100000000001}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000180)) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x6d, 0x2, 0x100, "3ac532547b6669441a80715d395e53ae", "999d6594605d92133bbe5a2c566f4c01e3c536e848486965588ecabe249c3c0b1a1271c1d306c4c29550b18bd3c396fccd3a1b7847b88735d90e8bbb670147b633bc4bb5c923fcd0debe63b041e422decade9872d807b129"}, 0x6d, 0x3) 21:02:41 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = getpgid(0x0) move_pages(r1, 0x9, &(0x7f0000000000)=[&(0x7f00005e8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00001f3000/0x3000)=nil, &(0x7f0000e69000/0x4000)=nil, &(0x7f0000467000/0x2000)=nil, &(0x7f0000071000/0x200000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000aa5000/0x4000)=nil, &(0x7f0000df2000/0x2000)=nil], &(0x7f00000000c0)=[0xa9a1, 0xe000000, 0x4], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) move_pages(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000a69000/0x3000)=nil], &(0x7f0000001f40), &(0x7f0000001f80), 0x0) [ 374.683790] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 374.691222] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 21:02:41 executing program 4: unshare(0x20400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f00000000c0), 0xfffffffffffffe66) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$peekuser(0x3, r1, 0x3) 21:02:41 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) unshare(0x40000000) ioctl$void(r0, 0x100000000005450) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x268, r1, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xef3}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x642}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x89}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc733}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa80}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffff9226}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffbff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffff6c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x4000090}, 0x40801) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000040)=""/84) 21:02:42 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = getpgid(0x0) move_pages(r1, 0x9, &(0x7f0000000000)=[&(0x7f00005e8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00001f3000/0x3000)=nil, &(0x7f0000e69000/0x4000)=nil, &(0x7f0000467000/0x2000)=nil, &(0x7f0000071000/0x200000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000aa5000/0x4000)=nil, &(0x7f0000df2000/0x2000)=nil], &(0x7f00000000c0)=[0xa9a1, 0xe000000, 0x4], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) move_pages(0x0, 0x1, &(0x7f0000000240)=[&(0x7f0000a69000/0x3000)=nil], &(0x7f0000001f40), &(0x7f0000001f80), 0x0) [ 375.050083] IPVS: ftp: loaded support on port[0] = 21 21:02:42 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000700)=""/213, &(0x7f0000000800)=0xd5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x0, 0xa, &(0x7f00000000c0)='/dev/zero\x00'}, 0x30) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0xe51) sendmsg$nl_netfilter(r0, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x11000}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2e8, 0x10, 0x7, 0x501, 0x70bd28, 0x25dfdbff, {0x2, 0x0, 0x6}, [@generic="014a0110bc160388", @typed={0x4, 0x63}, @nested={0x1d0, 0x30, [@typed={0x8, 0x33, @u32=0x1f}, @typed={0x8, 0x3f, @fd=r2}, @generic="d2af251b077ee67fc502d97de5c41a926d73d50b9cdd5caee17ac58d4b7631f2ba56e9c1b1074844031a3e179e0f0af12f3039f531a116ff595b73ca827982ed5fed532cfe2d38b430b83b383b10d258f1b9116872bb436d0bdb4ae25ea2439f5395fed8ef3ed486f6ba22fa5ebd41781ff7470f4955c61906cb5195ed58cdb54ef58bdc18d15a76899b59f461ace767720571f661b6582f1605b1c906552baa120c29181a7e20c9599dbdbffb7241fc31a55c6a3aaa1493ca362084dc3736d0e5", @generic="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"]}, @generic="282bdae8d1b6de082a9578217c52df4ac266d924622c91fda9e021f03c1c25c0f63181245b7c8dda90669a96dd0ac2feedf395ff55fe5a4139b21dad8ee2b7d621567107256d09d904e9b63193cdf6f9b7c329610ba9311f4e42595cbb9748e52f1385c68f6fa2b9d8694ad6be5579038c803b873c236d68a89ab6d3fcad599f910d6d8fd3ed7ea5779fd646f7f8d13788a915e3ed6128f80510a11fd77fa878f4b5c05661b0d7e71cc7d759fa6101dd9dc1f747c3392920d7b4e836b0b582edd9d5fc157d2fef24a699d4407efff103d7f1a5007f8ea962fb4c861c5fff7d08da85f8c2abb00b0f184b4ec79b20af37bbb675f69497"]}, 0x2e8}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) rt_sigqueueinfo(r1, 0x32, &(0x7f0000000180)={0x23, 0x9, 0x7}) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x9, 0x5, 0x9, 0x8, 0x3ff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r3, &(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbff}, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) 21:02:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") 21:02:42 executing program 4: socketpair$unix(0x1, 0x1000040000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) mlock(&(0x7f0000c8c000/0x3000)=nil, 0x3000) ioctl$LOOP_CLR_FD(r1, 0x4c01) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x800, &(0x7f0000000040)=0x2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x81}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000200)={r2, 0x7}, 0x8) mincore(&(0x7f00009fe000/0x600000)=nil, 0x600000, &(0x7f00000000c0)=""/130) 21:02:42 executing program 3: mkdir(&(0x7f0000000dc0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000540)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x2) chdir(&(0x7f0000000040)='./file0\x00') io_setup(0x7, &(0x7f0000000080)=0x0) io_getevents(r0, 0xfffffffffffffffc, 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f00000001c0)) [ 375.478335] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 375.486181] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 21:02:42 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x10000000000003f, 0x4000000000000000) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000100)={0x9}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40, 0x0) setns(r1, 0x10000002) 21:02:42 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xc8, r1, 0x304, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0xfffffffffffffffa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0xd}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="d1ecb0b0135756231f8a7983d6878cda"}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7fff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="db039fa2e45e56ff01ada5e36ea3580e"}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0xc8}}, 0x24008000) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300098417feb1ae7aa778f40000ff3f0e000000000000000000001419000200430100000a00005d14a4e91ee438d2fd0000000000", 0x39}], 0x1) lsetxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'L-', 0x8}, 0x28, 0x1) 21:02:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x1, 0x80000001}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) ptrace(0x11, r2) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/6264], 0x1878) 21:02:42 executing program 3: r0 = socket$inet(0x2, 0x80001, 0x0) close(r0) vmsplice(r0, 0x0, 0x0, 0x0) 21:02:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x7fff, 0x0, 0xfffffffffffffffd, 0x20}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff065b460f343030082e67660f50e90000ee440fe531feabc4aba39d6c450754420fae9972b571112d02") 21:02:43 executing program 2: r0 = getpgrp(0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x24, {0xa, 0x0, 0x0, @rand_addr="0755ac0a64c1c224aeb28e11c543a27c"}}, 0x24) 21:02:43 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x3ff, 0x1, 0x9, 0x4, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0xfff}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0x80000000}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fdatasync(r2) 21:02:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800800}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") 21:02:43 executing program 2: r0 = socket$inet(0x10, 0x3, 0x4) set_mempolicy(0x0, &(0x7f0000000000)=0x92, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2e48, 0x800) ioctl$KIOCSOUND(r1, 0x4b2f, 0xffffffffffffff7f) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="480000001400ff09fffefd956fa283b70aa6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc88", 0x48}], 0x1}, 0x0) 21:02:43 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x81ff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x4, 0xfffffffffffffff7, 0x9, 0x40}) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) fallocate(r1, 0x3, 0x0, 0x80000000) 21:02:44 executing program 2: r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x1c) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x1}, 0x0) r1 = semget(0x1, 0x3, 0x100) socketpair(0x3, 0x5, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0xfffffffffffffe38) semctl$SETVAL(r1, 0x0, 0x10, &(0x7f0000000180)=0x5) getpeername$tipc(r2, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10) sendmsg(r2, &(0x7f0000000440)={&(0x7f00000001c0)=@nfc={0x104, 0x2}, 0xffffffffffffff9b, &(0x7f0000000100), 0x521, &(0x7f0000000700)=[{0x0, 0x118, 0x7, "142319efcc6b1dc41c70ff3b2467a206f318e24d16ea95d7f3b3a5b048bc82b21695a6975eeb79231e71bdd6cecbc8105edb0c1390b75a6b66652596bffd2d7e9fae00adb76b72495bef8a4bf44e45b32e47706560ae80b2647950e65fedc1730b7a5afd4b96de1fe4315601ee80c8513eae08351b7ce4b22fffddcc2542f00cfdb148273e1ede160825eb83475b04347b89a80dec6a5c89a2596e075835692e0e5a3ce11a78f127181ced3103ea9ef954b525d8247f7debab993e90fcd3dd"}, {0x0, 0x11f, 0x80}, {0xffffffffffffff21, 0x113, 0x6, "cd514eef1fcf74e02a4b9f7eafc0c167db550a6fed73b8ed319e61a2723022cd77395075e8c68ed3064163e8a738bc56d624aceae151b0e690347203e17ca51b3fc86eefd142b0c8a3aa2a856b3e908752f8a94866bab266c1e9926411a2e8420603991dcf9be6d2867e97ffb9a722d3b8da825d2acbde3597ee2d1103fa74e7474d7c116b36f4f254e7cf0a7bc4eb54ec7406149738ddaedf4df374e6c4b7330ee42c3b1b7ed2617d4b6edcd17b3261100b4b522058109c2181029cd9a4077035c03429051fb593c60794e105f5dbea6ad548935a338cc6ff239213cadb9107d1f4"}, {0x0, 0x6, 0x368, "e48b1491e15fe98e62bf89b665044fc800550bff5bdd7b6aeeeafba800f497a654445a8f1b3539ed40bd786c1307c4a5390ef54caf4db24a1bcc7dc92f6b41"}, {0x0, 0x10b, 0x4a, "925138db4e7644babb93160e5877c9b11c23d95e65406d8333"}]}, 0x0) 21:02:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x6, 0x0, 0x3f}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff065b460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c0754ddea420fae9972b571112d02") r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x5, 0x101000) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0xfffffffffffff276, 0x7fff, 0x1, 0x4d, 0x2, 0x671, 0x7ff, 0x5, 0x0, 0x400, 0x1f, 0x9b4}) 21:02:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1000, 0xa0000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x20, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xa}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipmr_getroute={0x1c, 0x1a, 0x525, 0x0, 0x0, {0xa000000, 0x0, 0x0, 0x0, 0xf0ffff}}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:02:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400, 0x0) fcntl$notify(r1, 0x402, 0x4) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004fe0401ff0280fffdfffe2e0a0000000c00030084006a00040000010c000200170022ff4f7d0000"], 0x2c}}, 0xffffffffffffffff) 21:02:44 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x10, &(0x7f0000000280)={&(0x7f00000001c0)=""/163, 0xa3, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000300)={&(0x7f0000000180)=""/24, 0x18, r3}}, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x10880, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000440)) setresgid(0x0, r1, r2) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="b10f33d7672378db555731a24e05aeac7ac3bd299076ce5b3569942c23b2d73df894450402d823404bfab5da047f72ba91fe08be1be4850435b38c43378b72d58cd7b67e62f66ad4", 0x48}], 0x1, 0x4) 21:02:44 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) unshare(0x40400) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") 21:02:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1000, 0xa0000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x20, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xa}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipmr_getroute={0x1c, 0x1a, 0x525, 0x0, 0x0, {0xa000000, 0x0, 0x0, 0x0, 0xf0ffff}}, 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:02:44 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x3ea) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'ip_vti0\x00', 0x56}) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 21:02:44 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r0, 0x3ea) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000000000002000000006000000"], 0x10}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x3, 0x30, 0x1ff, 0x2}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0xa913, 0x5, 0x20, 0x9, r1}, &(0x7f00000001c0)=0x10) r2 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x20, 0xa2000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000340)={0x4, &(0x7f0000000300)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000380)={r3, 0x1}) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) 21:02:44 executing program 2: gettid() fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x5, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=@sha1={0x1, "b38e5dd34be383e7d21c41413db3f278fbcb065d"}, 0x15, 0x3) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000100)='net/ptype\x00') readv(r2, &(0x7f0000002940)=[{&(0x7f0000002300)=""/178, 0xb2}, {&(0x7f00000023c0)=""/228, 0xe4}, {&(0x7f00000024c0)=""/144, 0x90}, {&(0x7f0000002580)=""/82, 0x52}], 0x4) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000000)) 21:02:44 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200080, 0x0) unshare(0x20403) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) fcntl$getflags(r0, 0x1) 21:02:45 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x11) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000000)='\f', 0x1, 0x4007ffd, 0x0, 0xfffffffffffffd3a) r1 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x100, 0x200000) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f00000001c0)) recvmmsg(r0, &(0x7f0000006240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x143, 0x0) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000200)={@dev={[], 0x12}, @remote, [{[], {0x8100, 0x9, 0x9, 0x1}}], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xb, @remote, @mcast2, @dev={[], 0xb}, @mcast1}}}}, &(0x7f0000000280)={0x1, 0x1, [0x5fd, 0xc86, 0x463, 0xa58]}) getsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 21:02:45 executing program 1: r0 = epoll_create1(0x0) r1 = socket(0x0, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xfffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x9, 0x4) 21:02:45 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x2010}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)) 21:02:45 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2f0000001d0003fd6d000036000000000cdd0700020000001f5f08c9080001000200", 0x8}], 0x1, 0x0, 0x392}, 0x0) r0 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="220000001400090000e80000004c0300020003030100000008000200", 0x1c) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 21:02:45 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) connect$packet(r0, &(0x7f0000000080)={0x11, 0x4, r1, 0x1, 0x20}, 0x14) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x0, 0xfffffffffffffffd, 0xa4, 0x75, @scatter={0x3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/101, 0x65}, {&(0x7f0000000180)=""/199, 0xc7}, {&(0x7f0000000280)}]}, &(0x7f0000000300)="85443d629cdfcf0cd872a530a6024306860ac52dffa2afb9bc4223e678311439f601261e2a3588416cb6dadaafcccf3c83b0a893de726bd9652c66fb5627af9536987ce7b644792446a4c5b944bfdb4df162d43f69d29328241903a6b59ca2c5f15a9f77d19f931d086f377ff19a1e01d8dca2bf94ed5acabed8195242a25289d0904109951bb1b73aee934418046c85b9cc4996b82678f1e844d2339805f00687d65fb6", &(0x7f00000003c0)=""/174, 0x3, 0x10000, 0x3, &(0x7f0000000480)}) pwrite64(r0, &(0x7f0000000540)="4a64c4c9521a6abafb0969a1f28a4df9932fe49a4797bdefa6011bf18fd17489dd7f3f044806209cdddae11edb4bfd35162d677213623fc5ca2e9630e7b8739746358389d84d509a3d67584c74ab8e05be75be0a84e4f235bcffedc0b937846a051893c8672a006fb1b60871bc9787c10f9b6503a80c61b2fb1b820229635af422141e9d35ae7e6989533dba65c5", 0x8e, 0x0) write$binfmt_script(r0, &(0x7f0000000600)={'#! ', './file0', [{0x20, 'team0\x00'}, {0x20, 'security@bdev'}], 0xa, "70dac028c2deb3c78f99912f38fb5e84d831285f308dc2082fc7c12f37bdd40057cbf84d69055cbc89c20fcf922b277d22d1f3bcbfe4c62544f6f4d595353f35b06b1ec5442c644c4e50af8b96784fce0a73846adb9fbeaa409ddc483432539ae811c3273cf670c33682"}, 0x8a) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000006c0)=0xd3) fcntl$getownex(r0, 0x10, &(0x7f0000000700)={0x0, 0x0}) ptrace$cont(0x1f, r2, 0x4, 0x2) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000740)) r3 = syz_open_dev$dmmidi(&(0x7f0000000780)='/dev/dmmidi#\x00', 0x3554dfd, 0x10802) utimensat(r3, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={{0x0, 0x7530}}, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000840), 0x4) timerfd_gettime(r3, &(0x7f0000000880)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000008c0)=@assoc_value={0x0}, &(0x7f0000000900)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000940)={r4, 0x1000, "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"}, &(0x7f0000001980)=0x1008) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000019c0)={r4, 0x7, 0x4}, 0x8) r6 = getuid() fstat(r3, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000001e40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001ac0)=@newpolicy={0x328, 0x13, 0x308, 0x70bd2a, 0x25dfdbfc, {{@in=@multicast2, @in6=@dev={0xfe, 0x80, [], 0xe}, 0x4e23, 0x8, 0x4e24, 0xc72, 0xa, 0x20, 0x0, 0x6f, r1, r6}, {0x1, 0x1, 0xfa9b, 0x7, 0x7f, 0x8, 0x4ce32acc, 0x401}, {0x80000001, 0x10001, 0x101, 0x8}, 0x8000, 0x6e6bb7, 0x0, 0x1, 0x1, 0x1}, [@etimer_thresh={0x8, 0xc, 0xd710}, @sa={0xe4, 0x6, {{@in6=@remote, @in6=@ipv4={[], [], @loopback}, 0x4e22, 0x6, 0x4e24, 0x0, 0x2, 0x80, 0xa0, 0x1d, r1, r7}, {@in=@loopback, 0x4d2, 0x6c}, @in=@multicast1, {0x4, 0x5, 0xed, 0x1abf77d7, 0x9, 0x1d3f, 0xa69, 0xe}, {0x9, 0x9, 0x1, 0x10000}, {0x1ff, 0x8}, 0x70bd27, 0x3501, 0xa, 0x3, 0x8001, 0x99}}, @migrate={0x10c, 0x11, [{@in=@loopback, @in=@multicast1, 0x32, 0x1, 0x0, 0x3504, 0x0, 0xa}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xff, 0x7, 0x0, 0x3507, 0xa, 0xa}, {@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0xff, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0x1, 0x0, 0x34ff, 0x0, 0x2}, {@in6=@mcast1, @in6=@mcast1, 0x2b, 0x3, 0x0, 0x3507, 0x2, 0x2}, {@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast2, 0x33, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @lifetime_val={0x24, 0x9, {0x8, 0xffffffff, 0xff, 0x4}}, @tfcpad={0x8, 0x16, 0x7}, @lifetime_val={0x24, 0x9, {0x6, 0xffffffffffffff81, 0xfffffffffffff7e1, 0x6}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd27, 0x70bd28, 0x70bd27, 0x70bd2c, 0x7fff, [0x800100000000000, 0x8, 0x1]}}]}, 0x328}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000001e80)={{0x84, @local, 0x4e24, 0x1, 'dh\x00', 0x2, 0x3, 0xd}, {@empty, 0x4e23, 0x0, 0xedd, 0x6, 0x8}}, 0x44) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001f40)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x1c, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000002040)={r5, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000002080)={r4, 0x14000, 0x100000001}, 0x8) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f00000020c0)={{0x1, 0x1, 0x1ff, 0x2, 0x1f}, 0x0, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0x7f, 0x10000, 0x6, 0x3}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000021c0)={0x2, 0xa6, "7f54bc4c460a83386015f5a61c2ff19c35dd58860ac30d3be317067ccd1099da8277f3560ed3189c5ffcd87b351b923b1a7a4f8bed8075010f61b719e3f5ac51f598ef9814d0fa793759278f714ba27bdab860dbafd8e87618363d3808f5929023f05c8f57768123e47f267a5d82baf6d7eedcab7ece7ba4c9ca94918f646142b217f306cb9cbd4b17e2f95e936ca82c17a01801bcaf89b0452c396213ae320a40ee2ff84368"}) getitimer(0x0, &(0x7f0000002280)) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f00000022c0)={0x5, 0x4, 0x5}) 21:02:45 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) unshare(0x40400) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") 21:02:45 executing program 2: set_mempolicy(0x8002, &(0x7f0000000040)=0x1000401, 0x7) unshare(0x8000200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) clone(0x34004100, 0x0, 0x0, 0x0, 0x0) 21:02:45 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x800000003, 0xc) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="24000000010207041dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db24", 0x44}], 0x1}, 0x0) 21:02:45 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd0}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_execute_func(&(0x7f00000000c0)="c4827d5a6e0d5e57c3c3b7d95a91914e424a2664f0ff061e460f343030082e67660f50e900004681e400000100440fe531feabc4aba39d6c450754ddea420fae9972b571112d02") 21:02:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0xe11, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'bridge0\xff'}}}}}, 0x34}}, 0x0) [ 378.928478] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 378.961170] ================================================================== [ 378.961770] BUG: KMSAN: uninit-value in memchr+0xce/0x110 [ 378.961770] CPU: 0 PID: 11900 Comm: syz-executor.1 Not tainted 5.1.0-rc2+ #21 [ 378.961770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.961770] Call Trace: [ 378.961770] dump_stack+0x173/0x1d0 [ 378.961770] kmsan_report+0x131/0x2a0 [ 378.961770] __msan_warning+0x7a/0xf0 [ 378.961770] memchr+0xce/0x110 [ 379.006300] tipc_nl_compat_bearer_enable+0x2c4/0x910 [ 379.006300] ? tipc_nl_compat_dumpit+0x820/0x820 [ 379.006300] tipc_nl_compat_doit+0x3aa/0xaf0 [ 379.006300] tipc_nl_compat_recv+0x1b60/0x27e0 [ 379.006300] ? tipc_nl_bearer_disable+0xb0/0xb0 [ 379.006300] ? tipc_nl_compat_dumpit+0x820/0x820 [ 379.006300] ? tipc_netlink_compat_stop+0x40/0x40 [ 379.006300] genl_rcv_msg+0x185f/0x1a60 [ 379.006300] ? kmsan_internal_memset_shadow+0xc6/0x410 [ 379.006300] netlink_rcv_skb+0x431/0x620 [ 379.052785] ? genl_unbind+0x390/0x390 [ 379.052785] genl_rcv+0x63/0x80 [ 379.052785] netlink_unicast+0xf3e/0x1020 [ 379.052785] netlink_sendmsg+0x127f/0x1300 [ 379.052785] ___sys_sendmsg+0xdb3/0x1220 [ 379.052785] ? netlink_getsockopt+0x1460/0x1460 [ 379.052785] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 379.052785] ? __fget_light+0x6e1/0x750 [ 379.052785] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 379.052785] __se_sys_sendmsg+0x305/0x460 [ 379.052785] __x64_sys_sendmsg+0x4a/0x70 [ 379.052785] do_syscall_64+0xbc/0xf0 [ 379.052785] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 379.052785] RIP: 0033:0x458209 [ 379.052785] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 379.052785] RSP: 002b:00007f9136e21c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.052785] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 379.052785] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 379.052785] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 379.052785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9136e226d4 [ 379.052785] R13: 00000000004cbf30 R14: 00000000004d96b8 R15: 00000000ffffffff [ 379.052785] [ 379.052785] Uninit was created at: [ 379.052785] kmsan_internal_poison_shadow+0x92/0x150 [ 379.052785] kmsan_kmalloc+0xa9/0x130 [ 379.052785] kmsan_slab_alloc+0xe/0x10 [ 379.052785] __kmalloc_node_track_caller+0xead/0x1000 [ 379.052785] __alloc_skb+0x309/0xa20 [ 379.052785] netlink_sendmsg+0xb82/0x1300 [ 379.052785] ___sys_sendmsg+0xdb3/0x1220 [ 379.052785] __se_sys_sendmsg+0x305/0x460 [ 379.052785] __x64_sys_sendmsg+0x4a/0x70 [ 379.052785] do_syscall_64+0xbc/0xf0 [ 379.052785] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 379.052785] ================================================================== [ 379.052785] Disabling lock debugging due to kernel taint [ 379.052785] Kernel panic - not syncing: panic_on_warn set ... [ 379.052785] CPU: 0 PID: 11900 Comm: syz-executor.1 Tainted: G B 5.1.0-rc2+ #21 [ 379.052785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.052785] Call Trace: [ 379.052785] dump_stack+0x173/0x1d0 [ 379.052785] panic+0x3d1/0xb01 [ 379.052785] kmsan_report+0x29a/0x2a0 [ 379.052785] __msan_warning+0x7a/0xf0 [ 379.052785] memchr+0xce/0x110 [ 379.052785] tipc_nl_compat_bearer_enable+0x2c4/0x910 [ 379.052785] ? tipc_nl_compat_dumpit+0x820/0x820 [ 379.052785] tipc_nl_compat_doit+0x3aa/0xaf0 [ 379.052785] tipc_nl_compat_recv+0x1b60/0x27e0 [ 379.052785] ? tipc_nl_bearer_disable+0xb0/0xb0 [ 379.052785] ? tipc_nl_compat_dumpit+0x820/0x820 [ 379.052785] ? tipc_netlink_compat_stop+0x40/0x40 [ 379.052785] genl_rcv_msg+0x185f/0x1a60 [ 379.052785] ? kmsan_internal_memset_shadow+0xc6/0x410 [ 379.052785] netlink_rcv_skb+0x431/0x620 [ 379.052785] ? genl_unbind+0x390/0x390 [ 379.052785] genl_rcv+0x63/0x80 [ 379.052785] netlink_unicast+0xf3e/0x1020 [ 379.052785] netlink_sendmsg+0x127f/0x1300 [ 379.052785] ___sys_sendmsg+0xdb3/0x1220 [ 379.052785] ? netlink_getsockopt+0x1460/0x1460 [ 379.052785] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 379.052785] ? __fget_light+0x6e1/0x750 [ 379.052785] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 379.052785] __se_sys_sendmsg+0x305/0x460 [ 379.052785] __x64_sys_sendmsg+0x4a/0x70 [ 379.052785] do_syscall_64+0xbc/0xf0 [ 379.052785] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 379.052785] RIP: 0033:0x458209 [ 379.052785] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 379.052785] RSP: 002b:00007f9136e21c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.052785] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 379.052785] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 379.052785] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 379.052785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9136e226d4 [ 379.052785] R13: 00000000004cbf30 R14: 00000000004d96b8 R15: 00000000ffffffff [ 379.052785] Kernel Offset: disabled [ 379.052785] Rebooting in 86400 seconds..