[ 103.195991] audit: type=1800 audit(1551525850.249:25): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 103.215437] audit: type=1800 audit(1551525850.249:26): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 103.234960] audit: type=1800 audit(1551525850.269:27): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 104.588117] sshd (10949) used greatest stack depth: 54176 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.43' (ECDSA) to the list of known hosts. 2019/03/02 11:24:26 fuzzer started 2019/03/02 11:24:33 dialing manager at 10.128.0.26:33709 2019/03/02 11:24:33 syscalls: 1 2019/03/02 11:24:33 code coverage: enabled 2019/03/02 11:24:33 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/02 11:24:33 extra coverage: extra coverage is not supported by the kernel 2019/03/02 11:24:33 setuid sandbox: enabled 2019/03/02 11:24:33 namespace sandbox: enabled 2019/03/02 11:24:33 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/02 11:24:33 fault injection: enabled 2019/03/02 11:24:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/02 11:24:33 net packet injection: enabled 2019/03/02 11:24:33 net device setup: enabled 11:27:50 executing program 0: syzkaller login: [ 324.392045] IPVS: ftp: loaded support on port[0] = 21 [ 324.570940] chnl_net:caif_netlink_parms(): no params data found [ 324.665448] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.672248] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.681204] device bridge_slave_0 entered promiscuous mode [ 324.691860] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.698480] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.707333] device bridge_slave_1 entered promiscuous mode [ 324.747441] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 324.759462] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 324.794813] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 324.803944] team0: Port device team_slave_0 added [ 324.811141] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 324.820172] team0: Port device team_slave_1 added [ 324.829173] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 324.838040] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 325.027518] device hsr_slave_0 entered promiscuous mode [ 325.213167] device hsr_slave_1 entered promiscuous mode [ 325.474046] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 325.482192] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 325.518782] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.525502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.532883] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.539493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.554512] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.565802] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.673393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.688658] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 325.703735] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 325.710167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 325.718697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.735263] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 325.741422] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.760172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 325.767621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 325.777904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.787036] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.793707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.812672] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 325.820029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 325.829381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.838537] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.845151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.867309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 325.875277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 325.897223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 325.905923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 325.927643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 325.935731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.945327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.958975] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.974677] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 325.984857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.995540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.015127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 326.024113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.032967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.050575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 326.062048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.074585] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 326.080747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.092009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.101223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.136598] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 326.164922] 8021q: adding VLAN 0 to HW filter on device batadv0 11:27:53 executing program 0: 11:27:53 executing program 0: 11:27:53 executing program 0: 11:27:53 executing program 0: 11:27:53 executing program 0: 11:27:53 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x4008000, &(0x7f0000001000)={0x2, 0x4e22, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000380)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000004c0)=0xe8) getgroups(0x2, &(0x7f0000000500)=[0xffffffffffffffff, 0x0]) setxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000540)={{}, {0x1, 0x4}, [{0x2, 0x6, r1}, {0x2, 0x3, r2}], {0x4, 0x4}, [{0x8, 0x2, r3}], {0x10, 0x1}, {0x20, 0x4}}, 0x3c, 0x1) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x8e, 0x400) r4 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x7, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000580)={'veth1_to_team\x00', {0x2, 0x4e21, @rand_addr=0x3b54}}) sendto$inet(r4, &(0x7f00000000c0)="0c9fe09529dee9a8f648c4068acdb806903042d28878e3d55c209123e8dd06987213e52c7fe71b85c0e00ba7c3da0cda93d8f90bc350e615618962a0bb78461fe2dc6d6ee9d080b29e8a98c338d06fa29924c61eb08495f4901ceb442cddfe2219a8ea2f1eda94b5b28dc8256420af5d790c72d5f276e064ddb01e3e4a71bc731991619f296c8f25f5f3e9c34d17b7e5cc663951ddea022083972e0767222609d84a4990aedc2d6e6c1f5a55bece4a81716a4ccf070db5c8570df5f17b4281120ff46792a21fb51fb8ace41a2be780a90f733ad99f28f8ee514fd0c767111528bd4ba3cf5caef31b0ed205bd9f48de43896d", 0xf2, 0x4004000, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) 11:27:54 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x3a1001, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x7d) fcntl$setflags(r0, 0x2, 0x0) 11:27:54 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$inet(0x2, 0x800000000001, 0xffffffff) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r2, &(0x7f00009322c4)={0x2, 0x0, @initdev}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000004f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) dup2(r0, r2) tkill(r1, 0x1000000000016) 11:27:54 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r0, 0xc0045540, &(0x7f0000000080)) 11:27:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)={0x5, 0x1ff, 0x3, 0x0, 0x0, [{r0, 0x0, 0x22}, {r0, 0x0, 0x8001}, {r0, 0x0, 0x599}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x80000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='sessionid\x00') sendfile(r2, r3, 0x0, 0x1) [ 327.547794] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 11:27:54 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101502, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'s\x00\xec\x00', {0x2, 0x4e21, @multicast2}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x1d, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 11:27:54 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/63, &(0x7f0000000080)=0x3f) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x600200, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000000c0)={0xfe54, 0x0, 0x2, 0x5}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000100)={r2, 0x6}) 11:27:55 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0x7) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x3c, "890454", "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"}}, 0x110) 11:27:55 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x1, 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/213) bind$tipc(r1, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x4, 0x3}}, 0x10) write$binfmt_aout(r1, &(0x7f0000000180)={{0xcc, 0x3, 0xf80, 0x275, 0x2ed, 0x0, 0x2e, 0x6}, "e05b4005e6350b8b6f03aad4d9081b535ccda5556275ffc9be35ea5987753340ee3074778a08c1735393946a155a9cb11d09f5e4ec29ee008abb594f12c075be1db204ff4b0f2311c5014485fd8cab5a329ee273ec8f0e5cb59012ee84ce7b8921b384cdfd121e4d115f96bcd22ae342d9ba56995748be65f8e42f5dbe35470c3cb546ced0d2f4fff1591b111d5147c65e", [[], [], []]}, 0x3b1) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000540)={0x7, 0x2, @start={0x5}}) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x7fff, 0x4) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x9d69) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000c00)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000d00)=0xe8) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000d40)={@rand_addr="b6cbfc13cfadef0254e2fd81487207cc", @ipv4={[], [], @multicast2}, @mcast2, 0x9, 0x81, 0x63, 0x500, 0x9, 0x2000000, r2}) r3 = socket$inet6(0xa, 0x80e, 0x100) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000dc0), 0x4) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000e00)={0x100000001, 0x9}) socket$tipc(0x1e, 0x2, 0x0) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/ashmem\x00', 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) fdatasync(r4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ec0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x12c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x27}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xcc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000804}, 0x800) r6 = getpid() tkill(r6, 0x1f) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f00000010c0), &(0x7f0000001100)=0x8) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000001140)='/dev/full\x00', 0x80, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x1) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x2) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000001180)={{0x2, @addr=0x7}, 0x8, 0x1928, 0x1}) connect$bt_rfcomm(r7, &(0x7f00000011c0)={0x1f, {0x401, 0x9000000000000000, 0x6, 0x81, 0x4, 0x7f}, 0xd3}, 0xa) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000013c0)={r7, &(0x7f0000001200)="899168c6f5fa27460e7b8911f3c70700112787fae1cb2be21e4298c632fe5a4c6910c6a57de3592b837b6f84aaed94495d453daf81cab5b8c92f560f967200ece33ba041792a66d1e84948ffe7418b5c239bf4cb361a039725a99fcf83be0aca76aa68f32bb1f591e2e3690220663d1b42c144c18e83208bba2374563e8a452e920544fdce8f4f6ddfefa02f910c268cb62838fab507bb350afe4b9bd6b41c66bfe08ff5781d364c423e52daa545d7eeace16d", &(0x7f00000012c0)=""/225}, 0x18) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001400)='/dev/vsock\x00', 0x80800, 0x0) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000001440)={0x30, 0x5, 0x0, {0x0, 0x6, 0xffffffffffffbcc8}}, 0x30) 11:27:55 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0) shutdown(r0, 0x1) 11:27:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0) shutdown(r0, 0x1) [ 329.122370] IPVS: ftp: loaded support on port[0] = 21 11:27:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0) shutdown(r0, 0x1) [ 329.397501] chnl_net:caif_netlink_parms(): no params data found 11:27:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0) shutdown(r0, 0x1) [ 329.522219] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.528779] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.537503] device bridge_slave_0 entered promiscuous mode [ 329.570693] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.577495] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.586101] device bridge_slave_1 entered promiscuous mode [ 329.625258] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 329.641300] bond0: Enslaving bond_slave_1 as an active interface with an up link 11:27:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) shutdown(r0, 0x1) [ 329.674639] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 329.683712] team0: Port device team_slave_0 added [ 329.690854] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 329.699975] team0: Port device team_slave_1 added [ 329.708633] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 329.717517] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 329.797884] device hsr_slave_0 entered promiscuous mode 11:27:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) [ 329.882480] device hsr_slave_1 entered promiscuous mode [ 329.923466] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 329.931394] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 329.970132] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.976833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.984172] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.990766] bridge0: port 1(bridge_slave_0) entered forwarding state 11:27:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) shutdown(r0, 0x1) [ 330.088473] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 330.095396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.111455] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 330.139409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.158384] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.184633] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.211402] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 330.233025] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 330.239195] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.259277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.267991] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.274625] bridge0: port 1(bridge_slave_0) entered forwarding state 11:27:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) shutdown(r0, 0x1) [ 330.330483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.339304] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.345950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.357466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.367121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.414254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.430879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 330.450652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.460188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.486971] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 330.494064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.502863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.526251] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready 11:27:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) shutdown(r0, 0x1) [ 330.532506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.612070] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 330.640770] 8021q: adding VLAN 0 to HW filter on device batadv0 11:27:57 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:27:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0) shutdown(r0, 0x1) 11:27:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:27:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0) shutdown(r0, 0x1) 11:27:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:27:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:27:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0) shutdown(r0, 0x1) 11:27:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:27:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) recvmmsg(r0, &(0x7f0000008d80)=[{{&(0x7f0000004b80)=@nl, 0x80, &(0x7f0000006100), 0x0, &(0x7f0000006140)=""/105, 0x69}}], 0x8000000000003bf, 0x0, 0x0) 11:27:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:27:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000380)) 11:27:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:27:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:27:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) 11:27:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(r0) 11:27:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:27:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:27:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:27:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:27:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) close(r0) 11:28:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:28:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) close(r0) 11:28:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) close(r0) 11:28:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:28:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) fcntl$setstatus(r1, 0x4, 0x42c00) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:28:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) 11:28:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) 11:28:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) 11:28:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:28:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:03 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x8, 0x1, 0x6, 0x2, 0x3, 0x5, 0x9, 0x3, 0x4, 0x80000000}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000100)) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x400200, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x40202, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f00000001c0)="39d4cfe1deac8539"}, 0x10) sysfs$3(0x3) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000240)=0x4) prctl$PR_GET_KEEPCAPS(0x7) fcntl$setpipe(r0, 0x407, 0x1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x1f) fcntl$notify(r1, 0x402, 0x80000000) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000280)=0x8) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000340)={r4, r5/1000+10000}, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000380)=0x993, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x102, 0x4) fcntl$addseals(r3, 0x409, 0x1) prctl$PR_GET_DUMPABLE(0x3) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000440)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r6, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x8, 0x1, 0x7f, 0x5, 'syz0\x00', 0x3}, 0x0, [0xc3, 0x2, 0x5, 0x4, 0x101, 0x3, 0x8, 0x9, 0x8, 0x9, 0xc97d, 0x1000, 0x2, 0x7fffffff, 0x80000001, 0x8001, 0x80000001, 0xffffffffffffffff, 0x8, 0x100000002, 0x0, 0x7f, 0x9, 0xffffffffffffff83, 0xfffffffffffffff9, 0x1, 0x1, 0x0, 0x6, 0xffffffffffffffff, 0x6, 0x8, 0x4f0a, 0x5, 0x0, 0x40, 0x0, 0x4, 0x6, 0x3, 0x8e0e, 0x84a, 0xfffffffffffffffc, 0x3ff, 0xfffffffffffffffc, 0xd30, 0x7, 0x1ff, 0x101, 0x84, 0x9, 0x400, 0x401, 0x20, 0x7fffffff, 0x1, 0x1, 0x800, 0xfffffffffffffeff, 0x3ba0, 0x4, 0x8, 0x7fff, 0x7, 0x1f, 0x20, 0x9, 0x2, 0x20, 0x5, 0x7, 0x9, 0x8000, 0x1ed, 0xffffffffa243d7fc, 0xffffffffffffff43, 0x80000001, 0xebbc, 0x100, 0x6, 0x8001, 0x1ff, 0x101, 0xda5, 0x5, 0x400, 0x2, 0x1, 0x400, 0x1, 0x4, 0x7, 0x80000001, 0x0, 0xfffffffffffeffff, 0xfff, 0x1, 0x1, 0x7, 0x5, 0x1ff, 0x5, 0x1, 0x7, 0x1, 0xd0ba, 0x3, 0x1, 0x3, 0x1, 0xfff, 0x8, 0x80000000, 0xffffffffffffffd9, 0x4ad1, 0x9, 0x0, 0x50560be4, 0x3ff, 0x6, 0x0, 0x0, 0x7, 0xff, 0x1, 0x10000, 0x0, 0x80]}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000a40)={'erspan0\x00', {0x2, 0x4e20, @remote}}) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000a80)=""/70) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000b00)={{0x2, 0x4e22, @rand_addr=0xd4}, {0x307}, 0x8, {0x2, 0x4e22, @local}, 'eql\x00'}) write$P9_RXATTRCREATE(r0, &(0x7f0000000b80)={0x7, 0x21, 0x2}, 0x7) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000bc0)={0x1, 0x9, 0xfffffffffffffffd, 0x9, 0x8}, 0x14) 11:28:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:28:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4), 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:28:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4), 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:28:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4), 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) [ 336.935109] IPVS: ftp: loaded support on port[0] = 21 11:28:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) accept4(r0, 0x0, &(0x7f0000000000), 0x0) shutdown(0xffffffffffffffff, 0x1) 11:28:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) [ 337.243340] chnl_net:caif_netlink_parms(): no params data found [ 337.340477] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.347249] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.356037] device bridge_slave_0 entered promiscuous mode [ 337.365487] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.372319] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.380814] device bridge_slave_1 entered promiscuous mode 11:28:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) [ 337.419533] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 337.432257] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 337.500161] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 337.509296] team0: Port device team_slave_0 added [ 337.534551] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 337.543753] team0: Port device team_slave_1 added 11:28:04 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) [ 337.575510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 337.607463] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 337.697236] device hsr_slave_0 entered promiscuous mode [ 337.733012] device hsr_slave_1 entered promiscuous mode [ 337.783346] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 337.791313] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 337.841942] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.848593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.855983] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.862655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.971382] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 337.978280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.993259] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 338.010097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.020298] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.030526] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.059575] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 338.080224] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 338.086621] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.105771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.114452] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.121005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.158526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 338.167136] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.173768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.193393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 338.208197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 338.232940] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 338.241534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 338.251242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 338.270653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 338.287806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 338.295761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 338.304674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 338.313289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 338.322607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 338.339051] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 338.345471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 338.380504] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 338.408218] 8021q: adding VLAN 0 to HW filter on device batadv0 11:28:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x2, 0x9}, 0x2c) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2012, r1, 0x0) delete_module(&(0x7f0000000180)='/dev/cec#\x00', 0x200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) sched_getparam(r2, &(0x7f0000000240)) getrusage(0x4, &(0x7f0000000280)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x21, 0x4, 0x100000001, 0x0, r0}, 0x2c) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000040)={0xf0af, "7036ef6a99072386f46b006d75843edfc11ad971c5edc66387da00ad4c8e9850", 0x820, 0x4, 0x1, 0xd, 0xf387cc7977897b7}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r3, &(0x7f00000002c0), 0x0}, 0x18) 11:28:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:05 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) accept4(r0, 0x0, &(0x7f0000000000), 0x0) shutdown(0xffffffffffffffff, 0x1) [ 338.669906] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:28:05 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$unix(r1, &(0x7f00000bd000), 0x4924924924922c9, 0x10000000000040) close(r1) 11:28:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:06 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, 0x0, 0x0) close(r1) fsync(r1) pipe(&(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000000)) splice(r2, 0x0, r0, 0x0, 0x3, 0x0) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="fc", 0x1}], 0x1, 0x0) 11:28:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:06 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, 0x0, 0x0) close(r1) fsync(r1) pipe(&(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000000)) splice(r2, 0x0, r0, 0x0, 0x3, 0x0) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="fc", 0x1}], 0x1, 0x0) 11:28:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(0xffffffffffffffff) accept4(r0, 0x0, &(0x7f0000000000), 0x0) shutdown(0xffffffffffffffff, 0x1) [ 339.659338] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:28:06 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x5, 0x22000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r5) close(r3) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x127) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x17) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2080, 0x0) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f0000000200)={0x4, &(0x7f00000000c0)=[{0x0, 0x9, 0x5, 0xbb}, {0x100, 0xfffffffffffffff7, 0x9, 0x7fffffff}, {0x8, 0x3, 0x8}, {0x1ff, 0x6, 0x6}]}) ioctl$SNDRV_TIMER_IOCTL_STOP(r8, 0x54a1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = getpid() process_vm_readv(r10, &(0x7f00000016c0)=[{0x0}, {&(0x7f0000000100)=""/238, 0xee}], 0x2, &(0x7f0000000240)=[{&(0x7f0000001540)=""/89, 0x59}, {&(0x7f00000015c0)=""/91, 0x5b}, {&(0x7f0000001640)=""/104, 0x68}], 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x13f) close(r4) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000000)={r6, 0x6, 0x3, "d06cc198"}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000380)=r8, 0x4) ioctl$PPPIOCSDEBUG(r7, 0x40047440, &(0x7f0000000280)) 11:28:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) [ 339.844707] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 11:28:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:07 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) socket$pppoe(0x18, 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) [ 340.009126] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 340.118136] misc userio: No port type given on /dev/userio [ 340.131199] misc userio: No port type given on /dev/userio 11:28:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:07 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)=0x199) ftruncate(r0, 0x8) 11:28:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:07 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000180)={0x0, 0x1, 0x100a, [], &(0x7f0000000100)={0x0, 0x0, [], @p_u8=&(0x7f00000000c0)}}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x401, @remote, 0x2}}, 0x4, 0x1, 0xfffffffffffffffc, 0x5, 0x8}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000280)={r2, 0x1000, 0x7d, "f639b0344d4599c289e7f774087a0071174177d7d42573d96bb2e8c6aeeae91f440ea407a52d3b2a23c41713ae3cb46cd65c9aefa944b5915a16a4901db312366d7856a7c0acf3b87e50e0eafe4637e2bf18f8b8af2ad9e2595665c9d9da4ef2d241497ab1cee5686cb5e4713098a57257240d906b231fa21c2d2ce85f"}, 0x85) 11:28:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:28:07 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f00000000c0)={0x5, "114da8a7cb799d4ccfef920b9e57ac00ac53505128c2d23ee5fed2daa6506a68", 0x3, 0x1}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000280)={0xe, @raw_data="b38fce5376241c684349b3640b656a2306ac3b4b3b162230ec00ea54058a351f3e1ad3f439cdb6e54c19281ae7f3018269ec26b9cecc383c9149926b122b4104ed3833d8b483e747cf27072fba0c79a5c1ffd45d8c654c6b23b97f0ded52ec2cb6a5cadd61372ed57ea3ca4a638a673597ba8291aa45170112148f9d0135a3c82f3186ee6bb09ee561833cdd9ff974754c61a599ef5d126cd06523bb5a29a66b9b7a3c34560ed3ebec43187bd6f330a259d537d1e911861ab073ab0e1fe0f16310b64f26bdf77451"}) 11:28:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) 11:28:07 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) unshare(0x20240203fe) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/255) 11:28:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) 11:28:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) 11:28:08 executing program 2: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) recvfrom(r0, &(0x7f0000000000)=""/38, 0x26, 0x10000, &(0x7f0000000040)=@isdn={0x22, 0x7, 0x4, 0x7, 0x1}, 0x80) r1 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'irlan0\x00', {0x2, 0x4e23, @rand_addr=0x9}}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 11:28:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) 11:28:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(0xffffffffffffffff) 11:28:08 executing program 2: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000a80)={@initdev, 0x0}, &(0x7f0000000ac0)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000140)={@rand_addr="1b502e159abdcc7462c3deb02dec0770", r1}, 0x14) recvfrom$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x501000, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1f, 0x7, 0x6}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000080)={{0x8001, 0xffffffff}, {0x210, 0x2}, 0x0, 0x1}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) socket$can_raw(0x1d, 0x3, 0x1) 11:28:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(0xffffffffffffffff) 11:28:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:28:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(0xffffffffffffffff) 11:28:08 executing program 2: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x24}, 0x20}}, 0x2, 0x80000000}, &(0x7f0000000480)=0x90) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000004c0)={r2, 0x9, 0x20, 0x8d54, 0x6}, &(0x7f0000000500)=0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f}}, 0x20) close(r0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000800)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"8420e139ff841b4126b7f193d36af535"}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), r4, 0x2}}, 0x18) 11:28:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f00000000c0)=0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12a41d88b070") socket$inet(0x10, 0x4000000000d, 0x1) r2 = socket(0x10, 0x80002, 0x2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x218280}, 0xc, &(0x7f0000000180)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) connect$netlink(r2, &(0x7f0000000280)=@kern={0x10, 0x0, 0x0, 0x14000000}, 0xfffffffffffffe6c) openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x40000, 0x0) 11:28:09 executing program 1 (fault-call:5 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) 11:28:09 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x61) socketpair$unix(0x1, 0x10000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x101000) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)=0x20000000200000) set_tid_address(0x0) 11:28:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x13226051, 0x400300) ioctl$TIOCCONS(r2, 0x541d) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x5, @mcast2, 0xffff}, r3}}, 0x30) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000100)=0x3, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) 11:28:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x8000}, 0xfffffffffffffffe) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x840, 0x0) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x111, 0x80800) 11:28:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r5 = getgid() stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) getgroups(0x8, &(0x7f0000000480)=[0xee00, 0xee00, 0x0, 0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) getgroups(0x6, &(0x7f0000000540)=[0xee00, 0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000580)={{}, {0x1, 0x7}, [{0x2, 0x4, r2}, {0x2, 0x6, r3}, {0x2, 0x3, r4}], {0x4, 0x6}, [{0x8, 0x1, r5}, {0x8, 0x2, r6}, {0x8, 0x5, r7}, {0x8, 0x4, r8}, {0x8, 0x4, r9}, {0x8, 0x2, r10}], {0x10, 0x1}, {0x20, 0x4}}, 0x6c, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) 11:28:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:28:09 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x40, 0x4a0800) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000100)=0x68) socket$packet(0x11, 0x2, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) eventfd2(0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000380)={0x7f}, &(0x7f0000000400), 0x0) 11:28:09 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e24, 0xfffffffffffffff7, @loopback, 0x5}}, 0x0, 0x45ed, 0x0, "e025f6b671b4c57abe529a5fed34bb3a32cb398f4fccb062003289f1f227455a498a6e2ec521e8814686d556fe44b819c30b48a21f10e3e5b9d9fac16e7da3e9dc1dc39e2a455cac4925c693b64fdd54"}, 0xd8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffe32, 0x40004, 0x0, 0x0) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() fchown(r2, r3, r4) close(r1) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4) 11:28:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x602c02, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) 11:28:10 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x4000) getsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = getegid() getgroups(0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0x0]) setgroups(0x2, &(0x7f0000000180)=[r1, r2]) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xff, 0x0) ioctl$KDGKBLED(r3, 0xc0045406, 0x0) 11:28:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x240cc1, 0x9) accept4$alg(r2, 0x0, 0x0, 0x80000) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x100000000}, 0x28, 0x3) close(r0) 11:28:10 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000002580)=0xffffffffffffac6e, 0x4) sendto$inet6(r1, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000809000)={0xa, 0x1000000000004e20, 0x0, @mcast2}, 0x1c) recvmsg(r1, &(0x7f00000055c0)={&(0x7f0000005480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000005500), 0x0, &(0x7f0000005540)=""/81, 0x51}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 11:28:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x202) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000000)=""/219, &(0x7f0000000100)=0xdb) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r1) 11:28:10 executing program 2: unshare(0x400) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x0, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) getrusage(0x0, &(0x7f0000000000)) 11:28:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x8001, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000040)={0x9bd7, 0x3, 0xff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) 11:28:10 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:28:10 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001200)='/dev/vcs\x00', 0x6240, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000001240), &(0x7f0000001280)=0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x32, 0x0, &(0x7f0000000000)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000180)={&(0x7f0000000080)=@in={0x2, 0xf425, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c2668a58a289b0058b80d65fa3dd1ae4b970700aa2e3b57abfdda0b8575fefb1ef4a5917b9125bb496e2464010e7eee6c9081be1cb9512153b305c5a03a7671b70ff5eb0e5403cf095b741a9ca8d4961642b0bb8a", 0x55}], 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$TIOCNXCL(r2, 0x540d) getsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) 11:28:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x50000) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000040)=0x3fd) 11:28:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x4002) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={@ipv4={[], [], @local}, 0x7f, r2}) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') recvmmsg(r3, &(0x7f0000007f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}]}]}, 0x30}}, 0x0) 11:28:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="6bc1bb5b68284c0703000000cbfacd9bb7ec813fcf985cc9816cac7235e7b516c9b55867fb50206a7ee3b9548ffeb15e1c1ecdaaab7ad399c22e6a99e821aada3e51fa81b665566a5ec79f0cbf53094d", 0x0, 0x20000003, 0x0, 0xfffffffffffffe73) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000000)='smaps\x00') close(r0) 11:28:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0xa81, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000380)={0x118, 0x0, 0x10001, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f00000003c0)={0x4d0000, r3}) r4 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x6, 0x800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @local, 0x9}}, 0x1f, 0x3}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000200)={0x4, 0xb, 0xbed, 0x397, r5}, 0x10) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000240)={0x2}) listen(r1, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x500, 0x0) ioctl$RNDCLEARPOOL(r6, 0x5206, &(0x7f0000000040)=0x5) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000480)={r5, 0x7fff}, &(0x7f00000004c0)=0x8) write$P9_RFLUSH(r6, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000400)={0xf3, 0x8, 0x0, 0x40, r5}, &(0x7f0000000440)=0x10) write$binfmt_misc(r6, &(0x7f0000000280)={'syz1', "349183748261f28613a0617b5aa5b6dad1006bb6d22a4d96976a86e021569188fc555fc676967044895ec9ff2ef377d0899f0fe52d49ca87d70dcd1958e516be6c83712668566cec56a64c49194c90a5327bcf011b103a111c3f99c508f39e03c0094be7a1956876debe310233ae0e2ece3386339e0b0990a839ecbbbd1505d8"}, 0x84) close(r0) 11:28:11 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x6c, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r1) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x80) recvmsg$kcm(r3, &(0x7f0000000180)={&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/103, 0x67}, {&(0x7f0000000240)=""/113, 0x71}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x5}, 0x2) close(r0) 11:28:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x20, 0x5, @thr={&(0x7f0000000000)="ef697bb3b334b14f0dba20fb9cc79f68879e616515b3f10d0d9a078510b779da90df9338341dd7116790e627f75344560ce643bce16cca194449e98e385cc8bd8781a1a5aea96c762b9cdd803f08977561b88e54a5f73f6fe38c226ee7f848ea497c6277c553ae6468cf7f07df91643eebc6212779b87da786d971830aed9721f98caa2bca3880c393eb4c47897e7f4561338c3988336a2bab2bfd29d32a52d984e678aa5e934e0e157eded8a44e6f2ccf8ef935aaec489a5d64aebc94acd3", &(0x7f00000000c0)="5ebde7744c348167660af24a5dbd2b94774dd5d3b48055b3787f62356a48086c6a2237fe0ae2832cf07db62aeaceb6"}}, &(0x7f0000000140)=0x0) timer_gettime(r2, &(0x7f0000000180)) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0x21}, 0x4f, r3}) 11:28:11 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x50080, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x1ad, 0x0, 0x7ff}) ioctl$TIOCSBRK(r0, 0x5427) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x6, 0x210000) write(r2, &(0x7f0000000100)="1a1ebcbf770dec4cbb8341ab0c5e30a6cbaa52b2d619cc21e7a29048d6b8a2fe9f59dd887b99e54e1dbcc7753feaa4dcfd124026209c5094c02a3cbf2f2e7233721cdfeff26262dd1db6c7449bf726289dff10", 0x53) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 11:28:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:28:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x10) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x2}}, 0x10) sendto$inet6(r1, &(0x7f0000000080)="7fe8d5bc618cb6f40c117e2bebcdd8bf2a84a56b7fc8816f8be64c2305d4d4d816ed9267d47a3e386a69cf25703d0418304a84051f07e02de1bf4d48be6e", 0x3e, 0x4000, &(0x7f00000000c0)={0xa, 0x4e20, 0x599, @dev={0xfe, 0x80, [], 0x28}, 0x1}, 0x1c) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) 11:28:11 executing program 2: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4029, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr], 0xff000000}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x4002) accept4$alg(r0, 0x0, 0x0, 0x80800) 11:28:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000005, 0x0, 0x0) close(r0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20200, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x101, 0xa0e, 0xfffffffffffffffc, 0xd9, 0xd, 0x40, 0x4, 0x80, 0x9, 0x8102, 0x300000, 0x100000001}) 11:28:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000200)=""/232, &(0x7f0000000040)=0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000440)={0x2, 0x4, 0x4, 0xfff, 0x4, 0xffffffffffffffff, 0x0, [0x5f]}, 0x2c) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0xbf, @local, 0x4e21, 0x3, 'dh\x00', 0x30, 0xffffffffffffff26, 0x65}, 0x2c) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000100)=""/242) r1 = shmget(0x1, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x3000) [ 345.030008] QAT: Invalid ioctl [ 345.037986] IPVS: length: 232 != 8 [ 345.046319] IPVS: set_ctl: invalid protocol: 191 172.20.20.170:20001 [ 345.059249] IPVS: length: 232 != 8 [ 345.077595] IPVS: set_ctl: invalid protocol: 191 172.20.20.170:20001 11:28:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x1f}}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000000c0)={0xb, @raw_data="e05beb4c8162b70d3bc0b7736eefe7e13f47c23a4bb4f385dcb46a7b2c7e2df5a1b8f1e71056fee1c10e05c76c7e91ca32ab666183e0330bb6eb93727c0e20461e3e1fe62a37870b0927487569bf4af85fa26b214789f7df71d5cd6b4ee3d01fe023ad9a538bd61ac778d1502a6e71236d718d8641b789b51bef460893e45e0b91764ce3c90893e97775f263522b4078c202ac1339449178ca8f985ef118f27a380225625e8536ad6349ae715d9fb85bd40518479002e30e0a465f5669050e9ba5eedb27995fad2f"}) close(r0) 11:28:12 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000100)={0x0, 0x0}) chdir(&(0x7f00000000c0)='./file0\x00') capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) r1 = socket$kcm(0xa, 0x522000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfd3d, &(0x7f00000001c0), 0x12f}, 0x0) 11:28:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) [ 345.297992] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) 11:28:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) 11:28:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = socket(0x11, 0x4, 0x40) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000640)=""/115, 0x73}, {&(0x7f00000006c0)=""/133, 0x85}, {&(0x7f0000000780)=""/89, 0x59}], 0x3, &(0x7f0000000840)=""/83, 0x53}, 0x6db}], 0x1, 0x2, &(0x7f0000000900)={0x77359400}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000980)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000ac0)=0xe8) r6 = getegid() sendmsg$unix(r2, &(0x7f0000000b40)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="5c656ebd3ff878b6d1fda50981cf4400a5f7fb0dadbd9a9ab91e4d3a183da8af700c8428be5ac5d7d5d90d828896d4e3a62c5d0c92af3de7f06df47369dd4c44a801bd0cc582beab5395a39805c3a285bb", 0x51}, {&(0x7f0000000300)="bdcf481457a4b6f9fa8035d34a2a890c3bb4df8d68b47b9046f09d8728dcb2455e49", 0x22}, {0xfffffffffffffffe}, {&(0x7f0000000540)="0430", 0x2}], 0x4, &(0x7f0000000b00)=[@rights={0x18, 0x1, 0x1, [r3, r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x38, 0x40}, 0x81) r7 = accept4$inet6(0xffffffffffffff9c, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000200)=0x1c, 0x800) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000b80)=""/206, &(0x7f0000000940)=0xce) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x8) r8 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r8, 0x4010641c, &(0x7f0000000180)={r9, &(0x7f00000000c0)=""/83}) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="24000000200007041dfffd946f610500020000001f00420200000800080004000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sched_setattr(r4, &(0x7f0000000c80)={0x30, 0x7, 0x1, 0x1, 0x8, 0x7f, 0x5, 0x94}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0)='IPVS\x00') ioctl$KDDISABIO(r8, 0x4b37) clock_getres(0x6, &(0x7f00000002c0)) 11:28:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x8000) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000040)) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) 11:28:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000140)=0x40, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x1, {0x1}}, 0x18) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) signalfd4(r0, &(0x7f0000000180)={0x3f}, 0x8, 0x800) close(r0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x939, 0x40) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x0, 0x2, 0x1, 0x1, 0x0, 0x3f, 0x1, 0x7, 0xe057, 0x1f, 0x5, 0xffff, 0x2000000040000000, 0x6, 0x2, 0x28}}) [ 345.757032] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 11:28:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x48000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6, @remote}, 0x10) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) 11:28:13 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) read(r0, &(0x7f00000000c0)=""/211, 0xd3) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000001c0)={0x5, 0x4, [0x9c8d]}) renameat2(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='.\x00', 0x4) fcntl$notify(r0, 0x402, 0x20) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000280)=0x4f0c) r1 = syz_open_dev$sndctrl(&(0x7f00000002c0)='/dev/snd/controlC#\x00', 0x1, 0x800) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000300)=0x14, 0x4) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000340)={0x18, 0x0, {0x0, @dev={[], 0x21}, 'ip_vti0\x00'}}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000380)=0x20, 0x4) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000003c0)=0x10000, 0x4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000400)=0x0) fcntl$setown(r1, 0x8, r2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000440)={0x113f9fe7, 0x5, "8f49cc24b57f32098bb0183e8876c3835720533892d03e80a40d700847bc286e", 0x10000, 0x3, 0x8, 0x0, 0x11}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000004c0)={0x6, @sdr={0x584e4f53, 0x200}}) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f00000005c0)={0x9, 0x3, {0x57, 0x7b2a, 0xd234, {0x0, 0x4}, {0x3, 0x4}, @rumble={0x7, 0x1000}}, {0x54, 0xcdc3, 0x7fff, {0x1, 0x7fffffff}, {0x5164bb8d, 0x2}, @ramp={0xffffffff, 0xb3c2, {0x401, 0x7, 0x5, 0x401}}}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x4000, 0x0) connect$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0xfff, @empty, 0x200}, 0x1c) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000006c0)={0x0, 0x0, {0x23, 0x22, 0x3, 0xa, 0xb, 0x0, 0x3, 0x158, 0xffffffffffffffff}}) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000740)={0x0, 0x6, 0x6, [], &(0x7f0000000700)=0x5}) r3 = shmget(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000780)=""/71) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x98, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xaf}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000000}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x0) sched_yield() ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x8d) r5 = geteuid() r6 = getegid() lchown(&(0x7f00000009c0)='./file0/file0\x00', r5, r6) 11:28:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000040)) 11:28:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000040)="b6bb687aff7e24346256f66139c17c2022416e8e0713c6f043ebeb9dc78916cfc5749b848dd452679a063f926dea39c130fe0e88820059904b33a0a3cd7b322677d1ffc924402082a71bdec8cac7132b25d46c38d23a802203efde011700c749329dd3bea589e837be2fd4e714a8fdb6afb5bb020cdcd65e80a3011594e85217f3a00fc6e4f210500e6fed10cc4026bbb782aa821a4f98c433fe907036a38ee9250edea9e35792", &(0x7f0000000100)=""/151}, 0x18) listen(r1, 0xfffffffffffffffc) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) getsockname(r2, &(0x7f0000000200)=@x25, &(0x7f0000000280)=0x80) ioctl$CAPI_GET_SERIAL(r2, 0xc0044308, &(0x7f00000002c0)=0xad6) 11:28:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4), 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) [ 346.500430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 346.635028] IPVS: ftp: loaded support on port[0] = 21 11:28:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = socket(0x11, 0x4, 0x40) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000640)=""/115, 0x73}, {&(0x7f00000006c0)=""/133, 0x85}, {&(0x7f0000000780)=""/89, 0x59}], 0x3, &(0x7f0000000840)=""/83, 0x53}, 0x6db}], 0x1, 0x2, &(0x7f0000000900)={0x77359400}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000980)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000ac0)=0xe8) r6 = getegid() sendmsg$unix(r2, &(0x7f0000000b40)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="5c656ebd3ff878b6d1fda50981cf4400a5f7fb0dadbd9a9ab91e4d3a183da8af700c8428be5ac5d7d5d90d828896d4e3a62c5d0c92af3de7f06df47369dd4c44a801bd0cc582beab5395a39805c3a285bb", 0x51}, {&(0x7f0000000300)="bdcf481457a4b6f9fa8035d34a2a890c3bb4df8d68b47b9046f09d8728dcb2455e49", 0x22}, {0xfffffffffffffffe}, {&(0x7f0000000540)="0430", 0x2}], 0x4, &(0x7f0000000b00)=[@rights={0x18, 0x1, 0x1, [r3, r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x38, 0x40}, 0x81) r7 = accept4$inet6(0xffffffffffffff9c, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000200)=0x1c, 0x800) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000b80)=""/206, &(0x7f0000000940)=0xce) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x8) r8 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r8, 0x4010641c, &(0x7f0000000180)={r9, &(0x7f00000000c0)=""/83}) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="24000000200007041dfffd946f610500020000001f00420200000800080004000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sched_setattr(r4, &(0x7f0000000c80)={0x30, 0x7, 0x1, 0x1, 0x8, 0x7f, 0x5, 0x94}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0)='IPVS\x00') ioctl$KDDISABIO(r8, 0x4b37) clock_getres(0x6, &(0x7f00000002c0)) 11:28:13 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10000008) sendto$inet6(r1, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x4) bind$tipc(r3, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x3}}, 0x24b) close(r1) 11:28:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@ipv4={[], [], @multicast1}}, &(0x7f0000000040)=0x14) close(r0) [ 346.925526] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 346.997326] chnl_net:caif_netlink_parms(): no params data found 11:28:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0xfc, 0x3, 0x2, "9609e6dc64552ddf5f3cf743b2fcc793", "9c39f6d98083fc673c0dd3a2b6ad3a9f1cafd04f579f2102b0a9d372d19f9379f31c1c6b8c6db35218499c42f87356a27c17e89129e648ce2463ab4a1c0648e25b7a8e495a055beb2f1c0e3a2c0d7b384db3d9934e70d3342faf2666e825fa553adc122b77a7417f8bb4717397bc0f95e32d6e3a77c194b5b90c53f35427640b4fdd050cb8660df1701a169b80eae4e705f232880dabd41eb4950883dedcddddb0907ecf12d060d36b90b2b90f8dc914944589c804779e826e1bd6beb921afc75415e9de4b6b83e65dde67524e181ff68c73b4ceda544731ced71db7233cef605084df36a242ce"}, 0xfc, 0x3) close(r0) [ 347.117786] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.124653] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.133484] device bridge_slave_0 entered promiscuous mode [ 347.144310] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.151031] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.160044] device bridge_slave_1 entered promiscuous mode [ 347.229634] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 347.250924] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 347.312630] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 347.321612] team0: Port device team_slave_0 added [ 347.333132] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 347.342226] team0: Port device team_slave_1 added [ 347.349772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 347.359003] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 11:28:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x800, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) close(r0) close(r1) [ 347.438726] device hsr_slave_0 entered promiscuous mode [ 347.494993] device hsr_slave_1 entered promiscuous mode 11:28:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4), 0x1c) listen(r1, 0x7) sendto$inet6(r0, &(0x7f0000f6f000), 0x5b37ca81a71c1086, 0x20000003, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) close(r0) accept4(r1, 0x0, &(0x7f0000000000), 0x0) shutdown(r0, 0x1) [ 347.536375] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 347.556313] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 347.642145] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.648768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.656131] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.662900] bridge0: port 1(bridge_slave_0) entered forwarding state 11:28:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x101000008912, &(0x7f0000000140)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = socket(0x11, 0x4, 0x40) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000640)=""/115, 0x73}, {&(0x7f00000006c0)=""/133, 0x85}, {&(0x7f0000000780)=""/89, 0x59}], 0x3, &(0x7f0000000840)=""/83, 0x53}, 0x6db}], 0x1, 0x2, &(0x7f0000000900)={0x77359400}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000980)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000009c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000ac0)=0xe8) r6 = getegid() sendmsg$unix(r2, &(0x7f0000000b40)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="5c656ebd3ff878b6d1fda50981cf4400a5f7fb0dadbd9a9ab91e4d3a183da8af700c8428be5ac5d7d5d90d828896d4e3a62c5d0c92af3de7f06df47369dd4c44a801bd0cc582beab5395a39805c3a285bb", 0x51}, {&(0x7f0000000300)="bdcf481457a4b6f9fa8035d34a2a890c3bb4df8d68b47b9046f09d8728dcb2455e49", 0x22}, {0xfffffffffffffffe}, {&(0x7f0000000540)="0430", 0x2}], 0x4, &(0x7f0000000b00)=[@rights={0x18, 0x1, 0x1, [r3, r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x38, 0x40}, 0x81) r7 = accept4$inet6(0xffffffffffffff9c, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000200)=0x1c, 0x800) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000b80)=""/206, &(0x7f0000000940)=0xce) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x8) r8 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r8, 0x4010641c, &(0x7f0000000180)={r9, &(0x7f00000000c0)=""/83}) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="24000000200007041dfffd946f610500020000001f00420200000800080004000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sched_setattr(r4, &(0x7f0000000c80)={0x30, 0x7, 0x1, 0x1, 0x8, 0x7f, 0x5, 0x94}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0)='IPVS\x00') ioctl$KDDISABIO(r8, 0x4b37) clock_getres(0x6, &(0x7f00000002c0)) 11:28:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x501001, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f00000000c0)={{0xff, 0xa1, 0x10001, 0x4, 0x6, 0x100000001}, 0x7, 0x10000, 0x2}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x80000001, @rand_addr="8ee14a7afa19811739ff4333875c6275", 0x9}}, [0x6, 0xfff, 0x8, 0x1, 0x3, 0x4f, 0x65f, 0x1, 0x0, 0x4df0, 0x7, 0x7fffffff, 0x3, 0x3dc]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000240)={r3, 0x6}, &(0x7f0000000280)=0x8) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000040)={0x5, 0x7fffffff}) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) close(r0) [ 347.941047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 347.955606] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.966393] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.032708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.067445] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 348.081925] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 348.088694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 348.097143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 348.113486] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 348.119665] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.137694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 348.145430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.156083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.164708] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.171238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.189365] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 348.204395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 348.212691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.221772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.230275] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.236917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.246313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.264231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 348.277920] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 348.292584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 348.300384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.318409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.328018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.337653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.347251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.358286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.373277] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 348.382190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.390973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.412680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 348.419929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.429740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.448175] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 348.454542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.489484] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 348.515187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.284292] ================================================================== [ 349.291826] BUG: KMSAN: uninit-value in linear_transfer+0xa1b/0xc50 [ 349.298342] CPU: 1 PID: 11643 Comm: syz-executor.3 Not tainted 5.0.0-rc1+ #9 [ 349.305555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.314933] Call Trace: [ 349.317642] dump_stack+0x173/0x1d0 [ 349.321345] kmsan_report+0x12e/0x2a0 [ 349.325207] __msan_warning+0x82/0xf0 [ 349.329059] linear_transfer+0xa1b/0xc50 [ 349.333195] ? snd_pcm_plugin_build_linear+0xc00/0xc00 [ 349.338520] snd_pcm_plug_read_transfer+0x3bf/0x590 [ 349.343661] snd_pcm_oss_read+0xa4a/0x1960 [ 349.347981] ? snd_pcm_oss_unregister_minor+0x4b0/0x4b0 [ 349.353380] __vfs_read+0x1e5/0xbf0 [ 349.357037] ? security_file_permission+0x521/0x660 [ 349.362102] ? rw_verify_area+0x35e/0x580 [ 349.366297] vfs_read+0x359/0x6f0 [ 349.369813] __se_sys_read+0x17a/0x370 [ 349.373762] __x64_sys_read+0x4a/0x70 [ 349.377596] do_syscall_64+0xbc/0xf0 [ 349.381421] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 349.386650] RIP: 0033:0x457e29 [ 349.389861] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.408786] RSP: 002b:00007f6515bebc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 349.416523] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 349.423816] RDX: 00000000000000d3 RSI: 00000000200000c0 RDI: 0000000000000003 [ 349.431110] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 349.438399] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6515bec6d4 [ 349.445699] R13: 00000000004c3963 R14: 00000000004d8450 R15: 00000000ffffffff [ 349.453009] [ 349.454644] Uninit was created at: [ 349.458186] No stack [ 349.460527] ================================================================== [ 349.467894] Disabling lock debugging due to kernel taint [ 349.473355] Kernel panic - not syncing: panic_on_warn set ... [ 349.479271] CPU: 1 PID: 11643 Comm: syz-executor.3 Tainted: G B 5.0.0-rc1+ #9 [ 349.487870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 349.497245] Call Trace: [ 349.499881] dump_stack+0x173/0x1d0 [ 349.503562] panic+0x3d1/0xb01 [ 349.506846] kmsan_report+0x293/0x2a0 [ 349.510700] __msan_warning+0x82/0xf0 [ 349.514547] linear_transfer+0xa1b/0xc50 [ 349.518692] ? snd_pcm_plugin_build_linear+0xc00/0xc00 [ 349.524006] snd_pcm_plug_read_transfer+0x3bf/0x590 [ 349.529093] snd_pcm_oss_read+0xa4a/0x1960 [ 349.533409] ? snd_pcm_oss_unregister_minor+0x4b0/0x4b0 [ 349.538816] __vfs_read+0x1e5/0xbf0 [ 349.542530] ? security_file_permission+0x521/0x660 [ 349.547609] ? rw_verify_area+0x35e/0x580 [ 349.551819] vfs_read+0x359/0x6f0 [ 349.555358] __se_sys_read+0x17a/0x370 [ 349.559305] __x64_sys_read+0x4a/0x70 [ 349.563143] do_syscall_64+0xbc/0xf0 [ 349.566898] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 349.572109] RIP: 0033:0x457e29 [ 349.575330] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 349.594262] RSP: 002b:00007f6515bebc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 349.602004] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 349.609304] RDX: 00000000000000d3 RSI: 00000000200000c0 RDI: 0000000000000003 [ 349.616839] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 349.624135] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6515bec6d4 [ 349.631437] R13: 00000000004c3963 R14: 00000000004d8450 R15: 00000000ffffffff [ 349.639848] Kernel Offset: disabled [ 349.643495] Rebooting in 86400 seconds..