[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 29.228831] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.237409] random: sshd: uninitialized urandom read (32 bytes read) [ 32.535480] random: sshd: uninitialized urandom read (32 bytes read) [ 33.817429] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.10.50' (ECDSA) to the list of known hosts. [ 39.492298] random: sshd: uninitialized urandom read (32 bytes read) 2018/06/13 08:18:07 fuzzer started [ 40.900064] random: cc1: uninitialized urandom read (8 bytes read) 2018/06/13 08:18:10 dialing manager at 10.128.0.26:37601 2018/06/13 08:18:15 syscalls: 1643 2018/06/13 08:18:15 code coverage: enabled 2018/06/13 08:18:15 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: errno 524 2018/06/13 08:18:15 setuid sandbox: enabled 2018/06/13 08:18:15 namespace sandbox: enabled 2018/06/13 08:18:15 fault injection: enabled 2018/06/13 08:18:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/06/13 08:18:15 net packed injection: enabled 08:18:21 executing program 0: 08:18:21 executing program 7: 08:18:21 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) 08:18:21 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, "73797a5f74756e0000000300"}) 08:18:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 08:18:21 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) 08:18:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYBLOB="0000ff000a000200aaaa5ec06c54aaaaaaaa0000"], 0x2}, 0x1}, 0x0) [ 53.596012] random: crng init done 08:18:21 executing program 6: r0 = memfd_create(&(0x7f0000000100)='\x00', 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='syz0'], 0x4) execveat(r0, &(0x7f0000000080)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) [ 54.464515] IPVS: ftp: loaded support on port[0] = 21 [ 54.466608] IPVS: ftp: loaded support on port[0] = 21 [ 54.492435] IPVS: ftp: loaded support on port[0] = 21 [ 54.501639] IPVS: ftp: loaded support on port[0] = 21 [ 54.528706] IPVS: ftp: loaded support on port[0] = 21 [ 54.560893] IPVS: ftp: loaded support on port[0] = 21 [ 54.571553] IPVS: ftp: loaded support on port[0] = 21 [ 54.578869] IPVS: ftp: loaded support on port[0] = 21 [ 56.131206] ip (4619) used greatest stack depth: 54352 bytes left [ 57.136237] ip (4699) used greatest stack depth: 54328 bytes left [ 57.284198] ip (4714) used greatest stack depth: 54040 bytes left [ 57.784264] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.790742] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.826165] device bridge_slave_0 entered promiscuous mode [ 57.847391] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.853821] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.867168] device bridge_slave_0 entered promiscuous mode [ 57.912010] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.918467] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.940757] device bridge_slave_0 entered promiscuous mode [ 57.974948] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.982218] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.036103] device bridge_slave_0 entered promiscuous mode [ 58.064464] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.070922] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.091429] device bridge_slave_0 entered promiscuous mode [ 58.102337] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.108752] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.131160] device bridge_slave_1 entered promiscuous mode [ 58.143860] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.150320] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.167544] device bridge_slave_0 entered promiscuous mode [ 58.185163] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.191598] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.219160] device bridge_slave_1 entered promiscuous mode [ 58.231400] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.237859] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.247011] device bridge_slave_0 entered promiscuous mode [ 58.255467] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.261895] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.272173] device bridge_slave_1 entered promiscuous mode [ 58.280325] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.286760] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.297846] device bridge_slave_1 entered promiscuous mode [ 58.319657] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.326112] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.351901] device bridge_slave_0 entered promiscuous mode [ 58.366926] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.373370] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.381490] device bridge_slave_1 entered promiscuous mode [ 58.389383] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.397197] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.403644] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.434703] device bridge_slave_1 entered promiscuous mode [ 58.458944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.471348] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.482337] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.488790] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.515649] device bridge_slave_1 entered promiscuous mode [ 58.537702] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.544124] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.567187] device bridge_slave_1 entered promiscuous mode [ 58.576733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.598066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.605454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.614789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.627114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.637244] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.671230] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.742214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 58.807482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.853658] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.884573] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.892246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 58.899871] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 59.283189] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.297530] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.319785] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.358522] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.448494] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.519788] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.532261] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.551339] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.565572] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.591082] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 59.600256] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.611490] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.625707] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.722525] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.743447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.756639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.791771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.799737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.820165] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.828729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.839271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.867527] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 59.936874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 59.944502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.964130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 59.971155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.021468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.036438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.050468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.057395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.075472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.082877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.098473] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 60.106179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.123764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.157803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.197388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.204375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.218399] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.225392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.286711] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.296215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.360220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 60.367211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.633222] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.667830] team0: Port device team_slave_0 added [ 60.751724] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.772272] team0: Port device team_slave_0 added [ 60.789707] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.797783] team0: Port device team_slave_0 added [ 60.803586] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.815881] team0: Port device team_slave_0 added [ 60.852816] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.874561] team0: Port device team_slave_0 added [ 60.898117] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.913309] team0: Port device team_slave_0 added [ 60.934154] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 60.950405] team0: Port device team_slave_1 added [ 60.974719] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 60.987880] team0: Port device team_slave_0 added [ 60.997154] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.005802] team0: Port device team_slave_1 added [ 61.025788] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.043324] team0: Port device team_slave_1 added [ 61.071011] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.088579] team0: Port device team_slave_1 added [ 61.110848] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 61.131280] team0: Port device team_slave_0 added [ 61.148214] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.163161] team0: Port device team_slave_1 added [ 61.170694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.179387] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.188118] team0: Port device team_slave_1 added [ 61.215142] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.222128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.248403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.267884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.282891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.303429] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.317621] team0: Port device team_slave_1 added [ 61.327662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.334670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.344866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.370247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.382802] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 61.391940] team0: Port device team_slave_1 added [ 61.401718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.412002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.419278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.437104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.466863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.492205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.517657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.528567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.540742] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.555928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.576926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.588530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.596969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.605662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.614401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.624354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.635564] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.643198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.653656] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.661249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 61.671396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.695538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.722838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.748941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.773589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.795928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.812937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.820779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.828528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.836697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.844513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.852471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.861903] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.871222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.879978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.898702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.906992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.915140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.928809] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 61.937834] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 61.948972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 61.957469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.966912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.004872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.037116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.054191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.063412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.073862] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 62.081016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.089723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.098326] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.106268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.117611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.131744] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.140576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.154943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.183847] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.197325] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.207815] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.215461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.227126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.257493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.283238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.302659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.320402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.340771] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.349935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 62.368164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.378150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.395897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.408859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.438164] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.446678] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.459898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.477339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.505112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.524138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.540134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.549232] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.562838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.578186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.603638] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.616645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.628065] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 62.664583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.695756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.541997] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.548452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.555292] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.561722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.598176] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.607370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.637160] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.643574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.650362] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.656837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.665072] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.676755] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.683201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.689977] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.696455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.704437] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.717616] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.724087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.730836] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.737252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.779902] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.825678] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.832133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.838940] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.845545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.930194] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 64.988420] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.994883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.001695] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.008122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.065883] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.077100] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.083547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.090311] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.096723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.120869] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.149213] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.155672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.162460] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.168894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.236767] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 65.631569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.642319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.673985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.693817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.712784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.720132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.727650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.975883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.192696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.214340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.232137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.422074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.684446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.742376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.798009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.860496] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.017655] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.037880] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.057617] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.243644] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.492832] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.545433] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.566957] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 74.643132] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.649386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.657694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.803315] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.809683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.820989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.864646] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.880215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.896865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.943595] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 74.958363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.983825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.120112] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.129318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.140199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.288496] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.294808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.310865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.376282] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.382549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.393514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.413429] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 75.423559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.435442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.553410] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.613021] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.651921] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.915444] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.044786] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.059973] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.087993] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.234614] 8021q: adding VLAN 0 to HW filter on device team0 08:18:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f6578650000000000049b840572137291be10eebf000ee9a90f798058439ed5e901d2da75060002acc7edbcd7a071fb35331ce39c5a000000080000007c54ecf16b46e8f5eb845f06c2b4833f0f84b356f039192806008f7ce66c7288410412f83962fc4ae2805c44331afe5705952580b49acad4596489f4455f2cba58ee6d298147dfab3256c742c1b69f67793dfd6a9b4db888e646223be7fb8b2717202ea95611ed0e0559c55bdcecfdaf9716ed51bd15d81d43b89e1cecabcba5d2e62f5b3ec8667778db1218b7bc16e0573138971db98e50262419de58d7477f7f5680e4d3eeade20a2d3e420b35456180b109549e4ef0e1b55691e1f139ce36a24837297a9b9f7a674b065f6f33f02b4ff484f04d8bba269191d364ec5ac1383d9ab7460d4d89938fb7600936d99b6a7926fafb27e09600c5030b051d15119f710af1a04ed6f070fada") fgetxattr(r0, &(0x7f0000000040)=@known='user.syz\x00', &(0x7f0000000240)=""/2, 0x2) 08:18:48 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0x1c) 08:18:48 executing program 7: 08:18:48 executing program 2: 08:18:48 executing program 5: 08:18:48 executing program 7: 08:18:48 executing program 2: 08:18:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, "73797a5f74756e0000000300"}) 08:18:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x3, 0x0, 0x0, 0x3, 0xfffffffc, 0xffffffffffffffff}], {0x95}}, &(0x7f0000000040)='GPL\x00', 0x200, 0xa3, &(0x7f0000000140)=""/163, 0x41f00, 0x1, [], r0, 0xe}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) accept(r1, &(0x7f0000000080)=@sco, &(0x7f0000000200)=0x80) socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000480)={0x1, &(0x7f0000000440)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f00000004c0)={r3, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x3}, 0x2c) 08:18:49 executing program 5: 08:18:49 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl(r0, 0x80000, &(0x7f0000000140)="452e1424926dd3e7404ac06ad89fb4c3f75ceaf56c4a379fab832dd4fcbcad5884f6e9297e3b47f455843f1bfeb3123c3cd7bbe926a705a7fa18935cbca64e078f00d3047dd892bbe79dcacc4aa6ef6b67dd8133db9e70fb96745357c7dc4f234760aa53f650c7454651f07692328f4f5ec8fddc6dc1478041f0e606183e627fff3c77188477dbcbcbeaa4affcc14cb82f69d3ede4e97301a4569230ba9b808a6f596026b5e08780a85f98ec39a9cffcea0523be9b2f4eaad9676c3026615cb62a377ac04e1093b5f60530b2386d2b9200d6fa6598e2d9b6a2eefb2707ab54d9ccf34d4f22486158145071919ebc317a68ae2d00dec22138f8d4f23fcd43") ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) sync_file_range(r1, 0x0, 0x0, 0x6) 08:18:49 executing program 7: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2", 0x19}], 0x1, &(0x7f00001f9fe0)}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x3}) modify_ldt$write(0x1, &(0x7f0000000040)={0x7, 0x100000, 0x4000, 0x1, 0x7, 0x34, 0x9, 0x8, 0x6, 0xce37}, 0x10) ioctl(r0, 0x2285, &(0x7f0000007000)='S') 08:18:49 executing program 3: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40001, 0x8) r1 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x1, 0x288002) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffffff, 0x4, 0x1, 0x100, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', r3}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x208002, 0x0) sync_file_range(r4, 0x0, 0x0, 0x0) 08:18:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, "73797a5f74756e0000000300"}) 08:18:49 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x82, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000ffc), 0x85, 0x0, &(0x7f0000fd3ff0)={0xffff, 0x4}, &(0x7f0000000ffc), 0x278b7c90) 08:18:49 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xffffffff00000000) execveat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000001c0)='bdev\\\x00', &(0x7f0000000200)='/dev/autofs\x00', &(0x7f0000000240)='/dev/autofs\x00', &(0x7f0000000280)='/dev/autofs\x00', &(0x7f00000002c0)='/dev/autofs\x00', &(0x7f0000000300)='[GPLwlan1wlan1\x00', &(0x7f0000000340)='/dev/autofs\x00', &(0x7f0000000380)='+*GPLselinuxsecurityselinuxlo#\x00'], &(0x7f0000000480)=[&(0x7f0000000400)='/dev/autofs\x00', &(0x7f0000000440)='/dev/autofs\x00'], 0x1d00) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000000140)={0x6, 0x100}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80040d8c5602067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 08:18:49 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000200)={@multicast1, @empty, 0x0}, &(0x7f0000000240)=0xc) sendmsg$nl_route(r1, &(0x7f0000000980)={&(0x7f0000000900)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=@bridge_delneigh={0x5c, 0x1d, 0x18, 0x70bd27, 0x25dfdbfe, {0xf, 0x0, 0x0, r2, 0x11, 0x8, 0xb}, [@NDA_DST_MAC={0xc, 0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, @NDA_IFINDEX={0x8, 0x8, r3}, @NDA_SRC_VNI={0x8, 0xb, 0x4}, @NDA_IFINDEX={0x8, 0x8, r4}, @NDA_PORT={0x8, 0x6, 0x4e20}, @NDA_CACHEINFO={0x14, 0x3, {0x1, 0x200, 0xfffffffffffffff9, 0x9}}]}, 0x5c}, 0x1}, 0x0) 08:18:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x0, @link_local={0x1, 0x80, 0xc2}}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, "73797a5f74756e0000000300"}) 08:18:49 executing program 0: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000000000), 0x1b, 0x0) get_mempolicy(&(0x7f000029a000), &(0x7f00003e8000), 0x401, &(0x7f0000377000/0x1000)=nil, 0x2) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4896, 0xf47fa34c8022c4c7) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x3, 0xa1, &(0x7f0000000100)="6c6245e1bfd6c43838c4799561bbb265d476115147dbe0e4dc09fee6060998904967722d418bda95a5a332234680819c8382c9afd12876770c33f864a314a5f94f563f9db47ce5c6d1d97f332b0159d7611cd4a730e43e5d13ac46e2b348152a85bfd5451a27b8e0257115390c39abcf340ac7f9c67f635ee5b1c8d21a81b215ec3b576b5a31b79c54c11a91fcbcd3dff9d39533311cbf2907b3651bc3afa72d94"}) 08:18:49 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = socket$inet6(0xa, 0x8001000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x4) mprotect(&(0x7f000008f000/0x4000)=nil, 0x4000, 0x3) tgkill(r1, r1, 0x36) write$binfmt_aout(r2, &(0x7f0000000280)={{0x0, 0x3, 0x2f, 0x28a, 0x36b, 0x5, 0x239, 0x5}, "ce4d", [[], [], [], [], [], [], []]}, 0x722) ptrace$getregs(0x4209, r1, 0x730002, &(0x7f0000000000)=""/38) 08:18:49 executing program 7: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="2a1119878d7bb909118b3ccd28a2ab3a20d0bc5a94ecc2dc14952378b121953d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000eb3ff8)={r1}, &(0x7f0000940000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2}}}, &(0x7f0000000240)=0x98) 08:18:49 executing program 3: unshare(0x24020400) r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'veth0_to_bridge\x00', @ifru_data=&(0x7f0000000180)="bf8f152ef690742bb04f561ca628a50747c1564d82d1f65c1d853de68a1b7e21"}}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffff9c, 0x0, 0x1, 0x82, &(0x7f0000000040)=[0x0, 0x0], 0x2}, 0xfffffffffffffd2d) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000240)={0x7, 0x3}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000140)="8673a8aa0616f90307"}) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000300)={@ipv4={[], [], @multicast2}}, &(0x7f0000000340)=0x14) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000280)=""/109) 08:18:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgrp(0x0) r2 = add_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="8d75c0f421aeaa85c627acc3888e3e2e21c92b3db761f9ccb986248e2007c6ecbdd797a6af281eaf839c66ab09749be808f2d5507a35a1f4576d62b034de7e86950e20ca3c4e41835b54f33d2522989eee4614230448444b4a78c06a38cd5cf41a1d22a18ea3f27712ff0e368c5aeb1e8303e55e7c66c7632cdd99b6e1eb975069034d35df04b7f99375b5c32d549b6a99664318d495263cdf14ed13", 0x9c, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r2, r3) capget(&(0x7f0000000080)={0x399f1736, r1}, &(0x7f00000000c0)={0x6, 0xffff, 0xfffffffffffffffe, 0x4, 0x5, 0x401}) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000040)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="2d3c6589c26d41cc3330b6c15edb6df8f5bb1f6decfdd9a94c6f966487206b88"}) 08:18:49 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) unshare(0x24020400) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my}) 08:18:49 executing program 4: r0 = add_key$keyring(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f00000000c0)={0x1ff, 0x8000000b3}) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r0) epoll_create1(0x80000) clock_getres(0x5, &(0x7f0000000080)) 08:18:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000000c0)) 08:18:49 executing program 0: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000000000), 0x1b, 0x0) get_mempolicy(&(0x7f000029a000), &(0x7f00003e8000), 0x401, &(0x7f0000377000/0x1000)=nil, 0x2) r0 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4896, 0xf47fa34c8022c4c7) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x3, 0xa1, &(0x7f0000000100)="6c6245e1bfd6c43838c4799561bbb265d476115147dbe0e4dc09fee6060998904967722d418bda95a5a332234680819c8382c9afd12876770c33f864a314a5f94f563f9db47ce5c6d1d97f332b0159d7611cd4a730e43e5d13ac46e2b348152a85bfd5451a27b8e0257115390c39abcf340ac7f9c67f635ee5b1c8d21a81b215ec3b576b5a31b79c54c11a91fcbcd3dff9d39533311cbf2907b3651bc3afa72d94"}) 08:18:49 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) r2 = accept4(r0, &(0x7f0000000140)=@rc, &(0x7f0000000040)=0x80, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x1) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000280), &(0x7f00000002c0)=0xfffffffffffffe3b) socket$inet6(0xa, 0xa, 0x1) 08:18:49 executing program 5: r0 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) pwritev(r0, &(0x7f00000034c0), 0x2c0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpeername$ipx(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10) memfd_create(&(0x7f0000000100)='}\x00', 0x2) sendmsg$nl_generic(r0, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000001040)={0x158, 0x2e, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@generic, @generic="13ab7a39103b8513efd835047ca4660bbb", @generic="9ad24397a60d65b0e104766294825eadae91fd4b5c1a343822ad8564dc90758e4d652b1f9f0df5e707ae0c1d241a4d5bfa9079ac0e7236a8c550c90252d9846cd77a08bd750970c1bc", @typed={0x8, 0x5e, @pid=r1}, @generic="1f36cfad823f2e7f6f7331f00438fb83b38f462be83bd46874b3287c7d4df46ed8a21c19d2adb92bdd751d80306acbbc9d5cf3ded38afae7dcdfddb72a0adf39074bc4ff4cf69a9b5ee8050ae4b301256436b265f6aed4a33836c35be4", @typed={0x8, 0x83, @str='\x00'}, @generic="acf8264a66316d88959e491e440e1691a750dd96bb98aeca4a4f2f0c0116255b5ff6b920d63e35332e4234b30ed5ab94182e8f8b1301", @typed={0x44, 0x56, @binary="ff07a2791a429228288d038a638be1d7b6dd02aec132a519a68c0d010331a7d69bb11d8f5e1bbabd748dd82515fb98864d17d233a0ef912d0379333383"}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x400c1) 08:18:49 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000000)="842558825e0c087b930c81dd5bf8537fd70253f9acf0ea0b86e562666979", &(0x7f0000000040)=""/97}, 0x18) getpeername$inet6(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000240)=0x1c) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000400)=""/133) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) ioctl(r0, 0x40084149, &(0x7f0000001f64)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000001c0)={0xffffffff, 0xfffffffffffffffb, 0x8, 0x9ede, 0x85e2}) 08:18:49 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xa5, 0x4400) r1 = userfaultfd(0x80800) sendfile(r0, r1, 0x0, 0x200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)="2f70726f632f6e65742f000400000000000000000001000000000000000000", 0x2, 0x0) 08:18:49 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000000c0)={0x0, 0x0, 0x2, 0x0, 0x0, [], [], [], 0x0, 0x7ff}) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000200)={'ip_vti0\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) socket$pptp(0x18, 0x1, 0x2) readv(r2, &(0x7f0000000040), 0x0) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x2}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1e) 08:18:49 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000180)) unshare(0x40000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept4$inet6(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x80000) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000000000000000000000000000000000007fc43b418447b318e62ca87479696f88588af5", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) 08:18:49 executing program 5: r0 = memfd_create(&(0x7f00000000c0)="e3000000fb7945e6e3162ab7a309db8fc11273fd9d3a0d5ffaea55bc35ae0bf54e334119572aa8ea29df2591f26290316a41e9186016bf54b8259202a49e94330d5cad9a632164abb02c4714a1b106731aa627b7304799ac2c0d44447b28e6e166e4ef7ff84c07154d101e41212334a126ad247a7b75ae6b2971b7bca3af716ce547ba4bf49d04407820553c24dc8c5f7e38016922fd0e505a8311d60f6e39aeb737fa746e5d8849ac21df114ce914579e9d75c114d2566a3def8a42fd32f510863043828d41c46c249595fc9b", 0x0) fallocate(r0, 0x0, 0x0, 0xa) lseek(r0, 0x8000000000000, 0x3) 08:18:49 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) socket$packet(0x11, 0x0, 0x300) sendto$inet(r0, &(0x7f0000000200), 0x241, 0x20000003, &(0x7f00000000c0)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='tunl0\x00', 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2ca) sendmmsg$inet_sctp(r0, &(0x7f0000002c80)=[{&(0x7f00000015c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000002980)=[{&(0x7f0000001980)='|', 0x1}], 0x1, &(0x7f0000002b80)}], 0x1, 0x0) 08:18:49 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000140)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101001, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x40) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) write(r1, &(0x7f0000c34fff), 0xffffff0b) write(r1, &(0x7f0000000040), 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) [ 81.975620] IPVS: ftp: loaded support on port[0] = 21 [ 82.288666] IPVS: ftp: loaded support on port[0] = 21 08:18:50 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x1) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="1400010700000000000000000000000000"], 0x34}, 0x1}, 0x0) 08:18:50 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@loopback=0x7f000001, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2=0xe0000002, 0x0, 0x3c}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}}, 0x1ed) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f00000011c0)={&(0x7f0000000180)={0x1018, 0x16, 0x206, 0x70bd2a, 0x25dfdbfc, {0xe}, [@typed={0x1004, 0x38, @binary="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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x80}, 0x80) 08:18:50 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x16907e, 0x0) fallocate(r0, 0x20, 0x0, 0x1000) write(r0, &(0x7f0000000000)="b11be752b7e59e6a84e6bdde67ff7c4b94790884e828b3ce1c6baae89862a7c4d1222a9db6e307b664898bf0970021f393b9683c87d41237fbf1f6f012de7258db3140e194d5480359618c7a16b080fe7900a64efb8cec02e427e3e5b854cbaaf9d20241a4bd39df57673a40", 0x6c) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 08:18:50 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x120) sendfile(r0, r0, &(0x7f00000000c0)=0x3c, 0x8f) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x3, {0xffffffff, 0x0, 0x0, 0x1, 0x19, 0x800}, 0x8, 0x123}, 0xe) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r2, 0x1}, &(0x7f0000000280)=0x8) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0xaf, @multicast2=0xe0000002, 0x4e21, 0x1, 'rr\x00', 0xe, 0x9, 0x75}, 0x2c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x66, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e24, @loopback=0x7f000001}, {0x2, 0x4e21, @rand_addr}, 0x88, 0x8, 0xffffffffffffff80, 0x3, 0x4, 0x0, 0xce0c, 0x721e80}) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000100)=0x3, 0x4) 08:18:50 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) socket$packet(0x11, 0x0, 0x300) sendto$inet(r0, &(0x7f0000000200), 0x241, 0x20000003, &(0x7f00000000c0)={0x2, 0x1000004e23, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000004c0)='tunl0\x00', 0x10) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0x2ca) sendmmsg$inet_sctp(r0, &(0x7f0000002c80)=[{&(0x7f00000015c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000002980)=[{&(0x7f0000001980)='|', 0x1}], 0x1, &(0x7f0000002b80)}], 0x1, 0x0) 08:18:50 executing program 4: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000180), &(0x7f0000000040)=0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000140)=[0x8, 0x3ff]) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000500)) getsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/88) 08:18:50 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000180)) unshare(0x40000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept4$inet6(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x80000) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000000000000000000000000000000000007fc43b418447b318e62ca87479696f88588af5", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}, 0x1}, 0x0) [ 82.536890] IPVS: ftp: loaded support on port[0] = 21 [ 82.550841] IPVS: set_ctl: invalid protocol: 175 224.0.0.2:20001 [ 82.589989] IPVS: set_ctl: invalid protocol: 175 224.0.0.2:20001 08:18:50 executing program 0: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, 0x0, 0x0, r2) r4 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="7f", 0x1, r3) r5 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x34b, r0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80802, 0x0) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{}, {}]}) keyctl$dh_compute(0x17, &(0x7f0000000340)={r4, r5, r5}, &(0x7f0000000400)=""/132, 0x84, 0x0) [ 82.654827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 08:18:50 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x3b, @loopback=0x7f000001, 0x4e20, 0x3, 'dh\x00', 0x3f, 0x7fffffff, 0x63}, 0x2c) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="01cb00000000000000", 0xfffffd36) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) sendto$inet(r0, &(0x7f0000e76000)="18631ccc129cfe6da87b432660521bda2cfa08561e1daa4de85af3298223e83f37926ae556dd4a7a25f1a7b54208b3c1", 0x30, 0x0, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 08:18:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r1, 0x8, 0x70bd25, 0x25dfdbfb, {0x2}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast=0xffffffff}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) r2 = socket(0x10, 0x2, 0xc) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000280)={0x7}, 0x4) write(r2, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r2, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000300000010d10200cf", 0x1f) 08:18:50 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0x16907e, 0x0) fallocate(r0, 0x20, 0x0, 0x1000) write(r0, &(0x7f0000000000)="b11be752b7e59e6a84e6bdde67ff7c4b94790884e828b3ce1c6baae89862a7c4d1222a9db6e307b664898bf0970021f393b9683c87d41237fbf1f6f012de7258db3140e194d5480359618c7a16b080fe7900a64efb8cec02e427e3e5b854cbaaf9d20241a4bd39df57673a40", 0x6c) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) [ 82.725584] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 08:18:50 executing program 5: r0 = socket$nl_generic(0xa, 0x3, 0x10) r1 = request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0)='IPVS\x00', 0xfffffffffffffffa) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000f600000000000000ffdbdf251400000004001f00"], 0x18}, 0x1}, 0x80) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r1) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x80000000, 0x0, 0x25, 0x43}, 0x10) r2 = syz_open_dev$dspn(&(0x7f0000000400)='/dev/dsp#\x00', 0x7fff, 0x200800) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5820000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="005d4a00a605a0b0124e64eca2f4b04f6ccd8063fbf86ce0309f15dd6a46b15a0ca9ceacd9263fcda8e8e2786988a08375b6668360b9a7ac763c15e217d7c07c9e45cb61025f3bd903358ca208dfac242430f29b516c520a45d20df8d0513d9261921eb91d613eb21d1e71f156305831dfb97c45dec963aacecaf890694c517762", @ANYRES16=r3, @ANYBLOB="040029bd7000fddbdf250c0000000800060039a20000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000085) [ 82.803024] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20000 [ 82.852554] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 08:18:50 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000040)="295ee1311f1687d3671070") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) sendto$inet(r2, &(0x7f0000000700), 0x2d5, 0x20000800, &(0x7f0000000100)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) [ 82.918235] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 82.923991] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20000 08:18:51 executing program 0: r0 = socket(0x2, 0x7, 0x8000000) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) wait4(r2, &(0x7f0000000080), 0xe000000c, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") unshare(0x20000400) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x7, {{0xa, 0x4e24, 0x0, @loopback={0x0, 0x1}, 0x1}}}, 0x88) wait4(0x0, &(0x7f00000000c0), 0x80000002, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x400, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) [ 82.980372] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 08:18:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x2, 0x1, 0x8, 0x8, r1}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x15, &(0x7f0000013ff4)={@dev={0xac, 0x14}, @multicast1=0xe0000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x3e1b40640d26b8f9) r4 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x8) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000080)=0xa4a2) dup3(r2, r3, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f00000c0ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 83.048680] netlink: 'syz-executor4': attribute type 3 has an invalid length. [ 83.150850] Unknown ioctl 35090 08:18:51 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000140)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101001, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x40) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) write(r1, &(0x7f0000c34fff), 0xffffff0b) write(r1, &(0x7f0000000040), 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 08:18:51 executing program 5: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f00006f1ffc)=0xffffffff, 0x4) 08:18:51 executing program 6: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000df8fd9)="2600000022004701250007028980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x89, &(0x7f0000b4bffc)=0x3, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000640)=""/31, 0x1f}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1) 08:18:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x18000, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001140)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001240)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000001340)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001380)={{{@in=@loopback=0x7f000001, @in6=@loopback={0x0, 0x1}, 0x4e22, 0x88, 0x4e21, 0x1ff, 0x2, 0x20, 0xa0, 0x0, r1, r2}, {0xffffffffffff0000, 0x0, 0x5, 0x10000, 0x2674, 0x4, 0x9, 0x4}, {0x443, 0x5, 0x6183a9bd, 0x7ff}, 0x1, 0x6e6bbc, 0x3, 0x1, 0x2}, {{@in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x4d5, 0x33}, 0xa, @in6=@loopback={0x0, 0x1}, 0x3507, 0x3, 0x0, 0x6, 0x5, 0x80, 0xffff}}, 0xe8) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r3 = socket$inet(0x2, 0x1010001000a, 0x2) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000100)={'bridMe_slave_1\x00', 0x400}) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=""/4096, 0x1000) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x108066) 08:18:51 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x109200, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x8, 0x0, 0x3, 0x22}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000140)={r1, 0x4}) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000280)=[@in={0x2, 0x4e21, @multicast2=0xe0000002}, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @rand_addr=0x4}], 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000000000000bfa30000000000000703000020feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000012d640300000000006504040001ed0ebb1c04000000000000b7050000000000006203000000000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000001c0)={0xf48, {{0xa, 0x4e22, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x5}}}, 0x88) 08:18:51 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000080)="432bf81ffc1973a6ee0d1198b8a7fb3b2448eab7580661aeae25c383a357ced16def9023f73a6f79d089cc3269a33b23cd6d7f8bb71bb80505279baea54b02a4ca7461773ee72be9ee2346284131b5ca5641799db275db050a87c93eb53a2759d362e6ea4f09c015edf6f12e90250f412b1dc4d279f957512895efef3103531fd534c3786012ceaeca638ce12ea36bb4cfc3e54f5c85695b12397570a7c814ed8474fdc0614eddfa221ea997add08bc4332bde368dd5eb9bb0bbd772c659bbf823247735cba0951bfb78bade2ff6de2760be680a2d25", 0xd6) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r1) exit(0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="84aa8762", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf25010000000c000200080006000300000024000300080007004e200000080007004e24000008000300030000000800080006000000147949000100080002001d000000080004004e2000000800060003000000080006000700000008000500621b000014000100080001000a000000080009000f000000"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000300)={0x0, 'yam0\x00', 0x2}, 0x18) close(r0) 08:18:51 executing program 7: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000001c0)={0x13, 0xea, &(0x7f00000000c0)="f7bc93c7302d0ab3569e2e3a6d1aa33b9f128ba1c1afbc4dc1dd98322c0a74afb65d4718ddcb802fa9b749d7422e6f214c756e1c4224e3f4edef6066204adaa4526e5229b72fd65bfbfad58dbdd0b26367be27796e3c3d7365f6e3685027b286b007a69794e36afe11e806402f7c67f2d8a9822e435cb92ae9b7ac0247967a810750618155a6f1895e2d5b0e8e98fcb50bb594e21d88bc8e428ab9218235493b83508db855740c2ebf4f6fd248571362fde5433b5a2415e58f3241eb370a5a8c0985a3314668d1315f55ce1e0de9e23837ff49635c428ba0d38bd453a120f50a841a046c07d2e4719a52"}) socket$l2tp(0x18, 0x1, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x480, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0xff, 0x0, 0x800}, 0xc) 08:18:51 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, r1}, 0x14) sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1c) 08:18:51 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2ddb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_migrate\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f00000000c0)=0x4, 0x2) fchmod(r1, 0x0) 08:18:51 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000180000fa00000000000000002a0af28a20899bfe13432a8807782f752ff7a6007747a66598a9a686e05c485d2dd9e0e1194d16f31284f737b66138dd5f1c803e4b0000000000004655eac44fe326211f8821b77355add484736688e23bf3b88e8abb81e5d7fb463aa751c97800722a73c8e079f32bea78592492e889638742", @ANYPTR=&(0x7f0000002ac0)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0601000000000000"], 0x20) r1 = socket(0xa, 0x1, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f00000001c0)=""/233) 08:18:51 executing program 6: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000df8fd9)="2600000022004701250007028980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r0, 0x1, 0x89, &(0x7f0000b4bffc)=0x3, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000180)=@pppoe={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000640)=""/31, 0x1f}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1) 08:18:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = getpgid(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x100000000) listen(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 08:18:51 executing program 7: r0 = socket(0x1e, 0x2, 0x0) getsockopt(r0, 0xffff, 0x45, &(0x7f0000000000)=""/196, &(0x7f0000000100)=0xc4) ppoll(&(0x7f0000ac1fe8)=[{r0}], 0x1, &(0x7f0000579000)={0x77359400}, &(0x7f0000abf000), 0x8) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000304000), 0x4) 08:18:51 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x400000) mmap(&(0x7f00001c0000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 08:18:51 executing program 1: r0 = socket$inet6(0xa, 0x2000000000000002, 0x80) r1 = socket$inet6(0xa, 0x2, 0x0) close(r0) splice(r1, &(0x7f00000000c0), r0, &(0x7f0000000100), 0x2, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000000)) 08:18:52 executing program 2: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="033300000000000008001b00000000000a25c21ddb8fb19ad2ff6893f195215ffb23ffeb5aaf4b193f9dad27bbbdf7adc78ac901dcc956468fec37cb051226800abf5403191524091985529f7c0b847c2007f21ea4ad5ab3c7f8669c67a931e043351d0a1d8a30551a728dc268bf7ba623e52896039da8d1329547f6f6b43dad6b6115eb6130154d45481b7b1d17"], 0x2}, 0x1}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101000, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) 08:18:52 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000140)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101001, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x40) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) write(r1, &(0x7f0000c34fff), 0xffffff0b) write(r1, &(0x7f0000000040), 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 08:18:52 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x20000000000000a, 0x2, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x100, 0x90040) recvmmsg(r2, &(0x7f0000002f40)=[{{&(0x7f0000000300)=@nfc_llcp, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/38, 0x26}, {&(0x7f00000003c0)=""/52, 0x34}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000440)=""/232, 0xe8}, {&(0x7f0000000540)=""/83, 0x53}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000680)=""/49, 0x31}], 0x7, 0x0, 0x0, 0xffffffffffff05d0}, 0x218fc8c4}, {{&(0x7f0000000740)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000028c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/64, 0x40}, {&(0x7f0000001800)=""/55, 0x37}, {&(0x7f0000001840)}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000002880)=""/18, 0x12}], 0x6, &(0x7f0000002940)=""/30, 0x1e}, 0x4}, {{&(0x7f0000002980)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002a00)=""/30, 0x1e}, {&(0x7f0000002a40)=""/135, 0x87}, {&(0x7f0000002b00)=""/208, 0xd0}], 0x3, &(0x7f0000002c40)=""/251, 0xfb, 0x101}}, {{&(0x7f0000002d40)=@in6={0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002dc0)=""/94, 0x5e}, {&(0x7f0000002e40)=""/114, 0x72}], 0x2, &(0x7f0000002f00)=""/57, 0x39}, 0x100000001}], 0x4, 0x40000001, &(0x7f0000003040)) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000280)={r3, 0x2}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x9c}, {0x6}]}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x262a}, &(0x7f0000000180)=0x8) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r4}, 0x8) 08:18:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x490440, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x2, 0x2, 0x7b, 'queue0\x00', 0x10000}) write(r1, &(0x7f00000001c0)="1f0000000104fffff13b54c007110009f30501000b00024000000000010000", 0x1f) 08:18:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x4011, r1, 0x400000) mmap(&(0x7f00001c0000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 08:18:52 executing program 1: r0 = socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x240000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x17, "7f983061201dd68f75dde868a15fe742c1658e0f3cbb55"}, &(0x7f00000000c0)=0x1f) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x200}, &(0x7f0000000140)=0x8) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000200)=r3) [ 84.394194] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 84.443280] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 08:18:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$inet6(0xa, 0xa, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@dev}, &(0x7f0000000100)=0x14) socketpair$ax25(0x3, 0x0, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x4, 0x5}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240)=r3, 0x4) 08:18:52 executing program 2: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYBLOB="033300000000000008001b00000000000a25c21ddb8fb19ad2ff6893f195215ffb23ffeb5aaf4b193f9dad27bbbdf7adc78ac901dcc956468fec37cb051226800abf5403191524091985529f7c0b847c2007f21ea4ad5ab3c7f8669c67a931e043351d0a1d8a30551a728dc268bf7ba623e52896039da8d1329547f6f6b43dad6b6115eb6130154d45481b7b1d17"], 0x2}, 0x1}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101000, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f00000000c0)=""/4, 0x4) 08:18:52 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000004000)=0x1000, 0x4) clone(0x0, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000013000/0x3000)=nil, 0x3000}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0xa, &(0x7f0000000240)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]) setgroups(0x3, &(0x7f0000000280)=[r2, r3, r4]) 08:18:52 executing program 6: r0 = timerfd_create(0x0, 0x0) r1 = semget(0x3, 0x2, 0x400) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/109) readv(r0, &(0x7f0000000200)=[{&(0x7f0000952000)=""/219, 0xdb}], 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x2, 0x9, 0xfa59442, 0x100, 0x7, 0x6}, 0x8}, 0xa) timerfd_settime(r0, 0x0, &(0x7f0000dfa000)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f00003eb000)) 08:18:52 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000680)='mountstats\x00') r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0xa, 0x38bb17d42e8c2566, 0x7ffb8f77, 0x1, 'syz1\x00', 0x13}, 0x0, 0x40, 0x5, r2, 0x2, 0x1a56, 'syz1\x00', &(0x7f0000000080)=[']wlan1\x00', 'rfc4106(gcm(aes))\x00'], 0x19, [], [0x4, 0x34f, 0x200, 0x1f]}) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0xfde4) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="4cd4d394cb3c9f695ae515eff31cc50a53b945a51964f0df30e63409", 0x1c) sendfile(r3, r1, &(0x7f000025d000), 0x734) 08:18:52 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x490440, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x2, 0x2, 0x7b, 'queue0\x00', 0x10000}) write(r1, &(0x7f00000001c0)="1f0000000104fffff13b54c007110009f30501000b00024000000000010000", 0x1f) 08:18:52 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4002, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000001000000000000004f073d6d000080e3a3b94d75"], 0x20) r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) [ 84.778787] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 08:18:52 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x38) listen(r0, 0x90000007) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in=@multicast2}}, {{@in6}}}, &(0x7f0000000240)=0xe8) r1 = accept(r0, &(0x7f00000000c0)=@ethernet={0x0, @link_local}, &(0x7f0000000080)=0x80) shutdown(r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e23, 0x6, @empty, 0x80}, {0xa, 0x4e24, 0x5, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x1}, 0x4, [0x151780000000000, 0x4, 0x9, 0x5, 0x200, 0x100000000, 0x20, 0xedf8]}, 0x5c) 08:18:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x2000000, &(0x7f00000001c0)) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x4) chmod(&(0x7f0000000000)='./file0/bus\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="f5"], 0x1) 08:18:53 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) fanotify_init(0x0, 0x800) r1 = gettid() getpgid(r1) r2 = epoll_create(0x3) poll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x724) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) listen(r0, 0x8000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r3, 0x9}, &(0x7f00000001c0)=0x8) shutdown(r0, 0x2) creat(&(0x7f0000000200)='./file0\x00', 0x100) pause() r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sctp\x00') setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000040)=0x9, 0x8) 08:18:53 executing program 2: socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, 0x3, 0x8}, 0x90) 08:18:53 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000140)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x101001, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x40) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) write(r1, &(0x7f0000c34fff), 0xffffff0b) write(r1, &(0x7f0000000040), 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) 08:18:53 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$inet6(0xa, 0xa, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000040)={@dev}, &(0x7f0000000100)=0x14) socketpair$ax25(0x3, 0x0, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x4, 0x5}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240)=r3, 0x4) 08:18:53 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) r1 = request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)='-\x00', 0x0) keyctl$revoke(0x3, r1) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000040)={0x0, 0x1, 0x3ff, @random="7093dec4b713", 'tunl0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x1}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000efe000)={0x2, &(0x7f00000f5fe0)=[{0x60}, {0x6}]}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000180)=0x4, 0x4) 08:18:53 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000380)={0x2, &(0x7f0000000100)=""/179, &(0x7f0000000340)=[{0xa0000000000, 0xaf, 0x100000001, &(0x7f0000000200)=""/175}, {0x1, 0x55, 0x2, &(0x7f00000002c0)=""/85}]}) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x1, 0x0) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) 08:18:53 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000000000000000000000000f35be2273bfd958bb466560b1b9762bfdf615fa9b16458c8e049d7cff96feffb46912d869d1411534bfd695d0f2f7a11957a9620103412f198a2fd2a3c6f5478ac6365367640a63f28558788788c9bde3f061ed2bb3b23f3b21327020ba4115876592574e41ccf047ea43332c84f9d2ad0d92fa819208bda22750340f9e250657f1fe4ec32b405bbc0f7347b56cc3cb473477918c0ebb543af5d933461e703b3a024bcc0c76b2eacc99c39c8cac0a00afa666fbca6bba127"], &(0x7f0000000100)=0xe) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) getgroups(0x134335ae668aff40, &(0x7f0000000000)=[r1, 0xffffffffffffffff, 0x0]) socket(0x3, 0x2, 0x400) getresgid(&(0x7f0000000040), &(0x7f0000000140), &(0x7f00000001c0)=0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000500)=0x0, &(0x7f0000000540), &(0x7f00000004c0)) setgroups(0x4, &(0x7f0000000380)=[r2, r3, r4, r5]) 08:18:53 executing program 4: clock_gettime(0x4, &(0x7f0000000140)) 08:18:53 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001}, 0xc) 08:18:53 executing program 2: unshare(0x24020400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x5}) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r2, 0x80000, r3}) 08:18:53 executing program 6: r0 = timerfd_create(0x0, 0x0) r1 = semget(0x3, 0x2, 0x400) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000080)=""/109) readv(r0, &(0x7f0000000200)=[{&(0x7f0000952000)=""/219, 0xdb}], 0x1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x2, 0x9, 0xfa59442, 0x100, 0x7, 0x6}, 0x8}, 0xa) timerfd_settime(r0, 0x0, &(0x7f0000dfa000)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f00003eb000)) 08:18:53 executing program 4: r0 = epoll_create1(0x80000) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7ffffffffffffffd, 0x2}) bind$netrom(0xffffffffffffffff, &(0x7f00000000c0)=@ax25={0x3, {"4bedc6c2979fd2"}}, 0xb) 08:18:53 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x3ff) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x40000) bind$inet6(r0, &(0x7f0000186fe4)={0xa, 0x4e21}, 0x1c) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)="fb8fd078d17f6491183cee96579236808f81bbed38b8be99c2e6f5a71184ae6c0916928d6a38a709302c60e38c8c3b", 0x2f}, {&(0x7f00000001c0)="7b95b6e57d0ee19023f00ee4cabae6b61c43d46013f34b48d17aa6b3de79667878e0d9ce864b1a3bebc6971dc118332a9de50e3ceabd8746a643ae261a6b77e25ce039198dbd31b971fc8580bcef42a7536ff0cbb35cff7f1597cd20e0fd30070c57cb793ab99ab360677c703bcc98bb975fa0d2873cc53f7a9603057285107e7bfb610e6231092d9516a919efe5909bf65bb25b8fa65ad89db24c42a88ec713345bf22016ace4dc92de9170fd14f921e271fbd404a7b436a0e8f512819f7462ece9ff", 0xc3}, {&(0x7f00000002c0)="d4b0774d64afd5e95b9eb03f7b70eab0211a7a260f853d047eca44e21ea36c2dab2b64d4fd827e0ac14f45f2a6593e8053d3cc30282ce6d1c87b7a4e32707063ef5500a483e5abb25a1808a1de019eb4a851242a18338074a40270868ef605dcf60e4763d822a52fe19abd4c2c77189796a23e77b317c9c362f3cd", 0x7b}], 0x3) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000dc0)={@dev, 0x0}, &(0x7f0000000e00)=0x14) recvmsg$kcm(r1, &(0x7f0000008b40)={&(0x7f0000008980)=@ll={0x0, 0x0, 0x0}, 0x80, &(0x7f0000008a40)=[{&(0x7f0000008a00)=""/64, 0x40}], 0x1, &(0x7f0000008a80)=""/191, 0xbf, 0x8}, 0x60) [ 85.706228] Not allocated shadow for addr ffff8801d34c4000 (page ffffea000af3c980) [ 85.713964] Attempted to access 4022 bytes [ 85.718221] ------------[ cut here ]------------ [ 85.722967] kernel BUG at mm/kmsan/kmsan.c:1378! [ 85.727726] invalid opcode: 0000 [#1] SMP PTI [ 85.732211] Dumping ftrace buffer: [ 85.735740] (ftrace buffer empty) [ 85.739441] Modules linked in: [ 85.742635] CPU: 1 PID: 4462 Comm: sshd Not tainted 4.17.0+ #6 [ 85.748597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.757965] RIP: 0010:kmsan_get_shadow_address+0x1ce/0x1f0 [ 85.763581] RSP: 0018:ffff8801a0d5e6f0 EFLAGS: 00010082 [ 85.768940] RAX: 000000000000001e RBX: 0000000000000740 RCX: 0000000000000000 [ 85.776206] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 85.783468] RBP: ffff8801a0d5e708 R08: 0000000000000000 R09: 0000000000000001 [ 85.790729] R10: 0000000000000000 R11: ffffffff86575770 R12: ffff8801d34c4000 [ 85.798000] R13: 0000000000000fb6 R14: 0000000000000001 R15: 0000000000000fb6 [ 85.805269] FS: 00007f147b1c37c0(0000) GS:ffff88021fd00000(0000) knlGS:0000000000000000 [ 85.813489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.819363] CR2: 00005605a2d16000 CR3: 00000001c0398000 CR4: 00000000001406e0 [ 85.826635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.833906] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.841167] Call Trace: [ 85.843847] kmsan_internal_unpoison_shadow+0x5c/0xe0 [ 85.849047] kmsan_unpoison_shadow+0x66/0xb0 [ 85.853460] virtqueue_get_buf_ctx+0x73f/0xa20 [ 85.858057] virtqueue_get_buf+0x72/0x90 [ 85.862115] start_xmit+0x293/0x29c0 [ 85.865823] ? packet_rcv+0x2210/0x2210 [ 85.869803] ? virtnet_close+0x2c0/0x2c0 [ 85.873872] dev_hard_start_xmit+0x5f6/0xc80 [ 85.878288] sch_direct_xmit+0x578/0x8f0 [ 85.882350] __qdisc_run+0x1822/0x3730 [ 85.886250] __dev_queue_xmit+0x2069/0x3540 [ 85.890586] dev_queue_xmit+0x4b/0x60 [ 85.894381] ip_finish_output2+0x12a8/0x1480 [ 85.898789] ip_finish_output+0xcbc/0x1000 [ 85.903027] ip_output+0x505/0x5d0 [ 85.906566] ? ip_mc_finish_output+0x3b0/0x3b0 [ 85.911149] ? ip_finish_output+0x1000/0x1000 [ 85.915644] ip_queue_xmit+0x1b0f/0x1d00 [ 85.919705] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 85.925153] ? __skb_clone+0x6ec/0x990 [ 85.929049] ? ip_output+0x5d0/0x5d0 [ 85.932764] tcp_transmit_skb+0x3db5/0x5350 [ 85.937099] tcp_write_xmit+0x2d81/0xb200 [ 85.942648] ? memcg_kmem_put_cache+0x40/0x290 [ 85.947249] __tcp_push_pending_frames+0x124/0x400 [ 85.952178] tcp_push+0x803/0x8f0 [ 85.955636] tcp_sendmsg_locked+0x4eb1/0x6610 [ 85.960151] tcp_sendmsg+0xb2/0x100 [ 85.963781] ? tcp_sendmsg_locked+0x6610/0x6610 [ 85.968450] inet_sendmsg+0x3fc/0x760 [ 85.972250] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 85.977623] ? inet_getname+0x4a0/0x4a0 [ 85.981596] sock_write_iter+0x3bc/0x470 [ 85.985669] ? sock_read_iter+0x480/0x480 [ 85.989819] __vfs_write+0x808/0x9f0 [ 85.993542] vfs_write+0x467/0x8c0 [ 85.997090] __x64_sys_write+0x1bf/0x3e0 [ 86.001164] ? ksys_write+0x360/0x360 [ 86.004986] do_syscall_64+0x15b/0x230 [ 86.008902] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 86.014113] RIP: 0033:0x7f147955e370 [ 86.017816] RSP: 002b:00007ffe712fc3d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.025523] RAX: ffffffffffffffda RBX: 0000000000004028 RCX: 00007f147955e370 [ 86.032831] RDX: 0000000000004028 RSI: 00005605a2d12200 RDI: 0000000000000003 [ 86.040105] RBP: 00005605a2d12200 R08: 0000000000000001 R09: 3564306639666131 [ 86.047374] R10: 6663613266613061 R11: 0000000000000246 R12: 00007ffe712fc43c [ 86.054642] R13: 00005605a1fbbfb4 R14: 0000000000000028 R15: 00005605a1fbdca0 [ 86.061910] Code: 75 29 48 c7 c7 59 38 97 8a 31 c0 e8 fd 4c 80 ff 80 3c 25 f8 93 53 8b 00 75 11 48 c7 c7 89 38 97 8a 31 c0 4c 89 fe e8 e2 4c 80 ff <0f> 0b eb fe 48 3d ff ff ff 1f 0f 87 a2 fe ff ff 48 8b 1c 25 10 [ 86.081099] RIP: kmsan_get_shadow_address+0x1ce/0x1f0 RSP: ffff8801a0d5e6f0 [ 86.088197] ---[ end trace 4f1184b6ddfa0d2f ]--- [ 86.092948] Kernel panic - not syncing: Fatal exception in interrupt [ 86.099862] Dumping ftrace buffer: [ 86.103398] (ftrace buffer empty) [ 86.107085] Kernel Offset: disabled [ 86.110685] Rebooting in 86400 seconds..