[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   57.215854] audit: type=1800 audit(1540552326.273:25): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   57.234943] audit: type=1800 audit(1540552326.283:26): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   57.254315] audit: type=1800 audit(1540552326.303:27): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.10.34' (ECDSA) to the list of known hosts.
2018/10/26 11:12:19 fuzzer started
2018/10/26 11:12:24 dialing manager at 10.128.0.26:35127
2018/10/26 11:12:24 syscalls: 1
2018/10/26 11:12:24 code coverage: enabled
2018/10/26 11:12:24 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2018/10/26 11:12:24 setuid sandbox: enabled
2018/10/26 11:12:24 namespace sandbox: enabled
2018/10/26 11:12:24 Android sandbox: /sys/fs/selinux/policy does not exist
2018/10/26 11:12:24 fault injection: enabled
2018/10/26 11:12:24 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/10/26 11:12:24 net packed injection: enabled
2018/10/26 11:12:24 net device setup: enabled
11:15:10 executing program 0:

syzkaller login: [  241.977856] IPVS: ftp: loaded support on port[0] = 21
[  244.318514] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.325264] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.333847] device bridge_slave_0 entered promiscuous mode
[  244.470954] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.477735] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.486148] device bridge_slave_1 entered promiscuous mode
[  244.623987] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  244.760855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
11:15:14 executing program 1:

[  245.185848] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  245.336735] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  245.814575] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  245.821749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  245.969197] IPVS: ftp: loaded support on port[0] = 21
[  246.380560] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  246.388956] team0: Port device team_slave_0 added
[  246.616742] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  246.624907] team0: Port device team_slave_1 added
[  246.855698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  246.862828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  246.871822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  247.196452] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  247.203659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  247.212645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  247.418888] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  247.426643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  247.435661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  247.633736] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  247.641370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  247.650531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  248.563449] ip (6416) used greatest stack depth: 53264 bytes left
[  249.568868] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.575515] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.584029] device bridge_slave_0 entered promiscuous mode
[  249.894780] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.901457] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.909986] device bridge_slave_1 entered promiscuous mode
[  250.125049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  250.150729] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.157324] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.164381] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.170839] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.179850] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  250.324070] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  250.782077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  250.894609] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  251.117353] bond0: Enslaving bond_slave_1 as an active interface with an up link
11:15:20 executing program 2:

[  251.316295] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  251.323559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  251.627413] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  251.634656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  252.079194] IPVS: ftp: loaded support on port[0] = 21
[  252.581707] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  252.589804] team0: Port device team_slave_0 added
[  252.931939] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  252.939971] team0: Port device team_slave_1 added
[  253.246704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  253.253940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  253.263144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  253.569164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  253.576443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  253.585407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  253.853093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  253.860666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  253.869834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  254.179220] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  254.187273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  254.196092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  256.792739] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.799213] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.807946] device bridge_slave_0 entered promiscuous mode
[  257.093702] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.100190] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.108795] device bridge_slave_1 entered promiscuous mode
[  257.375318] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  257.396762] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.403294] bridge0: port 2(bridge_slave_1) entered forwarding state
[  257.410209] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.416785] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.425595] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  257.700884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  258.332193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  258.565659] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  258.820099] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  259.145382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  259.153163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  259.340923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  259.348216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
11:15:28 executing program 3:

[  260.253343] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  260.261389] team0: Port device team_slave_0 added
[  260.668141] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  260.676602] team0: Port device team_slave_1 added
[  261.001211] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  261.008363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  261.017251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  261.108494] IPVS: ftp: loaded support on port[0] = 21
[  261.388278] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  261.395522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  261.404619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  261.677265] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.755892] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  261.763588] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  261.772571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  262.137663] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  262.145403] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  262.154349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  263.238351] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  264.751275] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  264.757779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  264.765927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  266.093650] 8021q: adding VLAN 0 to HW filter on device team0
[  266.132140] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.138609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  266.145616] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.152128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  266.160543] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  266.811828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  267.157337] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.164004] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.172568] device bridge_slave_0 entered promiscuous mode
[  267.515004] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.521496] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.530117] device bridge_slave_1 entered promiscuous mode
[  267.899234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  268.202209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  269.278001] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  269.657670] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  269.978967] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  269.986162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
11:15:39 executing program 4:

[  270.395835] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  270.403038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  271.488774] IPVS: ftp: loaded support on port[0] = 21
[  271.667108] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  271.675324] team0: Port device team_slave_0 added
[  271.735125] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.087682] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  272.095933] team0: Port device team_slave_1 added
[  272.521280] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  272.528461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  272.537465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  272.993572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  273.000728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  273.009484] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  273.447755] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  273.468776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  273.476433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  273.485577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  273.878197] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  273.885882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  273.895050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  274.976138] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  274.982663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  274.990685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
11:15:44 executing program 0:

11:15:44 executing program 0:
futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x13000002)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80, 0x0)
ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000100)=""/72)

11:15:45 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x57f, 0x4)
fcntl$setstatus(r0, 0x4, 0x800000400)
recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0x451, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/36, 0x1f}, 0x2000)

11:15:45 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x100, 0x8, 0x20000000000001, 0x1, 0x0}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20)
r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000010c0)={r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2}, 0x20)
symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00')

[  276.820854] 8021q: adding VLAN 0 to HW filter on device team0
11:15:46 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000040)={{0x2, 0x4e24, @rand_addr}, {0x1}, 0x4a, {0x2, 0x4e23, @local}, 'eql\x00'})
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x5, 0x4)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ee3f17e20acc5c247b64d32a212521d23ff28e4f194708267f951aedd560d7f280800c", 0x23)

11:15:46 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6(0xa, 0xffffffffe, 0xfffffc)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000240)="d4635dc5b28fa4c216568de0b288c7c9", 0x10)
llistxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=""/182, 0xb6)
llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/250, 0xfa)
connect$inet6(r1, &(0x7f0000001300)={0xa, 0x4e27, 0x0, @mcast2, 0x5}, 0x1c)
r2 = dup2(r0, r1)
ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000080))
sendmmsg(r1, &(0x7f0000000b40)=[{{&(0x7f00000003c0)=@nl=@unspec, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="054e9d4fea93011800bea32807292b8998000000000a0037156605000000000000a37fb96b000000000000000000"], 0xc}}], 0x1, 0x0)

11:15:47 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x2, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x5000)

11:15:47 executing program 0:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000380)={0x5, 0x4, 0x6, 0x4, 0xfcf2, 0x4, 0x0, 0x4, 0xffff, 0x5, 0x4, 0xc80})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000300)={0x7, 0x3, 0x20, 0x7, 0x7f, 0x200})
r1 = socket$l2tp(0x18, 0x1, 0x1)
ioctl(r1, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070")
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = memfd_create(&(0x7f0000000100)='#em1#+\x00', 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000040)={<r4=>0x0, 0x7e, "2975259f5cd255b415aa67453f561d459b0b6e79b74070a69a86da8e53fb2b7dcc202c2f9b83bd7ab08d8d1e9a287332646a94da143c85bead33296d33df4913a7b5d8417f53ddcc019dfccb94f760ee742cd6c65e21d1615c23df9a4136b9d35042c91e6caac3dc1433af2e016217c4a7721a7cad9ee33ac69e4f44a514"}, &(0x7f00000001c0)=0x86)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000200)={r4, 0x5}, &(0x7f0000000240)=0x8)
fcntl$addseals(r3, 0x409, 0x2000003)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)

[  278.489437] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.496093] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.504930] device bridge_slave_0 entered promiscuous mode
[  278.953033] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.959531] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.968171] device bridge_slave_1 entered promiscuous mode
[  279.156533] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.163123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.170018] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.176621] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.185105] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  279.314039] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  279.522655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  279.716687] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  280.672491] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  281.039189] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  281.399282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  281.406485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  281.780114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  281.787286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  282.664241] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.933361] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  282.941491] team0: Port device team_slave_0 added
[  283.166807] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  283.175040] team0: Port device team_slave_1 added
[  283.399755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  283.407938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  283.416745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  283.675593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  283.682969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  283.691770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  283.710043] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  284.076312] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  284.084047] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  284.092999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  284.289410] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  284.297149] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  284.306065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  284.854802] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  284.861259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  284.869350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
11:15:54 executing program 1:
r0 = socket$inet6(0xa, 0x80003, 0x800000000000006)
ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="fdc2"])
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  285.426885] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details.
[  285.992892] 8021q: adding VLAN 0 to HW filter on device team0
[  287.365758] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.372383] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.379316] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.385899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.394338] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  287.400963] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  290.667907] 8021q: adding VLAN 0 to HW filter on device bond0
11:16:00 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x5, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}}, 0x0)

[  291.439399] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  292.079372] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  292.085864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  292.093712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  292.629667] 8021q: adding VLAN 0 to HW filter on device team0
[  294.686709] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.221344] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  295.756852] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  295.763418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  295.771194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
11:16:05 executing program 3:
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000001c0)={0x4, 0x0, 0x80000001, 0x10001, 'syz1\x00'})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$amidi(&(0x7f00000003c0)='/dev/amidi#\x00', 0x10000, 0x8000)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc00c}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)={0x138, r1, 0x201, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xd}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10001}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x20000000000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000700)='team\x00')
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000740)={0x0, @empty, @dev}, &(0x7f0000002a40)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002a80)={{{@in6=@loopback, @in6=@mcast1}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000002b80)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003f80)={{{@in=@local, @in=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000004080)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004100)={{{@in, @in6=@dev}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f0000004200)=0xe8)
getpeername(r0, &(0x7f0000004240)=@can, &(0x7f00000042c0)=0x80)
getsockname$packet(r0, &(0x7f0000004340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000004380)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000043c0)={'vcan0\x00'})
accept4$packet(r0, &(0x7f0000004600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004640)=0x14, 0x80800)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004800)={'team0\x00'})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004840)={{{@in=@broadcast, @in6=@local}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000004940)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004980)={{{@in=@loopback, @in=@dev}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@dev}}, &(0x7f0000004a80)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004ac0)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000004bc0)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004c00)={{{@in6=@mcast1}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000004d00)=0xe8)
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000004d40)={@multicast1, @rand_addr}, &(0x7f0000004d80)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000004dc0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004ec0)=0xe8)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000005440)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x90008}, 0xc, &(0x7f0000005400)={&(0x7f0000004f00)={0x94, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x78, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x101}}}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xffffffff00000001, 0x0)
syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000300))
socket$l2tp(0x18, 0x1, 0x1)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff})
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet6_dccp_buf(r5, 0x21, 0xf, &(0x7f0000001580)=""/4096, &(0x7f0000000480)=0x1000)
setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f0000000380)={0x8, 0x1, 0x2, 0x80000001, 'syz0\x00', 0xfded})
connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002800)={0x12, 0x100000001, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, 0x2c)
ioctl$sock_SIOCGIFBR(r8, 0x8940, &(0x7f0000002840)=@add_del={0x2, &(0x7f00000027c0)='vlan0\x00', 0x8e8})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r9, &(0x7f0000000000), &(0x7f0000000140)}, 0x20)
dup2(r7, r6)
recvmmsg(r8, &(0x7f0000002680)=[{{&(0x7f00000005c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/225, 0xe1}, {&(0x7f00000009c0)=""/65, 0x41}, {&(0x7f0000000a40)=""/3, 0x3}], 0x3}, 0x401}, {{&(0x7f0000000ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/126, 0x7e}, {&(0x7f0000000bc0)=""/170, 0xaa}, {&(0x7f0000000c80)=""/81, 0x51}, {&(0x7f0000000d00)=""/207, 0xcf}, {&(0x7f0000000e00)=""/53, 0x35}, {&(0x7f0000000e40)=""/66, 0x42}], 0x6, &(0x7f0000000f40)=""/17, 0x11, 0x800}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f80)=""/14, 0xe}, {&(0x7f0000000fc0)=""/93, 0x5d}, {&(0x7f0000001040)=""/30, 0x1e}], 0x3, &(0x7f00000010c0)=""/87, 0x57, 0x7fff}, 0x1}, {{&(0x7f0000001140)=@hci={0x1f, <r10=>0x0}, 0x80, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/47, 0x2f}, {&(0x7f0000001200)=""/249, 0xf9}, {&(0x7f0000001300)=""/179, 0xb3}], 0x3, &(0x7f0000002580)=""/251, 0xfb, 0x7fffffff}, 0x6}], 0x4, 0x20, &(0x7f0000001400)={0x77359400})
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000002780)={@local, 0x4e, r10})
openat$random(0xffffffffffffff9c, &(0x7f0000000680)='/dev/urandom\x00', 0x480, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r8, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0)
recvmmsg(r8, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001440)=""/179, 0xb3}}], 0x2b, 0x40000042, &(0x7f0000001540)={0x77359400})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  296.161563] hrtimer: interrupt took 57234 ns
[  296.279028] 8021q: adding VLAN 0 to HW filter on device team0
11:16:07 executing program 4:
syz_open_procfs(0x0, &(0x7f0000001400)='net/psched\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000001200)='net/ip6_mr_cache\x00')

11:16:07 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='mounts\x00')
sendfile(r0, r2, &(0x7f0000000040), 0x9ce7)

11:16:07 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40030000000000], [], @rand_addr}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x70}}, 0x0)

11:16:07 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000")
ioctl$FS_IOC_FSGETXATTR(r0, 0x6612, &(0x7f0000000040))

11:16:07 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140))
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x800)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x40400, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000040))
open_by_handle_at(r0, &(0x7f0000000180)={0xcf, 0x8264, "cc2a81c38ab74de76810dd355998c50ac8258afe7e81a043c7c726ee8d15cce7e1985a4690d3658454ca50a6e2c7f52cc1607bd14bf293550a166108c1b30f860477990e57cfbad9ebc3f364dd38ce8343f315b9edf128d97a7f99ef88382d621b59a00d5759807e0fb66d3cf42210b1b01af14580c85dd86e298f4b33c694222826d648e7ff0d213d66b18ec3da37c5d1a69f80f24cae3e8598de5013955d61eda3b8415f96d3bb099df3661a31054e6374166eaf61720347d45d1de66fa0d217a4077746f0f4"}, 0x2000)

11:16:07 executing program 5:
timer_create(0x4, 0xfffffffffffffffd, &(0x7f0000000000)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000000080))
r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x8, 0x321002)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)=0x7f)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
getdents64(r1, &(0x7f00000001c0)=""/4096, 0x1000)
getrandom(&(0x7f00000011c0)=""/39, 0x27, 0x2)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000012c0)={'bcsf0\x00', &(0x7f0000001200)=@ethtool_rx_ntuple={0x35, {0x3, @esp_ip4_spec={@rand_addr, @broadcast, 0xfff, 0x8}, @esp_ip4_spec={@rand_addr=0x1, @multicast1, 0x7}, 0x7, 0x7fffffff, 0x80, 0x829d, 0xffffffffffffffff}}})
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001380)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000001480)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000014c0)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000015c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001600)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000001700)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001740)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000001840)=0xe8)
lstat(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001940)={0x0, 0x0, <r7=>0x0}, &(0x7f0000001980)=0xc)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000019c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000001a00)=0xc)
getresgid(&(0x7f0000001a40), &(0x7f0000001a80), &(0x7f0000001ac0)=<r9=>0x0)
getresgid(&(0x7f0000001b00), &(0x7f0000001b40), &(0x7f0000001b80)=<r10=>0x0)
fstat(r1, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001c40)={0x0, 0x0, <r12=>0x0}, &(0x7f0000001c80)=0xc)
getgroups(0x3, &(0x7f0000001cc0)=[0xffffffffffffffff, 0xffffffffffffffff, <r13=>0xffffffffffffffff])
getgroups(0x2, &(0x7f0000001d00)=[<r14=>0xffffffffffffffff, 0xee00])
getgroups(0x6, &(0x7f0000001d40)=[0xee00, 0xee01, 0x0, 0x0, 0x0, <r15=>0xffffffffffffffff])
setxattr$system_posix_acl(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)='system.posix_acl_access\x00', &(0x7f0000001d80)={{}, {0x1, 0x1}, [{0x2, 0x6, r2}, {0x2, 0x2, r3}, {0x2, 0x4, r4}, {0x2, 0x2, r5}], {0x4, 0x4}, [{0x8, 0x1, r6}, {0x8, 0x4, r7}, {0x8, 0x0, r8}, {0x8, 0x4, r9}, {0x8, 0x4, r10}, {0x8, 0x4, r11}, {0x8, 0x7, r12}, {0x8, 0x1, r13}, {0x8, 0x2, r14}, {0x8, 0x1, r15}], {0x10, 0x1}}, 0x94, 0x2)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000001e40)="3c4e0d1fec346ef0683ea72e8c149f19", 0x10)
r16 = socket$nl_xfrm(0x10, 0x3, 0x6)
r17 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000002040)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f00)={0xe8, r17, 0x204, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x36}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x35}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000011}, 0x40001)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000002080)=""/123)
getsockopt$inet_sctp_SCTP_INITMSG(r16, 0x84, 0x2, &(0x7f0000002100), &(0x7f0000002140)=0x8)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000002180), &(0x7f00000021c0)=0x4)

11:16:07 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x10d)

11:16:07 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100))
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000012fc7)})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r3 = msgget(0xffffffffffffffff, 0x100)
msgrcv(r3, &(0x7f0000000380)={0x0, ""/134}, 0x8e, 0x2, 0x800)
r4 = fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0xffffffffffffffff}, r4, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={@ipv4, @empty, @mcast2, 0x0, 0x7f, 0x2, 0x0, 0x7, 0x200})
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
ioctl$VT_WAITACTIVE(r2, 0x5607)
dup(0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="643e67660f3a61ca9bbaf80c66b8bc5d158866efbafc0c66ed66b9800000c00f326635001000000f30f40f38c94bf80f380b5775260f01ca0f21360f180ad810", 0x40}], 0x1, 0x0, &(0x7f0000000280), 0x10db)
accept4(r2, &(0x7f0000000440)=@rc, &(0x7f0000000140)=0x80, 0x0)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000000000000f9aa912200e1"])
ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x7)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x8)

11:16:07 executing program 4:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340))
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1b)

11:16:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8000000000000006, 0x31, 0xffffffffffffffff, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x16)
futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in, @in=@loopback}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x1000000004e23, 0x4eed, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=0x1)
listen(r0, 0xfffffffffffffe14)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x3, 0x0, 0x2000000000000, 0x6}, 0x14)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000001c0))
sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0xffffffff00000007, &(0x7f000005ffe4)={0xa, 0x4e23, 0xe803000000000000, @loopback}, 0x1c)

[  298.956970] ptrace attach of "/root/syz-executor4"[7673] was attempted by "/root/syz-executor4"[7675]
11:16:08 executing program 4:
mkdir(&(0x7f00000013c0)='./file0/\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x32}, 0x2c)
mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000180)='./file0/\x00', &(0x7f00000001c0)="70726f63009b6a2c823f92ab1d5b2f50155c21b4ddadd9060079215becc16f47afb3aec6b4d757eac0a6344afd1ce9d561075c31c5142aa5bf61c3ae458640c0ec61baa4c007684c868e0be68153c4adca5e45190c3a26a50c41d793a4a983e9", 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0/', 0x0)

11:16:08 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000020000006a0a00fe02000000850000000a000000b7000000000000009500040000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0xdf, &(0x7f0000000380)="22bd6ccccbe5dd335c8e894f67b3", &(0x7f0000000480)=""/223}, 0x28)

11:16:08 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0xe00)

11:16:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100))
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000012fc7)})
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r4 = msgget(0x0, 0x100)
msgrcv(r4, &(0x7f0000000380)={0x0, ""/134}, 0x8e, 0x2, 0x800)
r5 = fcntl$getown(0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0xffffffffffffffff}, r5, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000))
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={@ipv4, @empty, @mcast2, 0x0, 0x7f, 0x2, 0x0, 0x7, 0x200})
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
ioctl$VT_WAITACTIVE(r3, 0x5607)
r6 = dup(0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="643e67660f3a61ca9bbaf80c66b8bc5d158866efbafc0c66ed66b9800000c00f326635001000000f30f40f38c94bf80f380b5775260f01ca0f21360f180ad810", 0x40}], 0x1, 0x0, &(0x7f0000000280), 0x10db)
accept4(r3, &(0x7f0000000440)=@rc, &(0x7f0000000140)=0x80, 0x0)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000000000000f9aa912200e1"])
ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x7)
ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x8)

11:16:10 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0201000313000000040000000000000005000600000000000a0000000000000000000500000000000000ffff00000000000000000000000005000900800000000a0000000000000000000000000000000000000000000000000000000000000002000100000000000000000b0000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x98}}, 0x0)

11:16:10 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000080)='./file0\x00')

11:16:10 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x81, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x5, 0x0, 0x3f, 0x7, 0x0, 0x7f, 0x7, 0x1, 0x54e, 0x2, 0x5})
socket$inet_udp(0x2, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x400, 0x0)
clone(0x2302001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x0, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r2, 0x2007fff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

[  301.946639] IPVS: ftp: loaded support on port[0] = 21
[  306.047430] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.053891] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.061782] device bridge_slave_0 entered promiscuous mode
[  306.145588] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.152166] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.159637] device bridge_slave_1 entered promiscuous mode
[  306.235891] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  306.314253] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  306.553760] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  306.634825] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  306.786232] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  306.793324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  307.029626] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  307.037351] team0: Port device team_slave_0 added
[  307.112815] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  307.120367] team0: Port device team_slave_1 added
[  307.196763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  307.276492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  307.354216] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  307.361778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  307.370575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  307.443797] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  307.451085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  307.459960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  308.312686] bridge0: port 2(bridge_slave_1) entered blocking state
[  308.319149] bridge0: port 2(bridge_slave_1) entered forwarding state
[  308.326106] bridge0: port 1(bridge_slave_0) entered blocking state
[  308.332615] bridge0: port 1(bridge_slave_0) entered forwarding state
[  308.340244] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  308.742097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  311.520142] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.815775] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  312.105784] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  312.112103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  312.119763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  312.408862] 8021q: adding VLAN 0 to HW filter on device team0
11:16:23 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000200))
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000))
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f00000000c0))
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000100))
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000280)=ANY=[], @ANYPTR=&(0x7f0000000640)=ANY=[]])

11:16:23 executing program 0:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x100000001, 0x4, 0x3}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20)
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[]}}, 0x0)
ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000040)={0x2, 0x0, 0x6392f08f})
recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001440)=""/179, 0xb3}}], 0x2b, 0x40000042, &(0x7f0000001540)={0x77359400})
close(r1)

11:16:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000000a40)={&(0x7f0000000300)={0x2, 0x0, @dev, [0xa805000000000000]}, 0x10, &(0x7f0000000480), 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x84, 0x8, {{}, &(0x7f0000000540), &(0x7f0000000580)}}], 0x58}, 0x0)

11:16:23 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x80, 0x8, [0x5, 0x0]})

11:16:23 executing program 3:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = inotify_init()
r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x10000000)
inotify_rm_watch(r0, r1)
rmdir(&(0x7f0000000080)='./file0\x00')

11:16:23 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x2302001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x0, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={'ip6gre0\x00', {0x2, 0x0, @multicast1}})
ftruncate(r2, 0x2007fff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe)

11:16:23 executing program 2:
socket$l2tp(0x18, 0x1, 0x1)
clock_gettime(0x0, &(0x7f0000000d00))
r0 = getpid()
socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0))
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x7})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r1, 0x40000000000201)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x0, 0x5, 0x52, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f, 0xec0e, 0x0, 0x9})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040))
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xfe, &(0x7f0000000140)="cccbba0e952fad01e094bc517fa4739cc32d042c8268bf0909bc72a64fdd3d5a7914492660707a23300efb660d23b4bac3be560e2abef0120384e03ca557448ec9a7ce3d77c76665dbd56686e563ec574ea67b8a76ec21d14a6b793ac5ff7fad6dbb9f7f0dc3fbe3c3b302615e4ae1e12ebe2ba441c979452136fcfa58750464d4b0", 0x82)

11:16:23 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0xa, 0x0, 0xfff, &(0x7f00000000c0))
accept$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c)
ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d5c6070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10)
recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf6, &(0x7f0000000500)=[{&(0x7f0000003ac0)=""/4096, 0xfffffe44}], 0x1, &(0x7f0000000200)=""/20, 0xd2}, 0x100)

11:16:23 executing program 3:
socket$l2tp(0x18, 0x1, 0x1)
clock_gettime(0x0, &(0x7f0000000d00))
socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000180)={0x0, 0x4d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r0, 0x40000000000201)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f, 0xec0e})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040))
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)="cccbba0e952fad01e094bc517fa4739cc32d042c8268bf0909bc72a64fdd3d5a7914492660707a23300efb660d23b4bac3be560e2abef0120384e03ca557448ec9a7ce3d77c76665dbd56686e563ec574ea67b8a76ec21d14a6b793ac5ff7fad6dbb9f7f0dc3fbe3c3b302615e4ae1e12ebe2ba441", 0x75)

11:16:23 executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000))
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100))

11:16:24 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x6, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}}, 0x0)

[  318.332830] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large:
[  318.344266] clocksource:                       'acpi_pm' wd_now: 82df87 wd_last: c860 mask: ffffff
[  318.353601] clocksource:                       'tsc' cs_now: b03d6f765b cs_last: aef6eb0ec9 mask: ffffffffffffffff
[  318.364244] tsc: Marking TSC unstable due to clocksource watchdog
[  318.382391] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'.
[  318.391381] sched_clock: Marking unstable (318450852540, -68482482)<-(318506627178, -124256267)
11:16:27 executing program 4:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f00000000c0), 0xa)

11:16:27 executing program 3:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40030000000000], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0xffffff80, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff0b, 0xffffffffa0008000}]}, 0x70}}, 0x0)

11:16:28 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f0000000040)=0x6e)
r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
clone(0x3ffd, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180))
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, <r4=>0x0}, &(0x7f00000005c0)=0xc)
mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='fuseblk\x00', 0x2000, &(0x7f0000000880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other='allow_other'}], [{@pcr={'pcr'}}]}})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000340)=0xc)
setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000200)={0x0, 0x1, 0x6, @broadcast}, 0x10)
getpgid(0x0)
mount(&(0x7f0000000100)=ANY=[@ANYBLOB="2f6465762f8646210700"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0)
semget$private(0x0, 0x0, 0x0)
lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='security.ima\x00', &(0x7f0000000700)=@md5={0x1, "fa34d504c424ab56fc9e8cc4e0e8f106"}, 0x11, 0x0)
semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000600)=""/242)
madvise(&(0x7f0000ab3000/0x3000)=nil, 0x3000, 0x76)
write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000280)={0x20, 0x0, 0x2, {0x6, 0x4, 0x0, 0xccd3}}, 0x20)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000240)=@ethtool_regs={0x4, 0x9}})

11:16:29 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x100000001, 0x4, 0x3}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[]}}, 0x0)
recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x400000000000000, &(0x7f00000013c0), 0x0, &(0x7f0000001440)=""/179, 0xb3}}], 0x2b, 0x40000042, &(0x7f0000001540)={0x77359400})
close(r0)

[  320.190828] clocksource: Switched to clocksource acpi_pm
11:16:29 executing program 1:
socket$l2tp(0x18, 0x1, 0x1)
clock_gettime(0x0, &(0x7f0000000d00))
sched_setscheduler(0x0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000180)={0x0, 0x4d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r0, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0xec0e, 0x0, 0x9})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040))
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140), 0x0)

11:16:29 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x10d)
bpf$MAP_UPDATE_ELEM(0x15, &(0x7f0000000200)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)

11:16:29 executing program 4:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x100000001, 0x4, 0x3}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20)
recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001440)=""/179, 0xb3}}], 0x2b, 0x40000042, &(0x7f0000001540)={0x77359400})

11:16:33 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, &(0x7f0000000140)="abbaf7babebbca0097e360c2646b180174b08a0a383b1d748011ab98b669", 0x1e, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
clock_nanosleep(0x3, 0x1, &(0x7f00000002c0), &(0x7f0000000340))
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000004c0)=0x9, &(0x7f0000000500)=0x2)
sendto$inet6(r0, &(0x7f0000000100)="cba01d0000000000000000a298432cb933c040774ff4f854df5c01ad83cbd2873760a17d60e613", 0x27, 0x0, &(0x7f0000000300)={0xa, 0x4e21, 0x0, @local}, 0x1c)
geteuid()

11:16:33 executing program 0:
perf_event_open(&(0x7f0000000580)={0x7, 0x70, 0x3, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x40000, 0x8, 0x8, 0x40, 0x4, 0x7, 0x4, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x7, 0x0, 0xaa, 0x3, 0x3, 0x2, 0x1, 0x6, 0xfd, 0x2, 0x6d, 0x3, 0x7, 0x3, 0x4, 0xa4a5, 0x5, 0xfffffffffffffffc, 0x6, 0x0, 0x100, 0x4, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffffff000}, 0x20080, 0x0, 0x76bf, 0x1, 0x8001, 0x20, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x1)

11:16:33 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x5, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800)

11:16:33 executing program 5:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000080)='./file0\x00')

11:16:33 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
prctl$seccomp(0x19, 0x705000, &(0x7f0000000140)={0x0, &(0x7f0000000100)})

[  324.884358] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
11:16:34 executing program 5:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000240))

11:16:34 executing program 4:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000140)="153f6234488dd25d766070")
mlockall(0x3)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002)

11:16:34 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = inotify_init()
r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
inotify_rm_watch(r0, r1)

11:16:34 executing program 3:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x100000001, 0x4, 0x3}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20)
recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001440)=""/179, 0xb3}}], 0x2b, 0x40000042, &(0x7f0000001540)={0x77359400})

11:16:34 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340))
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x1b)

11:16:34 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000")
ioctl$FS_IOC_FSGETXATTR(r0, 0x40046602, &(0x7f0000000040))

11:16:34 executing program 0:
socket$l2tp(0x18, 0x1, 0x1)
clock_gettime(0x0, &(0x7f0000000d00))
r0 = getpid()
socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0))
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x34)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000180)={0x0, 0x4d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x7})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc))
syz_open_pts(r1, 0x40000000000201)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000140)={0x0, 0x5, 0x52, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f, 0xec0e, 0x0, 0x9})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0)
socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040))
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xfe, &(0x7f0000000140)="cccbba0e952fad01e094bc517fa4739cc32d042c8268bf0909bc72a64fdd3d5a7914492660707a23300efb660d23b4bac3be560e2abef0120384e03ca557448ec9a7ce3d77c76665dbd56686e563ec574ea67b8a76ec21d14a6b793ac5ff7fad6dbb9f7f0dc3fbe3c3b302615e4ae1e12ebe2ba441c979452136fcfa58750464d4b0", 0x82)

11:16:35 executing program 2:

11:16:35 executing program 4:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000280))

11:16:35 executing program 3:

11:16:35 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000100)="153f6234488dd25d766070")
r1 = socket(0xa, 0x2, 0x0)
setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@local, @local}, 0x8)

11:16:35 executing program 5:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000))
ioctl$VHOST_SET_LOG_FD(r0, 0xaf01, &(0x7f0000000200))

11:16:38 executing program 5:
gettid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/12, 0xc)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)

11:16:38 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000000d000009b690f20005000098f72849000000004000000000010000000000000025000000fffffffdfb080100000000000a00000006cd"])
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000000000008601"])

11:16:38 executing program 4:
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000))
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200))
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000))

[  329.691461] kvm: SMP vm created on host with unstable TSC; guest TSC will not be reliable
11:16:38 executing program 2:

11:16:38 executing program 1:

11:16:39 executing program 3:

11:16:39 executing program 4:

11:16:39 executing program 5:

11:16:39 executing program 0:

11:16:39 executing program 2:

11:16:39 executing program 1:

11:16:39 executing program 3:

11:16:39 executing program 4:

11:16:39 executing program 3:

11:16:39 executing program 2:

11:16:39 executing program 5:

11:16:39 executing program 1:

11:16:40 executing program 0:

11:16:40 executing program 3:

11:16:40 executing program 2:

11:16:40 executing program 4:

11:16:40 executing program 1:

11:16:40 executing program 5:

11:16:40 executing program 0:

11:16:40 executing program 3:

11:16:40 executing program 2:

11:16:40 executing program 1:

11:16:40 executing program 4:

11:16:40 executing program 5:

11:16:41 executing program 0:

11:16:41 executing program 2:

11:16:41 executing program 1:

11:16:41 executing program 4:

11:16:41 executing program 3:

11:16:41 executing program 5:

11:16:41 executing program 2:

11:16:41 executing program 1:

11:16:41 executing program 0:

11:16:41 executing program 4:

11:16:41 executing program 1:

11:16:41 executing program 5:

11:16:41 executing program 3:

11:16:41 executing program 0:

11:16:42 executing program 2:

11:16:42 executing program 4:

11:16:42 executing program 1:

11:16:42 executing program 3:

11:16:42 executing program 5:

11:16:42 executing program 2:

11:16:42 executing program 0:

11:16:42 executing program 4:

11:16:42 executing program 1:

11:16:42 executing program 3:

11:16:43 executing program 0:

11:16:43 executing program 2:

11:16:43 executing program 5:

11:16:43 executing program 3:

11:16:43 executing program 4:

11:16:43 executing program 1:

11:16:43 executing program 2:

11:16:43 executing program 0:

11:16:43 executing program 5:

11:16:43 executing program 4:

11:16:43 executing program 3:

11:16:43 executing program 1:

11:16:44 executing program 2:

11:16:44 executing program 0:

11:16:44 executing program 5:

11:16:44 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb})

11:16:44 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @random="091b2c4f11bc", [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f00000000c0))

11:16:44 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a})

11:16:44 executing program 0:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x100000001, 0x4, 0x3}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[]}}, 0x0)
recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001440)=""/179, 0xb3}}], 0x2b, 0x40000042, &(0x7f0000001540)={0x77359400})
close(r0)

11:16:44 executing program 4:

11:16:44 executing program 2:

11:16:44 executing program 5:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000003ffc), &(0x7f0000002000))
waitid(0x0, 0x0, &(0x7f0000002ff9), 0xc1000006, 0x0)

11:16:44 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000d000800e0020000b808000000000000715b96d8ee00000080ff030000000000006fa7fe171ac34721f755b06ec2a08594e391798e4fd4959ba9b5a7b0738736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747871a86cc8c8dda870000000002000100000000000000030080ffffff0500050000001b000a000000def7bd3e10c077e000000000fe80000000000000000000000000007d"], 0xd8}}, 0x0)

11:16:44 executing program 3:
sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@mcast2, @in=@remote}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8)
ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000400))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}], 0x1c)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00')
getdents(r1, &(0x7f0000000040)=""/46, 0x2e)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100))
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000005c0))
ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000780)=""/4096)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140), &(0x7f0000000180)=0x8)

11:16:45 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x20000, 0x0)
listen(r0, 0xffffffffffffff7f)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(0xffffffffffffffff)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, &(0x7f00000003c0), 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0x840, "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"}, &(0x7f0000000340)=0x848)

11:16:45 executing program 2:
r0 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x7fffffff, 0x20000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000380)=0x6, 0x4)
recvfrom$inet6(r0, &(0x7f00000002c0)=""/94, 0x5e, 0x103, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @remote, 0x1}, 0x1c)
getsockname(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tp, &(0x7f0000000140)=0x80)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000040)=""/57, &(0x7f0000000080)=0x39)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000340))
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x13})
lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400))

11:16:45 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = inotify_init()
r1 = inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x10000000)
inotify_rm_watch(r0, r1)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000080)='./file0\x00')

11:16:45 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket(0x10, 0x0, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0x4008550c, &(0x7f0000000000))
rt_sigtimedwait(&(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000100)={0x77359400}, 0x3bc)

11:16:45 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000240)=""/147, 0x1f}], 0x2, &(0x7f0000002740)=""/218, 0xda}}], 0xf9e1221a8413ff5d, 0x0, &(0x7f0000002e40)={0x77359400})
recvmmsg(0xffffffffffffffff, &(0x7f0000006340)=[{{&(0x7f0000002840)=@l2, 0x80, &(0x7f0000002dc0)=[{&(0x7f00000028c0)=""/220, 0xdc}, {&(0x7f00000029c0)=""/214, 0xd6}], 0x2, &(0x7f0000002d40)=""/47, 0x2f}}], 0x1, 0x0, &(0x7f0000006400)={0x77359400})
sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000400), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x40000000042, 0x105}, 0x14}}, 0x0)

11:16:45 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', &(0x7f0000000180)})

11:16:45 executing program 2:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, <r1=>0xffffffffffffffff})
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x6012, r1, 0x0)

11:16:45 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @dev}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0xfffffd64)
setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4)

11:16:45 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

[  336.943149] x86/PAT: syz-executor2:8402 map pfn RAM range req write-combining for [mem 0x16e860000-0x16e863fff], got write-back
11:16:46 executing program 3:
socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4)
setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x14, &(0x7f0000000000), 0x8)
close(r2)
close(r1)

11:16:46 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0xfffffffffffffdc3, 0x5a6d8d97750cae5e)

[  337.049843] x86/PAT: syz-executor2:8406 map pfn RAM range req write-combining for [mem 0x16e860000-0x16e863fff], got write-back
11:16:46 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0)
pread64(r1, &(0x7f0000000140)=""/17, 0xfea9, 0x0)

11:16:46 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x10d)
r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)

11:16:46 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000))

11:16:46 executing program 3:
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000007c0)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000000e40), 0x0, 0x0, &(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback, [0xd00000]}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000003f80), 0x0, 0x0, &(0x7f0000004540)={0x77359400})

11:16:46 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0xfffffffffffffffc)

11:16:46 executing program 5:
clone(0x200, &(0x7f0000000280), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000280))
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000580), &(0x7f0000000600))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000540)=""/11, 0xb)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180))
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff)
r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x109)
creat(&(0x7f0000000380)='./file1\x00', 0x40)
r2 = dup2(r0, r1)
execve(&(0x7f0000000780)="e91f7189591e9233614b00", &(0x7f0000000800), &(0x7f00000000c0))
ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000001c0)=ANY=[])
open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0)
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff)
execve(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400), &(0x7f0000000b40))
ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000000440)=""/145)

11:16:46 executing program 4:
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000400))
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080), 0xff376720a651aa25, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
fcntl$setstatus(r1, 0x4, 0x800)
splice(r1, 0x0, r0, 0x0, 0xab11, 0x0)

11:16:47 executing program 0:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
ioctl(r0, 0x8912, &(0x7f0000000000)="153f6234488dd25d766070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f02726f75f0000000000000", 0x2761, 0x0)
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0)
sendfile(r1, r2, &(0x7f0000000100)=0x1200, 0x7)

11:16:47 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00')
fcntl$notify(r0, 0x402, 0x31)
exit(0x0)
r1 = gettid()
fcntl$setown(r0, 0x8, r1)

11:16:47 executing program 2:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108)
syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100))

11:16:47 executing program 1:
open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
sendto$inet6(r1, &(0x7f0000000080), 0xff376720a651aa25, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
fcntl$setstatus(r1, 0x4, 0x800)
splice(r1, 0x0, r0, 0x0, 0xab11, 0x0)

11:16:47 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
accept(0xffffffffffffffff, &(0x7f00000003c0)=@ethernet={0x0, @local}, &(0x7f00000002c0)=0x80)
read$FUSE(r0, &(0x7f0000001000), 0x1000)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0)
gettid()
read$FUSE(r0, &(0x7f00000040c0), 0x1000)
statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002000)=""/4096)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
write$FUSE_STATFS(r0, &(0x7f0000000340)={0x60, 0x0, 0x2}, 0x60)

11:16:47 executing program 2:
syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0xa2, 0x4800)

11:16:48 executing program 5:
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000b40), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000024001200140001006272696467655f736c617665000000000c0005000800050001200000"], 0x1}}, 0x0)

11:16:48 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='gid_map\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000001540), 0x0, &(0x7f0000000000)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

11:16:48 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x10}, @IFLA_LINKINFO={0x10, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x38}}, 0x0)

11:16:48 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x8000})
ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000000)=ANY=[@ANYBLOB="01ee5fa27300ced70fcb"])
ioctl$KVM_NMI(r2, 0xae9a)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="643e67660f3a61ca9bbaf80c66b8bc5d158866efbafc0c66ed66b9800000c00f326635001000000f30f40f38c94bf80f380b5775260f01ca0f21360f180ad810", 0x40}], 0x1, 0xfffffffbfffffffc, &(0x7f0000000280), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  339.390282] netlink: 'syz-executor2': attribute type 16 has an invalid length.
11:16:48 executing program 5:
r0 = socket$inet6(0xa, 0x3, 0x800000000000001)
ioctl(r0, 0x100008912, &(0x7f0000000280)="153f6234488dd25d5c6070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
recvfrom(r1, &(0x7f0000000140)=""/187, 0xfd20, 0x0, &(0x7f0000000280)=@ax25={0x3, {"65e40a94e65d9a"}}, 0x709000)
sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x11, 0x0, 0xfffffffffffffffd}, 0x14}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

11:16:48 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x10, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800)

11:16:48 executing program 1:
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x48)

11:16:48 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
prctl$seccomp(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
pipe2(&(0x7f0000000000), 0x0)

11:16:48 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000001000), 0x1000)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000))
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x10, 0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f00000040c0), 0x1000)
statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002000)=""/4096)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50)
write$FUSE_STATFS(r0, &(0x7f0000000340)={0x60, 0x0, 0x2}, 0x60)

[  339.833533] netlink: 'syz-executor0': attribute type 16 has an invalid length.
11:16:49 executing program 5:
r0 = socket(0x200000000000011, 0x3, 0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'sit0\x00'})
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd0ffc))
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))

11:16:49 executing program 0:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2000, 0x0)
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000))
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200))
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000))

11:16:49 executing program 4:
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(&(0x7f0000000440)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)

11:16:49 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1)
symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0x4008550c, &(0x7f0000000000))

11:16:49 executing program 3:
r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0))

11:16:49 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000))
r1 = eventfd2(0x0, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x0, r1})

11:16:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x100000001, 0x4, 0x3}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x4, &(0x7f00000013c0), 0x0, &(0x7f0000001440)=""/179, 0xb3}}], 0x2b, 0x40000042, &(0x7f0000001540)={0x77359400})

11:16:49 executing program 4:
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x800000000000006)
ioctl(r1, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070")
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@local, @broadcast}, 0x8)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0xfffffffffffffffa}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2)

11:16:49 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f0000000100)=[@cstype0={0x4, 0xb}], 0x1)
ioctl$TIOCNOTTY(r0, 0x5422)
ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f00000000c0)=0x20)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000002c0)="b9ec090000b808000000ba000000000f300fc76b07dc920080000067260fc7ac0b000f3808580026660f3880a100400000c4c2659f5d0d0fc7af0e000000660f01c80f01cf", 0x45}], 0xaaaac41, 0x0, &(0x7f0000000400), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r3=>0x0)
ptrace$getregs(0xc, r3, 0xff, &(0x7f0000000480)=""/156)

11:16:50 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sync()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x20000, 0x0)
listen(r0, 0xffffffffffffff7f)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(0xffffffffffffffff)
sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, &(0x7f00000003c0), 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000004c0)={0x0, 0x838, "1816e3b7d62414b5e12b25611182f5736f104a45a710d9e06d778942a77dc9b46b81fd615c79b4d1aafadb74062196b04f1d5222195e71e34a9b0edd30d8e7e772645ac24535e93e6fba2b096954c88b5903d890cb074bb04a88e9c83cdbcb75fc9aabb6839e8863aabc2a40442c9787518a77ee064ac475c38941983fdfb5503bcf578b1f0377e265f062847c631aa57e984caed74352ba2dad597cf8bd3701a0ce097822b83e7696a21cd56a8aeeec2eeba80a8438b7cdccd27913debc949670f38ff1c5583af33f020eccb2ca6c0d63bddafeaa8ef4648cb9290bfa4e33b44c6177d82485a9efaabefaa7697b746f1d4fc92a89deb9870747d4f958b982b12e23c8adf741d38146a8c3382e3de4ab87c6f21cce1c2f1bfcf15f9470cc27ceeaa7e2c9fefc118b5f2b720f7303be84ce087f8804fcda5e41b2d4e6bb54d5375813b47ba2c95af5ee265d4fb69fb9bb3459f81e3339882c643f935e072179e31ab75185354246a479c7b98bfe9add12dd9c2810ab3d083cd9217d650a1b1fd8c31d0f94c64ff0a21216e5870b6a0a810fc26ab116e506509eb63a90fbcf45b254c31b980a01344ca2a4ddf44e6abe4d1973c88fdbaac2841c8dc64fbfbcc826fd20648d7f8d73f8529f638fabb4dc6ad9070fb09d04466e7d5c550e63a5cc4666aecc85f528b86ef004015e93131c82671b3a9d8b7a09fbdcaae51aa97ef62bc535f8ff1e4ff117ac06f15dd5141ae87d698e3cc98748468cc262edfc1d01462f24ba3dbc3c9c997791914d8affde25462499550deb4c7f268f06e5494cfeba1a672fa3f96481c87a811861ad001e802639aafbbf62a50ec7bea4095f59d7d1d11710ce4247ef6a578aa1a5e1fd95e9f364fdf8960e22b41c020a6009c74e4893dbfd84895f0eb236b4968486a1cb6ef5154029f237333a3d20f3165ff3517de56984afe6ff24760ac9bfa4e5c45b9eb52d53e69f55b17fd48b6d1ad019dfbbe8c5294b2d640d6c4146cd0a7c57431ab1750f6ad8430336819438a36e6104183931922eb415e7ab5edfe0d2717e4b4adfb35da3c848e2e51c4a81fa1cca15bc5070945d55caf0a09ef88050a4986a24176e407c38d61dbee92519cf196aaa8adb0c5b5395037b87499a8f14b8692b64030a2364ccb1a12853a19d8c9bbdb42b87bdfcbedbb6daf63e20376f60bebc1b09e391b981b2eb890f4e7b701a2fb24da4efe7a23c92e4ebb68af7d34744055e98c434deeb7262eb5cb61f117208cb7f91d62efcf5a79a81df8f127d64c74c1c511363028064be4f650b9b52d85cd82381aa90e3f24d2d21609b70aab519ae85d6dd88b8e96f2b89b69e28c7c55fa7755506b38928e6fa2b478e176bb4ad2bbc5710d5d58836a0e78ebfacd8269b2f0638c00ad6bac8e5154c661b440e79e214daa3e2a814bb6586619970dca1b6309f0dfa4b67a5fd94858af93fcf64db182e2f19006f08184f0c2d6447400c6dbe68457cfbbf09abce705e4db4c584f6d48491ebbdf858db72f8e49ea8f3ba84b09113d090188c8420912c55ff309fb8401b47c25b8738e5b2b6a1233be1ee56e9815002e3b00972ca988f00ab518534182fb7332bb02a85d870ae1877f4f1488a34835202f01a870bda7ded03a911502d12a32b2b3be74127c011e6745cca6282668480b65c67022c38d17d6c4853f7ddff5d2ca55046975bf4df05a5cf048dea809de7abcaffd8da8213574309c45a499ada53ff49984b9a172d51ef213202f6bf9755945f3596e8d69c25433379f10a251c78e9fc0eee032335407c7b3760f6c77e5f53c9a739316f50213d56a0fc55e6cd60e0ebbd567d6910f7130fe9449600f459642ed315849153fb6fc49750876fde54e7d4030ce14f0496f12326890e0db52419710e3f86d1d8c571197105ce8f44707459606f6a3cdbad4f1cfbb475918cdb20b052288550af2173df7a597b01f0907e1b862631b4bea9d0c5bb2fbff43c1387c0b4a50d210b3d2d2f5d1cad8e3fa7b6cfa2bbb05f7b1a799f67c57cb4d0a0e907f2c13865e14956d51a867e8c49153a380f528b3c864ded8678054581ee44cee2e22a82127fd7d8ec1409ec8344d1c6973d62c436393268b61290dadb70084ff4f132cd7aa640ce54e87e1f47d3fa5715c3f3e64de137771c8f51148ccfac5cdc4a3b0f64bfa6ea3294e5e6cca506173c38d3c2e70e78e803b64771abec80ea09d2b782c4f72862c7bc1500ed11ca2fed6474fd1250ffd39560c756bf30e82ba19ce8222eb61fdaff9c099ee9b098cc2e2c73c5e86a48a112d0a1a5dc8990d81956f5f4f4361a7db4f713e3a5aa8d4a28c8a135b2b5f661804d38c1c17deb5088c754968f02726e54bb8fb450dff90cdf9c279df1c0b331e7b40eaec05fcfc04353c24ddcb47b4b1958a8e0c3762b2722eca478d9881d2b442c0407cf8e2cc544abdaeb1b3c319e72bb9035fcb41af5f868bb9b302bf6cbc9359e3e6fd547c2e11e483d41243ddc79063fa37e069c44363618f3df601b9c98b76be4a3c78a57be17ef2bb8ca4d7fcb136c5072b874fda273a530ef696476efbf7f6683b451d117151256d63f5182ad5effe24bfeecca82546dceb015e74995cab2d49842a62964844d4a993794324c866aec73381ae5398fa00c586e339b115f93d01c48036174675ee31509a89f420e2587723d6a7c9570d35e05eb492966f88d14d8fe0ebc1e3e4d3288ad24bbf9d0d4a8a01664bf5395a9a49a25f39695deca9c6a75f96a1a1f22f876b631cda2ed829ef331d32820b3befe288a049746cecd396d9e96dc7a4a72f527fbfcfda59da805f85f0d484b6adc8ea9c50df759a27a84710f3bdbaa9e76dda66e582628e6e22d7d178c16649ccea8b85b9edd443e83f3731ef0a436f76e7dd528b6f1b71f35f72eb802c26711a32bb105b8d4f7d058ee3fb78757dfcdf5b8afc641518af8ab02ab547ae80e7ad9498f"}, &(0x7f0000000340)=0x840)

11:16:50 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xc800, &(0x7f0000000440)}, &(0x7f0000000580)="5f39203a1ec6", &(0x7f0000000040)=""/44, 0x0, 0x0, 0x0, &(0x7f0000000600)})

11:16:50 executing program 2:
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000380), 0x4)
recvfrom$inet6(0xffffffffffffffff, &(0x7f00000002c0)=""/94, 0x5e, 0x103, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c)
getsockname(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tp, &(0x7f0000000140)=0x80)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000040)=""/57, &(0x7f0000000080)=0x39)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x13})

[  341.164640] psmouse serio2: Failed to reset mouse on : -5
[  341.252390] *** Guest State ***
[  341.256234] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7
[  341.265400] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[  341.274483] CR3 = 0x0000000000000000
[  341.278300] RSP = 0x0000000000000f80  RIP = 0x0000000000000000
[  341.284536] RFLAGS=0x00000002         DR7 = 0x0000000000000400
[  341.290684] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810
[  341.297638] CS:   sel=0x0010, attr=0x0009b, limit=0x000fffff, base=0x0000000000000000
[  341.305809] DS:   sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000
[  341.314163] SS:   sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000
[  341.322350] ES:   sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000
[  341.330394] FS:   sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000
[  341.338568] GS:   sel=0x0018, attr=0x00093, limit=0x000fffff, base=0x0000000000000000
[  341.346721] GDTR:                           limit=0x000007ff, base=0x0000000000001000
[  341.354947] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800
[  341.363115] IDTR:                           limit=0x0000ffff, base=0x0000000000000000
[  341.371164] TR:   sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[  341.379350] EFER =     0x0000000000000000  PAT = 0x0007040600070406
[  341.385945] DebugCtl = 0x0000000000000000  DebugExceptions = 0x0000000000000000
[  341.393594] Interruptibility = 00000000  ActivityState = 00000000
[  341.399868] *** Host State ***
11:16:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x0)
connect$rds(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000040), 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  341.403239] RIP = 0xffffffff812bde4b  RSP = 0xffff88019b0ff428
[  341.409342] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[  341.415991] FSBase=00007fa4b6577700 GSBase=ffff88021fc00000 TRBase=fffffe0000003000
[  341.423985] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[  341.429931] CR0=0000000080050033 CR3=000000019b1ac000 CR4=00000000001426f0
[  341.437162] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ac01260
[  341.444085] EFER = 0x0000000000000d01  PAT = 0x0407050600070106
[  341.450382] *** Control State ***
[  341.454024] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000ca
[  341.460817] EntryControls=0000d1ff ExitControls=002fefff
[  341.466462] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[  341.473593] VMEntry: intr_info=80000020 errcode=00000000 ilen=00000000
[  341.480329] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003
[  341.487179]         reason=80000021 qualification=0000000000000000
[  341.493704] IDTVectoring: info=00000000 errcode=00000000
[  341.499315] TSC Offset = 0xffffff43877ce890
[  341.503817] EPT pointer = 0x00000001a138101e
11:16:50 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='gid_map\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000001540), 0x0, &(0x7f0000000000)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

11:16:50 executing program 2:
r0 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405)
dup2(r2, r1)
io_setup(0x5, &(0x7f0000000000)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)}])
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)}, 0x20)

11:16:50 executing program 5:
request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz'}, &(0x7f0000000200)='.[\x00', 0xfffffffffffffffb)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0x7)
read(r0, &(0x7f00003fefff)=""/1, 0x1)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x2e171c03}], 0x1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000))
fcntl$setsig(0xffffffffffffffff, 0xa, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080))
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x2f9c}, 0x14)
dup2(0xffffffffffffffff, 0xffffffffffffffff)

11:16:51 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50}, 0x50)

11:16:51 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a})
dup2(r0, r1)

11:16:51 executing program 1:

[  343.721843] misc userio: Buffer overflowed, userio client isn't keeping up
[  344.771818] ==================================================================
[  344.779282] BUG: KMSAN: uninit-value in synaptics_detect+0x207/0x2c0
[  344.781603] CPU: 1 PID: 6363 Comm: kworker/1:3 Not tainted 4.19.0-rc8+ #70
[  344.781603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  344.781603] Workqueue: events_long serio_handle_event
[  344.781603] Call Trace:
[  344.781603]  dump_stack+0x306/0x460
[  344.781603]  ? synaptics_detect+0x207/0x2c0
[  344.781603]  kmsan_report+0x1a2/0x2e0
[  344.781603]  __msan_warning+0x7c/0xe0
[  344.781603]  synaptics_detect+0x207/0x2c0
[  344.781603]  psmouse_extensions+0x1110/0x3850
[  344.781603]  psmouse_switch_protocol+0x184/0xd90
[  344.781603]  psmouse_connect+0x13ce/0x2300
[  344.781603]  serio_driver_probe+0xe3/0x150
[  344.781603]  ? psmouse_interrupt+0x1950/0x1950
[  344.781603]  ? serio_uevent+0x6e0/0x6e0
[  344.781603]  really_probe+0x95f/0x13d0
[  344.781603]  driver_probe_device+0x1b4/0x4f0
[  344.781603]  __device_attach_driver+0x632/0x750
[  344.781603]  bus_for_each_drv+0x28e/0x3b0
[  344.781603]  ? driver_deferred_probe_add_trigger+0x3c0/0x3c0
[  344.781603]  __device_attach+0x447/0x6e0
[  344.781603]  device_initial_probe+0x4a/0x60
[  344.781603]  bus_probe_device+0x137/0x390
[  344.781603]  device_add+0x2715/0x2d20
[  344.781603]  serio_handle_event+0x1d90/0x2700
[  344.781603]  ? serio_resume+0x2b0/0x2b0
[  344.781603]  process_one_work+0x19c4/0x24f0
[  344.781603]  worker_thread+0x206d/0x2b30
[  344.781603]  kthread+0x59c/0x5d0
[  344.781603]  ? process_one_work+0x24f0/0x24f0
[  344.781603]  ? INIT_BOOL+0x30/0x30
[  344.781603]  ret_from_fork+0x35/0x40
[  344.781603] 
[  344.781603] Local variable description: ----param@synaptics_detect
[  344.781603] Variable was created at:
[  344.781603]  synaptics_detect+0x5d/0x2c0
[  344.781603]  psmouse_extensions+0x1110/0x3850
[  344.781603] ==================================================================
[  344.781603] Disabling lock debugging due to kernel taint
[  344.781603] Kernel panic - not syncing: panic_on_warn set ...
[  344.781603] 
[  344.781603] CPU: 1 PID: 6363 Comm: kworker/1:3 Tainted: G    B             4.19.0-rc8+ #70
[  344.781603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  344.781603] Workqueue: events_long serio_handle_event
[  344.781603] Call Trace:
[  344.781603]  dump_stack+0x306/0x460
[  344.781603]  panic+0x54c/0xafa
[  344.781603]  ? __msan_metadata_ptr_for_store_1+0x13/0x20
[  344.781603]  kmsan_report+0x2d3/0x2e0
[  344.781603]  __msan_warning+0x7c/0xe0
[  344.781603]  synaptics_detect+0x207/0x2c0
[  344.781603]  psmouse_extensions+0x1110/0x3850
[  344.781603]  psmouse_switch_protocol+0x184/0xd90
[  344.781603]  psmouse_connect+0x13ce/0x2300
[  344.781603]  serio_driver_probe+0xe3/0x150
[  344.781603]  ? psmouse_interrupt+0x1950/0x1950
[  344.781603]  ? serio_uevent+0x6e0/0x6e0
[  344.781603]  really_probe+0x95f/0x13d0
[  344.781603]  driver_probe_device+0x1b4/0x4f0
[  344.781603]  __device_attach_driver+0x632/0x750
[  344.781603]  bus_for_each_drv+0x28e/0x3b0
[  344.781603]  ? driver_deferred_probe_add_trigger+0x3c0/0x3c0
[  344.781603]  __device_attach+0x447/0x6e0
[  344.781603]  device_initial_probe+0x4a/0x60
[  344.781603]  bus_probe_device+0x137/0x390
[  344.781603]  device_add+0x2715/0x2d20
[  344.781603]  serio_handle_event+0x1d90/0x2700
[  344.781603]  ? serio_resume+0x2b0/0x2b0
[  344.781603]  process_one_work+0x19c4/0x24f0
[  344.781603]  worker_thread+0x206d/0x2b30
[  344.781603]  kthread+0x59c/0x5d0
[  344.781603]  ? process_one_work+0x24f0/0x24f0
[  344.781603]  ? INIT_BOOL+0x30/0x30
[  344.781603]  ret_from_fork+0x35/0x40
[  344.781603] Kernel Offset: disabled
[  344.781603] Rebooting in 86400 seconds..