[   51.594150] audit: type=1800 audit(1545313906.620:26): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   53.070511] kauditd_printk_skb: 2 callbacks suppressed
[   53.070540] audit: type=1800 audit(1545313908.110:29): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0
[   53.095295] audit: type=1800 audit(1545313908.120:30): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts.
2018/12/20 13:52:03 fuzzer started
2018/12/20 13:52:07 dialing manager at 10.128.0.26:46613
2018/12/20 13:52:07 syscalls: 1
2018/12/20 13:52:07 code coverage: enabled
2018/12/20 13:52:07 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled
2018/12/20 13:52:07 setuid sandbox: enabled
2018/12/20 13:52:07 namespace sandbox: enabled
2018/12/20 13:52:07 Android sandbox: /sys/fs/selinux/policy does not exist
2018/12/20 13:52:07 fault injection: enabled
2018/12/20 13:52:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2018/12/20 13:52:07 net packet injection: enabled
2018/12/20 13:52:07 net device setup: enabled
13:52:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
unshare(0x20400)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2f)

syzkaller login: [   81.761962] IPVS: ftp: loaded support on port[0] = 21
[   83.133301] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.140288] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.148630] device bridge_slave_0 entered promiscuous mode
[   83.238430] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.245009] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.253199] device bridge_slave_1 entered promiscuous mode
[   83.332553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   83.410400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   83.658454] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   83.744299] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   83.829088] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   83.836136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.920162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   83.927162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   84.180511] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   84.189272] team0: Port device team_slave_0 added
[   84.274526] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   84.283217] team0: Port device team_slave_1 added
[   84.367201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   84.455421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.541740] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   84.549432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.558783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.646213] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   84.654010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.663375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
13:52:20 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@acquire={0x128, 0x17, 0x401, 0x0, 0x0, {{@in=@multicast2}, @in, {@in6=@mcast1, @in6=@loopback}, {{@in6, @in6=@local}}}}, 0xff2f}}, 0x0)

[   85.620066] IPVS: ftp: loaded support on port[0] = 21
[   85.887901] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.894547] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.901865] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.908448] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.917805] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   85.924370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   88.057774] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.064447] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.072828] device bridge_slave_0 entered promiscuous mode
[   88.246250] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.252919] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.261316] device bridge_slave_1 entered promiscuous mode
[   88.452668] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   88.615087] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   89.026386] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   89.129197] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   89.311367] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   89.318435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   89.801162] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   89.809852] team0: Port device team_slave_0 added
[   89.997828] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   90.006452] team0: Port device team_slave_1 added
[   90.202389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   90.366206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   90.373356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   90.382478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
13:52:25 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x8, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYPTR64]}, 0x80)

[   90.538696] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   90.546376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   90.555411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   90.739643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   90.747381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   90.756468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   91.052180] IPVS: ftp: loaded support on port[0] = 21
[   91.331968] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.894115] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[   92.525675] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[   92.532055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   92.540014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   92.554612] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.561160] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.568344] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.574998] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.584144] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   93.267096] 8021q: adding VLAN 0 to HW filter on device team0
[   93.541942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   93.571572] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.578191] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.586342] device bridge_slave_0 entered promiscuous mode
[   93.708670] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.715234] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.723503] device bridge_slave_1 entered promiscuous mode
[   93.906703] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[   94.087410] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[   94.626686] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   94.720975] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   94.912195] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[   94.919196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   95.056922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[   95.064987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   95.477795] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[   95.486610] team0: Port device team_slave_0 added
[   95.626472] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[   95.635208] team0: Port device team_slave_1 added
[   95.751422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[   95.758567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   95.767674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   95.950697] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[   95.957730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   95.966741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   96.083821] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[   96.091567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   96.100695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   96.233288] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[   96.240923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   96.250211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
13:52:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
unshare(0x20400)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2f)

13:52:32 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
unshare(0x20400)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2f)

13:52:33 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
unshare(0x20400)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2f)

[   98.169521] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.176202] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.183398] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.189956] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.199425] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[   98.205928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
13:52:33 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = epoll_create1(0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1})
r2 = inotify_init1(0x0)
fcntl$getownex(r2, 0x24, &(0x7f000045fff8))

13:52:33 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = epoll_create1(0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1})
r2 = inotify_init1(0x0)
fcntl$getownex(r2, 0x24, &(0x7f000045fff8))

13:52:33 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = epoll_create1(0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1})
r2 = inotify_init1(0x0)
fcntl$getownex(r2, 0x24, &(0x7f000045fff8))

13:52:33 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = epoll_create1(0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1})
r2 = inotify_init1(0x0)
fcntl$getownex(r2, 0x24, &(0x7f000045fff8))

13:52:33 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = epoll_create1(0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1})
r2 = inotify_init1(0x0)
fcntl$getownex(r2, 0x24, &(0x7f000045fff8))

13:52:34 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, 0x29, 0x1, 0x0, 0x0, {0x1}, [@nested={0x18, 0x0, [@typed={0x4, 0x0, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x11, 0x9effffff], [], @remote}}]}]}, 0x2c}}, 0x0)

13:52:34 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, 0x29, 0x1, 0x0, 0x0, {0x1}, [@nested={0x18, 0x0, [@typed={0x4, 0x0, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x11, 0x9effffff], [], @remote}}]}]}, 0x2c}}, 0x0)

[   99.373891] IPVS: ftp: loaded support on port[0] = 21
[   99.528672] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.138043] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  100.681982] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  100.688228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  100.696358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.202386] 8021q: adding VLAN 0 to HW filter on device team0
[  102.307809] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.314534] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.322761] device bridge_slave_0 entered promiscuous mode
[  102.513067] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.519591] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.527829] device bridge_slave_1 entered promiscuous mode
[  102.741816] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  102.898183] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  103.357854] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  103.555696] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  103.948939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  103.956037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  104.466588] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  104.475248] team0: Port device team_slave_0 added
[  104.665132] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  104.673793] team0: Port device team_slave_1 added
[  104.797467] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.889050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  104.896125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  104.905143] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  105.055208] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  105.062847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  105.071742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
13:52:40 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@acquire={0x128, 0x17, 0x401, 0x0, 0x0, {{@in=@multicast2}, @in, {@in6=@mcast1, @in6=@loopback}, {{@in6, @in6=@local}}}}, 0xff2f}}, 0x0)

[  105.272347] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  105.279993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  105.288869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  105.446425] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  105.454064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  105.463031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  105.564863] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  106.130472] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  106.136913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  106.144715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  106.666442] 8021q: adding VLAN 0 to HW filter on device team0
[  106.828459] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.835032] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.842225] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.848827] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.857816] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  106.864417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  110.088472] kernel msg: ebtables bug: please report to author: entries_size too small
[  110.122773] kernel msg: ebtables bug: please report to author: entries_size too small
13:52:45 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x8, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYPTR64]}, 0x80)

13:52:45 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, 0x29, 0x1, 0x0, 0x0, {0x1}, [@nested={0x18, 0x0, [@typed={0x4, 0x0, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x11, 0x9effffff], [], @remote}}]}]}, 0x2c}}, 0x0)

13:52:45 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@acquire={0x128, 0x17, 0x401, 0x0, 0x0, {{@in=@multicast2}, @in, {@in6=@mcast1, @in6=@loopback}, {{@in6, @in6=@local}}}}, 0xff2f}}, 0x0)

13:52:45 executing program 4:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}})
r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x0, 0xfffffffffffffffc})

13:52:45 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=@acquire={0x128, 0x17, 0x401, 0x0, 0x0, {{@in=@multicast2}, @in, {@in6=@mcast1, @in6=@loopback}, {{@in6, @in6=@local}}}}, 0xff2f}}, 0x0)

[  110.386426] kernel msg: ebtables bug: please report to author: entries_size too small
13:52:45 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, 0x29, 0x1, 0x0, 0x0, {0x1}, [@nested={0x18, 0x0, [@typed={0x4, 0x0, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x11, 0x9effffff], [], @remote}}]}]}, 0x2c}}, 0x0)

13:52:45 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1c, 0x0, 0x8840, 0x0, 0x40}}, 0x50)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0xc100, 0x0)
write$FUSE_STATFS(r4, &(0x7f0000000140)={0x60, 0xfffffffffffffffe, 0x8, {{0x1, 0x6, 0x800, 0x0, 0xf4b7, 0x7, 0x8, 0x100000001}}}, 0x60)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x15200})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  110.656530] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details.
[  111.092196] IPVS: ftp: loaded support on port[0] = 21
[  112.186568] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.489104] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  112.552678] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.559282] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.567189] device bridge_slave_0 entered promiscuous mode
[  112.653530] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.660048] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.668439] device bridge_slave_1 entered promiscuous mode
[  112.747252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  112.811951] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  112.819116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  112.827177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  112.838496] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  113.084232] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  113.132070] 8021q: adding VLAN 0 to HW filter on device team0
[  113.174056] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  113.255106] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  113.262194] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  113.346222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  113.353237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  113.595990] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  113.603888] team0: Port device team_slave_0 added
[  113.683872] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  113.691781] team0: Port device team_slave_1 added
[  113.775028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  113.854099] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  113.936845] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  113.944794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  113.954131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  114.032944] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  114.040551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  114.049722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  114.972673] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.979245] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.986439] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.993076] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.003103] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
13:52:50 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = epoll_create1(0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1})
r2 = inotify_init1(0x0)
fcntl$getownex(r2, 0x24, &(0x7f000045fff8))

13:52:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x8, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYPTR64]}, 0x80)

13:52:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = memfd_create(&(0x7f00000000c0)='\x0f\xc5\xd4\xe1?\xd1D\xbb\xf9\xda\xf6p\xef/\xf4,%\x03\xdfv\xb6\xa5\xa8\x12+@\x16K\xa8\x1cx\x12\x00\x00\x00\x00\xcd_\xafk\xa8!t\x17\xe6\x9e\xb7VoX\x1bu\x80\xbe \xc8v\xcb\x0f\xd1\a\xb0m', 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000000)=0x1)
write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[@ANYBLOB='s'], 0x1)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x4000000000000f, 0x12, r3, 0x0)
ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="484cc5f7"])

13:52:50 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4744aef8, 0x80)
ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000080))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = geteuid()
getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r4=>0x0)
r5 = getgid()
fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010000000000000002000100", @ANYRES32=r3, @ANYBLOB="023bbdec", @ANYRES32=r4, @ANYBLOB="040003000000000008000500", @ANYRES32=r5, @ANYBLOB="10000300000000002000040000000000"], 0x3c, 0x3)
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
unshare(0x8000400)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

13:52:50 executing program 5:
getcwd(&(0x7f0000000000)=""/211, 0xd3)
r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x1f, 0x4000)
ftruncate(r0, 0x80000000)
r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x3f, 0x2040)
getsockname$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200)="71bcd1dc8d7c0397bd5bf9d70c979929e8721c83254a43fcc6a23c060b7397feeb5c6836da0215c3d74a87083f09dac5d2e36cf1d18aa09401dc8e59adcced72a13226f4991be7a1ac6fa923a0629028dd167e3a5d89fa07e0d81d16158e886b5af5", 0x62, r1}, 0x68)
r2 = socket$inet(0x2, 0x2, 0x5)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000300)={0x7f0000000, <r3=>0x0, 0x10000, 0x6})
ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000340)={0x3, r3})
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0, <r6=>0x0}, &(0x7f0000000500)=0xc)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0, <r7=>0x0}, &(0x7f0000000580)=0xc)
r8 = geteuid()
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={0x0, <r9=>0x0}, &(0x7f0000000600)=0xc)
stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700)={0x0, <r11=>0x0}, &(0x7f0000000740)=0xc)
fstat(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, <r13=>0x0}, &(0x7f0000000840)=0xc)
getgroups(0x7, &(0x7f0000000880)=[0xffffffffffffffff, <r14=>0xee01, <r15=>0x0, <r16=>0xffffffffffffffff, 0xee00, 0x0, 0xee01])
setxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {0x1, 0x1}, [{0x2, 0x4, r4}, {0x2, 0x1, r6}, {0x2, 0x4, r7}, {0x2, 0x2, r8}, {0x2, 0x2, r9}, {0x2, 0x4, r10}, {0x2, 0x1, r11}, {0x2, 0x3, r12}], {0x4, 0x2}, [{0x8, 0x7, r13}, {0x8, 0x7, r16}], {0x10, 0x4}, {0x20, 0x6}}, 0x74, 0x0)
init_module(&(0x7f0000000940)='/dev/adsp#\x00', 0xb, &(0x7f0000000980)='ppp1posix_acl_accesslo\x00')
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000009c0)={0x5e, @loopback, 0x4e23, 0x0, 'lc\x00', 0x38, 0x10001, 0xc}, 0x2c)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000a00)={0xffffffffffffff00, 0x2, 0x1})
getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000a40), &(0x7f0000000a80)=0x4)
setsockopt$inet_buf(r1, 0x0, 0x2c, &(0x7f0000000ac0)="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", 0xfc)
ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000bc0)={0x1e8, 0x0, 0x8, [{{0x5, 0x0, 0x800, 0x7, 0x2, 0x400, {0x5, 0x0, 0xff, 0xfffffffffffffff9, 0x4, 0x1, 0x563, 0x100, 0x81, 0x7, 0x10001, r10, r15, 0x5, 0x3}}, {0x5, 0xfffffffffffffc01, 0x3, 0x4, 'lc\x00'}}, {{0x1, 0x1, 0x195c, 0x6ba, 0x2, 0x101, {0x2, 0x3, 0x7, 0x53, 0x1, 0x7, 0xfffffffffffff801, 0x3ff, 0x100000001, 0xff, 0x7, r7, r14, 0x80000001, 0xffffffffffffff50}}, {0x1, 0x1, 0x2, 0x101, '%!'}}, {{0x2, 0x3, 0x4, 0xfffffffffffffe01, 0x3, 0x3ff, {0x0, 0x6, 0xfffffffffffeffff, 0x1, 0x0, 0x2, 0x10000, 0x7, 0xfffffffffffffffe, 0x7ff, 0x9, r7, r5, 0x8, 0x1}}, {0x0, 0x2, 0x0, 0x2}}]}, 0x1e8)
ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000dc0)={0x9, 0x8, 0x3})
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000e00)=""/89)
accept4$unix(r0, &(0x7f0000000e80)=@abs, &(0x7f0000000f00)=0x6e, 0x80000)

[  115.181923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  115.293026] kernel msg: ebtables bug: please report to author: entries_size too small
13:52:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x8, [0x0, 0x200002c0, 0x200004d0, 0x20000610], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYPTR64]}, 0x80)

13:52:50 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
unshare(0x400)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/210)

[  115.496474] kernel msg: ebtables bug: please report to author: entries_size too small
13:52:50 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = epoll_create1(0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x1})
r2 = inotify_init1(0x0)
fcntl$getownex(r2, 0x24, &(0x7f000045fff8))

[  115.977383] IPVS: ftp: loaded support on port[0] = 21
[  117.317788] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.324457] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.332628] device bridge_slave_0 entered promiscuous mode
[  117.412873] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.419391] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.427688] device bridge_slave_1 entered promiscuous mode
[  117.512801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  117.599541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  117.845934] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  117.928481] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  118.008364] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  118.015450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  118.095353] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  118.102720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  118.345232] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  118.353549] team0: Port device team_slave_0 added
[  118.438197] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  118.446066] team0: Port device team_slave_1 added
[  118.530157] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  118.614376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  118.696870] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  118.704990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  118.714119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  118.797984] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  118.805634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  118.814806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  118.909874] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.216864] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  119.517743] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  119.524620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  119.532688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  119.702503] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.709039] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.716211] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.722832] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.732036] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  119.830040] 8021q: adding VLAN 0 to HW filter on device team0
[  119.969498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
13:52:56 executing program 4:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}})
r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x0, 0xfffffffffffffffc})

13:52:56 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0xc, 0x7, 0x12, 0x0, [{}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0)

13:52:56 executing program 0:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r0, 0x0, 0x2000427, 0x40)
syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x2, 0x200000)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0, 0x0)

13:52:56 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
unshare(0x400)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/210)

13:52:56 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3a, 0x0, @local, @local={0xfe, 0x80, [0x3]}, {[], @icmpv6=@echo_request}}}}}, &(0x7f0000000000))

13:52:57 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0xc, 0x7, 0x12, 0x0, [{}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0)

13:52:57 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3a, 0x0, @local, @local={0xfe, 0x80, [0x3]}, {[], @icmpv6=@echo_request}}}}}, &(0x7f0000000000))

13:52:57 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
unshare(0x400)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/210)

[  123.016552] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.183552] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  123.362811] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  123.369018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  123.376934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  123.545101] 8021q: adding VLAN 0 to HW filter on device team0
13:52:59 executing program 5:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r0, 0x0, 0x2000427, 0x40)
syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x2, 0x200000)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0, 0x0)

13:52:59 executing program 0:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r0, 0x0, 0x2000427, 0x40)
syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x2, 0x200000)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0, 0x0)

13:52:59 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3a, 0x0, @local, @local={0xfe, 0x80, [0x3]}, {[], @icmpv6=@echo_request}}}}}, &(0x7f0000000000))

13:52:59 executing program 4:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}})
r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x0, 0xfffffffffffffffc})

13:52:59 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0xc, 0x7, 0x12, 0x0, [{}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0)

13:52:59 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0)
unshare(0x400)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/210)

13:52:59 executing program 4:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}})
r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x0, 0xfffffffffffffffc})

13:52:59 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0xc, 0x7, 0x12, 0x0, [{}, {}]}]}}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0)

13:53:00 executing program 0:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r0, 0x0, 0x2000427, 0x40)
syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x2, 0x200000)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0, 0x0)

13:53:00 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3a, 0x0, @local, @local={0xfe, 0x80, [0x3]}, {[], @icmpv6=@echo_request}}}}}, &(0x7f0000000000))

13:53:00 executing program 1:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r0, 0x0, 0x2000427, 0x40)
syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x2, 0x200000)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0, 0x0)

13:53:00 executing program 5:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r0, 0x0, 0x2000427, 0x40)
syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x2, 0x200000)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0, 0x0)

13:53:00 executing program 4:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r0, 0x0, 0x2000427, 0x40)
syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x2, 0x200000)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0, 0x0)

13:53:00 executing program 1:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r0, 0x0, 0x2000427, 0x40)
syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x2, 0x200000)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0, 0x0)

13:53:00 executing program 0:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r0, 0x0, 0x2000427, 0x40)
syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x2, 0x200000)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0, 0x0)

13:53:00 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3a, 0x0, @local, @local={0xfe, 0x80, [0x3]}, {[], @icmpv6=@echo_request}}}}}, &(0x7f0000000000))

13:53:00 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3a, 0x0, @local, @local={0xfe, 0x80, [0x3]}, {[], @icmpv6=@echo_request}}}}}, &(0x7f0000000000))

13:53:00 executing program 5:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r0, 0x0, 0x2000427, 0x40)
syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x2, 0x200000)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0, 0x0)

13:53:00 executing program 4:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r0, 0x0, 0x2000427, 0x40)
syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x2, 0x200000)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0, 0x0)

13:53:00 executing program 1:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r0, 0x0, 0x2000427, 0x40)
syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x2, 0x200000)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0, 0x0)

13:53:00 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3a, 0x0, @local, @local={0xfe, 0x80, [0x3]}, {[], @icmpv6=@echo_request}}}}}, &(0x7f0000000000))

13:53:00 executing program 0:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}})
r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x0, 0xfffffffffffffffc})

13:53:00 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3a, 0x0, @local, @local={0xfe, 0x80, [0x3]}, {[], @icmpv6=@echo_request}}}}}, &(0x7f0000000000))

13:53:00 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}})
r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x0, 0xfffffffffffffffc})

13:53:01 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3a, 0x0, @local, @local={0xfe, 0x80, [0x3]}, {[], @icmpv6=@echo_request}}}}}, &(0x7f0000000000))

13:53:01 executing program 0:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}})
r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x0, 0xfffffffffffffffc})

13:53:01 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5)
vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0)
munmap(&(0x7f00003c1000/0x2000)=nil, 0x2000)
close(r0)

13:53:01 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev}, 0x14)
syz_emit_ethernet(0x3e, &(0x7f0000001180)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b7e720", 0x8, 0x3a, 0x0, @local, @local={0xfe, 0x80, [0x3]}, {[], @icmpv6=@echo_request}}}}}, &(0x7f0000000000))

13:53:01 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}})
r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x0, 0xfffffffffffffffc})

13:53:01 executing program 0:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}})
r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x0, 0xfffffffffffffffc})

13:53:01 executing program 4:
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
fallocate(r0, 0x0, 0x2000427, 0x40)
syz_open_dev$rtc(&(0x7f0000000480)='/dev/rtc#\x00', 0x2, 0x200000)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000001000)='./file0\x00', 0x0, 0x0)

13:53:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8993, &(0x7f00000000c0)={'veth1_to_bond\x00', @ifru_data=&(0x7f0000000040)="cc10cef8b6a6d12566b19269c79560f2561a4c51461d5ac9b4c3ef2658095f24"})

13:53:01 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:01 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001}})
r2 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f000000efcc)={{0x100000001}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000000)={0x0, 0xfffffffffffffffc})

13:53:01 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5)
vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0)
munmap(&(0x7f00003c1000/0x2000)=nil, 0x2000)
close(r0)

13:53:01 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5)
vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0)
munmap(&(0x7f00003c1000/0x2000)=nil, 0x2000)
close(r0)

13:53:01 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5)
vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0)
munmap(&(0x7f00003c1000/0x2000)=nil, 0x2000)
close(r0)

13:53:01 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5)
vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0)
munmap(&(0x7f00003c1000/0x2000)=nil, 0x2000)
close(r0)

13:53:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8993, &(0x7f00000000c0)={'veth1_to_bond\x00', @ifru_data=&(0x7f0000000040)="cc10cef8b6a6d12566b19269c79560f2561a4c51461d5ac9b4c3ef2658095f24"})

13:53:01 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5)
vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0)
munmap(&(0x7f00003c1000/0x2000)=nil, 0x2000)
close(r0)

13:53:01 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5)
vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0)
munmap(&(0x7f00003c1000/0x2000)=nil, 0x2000)
close(r0)

13:53:02 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5)
vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0)
munmap(&(0x7f00003c1000/0x2000)=nil, 0x2000)
close(r0)

13:53:02 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8993, &(0x7f00000000c0)={'veth1_to_bond\x00', @ifru_data=&(0x7f0000000040)="cc10cef8b6a6d12566b19269c79560f2561a4c51461d5ac9b4c3ef2658095f24"})

13:53:02 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5)
vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0)
munmap(&(0x7f00003c1000/0x2000)=nil, 0x2000)
close(r0)

13:53:02 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [0x486]})

13:53:02 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5)
vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0)
munmap(&(0x7f00003c1000/0x2000)=nil, 0x2000)
close(r0)

13:53:02 executing program 1:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5)
vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0)
munmap(&(0x7f00003c1000/0x2000)=nil, 0x2000)
close(r0)

13:53:02 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8993, &(0x7f00000000c0)={'veth1_to_bond\x00', @ifru_data=&(0x7f0000000040)="cc10cef8b6a6d12566b19269c79560f2561a4c51461d5ac9b4c3ef2658095f24"})

13:53:02 executing program 5:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5)
vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0)
munmap(&(0x7f00003c1000/0x2000)=nil, 0x2000)
close(r0)

13:53:02 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [0x486]})

13:53:02 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:02 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:03 executing program 4:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f00003ba000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil})
mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5)
vmsplice(r1, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0)
munmap(&(0x7f00003c1000/0x2000)=nil, 0x2000)
close(r0)

13:53:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [0x486]})

13:53:03 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:03 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:03 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [0x486]})

13:53:03 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:03 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x8000005, 0x3})

13:53:03 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:03 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:04 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x8000005, 0x3})

13:53:04 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:04 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x8000005, 0x3})

13:53:04 executing program 0:
r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x8000005, 0x3})

13:53:04 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:04 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:04 executing program 0:
r0 = socket$kcm(0x10, 0x1000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000017980)={0x0, 0x0, &(0x7f0000017840)=[{&(0x7f0000016640)=""/4096, 0x1000}, {&(0x7f0000017640)=""/194, 0xc2}, {&(0x7f0000017740)=""/51, 0x33}, {&(0x7f0000017780)=""/190, 0xbe}], 0x4}, 0x0)

13:53:04 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:04 executing program 0:
r0 = socket$kcm(0x10, 0x1000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000017980)={0x0, 0x0, &(0x7f0000017840)=[{&(0x7f0000016640)=""/4096, 0x1000}, {&(0x7f0000017640)=""/194, 0xc2}, {&(0x7f0000017740)=""/51, 0x33}, {&(0x7f0000017780)=""/190, 0xbe}], 0x4}, 0x0)

13:53:05 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:05 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:05 executing program 0:
r0 = socket$kcm(0x10, 0x1000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000017980)={0x0, 0x0, &(0x7f0000017840)=[{&(0x7f0000016640)=""/4096, 0x1000}, {&(0x7f0000017640)=""/194, 0xc2}, {&(0x7f0000017740)=""/51, 0x33}, {&(0x7f0000017780)=""/190, 0xbe}], 0x4}, 0x0)

13:53:05 executing program 0:
r0 = socket$kcm(0x10, 0x1000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000017980)={0x0, 0x0, &(0x7f0000017840)=[{&(0x7f0000016640)=""/4096, 0x1000}, {&(0x7f0000017640)=""/194, 0xc2}, {&(0x7f0000017740)=""/51, 0x33}, {&(0x7f0000017780)=""/190, 0xbe}], 0x4}, 0x0)

13:53:05 executing program 0:
r0 = socket$kcm(0x10, 0x1000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000017980)={0x0, 0x0, &(0x7f0000017840)=[{&(0x7f0000016640)=""/4096, 0x1000}, {&(0x7f0000017640)=""/194, 0xc2}, {&(0x7f0000017740)=""/51, 0x33}, {&(0x7f0000017780)=""/190, 0xbe}], 0x4}, 0x0)

13:53:05 executing program 3:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x82)
r2 = dup2(r1, r0)
write$sndseq(r2, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0xfffffffd, @tick, {}, {}, @raw8={"e6aa2cf4a58770e63671fccb"}}], 0x30)

13:53:05 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xffffffea)
r3 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x14})
ppoll(&(0x7f0000000140)=[{r3}, {r1}], 0x2, 0x0, 0x0, 0x0)
epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x47)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

13:53:05 executing program 0:
r0 = socket$kcm(0x10, 0x1000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000017980)={0x0, 0x0, &(0x7f0000017840)=[{&(0x7f0000016640)=""/4096, 0x1000}, {&(0x7f0000017640)=""/194, 0xc2}, {&(0x7f0000017740)=""/51, 0x33}, {&(0x7f0000017780)=""/190, 0xbe}], 0x4}, 0x0)

13:53:05 executing program 3:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x82)
r2 = dup2(r1, r0)
write$sndseq(r2, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0xfffffffd, @tick, {}, {}, @raw8={"e6aa2cf4a58770e63671fccb"}}], 0x30)

13:53:06 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x82)
r2 = dup2(r1, r0)
write$sndseq(r2, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0xfffffffd, @tick, {}, {}, @raw8={"e6aa2cf4a58770e63671fccb"}}], 0x30)

13:53:06 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x80045432, &(0x7f0000000040))

13:53:06 executing program 0:
r0 = socket$kcm(0x10, 0x1000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000017980)={0x0, 0x0, &(0x7f0000017840)=[{&(0x7f0000016640)=""/4096, 0x1000}, {&(0x7f0000017640)=""/194, 0xc2}, {&(0x7f0000017740)=""/51, 0x33}, {&(0x7f0000017780)=""/190, 0xbe}], 0x4}, 0x0)

13:53:06 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x82)
r2 = dup2(r1, r0)
write$sndseq(r2, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0xfffffffd, @tick, {}, {}, @raw8={"e6aa2cf4a58770e63671fccb"}}], 0x30)

13:53:06 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x46, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

13:53:06 executing program 3:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x82)
r2 = dup2(r1, r0)
write$sndseq(r2, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0xfffffffd, @tick, {}, {}, @raw8={"e6aa2cf4a58770e63671fccb"}}], 0x30)

13:53:06 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x80045432, &(0x7f0000000040))

13:53:06 executing program 0:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done={0x40046302}], 0x0, 0x0, 0x0})

13:53:06 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x46, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  131.625075] binder: BC_ACQUIRE_RESULT not supported
[  131.630226] binder: 8579:8582 ioctl c0306201 20012000 returned -22
13:53:06 executing program 3:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x82)
r2 = dup2(r1, r0)
write$sndseq(r2, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0xfffffffd, @tick, {}, {}, @raw8={"e6aa2cf4a58770e63671fccb"}}], 0x30)

13:53:06 executing program 2:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x82)
r2 = dup2(r1, r0)
write$sndseq(r2, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0xfffffffd, @tick, {}, {}, @raw8={"e6aa2cf4a58770e63671fccb"}}], 0x30)

13:53:06 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x80045432, &(0x7f0000000040))

13:53:06 executing program 0:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done={0x40046302}], 0x0, 0x0, 0x0})

13:53:06 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x46, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

13:53:06 executing program 4:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done={0x40046302}], 0x0, 0x0, 0x0})

[  131.865299] binder: BC_ACQUIRE_RESULT not supported
[  131.870417] binder: 8591:8592 ioctl c0306201 20012000 returned -22
[  131.929146] binder: BC_ACQUIRE_RESULT not supported
[  131.934521] binder: 8599:8602 ioctl c0306201 20012000 returned -22
13:53:07 executing program 4:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done={0x40046302}], 0x0, 0x0, 0x0})

13:53:07 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x46, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

13:53:07 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f000069a000/0x1000)=nil, 0x1000, 0x200000e, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x9, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$TIOCSTI(r1, 0x5412, 0x4)

13:53:07 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x46, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

13:53:07 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x80045432, &(0x7f0000000040))

13:53:07 executing program 0:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done={0x40046302}], 0x0, 0x0, 0x0})

[  132.188473] binder: BC_ACQUIRE_RESULT not supported
[  132.193692] binder: 8608:8610 ioctl c0306201 20012000 returned -22
13:53:07 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x46, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  132.320383] binder: BC_ACQUIRE_RESULT not supported
[  132.325777] binder: 8619:8620 ioctl c0306201 20012000 returned -22
13:53:07 executing program 4:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done={0x40046302}], 0x0, 0x0, 0x0})

13:53:07 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
utimes(&(0x7f0000000000)='./control\x00', &(0x7f0000000080))
chmod(&(0x7f0000000040)='./control\x00', 0x0)
rmdir(&(0x7f0000000240)='./control\x00')

13:53:07 executing program 1:
r0 = gettid()
exit(0x0)
sched_getaffinity(r0, 0x8, &(0x7f0000000240))

13:53:07 executing program 0:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070")
r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x14, 0x0, &(0x7f0000000300)=[@acquire_done={0x40046302}], 0x0, 0x0, 0x0})

13:53:07 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f000069a000/0x1000)=nil, 0x1000, 0x200000e, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x9, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$TIOCSTI(r1, 0x5412, 0x4)

[  132.620118] binder: BC_ACQUIRE_RESULT not supported
[  132.625468] binder: 8631:8632 ioctl c0306201 20012000 returned -22
13:53:07 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x46, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  132.694921] binder: BC_ACQUIRE_RESULT not supported
[  132.700162] binder: 8634:8636 ioctl c0306201 20012000 returned -22
13:53:07 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f000069a000/0x1000)=nil, 0x1000, 0x200000e, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x9, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$TIOCSTI(r1, 0x5412, 0x4)

13:53:07 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
utimes(&(0x7f0000000000)='./control\x00', &(0x7f0000000080))
chmod(&(0x7f0000000040)='./control\x00', 0x0)
rmdir(&(0x7f0000000240)='./control\x00')

13:53:07 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
utimes(&(0x7f0000000000)='./control\x00', &(0x7f0000000080))
chmod(&(0x7f0000000040)='./control\x00', 0x0)
rmdir(&(0x7f0000000240)='./control\x00')

13:53:08 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
utimes(&(0x7f0000000000)='./control\x00', &(0x7f0000000080))
chmod(&(0x7f0000000040)='./control\x00', 0x0)
rmdir(&(0x7f0000000240)='./control\x00')

13:53:08 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f000069a000/0x1000)=nil, 0x1000, 0x200000e, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x9, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$TIOCSTI(r1, 0x5412, 0x4)

13:53:08 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f000069a000/0x1000)=nil, 0x1000, 0x200000e, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x9, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$TIOCSTI(r1, 0x5412, 0x4)

13:53:08 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
utimes(&(0x7f0000000000)='./control\x00', &(0x7f0000000080))
chmod(&(0x7f0000000040)='./control\x00', 0x0)
rmdir(&(0x7f0000000240)='./control\x00')

13:53:08 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
utimes(&(0x7f0000000000)='./control\x00', &(0x7f0000000080))
chmod(&(0x7f0000000040)='./control\x00', 0x0)
rmdir(&(0x7f0000000240)='./control\x00')

13:53:08 executing program 1:
r0 = gettid()
exit(0x0)
sched_getaffinity(r0, 0x8, &(0x7f0000000240))

13:53:08 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f000069a000/0x1000)=nil, 0x1000, 0x200000e, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x9, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$TIOCSTI(r1, 0x5412, 0x4)

13:53:08 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
utimes(&(0x7f0000000000)='./control\x00', &(0x7f0000000080))
chmod(&(0x7f0000000040)='./control\x00', 0x0)
rmdir(&(0x7f0000000240)='./control\x00')

13:53:08 executing program 3:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f000069a000/0x1000)=nil, 0x1000, 0x200000e, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x9, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$TIOCSTI(r1, 0x5412, 0x4)

13:53:08 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
utimes(&(0x7f0000000000)='./control\x00', &(0x7f0000000080))
chmod(&(0x7f0000000040)='./control\x00', 0x0)
rmdir(&(0x7f0000000240)='./control\x00')

13:53:08 executing program 5:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
utimes(&(0x7f0000000000)='./control\x00', &(0x7f0000000080))
chmod(&(0x7f0000000040)='./control\x00', 0x0)
rmdir(&(0x7f0000000240)='./control\x00')

13:53:08 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
utimes(&(0x7f0000000000)='./control\x00', &(0x7f0000000080))
chmod(&(0x7f0000000040)='./control\x00', 0x0)
rmdir(&(0x7f0000000240)='./control\x00')

13:53:08 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
utimes(&(0x7f0000000000)='./control\x00', &(0x7f0000000080))
chmod(&(0x7f0000000040)='./control\x00', 0x0)
rmdir(&(0x7f0000000240)='./control\x00')

13:53:08 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f000069a000/0x1000)=nil, 0x1000, 0x200000e, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x9, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$TIOCSTI(r1, 0x5412, 0x4)

13:53:09 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xbc)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

13:53:09 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000d11000), &(0x7f0000000080)=0xfffffffffffffcfd)

13:53:09 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080), 0xc)
sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe)

13:53:09 executing program 1:
r0 = gettid()
exit(0x0)
sched_getaffinity(r0, 0x8, &(0x7f0000000240))

13:53:09 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f000069a000/0x1000)=nil, 0x1000, 0x200000e, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x9, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$TIOCSTI(r1, 0x5412, 0x4)

13:53:09 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000d11000), &(0x7f0000000080)=0xfffffffffffffcfd)

13:53:09 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080), 0xc)
sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe)

13:53:09 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
utimes(&(0x7f0000000000)='./control\x00', &(0x7f0000000080))
chmod(&(0x7f0000000040)='./control\x00', 0x0)
rmdir(&(0x7f0000000240)='./control\x00')

13:53:09 executing program 0:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f000069a000/0x1000)=nil, 0x1000, 0x200000e, 0x10, r0, 0x0)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000), 0x9, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x800, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$TIOCSTI(r1, 0x5412, 0x4)

13:53:09 executing program 4:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
mkdir(&(0x7f00000000c0)='./control\x00', 0x0)
utimes(&(0x7f0000000000)='./control\x00', &(0x7f0000000080))
chmod(&(0x7f0000000040)='./control\x00', 0x0)
rmdir(&(0x7f0000000240)='./control\x00')

13:53:09 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080), 0xc)
sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe)

13:53:09 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000d11000), &(0x7f0000000080)=0xfffffffffffffcfd)

13:53:10 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xbc)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

13:53:10 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080), 0xc)
sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe)

13:53:10 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xbc)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

13:53:10 executing program 1:
r0 = gettid()
exit(0x0)
sched_getaffinity(r0, 0x8, &(0x7f0000000240))

13:53:10 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xbc)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

13:53:10 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000d11000), &(0x7f0000000080)=0xfffffffffffffcfd)

13:53:10 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080), 0xc)
sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe)

13:53:10 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xbc)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

13:53:10 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xbc)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

13:53:10 executing program 5:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xf9, &(0x7f0000000000), &(0x7f0000000080)=0x4)

13:53:10 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080), 0xc)
sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe)

13:53:10 executing program 4:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xbc)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

13:53:10 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xbc)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

13:53:10 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xbc)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

13:53:10 executing program 2:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080), 0xc)
sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe)

13:53:11 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x4, 0x2)
migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000100)=0xdb51)
syz_genetlink_get_family_id$nbd(0x0)

13:53:11 executing program 5:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xf9, &(0x7f0000000000), &(0x7f0000000080)=0x4)

13:53:11 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x2, 0x20000}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x15, 0x301}, 0x14}}, 0x0)

13:53:11 executing program 1:
r0 = socket$inet6(0xa, 0x4000000080002, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x400000000000395, 0x0)

13:53:11 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xbc)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

13:53:11 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clock_gettime(0xb, &(0x7f0000000000))

13:53:11 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clock_gettime(0xb, &(0x7f0000000000))

13:53:11 executing program 5:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xf9, &(0x7f0000000000), &(0x7f0000000080)=0x4)

13:53:11 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x2, 0x20000}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x15, 0x301}, 0x14}}, 0x0)

13:53:11 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clock_gettime(0xb, &(0x7f0000000000))

13:53:11 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x2, 0x20000}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x15, 0x301}, 0x14}}, 0x0)

13:53:11 executing program 1:
r0 = socket$inet6(0xa, 0x4000000080002, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x400000000000395, 0x0)

13:53:12 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x4, 0x2)
migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000100)=0xdb51)
syz_genetlink_get_family_id$nbd(0x0)

13:53:12 executing program 5:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xf9, &(0x7f0000000000), &(0x7f0000000080)=0x4)

13:53:12 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clock_gettime(0xb, &(0x7f0000000000))

13:53:12 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x2, 0x20000}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x15, 0x301}, 0x14}}, 0x0)

13:53:12 executing program 1:
r0 = socket$inet6(0xa, 0x4000000080002, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x400000000000395, 0x0)

13:53:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x2, 0x20000}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x15, 0x301}, 0x14}}, 0x0)

13:53:13 executing program 4:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x4, 0x2)
migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000100)=0xdb51)
syz_genetlink_get_family_id$nbd(0x0)

13:53:13 executing program 1:
r0 = socket$inet6(0xa, 0x4000000080002, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x400000000000395, 0x0)

13:53:13 executing program 5:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x4, 0x2)
migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000100)=0xdb51)
syz_genetlink_get_family_id$nbd(0x0)

13:53:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x2, 0x20000}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x15, 0x301}, 0x14}}, 0x0)

13:53:13 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x2, 0x20000}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x15, 0x301}, 0x14}}, 0x0)

13:53:13 executing program 0:
r0 = socket$inet6(0xa, 0x4000000080002, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x400000000000395, 0x0)

13:53:14 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x2, 0x20000}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x15, 0x301}, 0x14}}, 0x0)

13:53:14 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x8001000000002c)
syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB=':'], &(0x7f0000000080))
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xba7b}], 0x29a, &(0x7f0000000200)}, 0x0)

13:53:14 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x4, 0x2)
migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000100)=0xdb51)
syz_genetlink_get_family_id$nbd(0x0)

13:53:14 executing program 0:
r0 = socket$inet6(0xa, 0x4000000080002, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x400000000000395, 0x0)

13:53:15 executing program 4:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x4, 0x2)
migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000100)=0xdb51)
syz_genetlink_get_family_id$nbd(0x0)

13:53:15 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x8001000000002c)
syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB=':'], &(0x7f0000000080))
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xba7b}], 0x29a, &(0x7f0000000200)}, 0x0)

13:53:15 executing program 5:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x4, 0x2)
migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000100)=0xdb51)
syz_genetlink_get_family_id$nbd(0x0)

13:53:15 executing program 0:
r0 = socket$inet6(0xa, 0x4000000080002, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x400000000000395, 0x0)

13:53:15 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x2, 0x20000}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x15, 0x301}, 0x14}}, 0x0)

13:53:15 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x8001000000002c)
syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB=':'], &(0x7f0000000080))
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xba7b}], 0x29a, &(0x7f0000000200)}, 0x0)

13:53:15 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x29, 0x22, &(0x7f0000000000)={0x2, 0x20000}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x15, 0x301}, 0x14}}, 0x0)

13:53:15 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00')
getdents64(r0, &(0x7f00000000c0)=""/42, 0x2a)
getdents(r0, &(0x7f0000000000)=""/158, 0x9e)

13:53:15 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x8001000000002c)
syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB=':'], &(0x7f0000000080))
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040), 0xba7b}], 0x29a, &(0x7f0000000200)}, 0x0)

13:53:15 executing program 1:
r0 = socket$inet6(0xa, 0x803, 0x4)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0a5c2d023c126285718070")
r1 = socket(0x10, 0x3, 0x0)
recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write(r1, &(0x7f0000001780)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24)

13:53:17 executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x4, 0x2)
migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000100)=0xdb51)
syz_genetlink_get_family_id$nbd(0x0)

13:53:17 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00')
getdents64(r0, &(0x7f00000000c0)=""/42, 0x2a)
getdents(r0, &(0x7f0000000000)=""/158, 0x9e)

13:53:17 executing program 1:
r0 = socket$inet6(0xa, 0x803, 0x4)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0a5c2d023c126285718070")
r1 = socket(0x10, 0x3, 0x0)
recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write(r1, &(0x7f0000001780)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24)

13:53:17 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00')
getdents64(r0, &(0x7f00000000c0)=""/42, 0x2a)
getdents(r0, &(0x7f0000000000)=""/158, 0x9e)

13:53:17 executing program 4:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x4, 0x2)
migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000100)=0xdb51)
syz_genetlink_get_family_id$nbd(0x0)

13:53:17 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00')
getdents64(r0, &(0x7f00000000c0)=""/42, 0x2a)
getdents(r0, &(0x7f0000000000)=""/158, 0x9e)

13:53:17 executing program 5:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x4, 0x2)
migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000100)=0xdb51)
syz_genetlink_get_family_id$nbd(0x0)

13:53:17 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00')
getdents64(r0, &(0x7f00000000c0)=""/42, 0x2a)
getdents(r0, &(0x7f0000000000)=""/158, 0x9e)

13:53:17 executing program 1:
r0 = socket$inet6(0xa, 0x803, 0x4)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0a5c2d023c126285718070")
r1 = socket(0x10, 0x3, 0x0)
recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write(r1, &(0x7f0000001780)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24)

13:53:17 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00')
getdents64(r0, &(0x7f00000000c0)=""/42, 0x2a)
getdents(r0, &(0x7f0000000000)=""/158, 0x9e)

13:53:17 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00')
getdents64(r0, &(0x7f00000000c0)=""/42, 0x2a)
getdents(r0, &(0x7f0000000000)=""/158, 0x9e)

13:53:17 executing program 1:
r0 = socket$inet6(0xa, 0x803, 0x4)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0a5c2d023c126285718070")
r1 = socket(0x10, 0x3, 0x0)
recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write(r1, &(0x7f0000001780)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24)

13:53:19 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101042)
write$evdev(r0, &(0x7f00006f7fe8)=[{{}, 0x1, 0x400000000000049, 0x400000002}], 0xfdd0)

13:53:19 executing program 0:
r0 = socket$inet6(0xa, 0x803, 0x4)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0a5c2d023c126285718070")
r1 = socket(0x10, 0x3, 0x0)
recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write(r1, &(0x7f0000001780)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24)

13:53:19 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000999000)="390000001300096900bb61e1c3ef846f650ec17d0e000000450000002000000019000a000d0000000000280f00000007fd17e9ffff06060400", 0x39}], 0x1)

13:53:19 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000999000)="390000001300096900bb61e1c3ef846f650ec17d0e000000450000002000000019000a000d0000000000280f00000007fd17e9ffff06060400", 0x39}], 0x1)

13:53:19 executing program 4:
mkdir(&(0x7f0000000dc0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000540)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0/../file0/file0\x00', 0x2)
mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x20, 0x0)

13:53:19 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x80)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
write(r1, &(0x7f0000000380), 0xfffffffe)
recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000080)={0x1, 0x40, 0x5}, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00\x00\x00$\x00\x00\x00\x00\x00\x00\b\x00\x00\x11', 0xff})
sendto(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

13:53:19 executing program 3:
r0 = epoll_create1(0x0)
epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffffffffffffb)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xfc147812c6696263})
timerfd_settime(r1, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0))

13:53:19 executing program 0:
r0 = socket$inet6(0xa, 0x803, 0x4)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0a5c2d023c126285718070")
r1 = socket(0x10, 0x3, 0x0)
recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write(r1, &(0x7f0000001780)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24)

[  144.396126] ==================================================================
[  144.403564] BUG: KMSAN: uninit-value in __siphash_aligned+0x512/0xae0
[  144.410172] CPU: 1 PID: 9023 Comm: syz-executor1 Not tainted 4.20.0-rc7+ #8
[  144.417286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  144.426652] Call Trace:
[  144.429277]  dump_stack+0x173/0x1d0
[  144.432951]  kmsan_report+0x120/0x290
[  144.436798]  kmsan_internal_check_memory+0x9a7/0xa20
[  144.441978]  __msan_instrument_asm_load+0x8a/0x90
[  144.446878]  __siphash_aligned+0x512/0xae0
[  144.451183]  secure_ipv6_port_ephemeral+0x110/0x220
[  144.456252]  inet6_hash_connect+0x11f/0x1a0
[  144.460617]  tcp_v6_connect+0x20ba/0x2890
[  144.464826]  ? __msan_poison_alloca+0x1e0/0x270
[  144.469596]  ? tcp_v6_pre_connect+0x130/0x130
[  144.474139]  __inet_stream_connect+0x2f9/0x1340
[  144.478836]  ? kmem_cache_alloc_trace+0x55a/0xb90
[  144.483735]  ? tcp_sendmsg_locked+0x6394/0x6be0
[  144.488507]  tcp_sendmsg_locked+0x65d5/0x6be0
[  144.493049]  ? aa_label_sk_perm+0xda/0x940
[  144.497323]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  144.502728]  ? aa_label_sk_perm+0x6d6/0x940
[  144.507100]  ? __msan_metadata_ptr_for_store_8+0x13/0x20
[  144.512623]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  144.518069]  tcp_sendmsg+0xb2/0x100
[  144.521727]  ? tcp_sendmsg_locked+0x6be0/0x6be0
[  144.526420]  inet_sendmsg+0x54a/0x720
[  144.530261]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  144.535665]  ? security_socket_sendmsg+0x1bd/0x200
[  144.540628]  ? inet_getname+0x490/0x490
[  144.544635]  __sys_sendto+0x8c4/0xac0
[  144.548520]  ? __msan_metadata_ptr_for_store_4+0x13/0x20
[  144.553999]  ? prepare_exit_to_usermode+0x114/0x420
[  144.559060]  ? syscall_return_slowpath+0x50/0x650
[  144.563933]  __se_sys_sendto+0x107/0x130
[  144.568055]  __x64_sys_sendto+0x6e/0x90
[  144.572066]  do_syscall_64+0xbc/0xf0
[  144.575885]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  144.581101] RIP: 0033:0x457669
[  144.584311] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  144.603264] RSP: 002b:00007f1869a06c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  144.610990] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669
[  144.618272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  144.625559] RBP: 000000000072bf00 R08: 000000002031e000 R09: 000000000000001c
[  144.632852] R10: 0000000020000004 R11: 0000000000000246 R12: 00007f1869a076d4
[  144.640153] R13: 00000000004c4539 R14: 00000000004d75a8 R15: 00000000ffffffff
[  144.647489] 
[  144.649138] Local variable description: ----combined@secure_ipv6_port_ephemeral
[  144.656593] Variable was created at:
[  144.660331]  secure_ipv6_port_ephemeral+0x6a/0x220
[  144.665312]  inet6_hash_connect+0x11f/0x1a0
[  144.669644] 
[  144.671298] Bytes 2-7 of 8 are uninitialized
[  144.675757] Memory access of size 8 starts at ffff888155ddf5f0
[  144.681740] ==================================================================
[  144.689122] Disabling lock debugging due to kernel taint
[  144.694588] Kernel panic - not syncing: panic_on_warn set ...
[  144.700504] CPU: 1 PID: 9023 Comm: syz-executor1 Tainted: G    B             4.20.0-rc7+ #8
[  144.709017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  144.718519] Call Trace:
[  144.721149]  dump_stack+0x173/0x1d0
[  144.724818]  panic+0x3ce/0x961
[  144.728126]  kmsan_report+0x285/0x290
[  144.731988]  kmsan_internal_check_memory+0x9a7/0xa20
[  144.737182]  __msan_instrument_asm_load+0x8a/0x90
[  144.742106]  __siphash_aligned+0x512/0xae0
13:53:19 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101042)
write$evdev(r0, &(0x7f00006f7fe8)=[{{}, 0x1, 0x400000000000049, 0x400000002}], 0xfdd0)

13:53:19 executing program 3:
r0 = epoll_create1(0x0)
epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffffffffffffb)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xfc147812c6696263})
timerfd_settime(r1, 0x0, &(0x7f0000005000)={{}, {0x0, 0x989680}}, &(0x7f0000000fe0))

[  144.746429]  secure_ipv6_port_ephemeral+0x110/0x220
[  144.751501]  inet6_hash_connect+0x11f/0x1a0
[  144.755878]  tcp_v6_connect+0x20ba/0x2890
[  144.760085]  ? __msan_poison_alloca+0x1e0/0x270
[  144.764820]  ? tcp_v6_pre_connect+0x130/0x130
[  144.769376]  __inet_stream_connect+0x2f9/0x1340
[  144.774096]  ? kmem_cache_alloc_trace+0x55a/0xb90
[  144.779007]  ? tcp_sendmsg_locked+0x6394/0x6be0
[  144.783729]  tcp_sendmsg_locked+0x65d5/0x6be0
[  144.788258]  ? aa_label_sk_perm+0xda/0x940
[  144.792538]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
13:53:19 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000999000)="390000001300096900bb61e1c3ef846f650ec17d0e000000450000002000000019000a000d0000000000280f00000007fd17e9ffff06060400", 0x39}], 0x1)

[  144.797925]  ? aa_label_sk_perm+0x6d6/0x940
[  144.802281]  ? __msan_metadata_ptr_for_store_8+0x13/0x20
[  144.807798]  ? __msan_metadata_ptr_for_load_1+0x10/0x20
[  144.813222]  tcp_sendmsg+0xb2/0x100
[  144.816898]  ? tcp_sendmsg_locked+0x6be0/0x6be0
[  144.821592]  inet_sendmsg+0x54a/0x720
[  144.825424]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  144.830807]  ? security_socket_sendmsg+0x1bd/0x200
[  144.835785]  ? inet_getname+0x490/0x490
[  144.839791]  __sys_sendto+0x8c4/0xac0
[  144.843653]  ? __msan_metadata_ptr_for_store_4+0x13/0x20
[  144.849134]  ? prepare_exit_to_usermode+0x114/0x420
[  144.854171]  ? syscall_return_slowpath+0x50/0x650
[  144.859056]  __se_sys_sendto+0x107/0x130
[  144.863162]  __x64_sys_sendto+0x6e/0x90
[  144.867164]  do_syscall_64+0xbc/0xf0
[  144.870915]  entry_SYSCALL_64_after_hwframe+0x63/0xe7
[  144.876131] RIP: 0033:0x457669
[  144.879346] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
13:53:19 executing program 0:
r0 = socket$inet6(0xa, 0x803, 0x4)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0a5c2d023c126285718070")
r1 = socket(0x10, 0x3, 0x0)
recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
write(r1, &(0x7f0000001780)="2400000052001f0014f9f407000904ff0200070208000100feffffff0800000000000006", 0x24)

[  144.898282] RSP: 002b:00007f1869a06c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  144.906050] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457669
[  144.913356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  144.920687] RBP: 000000000072bf00 R08: 000000002031e000 R09: 000000000000001c
[  144.927983] R10: 0000000020000004 R11: 0000000000000246 R12: 00007f1869a076d4
[  144.935277] R13: 00000000004c4539 R14: 00000000004d75a8 R15: 00000000ffffffff
[  144.943589] Kernel Offset: disabled
[  144.947218] Rebooting in 86400 seconds..