32=r5, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="3c0002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r8], 0x23c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40010) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) unshare(0x40000000) 18:52:08 executing program 3: add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000380), 0x0, 0x0, 0xfffffffffffffffb) read(0xffffffffffffffff, &(0x7f0000000580)=""/242, 0xf2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="c6a34e987940ea478d9bd365b9e4621e334652733324b7773a3df8a7504d9e18e2e4a839fcd9030000000000000028945d12a9caae603ff81c4dc32ed3", 0x3d, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x20000, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x9, @mcast2, 0x4}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @remote}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={r2, 0x84, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x7, @empty, 0x4}, @in6={0xa, 0x4e23, 0x1ff, @ipv4={[], [], @multicast1}, 0x81}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x7fff, @remote, 0x5}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000400)=0x10) r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x359, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f00000004c0)={0x3, 0x0, [{0xf76, 0x0, 0x80}, {0x1000, 0x0, 0x9}, {0x2, 0x0, 0x8}]}) keyctl$revoke(0x3, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000440)=0x9) 18:52:08 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000009c0)='net/arp\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000040)=ANY=[]}, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 18:52:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447006effe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:08 executing program 0: r0 = socket(0x10, 0x20000000802, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f80018000400edfc0e80000000000000000000000008000f0007ffff00", 0x24) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x400) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000080)) 18:52:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r0 = socket(0xa, 0x3, 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r3, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r5}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r6 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r6) ioctl$VT_DISALLOCATE(r1, 0x5608) 18:52:08 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r4 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r5}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r6 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r6) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:08 executing program 5: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) migrate_pages(r0, 0x5, &(0x7f0000000100)=0x40, &(0x7f0000000140)=0x2) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f00000002c0)="0a5cc80700315f85715070") chown(&(0x7f0000000200)='./file0\x00', r1, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000001c0)='nv\x00', 0x3) sendto$inet6(r5, &(0x7f0000000280), 0xfffffffffffffedd, 0x2000012c, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000180)) close(r4) [ 430.696091] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:52:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x8040) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) r3 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)='.\x00', 0xfffffffffffffffa) keyctl$assume_authority(0x10, r3) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)={0x4, 0xfffffffffffffffe}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sched_setattr(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5dd}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 430.757145] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.763735] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.802822] IPVS: ftp: loaded support on port[0] = 21 18:52:08 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470056ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 430.850711] device bridge0 left promiscuous mode 18:52:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470065ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470043ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470068ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$RTC_PIE_OFF(r1, 0x7006) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) 18:52:09 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$TIOCNXCL(r1, 0x540d) fcntl$dupfd(r0, 0x406, r0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r2 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r2, &(0x7f0000007880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)="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", 0x261}], 0x1, &(0x7f0000000200)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x30}, {0x0, 0x0, &(0x7f0000001ac0)}, {0x0, 0x0, &(0x7f0000006880), 0x0, &(0x7f00000068c0), 0x0, 0x80}, {0x0, 0x0, &(0x7f0000007140), 0x0, &(0x7f0000007200)}], 0x4, 0x40000) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xc01, 0x0) [ 431.694148] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.700881] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:09 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470079ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 431.748805] device bridge0 left promiscuous mode [ 432.053774] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.060270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.067015] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.073441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.080202] device bridge0 entered promiscuous mode [ 432.091383] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.097827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.104569] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.111015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.117956] device bridge0 entered promiscuous mode [ 432.125272] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 432.730956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:52:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt(r0, 0x7, 0x1ff, &(0x7f0000000180)="d6428869b3703bf1d5a97a7bf29853ce335933d94d01289785c44938ca92df98c8fbd1074f1198bbf4a60ed6a8aad275b273c7bed4895f5a44742538f62426f54ef59aeef4500adbd011257acbc65ea4566614e5189cfbfd45429d4811a58614dbba1109abb81891020bde17fa379d865f2885217480d6151e2fb1358ae1e6d21da4e5738145921cb8272f748fd0", 0x8e) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)=ANY=[@ANYBLOB='&\x00']) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x6, 0x0, [{0xbfe, 0x0, 0x9}, {0x208, 0x0, 0x5}, {0x40000bff, 0x0, 0xb8d}, {0x299, 0x0, 0x5b}, {0x3ac, 0x0, 0xfff}, {0x632, 0x0, 0xfd17}]}) 18:52:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0), 0x8) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0xfffffffffffffff8, 0x2, 0x10001, 0x7, 0x23}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r1, 0x10000, 0x7f}, &(0x7f0000000400)=0x8) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f00000000c0)=0x400, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e20, 0x9, @mcast1, 0xd0}, 0x0, [0x4815, 0x6, 0x0, 0x9, 0x7, 0x100000001, 0x7, 0xc91]}, 0x5c) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@empty, 0x3b}) 18:52:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x80000000, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x8000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x1, 0x0, &(0x7f0000000700)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x3a7, 0x0, &(0x7f00000000c0)=[@increfs_done], 0x0, 0x0, &(0x7f0000000180)}) dup2(r2, r1) 18:52:10 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470031ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:10 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, 0x0, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r6}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r7 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r7) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:10 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470079ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1d}, 0xe) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x121840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x2000000000000020, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffc5}, [@ldst={0x7}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x23) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) 18:52:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a98000/0x1000)=nil, 0x1000, 0x2, 0x803d, 0xffffffffffffffff, 0x0) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000002c0)={{0x9, 0x7, 0x7, 0xf5, 'syz1\x00'}, 0x2, 0x10000000, 0x0, r4, 0x5, 0x0, 'syz0\x00', &(0x7f0000000140)=['/dev/kvm\x00', "47504c2cf574727573746564", '/dev/kvm\x00', "046d696d655f74797065747275737465647b2f6367726f75702174727573746564242e00", "6e6f6465763a706f7369785f61636c5f6163636573732d73797374656de600"], 0x61, [], [0x8000, 0xffffffffffffffc3, 0x0, 0x1]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000194000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="48b801000000000000000f23c00f21f835000000000f23f80f01cf0feda65f8d0000460f01dfc74424008b000000c744240205000000ff2c2448b804000000000000000f23c00f21f835010001000f23f866baf80cb804152c8bef66bafc0ced0f0134900f01cfb8010000000f01d9", 0x6f}], 0x1, 0x1a, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x14}) 18:52:10 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x804, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ppoll(&(0x7f0000000280)=[{r1}], 0xf0, &(0x7f0000000200)={0x0, 0x1c9c380}, &(0x7f0000000380), 0x8) [ 433.015872] binder: release 21943:21958 transaction 50 out, still active [ 433.016004] binder: BINDER_SET_CONTEXT_MGR already set 18:52:11 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="f6ff0003000000000001", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000001c0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x75da}}, 0x28) [ 433.058917] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.066206] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.067351] binder_alloc: 21943: binder_alloc_buf, no vma [ 433.078357] binder: 21943:21945 transaction failed 29189/-3, size 24-8 line 2970 18:52:11 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470067ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000140)={0x0, 0x4, 0x6, 0x54cf}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) r4 = accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10) kcmp(r2, r3, 0x6, r4, r0) [ 433.144205] binder: 21943:21965 Release 1 refcount change on invalid ref 1 ret -22 [ 433.155005] device bridge0 left promiscuous mode [ 433.173957] binder: 21943:21958 ioctl 40046207 0 returned -16 [ 433.220963] binder: send failed reply for transaction 50, target dead 18:52:11 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x4800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000340)={0x8, 0x3, {0x0, 0x3, 0x0, 0x1, 0x8}}) r2 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x5, 0x440000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="11e2ad2062bf3de60808679e634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x48800) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000dfac), 0x1, 0x0, &(0x7f000000df36)="12"}) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000ce4000)) r5 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="580bfcca69f5a7ac640fa9de65ece7d7eb8145015a7d4e7992334e06f365f93ae1e16fbaed94747c9ed218819a1d83d0c6ce6a37edb1d65c664e5ad9c4161b7adcd72ff45cbad03d90fa6c7c7f49e39f5a391fd95540edd5dd6d67b8043f0ef10e96c14587ce14aa3646e9cf98a51a37f6f3c7", 0x73, 0xfffffffffffffff8) keyctl$clear(0x7, r5) 18:52:11 executing program 5: socket$inet(0x10, 0x80002, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000140)={@dev, 0x0}, &(0x7f0000000180)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x108, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0xec, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x24d6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x45177a89}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2f0000001800030007fffd946fa283bc8020000000040005031d8568130009000f0014cc16ccbb24e0710b42fa3ccc", 0x2f}], 0x1}, 0xfffffffffffffffe) 18:52:11 executing program 3: r0 = memfd_create(&(0x7f0000000140)='\x00', 0x40000000000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)=0x628) getsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) fsync(r1) 18:52:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000e5bff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000015c0)) readv(r0, &(0x7f0000000600)=[{&(0x7f0000001600)=""/4096, 0x100b}], 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x7, 0x4) 18:52:11 executing program 2: r0 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3f9}, 0x10) bind$packet(r0, &(0x7f00004a9000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local={[], 0xffffffffffffffff}}, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004aeb5c)=@generic={0x10000000001e, "02ed01000000000000000001e527cc573c5bf86c483700c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f9b1ff010003000024e7af50dd0700000000000000e3ad316a19830000000000000006cb24281e2780e503000076c3979ac40023bd07020078a1dfd300881a8365b186827436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00008b2000)}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4040, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) sendmsg(r2, &(0x7f00000005c0)={&(0x7f00000000c0)=@hci={0x1f, r3}, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)="8f94d5516ba6881811e7dfd3903fce344add220460c75ddc49d3cfb58963306aadc223670a696fd63c47be8a89cc99c1f8bae76fcbbd55dd82bf87ffc3d89375af8dfd4a5afa671287420ce6e76bfd31788f05bd036c677152079dc48778d9c8f76152bbda01baf88f6ecd6c15a346085cbc5655487619fc07cd9c8486587296", 0x80}], 0x1, &(0x7f0000000240)=[{0xd8, 0x100, 0x5, "e2d5810d014ce7f8c5dc4abc79b04db191c0e389d62a88ce1c984177117b81a369c401e62edc3b8dc38286157b5306e04dc0c3e13ee14e6ddb2c3ae506adbb8c417ce81dd465370a08b8b167abafbac3dfb10dbc98fc728571122c0d94b3bd857d434d52632289ceabf0aa80047036c4c763cbd2bd663e7266b8996bf9226f61982a7f927b2abded8e688a69ae88cdf355452559277566e874e90bdb57d17f603f93671838caeb253a35d6e949a01d10fc4c120ec803cb74a058f41bffb7aa68e5886595"}, {0x20, 0x13a, 0x7f, "18735c573db2b1fe0f7519d12d"}, {0x80, 0x105, 0x3, "d8fc81f9223ea80779f083d7aeeea816a9732fe11a9dac1edd36e0d0a272b54c21727547bdd57a9075b310228fa39851fc2f406e223bf01b27fefc637ef3438d906dab6a76f4739fd2f8545607542227dc7c8f381f7c48bd0824dc295f136240159f18b766445a0deb"}, {0x100, 0x1ff, 0x20, "4931fd6757e44ab27a263eca0f5f067a9397199f5387459d5d4182cc1fb170d475e2cced599494d87c3c802b29236d75d2dc2384f6dbcdac90139579a1a3432fdde897f84a305d9a2e2d154a8cb14397bfdb69c7cc08a4d64e8a4f4f34765b2b81b023de52b0159c465d33cac821e624755a678196959de46fbb677701ce4262507f5b9e790eda5949e986b614c5a5357db5666e00224015433f83ab0a42c871ab6a4779acfef42c32b7e0de7540938cc4de1bfc6d1c5fa9b4822ea44078c1ed4316e0920f00c24f37de33aab3c9e41f5f4f1e59f5fd8620db79d78b97baa82eb4aaac4fca3b24e4492cbd"}, {0xf0, 0x119, 0x20ea, "993bc6670f3710ac430e8c62b8c2dee162f027409d5674184e95a8cff5c6331d8f03ccf68ee2b6205a9c25690298a43d8e438f00ef5122e2bdf8273e9a4294097dfd1447f8d2acdce5dc365e877c6753f246865e3c3fa26359a92558c41057b3aa5897de1466218d875a724d0d140d1352b31b0633c269f416dc78bdaa380ca8f55e495b9c10e163e8cf0cff4425b26210ad9d5bf5b7c939f345a95565abd8a9281a1e2cfe7021a2ef9c44e96ce032543bcfbe190bcc3d1f0ba06dc7fdabd69b9c69430a2118a2dacd288140a43a3d9b442db259eb1e4581c891901e"}], 0x368, 0x40}, 0x4) [ 433.413108] binder: 21997:21998 ioctl c0306201 20007000 returned -14 [ 433.467249] binder: 21997:21998 ioctl 80047013 20000080 returned -22 [ 433.633366] binder: BINDER_SET_CONTEXT_MGR already set [ 433.644798] binder: 21997:21998 ioctl 40046207 0 returned -16 [ 433.659683] binder: 21997:22004 ioctl c0306201 20007000 returned -14 [ 433.672963] binder: 21997:21998 ioctl 80047013 20000080 returned -22 18:52:11 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x2}}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r2 = dup3(r0, r1, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000040)={0x2, r2}) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000440)=""/158) clock_getres(0x0, &(0x7f00000000c0)) 18:52:11 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447001cffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:11 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000280)={0x7fff, {{0x2, 0x4e23, @local}}}, 0x88) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r2, 0x80287010, &(0x7f0000000080)) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 18:52:12 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fdatasync(r0) eventfd2(0x0, 0xe8c65946fbef7914) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 18:52:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x20000) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000100)) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0xaf01, &(0x7f00001e3000)) r3 = eventfd(0xffffffdffffffffe) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r3) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000340)) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) 18:52:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)=0x0) get_robust_list(r1, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f0000000400)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x1f, @dev={0xfe, 0x80, [], 0x1f}, 0x3}, @in6={0xa, 0x4e24, 0xf7be, @remote, 0x6}, @in={0x2, 0x4e23, @dev}], 0x48) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x11, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xa) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)={{0x1, 0x7ff, 0x5, 0x49a53b95, 0xffffffff, 0xffff}, 0x1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0xa4000, 0x0) semget(0x0, 0x4, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000001c0)=""/208, &(0x7f00000002c0)=0xd0) lstat(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000800)) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) getresuid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) fstat(r0, &(0x7f0000001cc0)) getgroups(0x1, &(0x7f0000001d40)=[0xee01]) lstat(&(0x7f0000004900)='./file1\x00', &(0x7f0000004940)) getresgid(&(0x7f0000001e40), &(0x7f0000001e80), &(0x7f0000001ec0)) getresuid(&(0x7f0000000380), &(0x7f0000000ac0), &(0x7f0000000b00)) fstat(r2, &(0x7f0000001fc0)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000002040)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000002140)=0xe8) fstat(r0, &(0x7f0000002180)) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000003a40)={{{@in=@remote, @in6=@local}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000003b40)=0xe8) lstat(&(0x7f0000001e00)='./file0/../file0\x00', &(0x7f0000000b40)) fstat(r4, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000004140)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000004240)=0xe8) fstat(r3, &(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getuid() lstat(&(0x7f0000004300)='./file0\x00', &(0x7f0000004340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = geteuid() lstat(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000004580)=[{&(0x7f0000003900)=@abs={0xc60d5c80c1ccdb1d, 0x0, 0x4e24}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003980)="2ef6612603df04e220b6a7ae59eeb303af4c395582bbd206061fbc65584dd211d243ffc8efd2461e0530ebe00487bcc24897fac80134c053de9eb091b064fe0926c599667aff545273a27eb1fcddc20406e99a13143c17a7516c2a8d3e2b7af4f3fd9a631582e6657a71f4", 0x6b}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="2800000001000000deb2f9fb4dd80bff71ab50df1dc2845e0cb74d9697a90db24a858e6f0a3f37957ebab89e58a7fd8bdaa9a436e170700d96260000000000000000000000000000000000000000"], 0x10, 0x20000040}, {&(0x7f0000003d00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000003f00)="8fb0488f961ef396c6458eef40ceba9ee1bc010abd2c7b286644559d85242b23c17dc125e0edb200d61a1bd7a7d590ffd0070dafaac7467911be5278939bcf1a8d4c6124042773c0d589b7cc9485fb0e1aa927dbe5ae0072171f8f5637602e2bfa8c0b9abb5113f8aa4a5eb551b53beb42913f6ab59fbf511b33a9e73ea5c515e7924a1932d6259125663d0648ea646e7e78d69ac5755c06ef4c9451a1a8559bcb09474261aca9fd2e6867b81279f87492cefaeaa270a1ee8c19518666667d0ae3c6d1f8a5d9c55017c6cb7ba83e1602130cace9f5f9bdaf12449111a3f1f728f8628001d9010481ed350d63", 0xec}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="1c5201a01b903c9f70fd00de33c80000000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000010000000000000000100000001000000"], 0xc0, 0x4000}], 0x2, 0x80) 18:52:12 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r3, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r6}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r7 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r7) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000003, 0x100000003) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffe) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$KDSKBLED(r2, 0x4b65, 0x407) r3 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000a00), 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000000680)='keyring\x00', &(0x7f00000003c0), 0x0, 0x0, r3) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400f40000000000000ed5e938c8b06fb43d0f2b99a7e684a3c0566c328ca9d5b08eeceb9d0fff0526bc8384f082bbb612c59d6f", @ANYBLOB="08002bbd7000fcdbdf250f000000"], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r5 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000340), &(0x7f0000000500)="01adf7c04eb7185f32", 0x9, r4) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000002c0), &(0x7f00000005c0)="1b671a7743a52f82a3e679d766dd97ca1553fa8f512252f6930cbe77382b678d87117da44bf673d76908792613342be1c4a7413fcb1d56e4cbcea2c85d90e4d2abfe5268717591ae44fe743c85dea8f2226ceb597fec92980a57d8ef4eec538808550936d30df022a075ff7220f9a73b3e54e4d3592b95c13e04cbb0b5798c590783506ff2ea8f1da1b5429e0e64fa064eec2eb87100", 0xffffffffffffff31, r1) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r5}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000000180)={&(0x7f0000000140)={'poly1305\x00'}}) 18:52:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000040)={[0x100000, 0x0, 0x11000, 0xf000], 0xfffffffffffffffc, 0xa8, 0xe80}) sendmsg$nl_xfrm(r0, &(0x7f0000002fdd)={&(0x7f0000015ff4), 0xc, &(0x7f0000015000)={&(0x7f000000bf20)=@delpolicy={0x5c, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@broadcast}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x6d}}]}, 0x5c}}, 0x0) 18:52:12 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470053ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 434.072249] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.078702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.085474] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.091849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.098650] device bridge0 entered promiscuous mode 18:52:12 executing program 5: mknod(&(0x7f0000f80000)='./file0\x00', 0x103c, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f0000000300)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8001, 0x100, 0x0, 0xb, 0x4, 0x4, "512faf6b9166a5e69ff19964da0c1ed86f7640427b34b8951398610365ed3fff291e5169223a915c8d1b69763eca984c571cd62ae4c2bd03b2df449dc3bbd345", "ee0e488e2bad1b3070ae6c90cd658aaf30c4fcc24b6c86159c2d19d7947c66e87a4bc6db31ea86d7dedf0938381cb564618316b6fbbfd1c2b0041440c589f537", "2e208f5b566bf285c15c1960b4262e1ef016fcabbfeb3144035ead6ae6e9de34", [0x4, 0x5]}) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r3, &(0x7f00000025c0), 0xf9, 0x0, &(0x7f0000d93ff6)=@file={0x0, './file0\x00'}, 0x6e) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000200)) fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) tkill(r1, 0x16) exit(0x0) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 18:52:12 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000100)={0x176fb32c, 0x400, 0x7f, 0x5}) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x14}) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x8) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x47) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write(r1, &(0x7f00000001c0)="5a5857d50cdfbeca191e38aa0658805fa00b09d6ff04cd6e13d54215679bf50340871b1ad074206db7ca81d9931c66904d1ac5e79577d8a114e1d90a6804512597add97531afa1fb0eac8378cb668ecb522aabeb2a8e672cb5a4d50fca", 0x5d) close(r1) 18:52:12 executing program 1: syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xfffffffffffffffe, 0x0, @ipv4={[], [], @multicast2}, 0x7}, 0x5e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000017, 0x0) 18:52:12 executing program 4: bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) syz_emit_ethernet(0x34, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x4, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb}, {}, {}, {0x8, 0x57}}}}}}, &(0x7f0000000000)) connect$l2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x1, 0x4, 0x2, 0x4}}, 0x2e) 18:52:12 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x30000000) [ 434.287458] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.294619] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.327330] device bridge0 left promiscuous mode 18:52:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@rand_addr, @multicast2}, &(0x7f0000000100)=0xc) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=""/235, 0xffffffffffffff24) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000a40)={"49444c4554494d45521100"}, &(0x7f0000000a80)=0x1e) 18:52:12 executing program 4: r0 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x6b7f, 0x0, 0x0, 0x1}, &(0x7f0000000440)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x5, 0x20, 0x1f, 0xfffffffffffffffc}, &(0x7f00000004c0)=0x18) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000500)={r3, 0xfc9, 0x3, 0x0, 0x2c4, 0x8, 0x4c91, 0x4c, {r4, @in={{0x2, 0x4e20, @broadcast}}, 0x3, 0x1, 0x81, 0x10, 0x6}}, &(0x7f00000005c0)=0xb0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6gretap0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="41000000690700000900000009000000040000000600a2ffffff5308000001000000"]}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xcb, "7bbf251cbb9331b8ec2d855463483ec0d60c997b36343c99aff4717af4125335e10e4e2c6c0c8d1c3900b6ea168f6412b10581a5d7d58164322e19cf98daf4a20084c85daa099956a4de9b821a0d342f9adf2584186f3e9f349d505b411ea4a8fcb3cee93371a50f582ec467fa62616e3b52726258e7a27212d4cf33421bb89e8121e2100b4550272c8f44bfc1ed250354418593ddde6ba1b5394971761d03d6ff3c9f30aff2267f0c872b4777163b9939cfa4ca1dbe560d7d7c5ea5a6f0a5248173a1b71f1d448d4d3928"}, &(0x7f00000001c0)=0xd3) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000240)={r5, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x2, 0x2, 0x80000001, 0x7, r5}, &(0x7f0000000300)=0x10) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280)={0x3}, 0x4) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x40000, 0x0) ioctl$TUNSETVNETLE(r6, 0x400454dc, &(0x7f0000000380)=0x1) 18:52:12 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000effe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)=0x0) get_robust_list(r1, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f0000000400)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x1f, @dev={0xfe, 0x80, [], 0x1f}, 0x3}, @in6={0xa, 0x4e24, 0xf7be, @remote, 0x6}, @in={0x2, 0x4e23, @dev}], 0x48) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x11, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xa) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)={{0x1, 0x7ff, 0x5, 0x49a53b95, 0xffffffff, 0xffff}, 0x1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0xa4000, 0x0) semget(0x0, 0x4, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000001c0)=""/208, &(0x7f00000002c0)=0xd0) lstat(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000800)) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) getresuid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) fstat(r0, &(0x7f0000001cc0)) getgroups(0x1, &(0x7f0000001d40)=[0xee01]) lstat(&(0x7f0000004900)='./file1\x00', &(0x7f0000004940)) getresgid(&(0x7f0000001e40), &(0x7f0000001e80), &(0x7f0000001ec0)) getresuid(&(0x7f0000000380), &(0x7f0000000ac0), &(0x7f0000000b00)) fstat(r2, &(0x7f0000001fc0)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000002040)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000002140)=0xe8) fstat(r0, &(0x7f0000002180)) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000003a40)={{{@in=@remote, @in6=@local}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000003b40)=0xe8) lstat(&(0x7f0000001e00)='./file0/../file0\x00', &(0x7f0000000b40)) fstat(r4, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000004140)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000004240)=0xe8) fstat(r3, &(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getuid() lstat(&(0x7f0000004300)='./file0\x00', &(0x7f0000004340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = geteuid() lstat(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000004580)=[{&(0x7f0000003900)=@abs={0xc60d5c80c1ccdb1d, 0x0, 0x4e24}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003980)="2ef6612603df04e220b6a7ae59eeb303af4c395582bbd206061fbc65584dd211d243ffc8efd2461e0530ebe00487bcc24897fac80134c053de9eb091b064fe0926c599667aff545273a27eb1fcddc20406e99a13143c17a7516c2a8d3e2b7af4f3fd9a631582e6657a71f4", 0x6b}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="2800000001000000deb2f9fb4dd80bff71ab50df1dc2845e0cb74d9697a90db24a858e6f0a3f37957ebab89e58a7fd8bdaa9a436e170700d96260000000000000000000000000000000000000000"], 0x10, 0x20000040}, {&(0x7f0000003d00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000003f00)="8fb0488f961ef396c6458eef40ceba9ee1bc010abd2c7b286644559d85242b23c17dc125e0edb200d61a1bd7a7d590ffd0070dafaac7467911be5278939bcf1a8d4c6124042773c0d589b7cc9485fb0e1aa927dbe5ae0072171f8f5637602e2bfa8c0b9abb5113f8aa4a5eb551b53beb42913f6ab59fbf511b33a9e73ea5c515e7924a1932d6259125663d0648ea646e7e78d69ac5755c06ef4c9451a1a8559bcb09474261aca9fd2e6867b81279f87492cefaeaa270a1ee8c19518666667d0ae3c6d1f8a5d9c55017c6cb7ba83e1602130cace9f5f9bdaf12449111a3f1f728f8628001d9010481ed350d63", 0xec}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="1c5201a01b903c9f70fd00de33c80000000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000010000000000000000100000001000000"], 0xc0, 0x4000}], 0x2, 0x80) 18:52:12 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000040)=0x8) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xa4, "94e8b1be575e776ab189d006d3ee7bae05b6b11bc5efa231cd68df4351d7eaa4d74a7ff44457211b63882f617655d01c6dfe7d1e9b84de674b5b1c945b361961ec0777928abd7e4f9cfef469381b15d057c51fe1a9e8a6f8a79331a99da67d22f5813382ec36bf2b638bc1142f48c7f5ef149d775b9b3bc5d8057ede8daf25cbfe85f2187be2411feef3920f43c1fb935c46664aad323727feab7defed58d04415a873e7"}, &(0x7f0000000180)=0xac) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0xfffffffffffffffb}, 0x8) r2 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0xada2, 0x2) read$eventfd(r2, &(0x7f0000000240), 0x8) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000280)=0x8) r3 = openat$cgroup_subtree(r0, &(0x7f00000002c0)='cgroup.subtree_control\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000380)="382d2dee2397333a093ed1a0af4af590", 0x10) faccessat(r2, &(0x7f00000003c0)='./file0\x00', 0x64, 0x600) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='nv\x00', 0x3) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000440)={'icmp6\x00'}, &(0x7f0000000480)=0x1e) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000004c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@random={'system.', ':lo\x00'}, &(0x7f00000005c0)='cgroup.subtree_control\x00', 0x17, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000600)={0x2c, 0x8200, 0xe, 0x8, r1}, &(0x7f0000000640)=0x10) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000680)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@mcast1, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8) write$P9_RLERRORu(r3, &(0x7f0000000900)={0x20, 0x7, 0x1, {{0x13, 'selinux+\'nodeveth1:'}, 0x9}}, 0x20) write$FUSE_POLL(r0, &(0x7f0000000940)={0x18, 0x0, 0x7, {0xc66}}, 0x18) write$P9_RVERSION(r0, &(0x7f0000000980)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15) getsockname$unix(r0, &(0x7f00000009c0), &(0x7f0000000a40)=0x6e) setsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f0000000a80)="ebb491cafa120bcd6296dca09c10fb142ab2eb71536270a692a0f7079097841bccf9c236c8f56aa93aaf4784993a8101ec30f942bcf0f8e6cc70893a1ef52817ef0db3acd6901e1defa0c78efc2f107625f67ac2fcc8e8d15e2e989252552e5ae91426f5", 0x64) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000b00)=0x8061) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000b40)) r4 = syz_open_dev$sndpcmc(&(0x7f0000000b80)='/dev/snd/pcmC#D#c\x00', 0xa1e8, 0x400000) ioctl$KVM_ASSIGN_PCI_DEVICE(r4, 0x8040ae69, &(0x7f0000000bc0)={0x9, 0x6, 0x8, 0x2, 0x2}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000c80)={'filter\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) keyctl$set_reqkey_keyring(0xe, 0x0) 18:52:12 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000100)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x4000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x80000008}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1f, 0x81, @local, 0x3}, 0x1c) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0xfffffffd], [], @dev}}, 0x1c) 18:52:12 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447007fffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:13 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)=0x0) get_robust_list(r1, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f0000000400)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x1f, @dev={0xfe, 0x80, [], 0x1f}, 0x3}, @in6={0xa, 0x4e24, 0xf7be, @remote, 0x6}, @in={0x2, 0x4e23, @dev}], 0x48) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x11, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xa) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)={{0x1, 0x7ff, 0x5, 0x49a53b95, 0xffffffff, 0xffff}, 0x1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0xa4000, 0x0) semget(0x0, 0x4, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000001c0)=""/208, &(0x7f00000002c0)=0xd0) lstat(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000800)) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) getresuid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) fstat(r0, &(0x7f0000001cc0)) getgroups(0x1, &(0x7f0000001d40)=[0xee01]) lstat(&(0x7f0000004900)='./file1\x00', &(0x7f0000004940)) getresgid(&(0x7f0000001e40), &(0x7f0000001e80), &(0x7f0000001ec0)) getresuid(&(0x7f0000000380), &(0x7f0000000ac0), &(0x7f0000000b00)) fstat(r2, &(0x7f0000001fc0)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000002040)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000002140)=0xe8) fstat(r0, &(0x7f0000002180)) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000003a40)={{{@in=@remote, @in6=@local}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000003b40)=0xe8) lstat(&(0x7f0000001e00)='./file0/../file0\x00', &(0x7f0000000b40)) fstat(r4, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000004140)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000004240)=0xe8) fstat(r3, &(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getuid() lstat(&(0x7f0000004300)='./file0\x00', &(0x7f0000004340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = geteuid() lstat(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000004580)=[{&(0x7f0000003900)=@abs={0xc60d5c80c1ccdb1d, 0x0, 0x4e24}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003980)="2ef6612603df04e220b6a7ae59eeb303af4c395582bbd206061fbc65584dd211d243ffc8efd2461e0530ebe00487bcc24897fac80134c053de9eb091b064fe0926c599667aff545273a27eb1fcddc20406e99a13143c17a7516c2a8d3e2b7af4f3fd9a631582e6657a71f4", 0x6b}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="2800000001000000deb2f9fb4dd80bff71ab50df1dc2845e0cb74d9697a90db24a858e6f0a3f37957ebab89e58a7fd8bdaa9a436e170700d96260000000000000000000000000000000000000000"], 0x10, 0x20000040}, {&(0x7f0000003d00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000003f00)="8fb0488f961ef396c6458eef40ceba9ee1bc010abd2c7b286644559d85242b23c17dc125e0edb200d61a1bd7a7d590ffd0070dafaac7467911be5278939bcf1a8d4c6124042773c0d589b7cc9485fb0e1aa927dbe5ae0072171f8f5637602e2bfa8c0b9abb5113f8aa4a5eb551b53beb42913f6ab59fbf511b33a9e73ea5c515e7924a1932d6259125663d0648ea646e7e78d69ac5755c06ef4c9451a1a8559bcb09474261aca9fd2e6867b81279f87492cefaeaa270a1ee8c19518666667d0ae3c6d1f8a5d9c55017c6cb7ba83e1602130cace9f5f9bdaf12449111a3f1f728f8628001d9010481ed350d63", 0xec}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="1c5201a01b903c9f70fd00de33c80000000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000010000000000000000100000001000000"], 0xc0, 0x4000}], 0x2, 0x80) 18:52:13 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000010c0)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r1, 0x1, 0x3, [0x2f0, 0x5, 0x6]}, 0xe) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = socket$inet(0x2b, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000380)='\'', 0x0) r5 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x82) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ec77a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) fstatfs(r4, &(0x7f0000000080)=""/16) r7 = memfd_create(&(0x7f000003e000)='\t', 0x0) accept4(r3, &(0x7f0000000300)=@can={0x1d, 0x0}, &(0x7f00000005c0)=0x80, 0x0) r9 = openat$cgroup_ro(r4, &(0x7f0000000240)='rdma.current\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000003c0)={0x7, 0x20, 0x5, 0x0, 0x0, [{r9, 0x0, 0x3}, {r3, 0x0, 0x1}, {r3, 0x0, 0x1}, {r0, 0x0, 0x1f}, {r3, 0x0, 0xab13}]}) r10 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000600)={{{@in6=@loopback, @in=@multicast1, 0x4e22, 0x5, 0x4e23, 0x0, 0x2, 0xa0, 0x20, 0x7c, r8, r10}, {0x1, 0x2, 0x0, 0x8, 0x2, 0x1, 0x8000, 0x5}, {0x0, 0x6, 0x6, 0x8}, 0x8, 0x0, 0x2, 0x1, 0x3, 0x3}, {{@in, 0x4d6, 0x3c}, 0x2, @in6=@ipv4={[], [], @rand_addr=0x4}, 0x3507, 0x3, 0x3, 0x0, 0xa03, 0xdc7, 0xfff}}, 0xe8) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r12 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) write$sndseq(r6, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x218) io_setup(0x5, &(0x7f0000000280)=0x0) io_cancel(r13, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0xd8, r3, &(0x7f00000000c0)="3c54856f0c91cf0a725a31d51cbe5f81ae6b8dd4c18ee65fddcccf6f235cad086951cd0cb428bb069f46af6932f5bc8dd7cdf582e3acbeb299bacda39c580905b9e2c10e2a5365b4cebf1d", 0x4b, 0x0, 0x0, 0x2, r6}, &(0x7f0000000180)) dup2(r12, r7) write$sndseq(r7, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) 18:52:13 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447006affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000001c0)=""/139) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x4011, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_names\x00') stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000340)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x0, &(0x7f0000000380), 0x78) 18:52:13 executing program 5: lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '/dev/hwrng\x00'}, &(0x7f0000000200)=""/190, 0xbe) r0 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000380)={0x0, 0xc, 0x6, 0xa, 0xa, 0x9, 0x3, 0x149, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x2, 0x4000) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000300)={0x7, 0x6, 0x0, 0x0, 0x76d1, 0x472}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x402501, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000000c0)={{0x1, 0x2}, 0x41}, 0xffffffffffffffac) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000)={0x2e}, &(0x7f00000000c0), 0xfffff, 0xfffffffffffffffb) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000100)='syz1\x00') [ 435.181042] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.187503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.194257] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.200675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.207473] device bridge0 entered promiscuous mode 18:52:13 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x3) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x57a1, 0x10}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000240)={r4, 0x800, 0x1ff, 0x1}, 0x10) sendfile(r1, r3, &(0x7f0000000000), 0xffff) fcntl$addseals(r3, 0x409, 0x8) fsetxattr(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="6f73322e2b8ba516114fdddf6b284f99df92d53e7f4a02759b9461aca7e71489e7debd029f0bb1ea4550afd8fa2af6d6f5f661d29c9026cf093409b63c0bedd6a90933d1e7d1570ae2f4101aefc1051d64e5d4c1f13c5c504ea6d44722a68ea01f0ab341587bd469ad302626140200795ab15d28119ba259e6c2cec3ea6ac172b2346ab2885076a7c969bd779c4fa61f536bf3ff77ce23151eb286b0e184a04117d3ccbac1a8ca8607559411a80e628f4c8073e6b39ab363"], &(0x7f0000000080)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x18, 0x0) dup3(r2, r3, 0x0) shutdown(r1, 0x1) 18:52:13 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x1}, 0x23, 0x0, 0x0, 0x0, "0327e19a2b0100000000000000f9030008990039966a7d5c037dc1250200000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}}, 0x0) 18:52:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x5) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x9, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x401}, &(0x7f0000000080)=0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3000000010003b0e000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) 18:52:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f00000000c0)={0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000080)={0x0, {0x0, 0x989680}, 0x8001, 0x5}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r0}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000140)={0x1, r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, &(0x7f0000002000)={0x1}) fstat(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000000180)='./file0\x00', r6, r7, 0x1000) unshare(0x400) fcntl$lock(r5, 0x7, &(0x7f0000010000)) tkill(0x0, 0x0) r8 = dup3(r4, r5, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x4, 0x2, 0x9, 0x6}, {0x0, 0x9, 0x6, 0x80000001}, {0x20, 0x4, 0x3, 0x2}, {0x5d0, 0xd3, 0xfffffffffffffffc, 0xffffffff}]}) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="0203000310000000000000000000000005000600000000000a0000000000000000000000000000000000ffff0000000000000000000000000200010000000000002004000000000007001900000000000a004e24000000800000000000000000000000"], 0x63}}, 0x0) 18:52:13 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)=0x0) get_robust_list(r1, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f0000000400)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x1f, @dev={0xfe, 0x80, [], 0x1f}, 0x3}, @in6={0xa, 0x4e24, 0xf7be, @remote, 0x6}, @in={0x2, 0x4e23, @dev}], 0x48) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x11, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xa) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)={{0x1, 0x7ff, 0x5, 0x49a53b95, 0xffffffff, 0xffff}, 0x1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0xa4000, 0x0) semget(0x0, 0x4, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000001c0)=""/208, &(0x7f00000002c0)=0xd0) lstat(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000800)) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) getresuid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) fstat(r0, &(0x7f0000001cc0)) getgroups(0x1, &(0x7f0000001d40)=[0xee01]) lstat(&(0x7f0000004900)='./file1\x00', &(0x7f0000004940)) getresgid(&(0x7f0000001e40), &(0x7f0000001e80), &(0x7f0000001ec0)) getresuid(&(0x7f0000000380), &(0x7f0000000ac0), &(0x7f0000000b00)) fstat(r2, &(0x7f0000001fc0)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000002040)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000002140)=0xe8) fstat(r0, &(0x7f0000002180)) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000003a40)={{{@in=@remote, @in6=@local}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000003b40)=0xe8) lstat(&(0x7f0000001e00)='./file0/../file0\x00', &(0x7f0000000b40)) fstat(r4, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000004140)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000004240)=0xe8) fstat(r3, &(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getuid() lstat(&(0x7f0000004300)='./file0\x00', &(0x7f0000004340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = geteuid() lstat(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000004580)=[{&(0x7f0000003900)=@abs={0xc60d5c80c1ccdb1d, 0x0, 0x4e24}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003980)="2ef6612603df04e220b6a7ae59eeb303af4c395582bbd206061fbc65584dd211d243ffc8efd2461e0530ebe00487bcc24897fac80134c053de9eb091b064fe0926c599667aff545273a27eb1fcddc20406e99a13143c17a7516c2a8d3e2b7af4f3fd9a631582e6657a71f4", 0x6b}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="2800000001000000deb2f9fb4dd80bff71ab50df1dc2845e0cb74d9697a90db24a858e6f0a3f37957ebab89e58a7fd8bdaa9a436e170700d96260000000000000000000000000000000000000000"], 0x10, 0x20000040}, {&(0x7f0000003d00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000003f00)="8fb0488f961ef396c6458eef40ceba9ee1bc010abd2c7b286644559d85242b23c17dc125e0edb200d61a1bd7a7d590ffd0070dafaac7467911be5278939bcf1a8d4c6124042773c0d589b7cc9485fb0e1aa927dbe5ae0072171f8f5637602e2bfa8c0b9abb5113f8aa4a5eb551b53beb42913f6ab59fbf511b33a9e73ea5c515e7924a1932d6259125663d0648ea646e7e78d69ac5755c06ef4c9451a1a8559bcb09474261aca9fd2e6867b81279f87492cefaeaa270a1ee8c19518666667d0ae3c6d1f8a5d9c55017c6cb7ba83e1602130cace9f5f9bdaf12449111a3f1f728f8628001d9010481ed350d63", 0xec}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="1c5201a01b903c9f70fd00de33c80000000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000010000000000000000100000001000000"], 0xc0, 0x4000}], 0x2, 0x80) [ 435.459988] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 18:52:13 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:13 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r0, &(0x7f0000001000), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) read$FUSE(r0, &(0x7f00000040c0), 0x1000) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002000)=""/4096) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_STATFS(r0, &(0x7f0000000340)={0x60, 0x0, 0x2}, 0x60) [ 435.511684] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. 18:52:13 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470028ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447006affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:13 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xfffffffffffffe14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x14) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000140)={0xffffffffffffffff}) r4 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000040)) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0), 0x4) r5 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x837b91954f8c7c56) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r3, r4, 0x6, 0x0, &(0x7f0000000300), 0x0, 0x3f, 0xffff, 0x0, 0x0, 0x1, 0xfffe000000000, "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"}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000001380)={0x0, @in={{0x2, 0x0, @multicast2}}, [0xaab, 0xffff, 0x4, 0x3ff, 0x7, 0x1, 0x0, 0x0, 0x1, 0x8, 0x7, 0x0, 0x3, 0xff, 0xe2fe00f]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000200)={r6, 0x401, 0x30}, &(0x7f0000001480)=0xc) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000240)=0xb) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) 18:52:13 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/dev_snmp6\x00') r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) 18:52:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) write$P9_RRENAME(r1, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000100)={0x0, 0x1, 0xb0b, 0x1, 0x2, 0xeaf}) ioctl(r0, 0x9, &(0x7f0000000200)="e541ab316288e0617d6ba72d010000000100000070") getpeername$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a40)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd28, 0x25dfdbff, {0x0, r2, {0xf, 0x8}, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x8, 0x5, {0x4, 0x96ac}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x40800) r3 = socket$inet6(0x10, 0xe, 0xffffffffffffffdd) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000300)=""/109) lseek(r1, 0x1e, 0x2) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000280)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="550000001e007f5300fe01b2a4a280930a06200000a8430891000000080008000a000000000000000000000000090c036041726a7735c789b06dca27c43ab8220000060cec4fab91d4000000000000000000000000", 0x55}], 0x1, &(0x7f0000000180)}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000140)=[0xfffffffffffffffd]) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f00000001c0)={0x2, 0x0, 0xd5, 0x0, '\x00', 0xddb}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x13) 18:52:13 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:13 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447007cffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:14 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000340)="0a5cc80700315f85715070") openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x50000, 0x0) syz_open_pts(r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x24000, 0x0) dup(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x200000, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000200)) 18:52:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'}) fcntl$setflags(r0, 0x2, 0x1) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7, 0x0) vmsplice(r1, &(0x7f0000000200)=[{&(0x7f0000000480)="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", 0xff}], 0x1, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000140)={'lo\x00', {0x2, 0x4e24, @broadcast}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000000c0)={0x6, 0x7, 0xfffffffffffff1df}) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0)=0x9, 0x4) socket$inet6(0xa, 0x1000000040002, 0x63ff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) modify_ldt$write2(0x11, &(0x7f0000000240)={0x42e, 0x20001800, 0x1000, 0x2, 0x0, 0xfffffffffffffff8, 0x4, 0x0, 0x1, 0x373d}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x4) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r4, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) unshare(0x40000000) accept4$vsock_stream(r6, &(0x7f0000000180)={0x28, 0x0, 0x2711}, 0x10, 0x80000) 18:52:14 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470032ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:14 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 18:52:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r0, &(0x7f0000001000), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) read$FUSE(r0, &(0x7f00000040c0), 0x1000) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002000)=""/4096) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_STATFS(r0, &(0x7f0000000340)={0x60, 0x0, 0x2}, 0x60) 18:52:14 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r3, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r6}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r7 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r7) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 18:52:14 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) read$FUSE(r0, &(0x7f0000001000), 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) read$FUSE(r0, &(0x7f00000040c0), 0x1000) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002000)=""/4096) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_STATFS(r0, &(0x7f0000000340)={0x60, 0x0, 0x2}, 0x60) 18:52:14 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lookup_dcookie(0x400, &(0x7f0000000080)=""/31, 0x1f) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000040)={0x1, 0x7eb58503, [{0x1e1f, 0x0, 0x2d0f}]}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = dup2(r1, r1) ioctl$sock_bt(r2, 0x541b, &(0x7f0000000280)="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") 18:52:14 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470020ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 436.526833] input:  as /devices/virtual/input/input30 18:52:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0) epoll_create1(0x80000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x0, 0x4) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000100)={0x0, 0x2, 0xffff, 0x0, 0x16}) ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f00000004c0)={0x32a1, 0x5, 0x0, 0x6, 0x2}) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:14 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x400, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000680)={0x8}, 0xfffffffffffffe7f) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000440), 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='bbr\x00', 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x41a0000, @empty={[0xe00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9050000]}}, 0x1c) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x0, 0x800) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ptrace$setopts(0xffffffffffffffff, r3, 0xfff, 0x48) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000180)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x401104000000016) 18:52:14 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) accept4$inet6(r0, 0x0, &(0x7f0000000180), 0x800) close(r1) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000240)) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 18:52:14 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470030ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 436.790388] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:52:14 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470042ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYBLOB="17c9"], &(0x7f0000000340)=0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000080)) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth1\x00', {0x2, 0x4e24}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:52:15 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470072ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 437.299947] input:  as /devices/virtual/input/input31 [ 438.081783] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.088252] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.099219] device bridge0 left promiscuous mode 18:52:16 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x105) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000002, 0x0) socket$packet(0x11, 0x0, 0x300) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)="040400000309c14609005375c5", 0xd, 0x1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000080)={0x40000000}) connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) [ 438.264768] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.271196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.277952] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.284365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.291101] device bridge0 entered promiscuous mode 18:52:16 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x39e4178f, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRESDEC=r0, @ANYBLOB="00000000040000000000000000000000000000000000000000000000"]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/195}, {&(0x7f0000000a00)=""/90}, {&(0x7f0000000a80)=""/81}, {&(0x7f0000000b00)=""/76}], 0x1000000000000016, 0x200000000100000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000700)={0x1b4, r2, 0xc32, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffff46b}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0xa}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @loopback}}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7f}]}]}, 0x1b4}}, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000400)=""/216, 0xfffffffffffffd72}], 0x2, 0x0) 18:52:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="480000000000000014010000010000000000b926bb930000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000fff650bd", @ANYPTR=&(0x7f0000001b80)=ANY=[@ANYPTR=&(0x7f0000001940)=ANY=[@ANYBLOB="0000000000000000000000000000000002000000000000000000000000010000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000"], @ANYBLOB='i\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="01000000000000003d000000000000000000000000000000"], 0x46}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x10000, 0x102) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x4, 0x4) 18:52:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5437, 0x0) r1 = dup(r0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 18:52:16 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470058ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:16 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, &(0x7f0000000300)) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000340)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x1000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) close(r0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000003c0)={0x80, 0x7, 0x0, 0x0, 0x1}, 0x14) fremovexattr(r1, &(0x7f0000000100)=@known='system.posix_acl_default\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 18:52:16 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r3, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r6}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r7 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r7) ioctl$VT_DISALLOCATE(r1, 0x5608) 18:52:16 executing program 1: r0 = socket$inet6(0xa, 0x7, 0xfffffffffffffffd) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x208883, 0x0) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000080)=0x7fffffff, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x4, &(0x7f0000000040)={0x0, 'veth1_to_bond\x00'}, 0x18) close(r3) dup3(r1, r2, 0x0) 18:52:16 executing program 5: r0 = open(&(0x7f00000003c0)='./file0\x00', 0x200, 0x48) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="028f764070000000000000") perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000007c0)=[@in6={0xa, 0x4e22, 0x4, @empty, 0x3}], 0x1c) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000200)=""/82) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080), 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='[proc\x00'}, 0x10) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x1c) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180), 0x0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000640)={0x0, 0xfffffffff7433fc6, 0x3f, 0x9, 0x7f, 0x4, 0x8, 0x7, {0x0, @in6={{0xa, 0x4e24, 0x3, @mcast1, 0x2}}, 0x9, 0x8, 0x80000001, 0x100, 0x4}}, &(0x7f0000000700)=0xb0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYBLOB="0100070000000600ff0f060046002c070900"], &(0x7f0000000780)=0x16) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000440)) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_open_dev$adsp(&(0x7f0000000600)='/dev/adsp#\x00', 0x7, 0x400000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000580), &(0x7f0000000180)=0x4) bind$inet6(r2, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), 0x4) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setitimer(0x3, &(0x7f00000002c0)={{}, {r5, r6/1000+10000}}, &(0x7f00000005c0)) sendto$inet6(r2, &(0x7f0000000380), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000380)='tls\x00', 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=""/158, &(0x7f0000000540)=0x9e) dup2(r2, r2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x9, 0x4}, 0x10) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000140)) 18:52:16 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = socket(0x400000000010, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85715070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f00000000c0)) ioctl$TCSETSW(r1, 0x40045566, &(0x7f0000000080)) 18:52:16 executing program 0: r0 = semget$private(0x0, 0x7, 0x0) unshare(0x40000) semtimedop(r0, &(0x7f0000000140)=[{0x3, 0xfffffffffffffff9, 0x1000}], 0x1, &(0x7f0000efe000)={0x2000}) semop(r0, &(0x7f0000000040)=[{0x4, 0x0, 0x1800}, {0x7, 0x9, 0x1000}, {0x7, 0x9, 0x800}, {0x3, 0x9, 0x1000}, {0x4, 0x0, 0x1000}, {0x3, 0xffffffff, 0x1000}, {0x0, 0xfffffffffffffffb, 0x1800}, {0x0, 0x3, 0x1800}, {0x1, 0x2, 0x800}], 0x9) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000003000)=[0x0, 0x0, 0x0, 0x7fff]) unshare(0x8000000) 18:52:16 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r3, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r6}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r7 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r7) ioctl$VT_DISALLOCATE(r1, 0x5608) 18:52:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={"8c6574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x47732e5398416f1a}) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={"64756d6d7930000000fffffdfd00", 0x400}) 18:52:16 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470011ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x0, 0x0, 0xdd, 0x2, @scatter={0x0, 0x0, &(0x7f0000000440)}, &(0x7f0000000440)="5f39203a08513b858c08ef25b32c1ec61c000f2657a275e0338c73d24faf8117a1bbcec4ae78adceccee3f361feacd3727fbd994672f81e0f5d71764ecd62f25405e2b3e62a87bcf847a07bdb0d782688cab99a268ab1023f1cf9e88e9b59d48f7951afbb6d69b5489cab94da88b3749f9b93d0d772d9e8f94c38eaae311925d8d0e96e642ab3819092f2c160ab86f955fa4251f2c09540935e21c7e358d610c47fce98bbb3ff944f6636a62a74afdaa552745045b4e138c317dabd542339d700c53a7bcd0a3a7f69f30218a4369969160f31881145275a7eb05c7cdb4", &(0x7f00000002c0)=""/44, 0x0, 0x0, 0x0, &(0x7f0000000600)}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") timer_create(0x7, &(0x7f00000000c0)={0x0, 0x3c}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') recvfrom$inet(r1, &(0x7f0000000180)=""/27, 0x1b, 0x1, 0x0, 0x0) 18:52:16 executing program 0: r0 = socket$inet6(0xa, 0x80007, 0x82) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x2, 0x0, [0xc0010015, 0x1]}) socket$inet6(0xa, 0x4, 0x101) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r4, 0x30, 0x1, @in6={0xa, 0x4e24, 0x34ac, @loopback, 0xdea}}}, 0xa0) 18:52:16 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r3, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r6}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r7 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r7) ioctl$VT_DISALLOCATE(r1, 0x5608) [ 438.999455] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 439.102796] *** Guest State *** [ 439.106214] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 439.115117] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 439.123992] CR3 = 0x0000000000000000 [ 439.127806] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 439.133940] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 439.139989] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 439.146747] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 439.154808] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 439.162852] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 439.170892] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 439.178925] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 439.186999] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 439.195020] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 439.203055] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 439.211110] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 439.219162] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 439.227191] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 439.233664] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 439.241200] Interruptibility = 00000000 ActivityState = 00000000 [ 439.247482] *** Host State *** 18:52:17 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447003bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 439.250751] RIP = 0xffffffff8120b1e4 RSP = 0xffff880192ddf350 [ 439.256788] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 439.263309] FSBase=00007fec2558c700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 439.271180] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 439.274056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 439.277128] CR0=0000000080050033 CR3=00000001923c8000 CR4=00000000001426e0 [ 439.277149] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 439.277165] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 439.277173] *** Control State *** [ 439.277185] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 439.277198] EntryControls=0000d1ff ExitControls=0023efff [ 439.277216] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 439.277227] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 439.277238] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 439.277247] reason=80000021 qualification=0000000000000000 [ 439.277256] IDTVectoring: info=00000000 errcode=00000000 18:52:17 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) [ 439.277263] TSC Offset = 0xffffff12ba1f7a0e [ 439.277269] TPR Threshold = 0x00 [ 439.277282] EPT pointer = 0x000000018ab2401e [ 439.429021] kvm [22367]: vcpu0, guest rIP: 0x0 unimplemented HWCR wrmsr: 0x1 18:52:17 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80, 0x0, 0x2}, 0x2cd) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f0000000100)=ANY=[@ANYBLOB="18400000148e3f23c3b0d48fd60000001e0600ffffffff000b79a9f0b7aa3e8460c25a928557be9c8f9a9e873798fa98e1bdf90fa9f83c2954a067222e815d49e84a91bdc3a997d608ea13de892a068637fd7cb5d074c5a14f0740cdb125264ff04683b1a86bb3c524f0c01a6e783b25b570a4b827370deb9f31dc276d0522bf0c8722f2599b04d872264fa83c509022c314ec9623ac3cbae0f4105fd0dd98df77dea3d0532c53e6c91c65931479113c1995c2e92f95"], 0x18}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x40000, 0x0) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) 18:52:17 executing program 3: socket$key(0xf, 0x3, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x1, 0x80000000}) 18:52:17 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447003fffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 439.471407] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.477983] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0xe}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0)={@empty, 0x41}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) mlockall(0x3) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000240), 0x20000102000007) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x10) fchown(r0, r3, r4) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000001ed, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x2, 0x7fffffff, 0x1}) ioctl$FICLONE(r1, 0x40049409, r0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x500ffe, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000001c0)=0x7) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000600)=""/247) [ 439.543468] kvm [22367]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x1 [ 439.571096] device bridge0 left promiscuous mode 18:52:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) tkill(r0, 0x4) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r1, &(0x7f00000001c0)=""/105, 0x69) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in=@remote}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x15) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x400000000000017, 0x0) 18:52:17 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4000000000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x21}}, 0x8, 0x3, 0x1, 0xa, 0xfff, 0xfffffffffffffffe, 0x1f}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 18:52:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) r5 = accept(r2, &(0x7f00000015c0)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000001640)=0x80) sendmsg$kcm(r5, &(0x7f0000001900)={&(0x7f0000001680)=@can, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001700)="7280", 0x2}, {&(0x7f0000001740)="998b19a6b7257c857de81897f2b318a4247522ce4c586044f380bc3a74947196fb2e6a5f231ef31c49a925d5be6550695bac90af3043a417ea4b6126ef13ac57633481fcf3aa6f01c845305117c1585d05c2374b557f8d0293556157edf6c77222b7d8cac07c7b081b4462c07b5c8c3cb9a8a45fb2c3c6cda553717a861157be3939a346f3177b8f4415653b9e486c59899af0cd99a352ba8600056a0e91a0e063100f1222496f6373a13a98a3f2dee74136aac585a40f1fd527ff56d4c5eb54f393654367be38149a3846609570f65da7f6901032", 0xd5}, {&(0x7f0000001840)="e58a71e612b939674f7c5d97582f17c7f07677bf75355b", 0x17}, {&(0x7f0000001880)="1e8852e991cd1c2a1e", 0x9}], 0x4, 0x0, 0x0, 0x20000004}, 0x4000010) ioctl$TCSETS(r4, 0x40045431, &(0x7f00003b9fdc)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000000c0)) r7 = syz_open_pts(r4, 0x0) dup2(r7, r6) 18:52:17 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470280ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') r1 = shmget$private(0x0, 0x4000, 0x101a, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000100)=""/103) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x100, 0x6}, {0x3, 0x80}, {0x7ff, 0x101}, {0x7fff, 0x4}, {0x5, 0x5d}, {0x74b}, {0x1, 0x40}, {0x3, 0x7ff}, {0x63, 0x80000000}]}) sendfile(r0, r0, 0x0, 0x8) [ 440.306934] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.313385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.320103] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.326473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.333194] device bridge0 entered promiscuous mode 18:52:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x10a02, 0x0) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000100)={0x7, 0x7f}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000071]}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x80000000, 0x40) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080)={0x0, 0xb3e}, 0x8) 18:52:18 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000080), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0), 0x16f) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0) r4 = fcntl$getown(r2, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f0000000140)={r6, r1, 0x6}) dup3(r0, r3, 0x0) mq_timedsend(r6, &(0x7f0000000200)="d972b2bfdbdfc45f2839b95e7fa5fd32232784ad76668ebf2ade5d1636b6079ab9df9696089d6273b97c41c98e4795960f96a0da272e61712e58fe04a3a20a93f415afd2264f2966551a07016d78afdf1f868e139fe955a0dbe536dff2ebfffdca5327f8f1f46e8b2ef19d8310abd5abf24e7611c66abfef3d9f23600679102b10a0b7f97f3ce63f07856d319ca332aa3984d057d8c31c", 0x97, 0xa2b, &(0x7f00000002c0)) 18:52:18 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470040ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48d]}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x640100, 0x0) fanotify_mark(r3, 0x10, 0x10, r3, &(0x7f00000000c0)='./file0\x00') ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000080)={0x6, r3, 0x1}) 18:52:18 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:18 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)=0x7) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffe1, 0x4000) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0xfffffffffffffff7, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000009100)=ANY=[@ANYBLOB="9bf7ff0700e76f08007f00"], &(0x7f0000009140)=0x1) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0x0) keyctl$assume_authority(0x10, r3) 18:52:18 executing program 3: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$get_keyring_id(0x0, r0, 0xd9f9) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xff, 0x84000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f00000000c0)={{0x6, 0x3}, 'port1\x00', 0x8, 0x80800, 0x4, 0x8, 0x3, 0x4, 0xd16f, 0x0, 0x1, 0xffffffff8e876eca}) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000807031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x200000, 0x0) [ 440.503183] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.512230] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:18 executing program 2: getpgid(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="29000000060000000000000000000000000000000000000e2cc3082688a3c55d25470de00200000000000069127fbcdab56d0f1f4cb25800000000000021b0c9e06ea050325f77726e71bff4c99eef500ade32c424020f322903f5bad93a0c2f1e19cc826b23ce090bcf125dccadf0ffe7f2e16407a9b16195542a"], 0x79) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000800)='./file0//ile0\x00', &(0x7f0000000200)='cgrQup2\x00', 0x2, 0x0) ioctl$TIOCNXCL(r0, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)=0x1) r2 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x1) syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0xfb, 0x400880) openat$cgroup_int(r0, &(0x7f00000005c0)='cpuset.mems\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rtc0\x00', 0x100000542, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x39044, 0x2000005) [ 440.546412] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 18:52:18 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000000000004000) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4, 0xfffffffffffffffa) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x800) sendmsg$alg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="f09921831775fa0062e9983ffac07ee891de03455c1b335eaf0d28a2a99e40e3bcbcb04f2fed05d5c24a67fcbc06e8c7a363fc2996e27362d4b192869b0681b720edb8e039b5c18cd655ae355909fdc7627e5ac27de4286f8752614b96ee0b58270525b28f60586aaf203c614cae0dbb405c2c961456d6f697ae44a02afedbcd940e8d2141ec7f9156e23ee32bafaea24daada7f09945ffbc13847b88449daa7a4431b04f34a40ccb4ee21cff126bf7a1c5cacac3cbd4cae9550b234accb7c85ded3f941c3eaafea48a2ba77f8e537893cd21bceefcf1b202c3c93503307e8a68a33e37920fd6b57a0d25df23da9", 0xee}, {&(0x7f0000000140)="7d72f88be9b5dcbbf5284674adb9468e6ab3e09845016c3f8d04c6c9cff9c08f49821f7841b305949fea20303992a13ce2a188fb81866fd3c6d23caa00f3878a74798059e606f5f0e9a1d39102433de543593370ef37327ba3a163b8adeaf7c73bd1962494fedab24df1c326707fbf6e6b1aa691cf68835a4cafbf676e55fa927a195ec0b768d37eb9575c8cf16e7121a7d780d9d2ce37ca06f77f22390976b9716461b97527b59bf6eaf6b8f568c8436537d96fd2de13e7ffe7c2f825edf12c40ab29cd9e09b38626c16b7f2b17b79b6c898af1c16510e3b41fbc1c42e2d4870dd8be", 0xe3}, {&(0x7f0000000240)="b09aa3b36fd2d623b5271d70204079155d89cd8e7794d408f0976d8e0299f0bc0abb19b34e6d97a1e2176b589201c0e638b166289e12ab9dcabb73add6c34374368313cf6f38b1d9a7c116362f130e769d5378e9ef15704d21529652e81562eb277572", 0x63}], 0x3, 0x0, 0x0, 0x1}, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) shmget$private(0x0, 0x1000, 0xa, &(0x7f0000ffb000/0x1000)=nil) [ 440.589600] device bridge0 left promiscuous mode 18:52:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f00000001c0)={0x14, 0x15, 0x800, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) 18:52:18 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$FS_IOC_FSGETXATTR(r0, 0xc020660b, &(0x7f0000000040)) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x9) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)="c19a8e1fe35c6d8420118b28bd4de13c2a8a64254101a034ed90b3151aa132d5c20611e4f04a85cb3670d3fcef272cfec1fd8c55c831fbb28df8ee16e29717a124969b6d3747e394595597726b3ba0af0ff212df74a2d45af885301f815d630edecae334a71ab8f7fd02e3f9ae8ddbda8849d5c32067da472fd02f67f1608f20ae07405c0f7677c2fea81abccf7576fc0c4f40") ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 18:52:18 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470045ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:18 executing program 4: r0 = gettid() r1 = socket(0x10, 0x80002, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000000)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) connect$netlink(r1, &(0x7f0000000100)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r1, &(0x7f0000cfefee), 0xff84, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) connect$netlink(r1, &(0x7f0000000140)=@unspec, 0xc) tkill(r0, 0x1000000000013) 18:52:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x84e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xa4, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000100), 0x4) sendto$inet(r0, &(0x7f0000000000)='4', 0x1, 0x8810, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) close(r0) close(r0) 18:52:18 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470075ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={r0}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000100)={@broadcast, @multicast2, 0x0}, &(0x7f0000000140)=0xc) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @dev={[], 0x1b}}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ssse3\x00'}, 0x58) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f0000000000)=""/16, 0x10, 0x0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x930000) 18:52:18 executing program 5: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x1c) r1 = syz_open_dev$sndpcmp(&(0x7f0000000680)='/dev/snd/pcmC#D#p\x00', 0x7, 0x4880c0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0xc783, @dev={0xfe, 0x80, [], 0x21}, 0x2}}, 0x0, 0x2, 0xfff, 0x7, 0x800}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000800)={r2, 0x1ae, "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"}, &(0x7f0000000240)=0x1b6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0x0, 0x101}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000004c0)={r3, @in6={{0xa, 0x4e20, 0xbb9, @loopback, 0x891a}}}, &(0x7f0000000580)=0x84) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f00000005c0), &(0x7f0000000600)=0x4) bind$inet6(r4, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r4, 0x43) r5 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000140)) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x6000, @loopback}, 0x1c) 18:52:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'gretap0\x00', 0x400}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r1, &(0x7f0000000240)=@known='security.evm\x00', &(0x7f0000000280)=""/60, 0xffffffffffffff0c) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000085e720000000000"], 0x28}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x3}) r2 = dup(r0) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x6}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={r3, 0x40}, 0x8) prctl$intptr(0x4, 0x24) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000300)={0x5, 0xfff}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000340)={0x2, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x335, 0x8, 0x5, 0x7, 0x8}}, {0xffffffffffff0001, 0x0, 0x0, 0x0, @sint={0x4, 0x9}}]}) 18:52:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470041ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 441.301215] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 18:52:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002cffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 441.764298] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.770815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.777558] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.784031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.790846] device bridge0 entered promiscuous mode [ 441.805132] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 18:52:19 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r0 = socket(0xa, 0x3, 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r3, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r6}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r7 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r7) ioctl$VT_DISALLOCATE(r1, 0x5608) [ 441.833354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor2'. 18:52:19 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x400, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070") syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000300)="0fc761f466b8caef00000f23c00f21f86635000006000f23f8ab0f01cb0f01cff0805297f0660fddc466b9fd09000066b8f4ffffff66baffffffff0f3066b9a909000066b80000008066ba000000000f3065670fc728", 0x56}], 0x1, 0x0, &(0x7f0000000200), 0x0) 18:52:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) write$eventfd(r0, &(0x7f0000000080)=0x2af, 0x8) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000fc0)={"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"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000007c0)={"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"}) 18:52:19 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470034ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20013, r1, 0x8000000000000000) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x12}, 0x1, 0xeec6315459f02efa, 0x0, 0xf, 0x3, 0x1, 0x7}, &(0x7f00000000c0)=0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x1a, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0000000000000007caf682d293896a32ee85ec5fd3ffb533f593"], 0x0, 0x0, &(0x7f0000002000)}) 18:52:19 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) sendmmsg(r1, &(0x7f0000007e00), 0x0, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000001c0)=0x7) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000e5bff6)='/dev/dsp#\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0xf8}, &(0x7f0000000080)=0x8) r4 = semget(0x0, 0x3, 0xc1) semctl$GETVAL(r4, 0x3, 0xc, &(0x7f0000000180)=""/2) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000300)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r3, 0x3, 0x30, 0x7, 0xcf94}, &(0x7f0000000140)=0x18) ioctl$int_in(r2, 0x800000c004500a, &(0x7f00000015c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@dev, @in6=@ipv4={[], [], @broadcast}}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) readv(r2, &(0x7f0000000600)=[{&(0x7f0000001600)=""/4096, 0x100b}], 0x1) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) 18:52:19 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x200000) ioctl(r0, 0xc1004110, &(0x7f0000001f64)="967d34f201000005100000009c") 18:52:19 executing program 2: r0 = inotify_init() r1 = syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x5, 0x1) r2 = socket$packet(0x11, 0x7fffffffffe, 0x300) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x3, 0x40000) r4 = signalfd(0xffffffffffffff9c, &(0x7f0000000140)={0x9f2}, 0x8) r5 = mq_open(&(0x7f0000000200)='\x00', 0x0, 0x40, &(0x7f00000002c0)={0x6, 0x7fff, 0x2, 0x789, 0xfffffffffffffffd, 0x40, 0x7, 0x3}) ppoll(&(0x7f0000000300)=[{r0, 0x200}, {r1, 0x3}, {r2, 0x1000}, {r3, 0x8200}, {r4, 0x8}, {r5, 0x400}], 0x6, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={0xade7}, 0x8) ioctl$TIOCSBRK(r3, 0x5427) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(r3, &(0x7f0000000400)={@void, @val={0x3, 0x0, 0x100000001, 0x9, 0x7, 0x10001}, @llc={@snap={0xab, 0xaa, "ab", "1e60a5", 0x0, "8ba04de356e390ac2d0913263048a2f2bad20d95832853f52130c9ac6c20ecfa96cb2239a04455d33f16865e1c253fb822"}}}, 0x43) clone(0x0, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2000, 0x0) ioctl$BLKROTATIONAL(r7, 0x127e, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x0) creat(&(0x7f00000003c0)='./file0\x00', 0x8) [ 441.938706] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.945247] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.977057] binder: 22552:22553 unknown command 0 [ 442.019092] binder: 22552:22553 ioctl c0306201 20007000 returned -22 [ 442.033036] device bridge0 left promiscuous mode [ 442.052242] binder_alloc: binder_alloc_mmap_handler: 22552 20001000-20004000 already mapped failed -16 18:52:20 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) sendmsg$netlink(r1, &(0x7f0000000100)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x40000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000200)={0x174, 0x12, 0xb08, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x3f, @u32=0x9}, @typed={0x8, 0x45, @fd=r0}, @generic="e2d22813406878c14e085aecb2e04c97dfee25f632af44a4c4e32792bb02734e7f423a3da03ba5de78882b8607c7469a8739db29245d5d241187cba36e0df6c03a01833cee4535c8cdd8524607e4105c8816e5a973a7fe2a992948397b55b1e65e1fa51f38b4dd65f9ea5a4939421296bfb9335fc75761914668578149b6cd3855c9b96704c0d2d39ac6937090bf291b6c1e15707e12ac496fe60671c0d6ecf9dc474601b09ed430bf849882df42b5b2a6b52b2460f5c6e907933db98754e7171a19407a81c32f36535238f6571c7a905ecf1c1a8b3ecf270b82cc7fd4e0a2c0237d30", @typed={0x8, 0x6d, @u32=0x1}, @generic="5e24c161e293da19b4440bf1293306cacb3c51f9e5e454", @nested={0x4c, 0x65, [@typed={0x14, 0x42, @ipv6=@mcast2}, @typed={0x4, 0x6d}, @generic="9bbb189a7851a40231fced89739d8f1683cf888cbbce06a41cdd37b98a45745a5734ab8b2bf0ea85", @generic="1d56c45cd68e8b9f"]}, @typed={0x4, 0x58}]}, 0x174}, {&(0x7f0000000380)={0x338, 0x35, 0x200, 0x70bd29, 0x25dfdbfe, "", [@nested={0xac, 0x94, [@typed={0xa8, 0x79, @binary="32764d62240b2ba13ff78912cd9b1cc0f726cd8a9cd1b8bccfebb8841b8cc96c2c9c8af5512a95221272ab029c3d74016c9f6a0cefd4c59c8f0a2f67242b4a5badc3e7f5de8407d2cb1a8d13cb35d24a84f73489b7df9cf10cc1fc379fd9e4c135672c3c43971a0657777fdbf3a80432fb7ff0055cafa76947ce0abbec0371c23f03c239f4f12740366b243d73f826557e392995e31e37a9a2faf40bc3e9f8f2045b55"}]}, @nested={0xc, 0x7d, [@typed={0x8, 0x31, @str='\x00'}]}, @generic="c5283506513748338e6efd19fdc58199c96b5f1f49886fd73617c92fa9777f7fbf15222b9e6826a2a3cca889bfb3fafcaa4e8ab83b25883331c85f6bd687f8fee56f83a8954cabe3194dcf0b7574167fc451ce7f20acad6fffba8c320c97b22acbd820d14b49f1cda6564572a9d5869621c8d613ce54cedb03eb55bd551982f6b458da0284e5f44139c2692373f394986f29d0c3d7b4ea74761ae2fd665d96b41b3b0194848b0cbe43613e7a8a687d7121cb4595b97f1b9974dc1c5860a38ce1f05e0bbd947afcec", @generic="307fdd72d7a09a2042b24320eb539dd2df547f2ff66741eef1bc48d8c915a1b7596b5b454eb5b43a5abd666ccfa17e73b31f4278432e80ccdcd9009d5ffa3cbdd1c0c91213ac19e4295b7a34fa3233f7f1c914eb6ad0a27135060cc79d6ad1114d446383cbbcb7d84ac75a80c11af471aababca1847047dda13b0bad15ee00cf0388b3bfb1882be3dd00c9f7370f09375424967c34d589ae", @generic="4be54a0a6dd10347b20369cfe4cdf57a9d3e33f4d8583101a15b98ae7df4d4bbea0f009398b858f5dadff2914ab7a0713e070fc1faeef4bdf0188e9c04768c36581deac37c060892fed6aba44dce2fa14b03e410ebdb4c43254d5dda50602182ec4835ffd16e82f5c69f539c61a7fa097b688bb4238804457902e1cf01446efc9fceaf3a93b1635b51fb11f555b9268e925dc14a2b6e38084c520fb1ebda34a128a236cdbbb64b3949d0bbad", @typed={0x8, 0x95, @ipv4=@remote}, @generic="e1b7d5d12ccc3d73fdf56cebe3f05421d5f4dfe52d2d6246d79367f56b7c0d26c5b1c29c33bf4c851c70eff2c11b57473698ddd24d72d1e207f583471db67b84d9bd32351548fd86a50c233519a53046a035a9f82d7d8482fc13"]}, 0x338}], 0x2, 0x0, 0x0, 0xc0}, 0x20000001) 18:52:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00'}, 0x18) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80080000002, 0x549080) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x4dd9c879, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000380)={0x6, 0x24, 0x2, 0x3}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000240)={{0x3f, @remote, 0x4e20, 0x0, 'fo\x00', 0x23, 0x5, 0x4f}, {@dev, 0x4e20, 0x0, 0x2, 0x4}}, 0x44) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x2) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000140)) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000100)) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x81003) [ 442.108209] binder: BINDER_SET_CONTEXT_MGR already set [ 442.124869] Unknown ioctl 4734 [ 442.156921] binder: 22552:22569 unknown command 0 18:52:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470063ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 442.181703] binder: 22552:22569 ioctl c0306201 20007000 returned -22 [ 442.226894] binder: 22552:22576 ioctl 40046207 0 returned -16 18:52:20 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000780)}, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000004e7539df040000004507000000c30700"], 0x18}, 0x0) 18:52:20 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x86, 0x1) getsockname(r0, &(0x7f00000001c0)=@alg, &(0x7f0000000240)=0x80) r1 = socket$inet6(0xa, 0xa, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x400, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in6=@remote}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x40000) add_key(&(0x7f0000000280)='pkcs7_test\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000300), 0x0, 0xfffffffffffffffc) 18:52:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470016ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xd01, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)={0x1, '3'}, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x509000) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e21, 0x80005, @remote, 0xfffffffc}, 0x90) listen(r2, 0x100000000000001) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x9, 0xc2c9}, 0xc) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x9, 0x2f04, 0xfff, 0xf81, 0x2, 0x1, 0xf5a, 0x400000000003, 0x0, 0x55376549}) 18:52:20 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00002eaffc)=0x101, 0x4) connect$inet(r0, &(0x7f0000000780)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000200)="96", 0x1, 0x3fff, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000266ffc), 0x4) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000004bc0)={&(0x7f0000000000), 0xc, &(0x7f0000004b80)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmmsg(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)=@pptp, 0x80, &(0x7f0000000140)=[{&(0x7f0000000840)='F', 0x1}], 0x1, &(0x7f00000009c0)}}], 0x1, 0x80) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x80, 0x0) sendto$inet(r0, &(0x7f0000000100)='\x00', 0x1, 0x3ff7ffd, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) write$FUSE_LK(r1, &(0x7f0000000440)={0x28}, 0x28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000340)={0x28}, 0x28) [ 442.882727] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.889159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.895962] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.902379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.909139] device bridge0 entered promiscuous mode [ 442.909158] Unknown ioctl 4734 18:52:20 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000140)=ANY=[@ANYBLOB="018c88583a12dc9805000000006e17f8e06057e5698356f7c52298d0d715cb1ec17dc39e7c820d8fb4b076ae9970e581dd8e9aa51fa7aba12eeac7126343add4298538f93cdab6ef763b98a3fb4e2a8d347cf8434f2ac0c5503b0675bbb5a7bbbaacff78db058396cc98de7a21bef317a54cb8f2e8b94945"]) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x2, 0x7}, &(0x7f0000000200)=0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000240)={r5, 0x6}, 0x8) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000300)={0x2, 0x0, [0x488]}) 18:52:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xfffffffffffffffd, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'dummy0\x00', 0x200}) r2 = dup2(r0, r1) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000080)) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0), 0x10) 18:52:20 executing program 4: unshare(0x400) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x402, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f00000000c0)=""/84, &(0x7f0000000040)=0x54) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fsync(r1) 18:52:20 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470057ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:20 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffe1, 0x4000) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000140)) ioctl$RTC_PIE_ON(r1, 0x7005) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f000000a980)={0x14, 0x22, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x5, 0x3}, &(0x7f00000002c0)=0x10) lseek(r0, 0x0, 0x4) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x40, 0x1, 0x2, 0xc6d, 0x0, 0x400, {0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffffd, @loopback, 0x4}}, 0x9, 0x4, 0x100000001, 0x7, 0x1}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) 18:52:20 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x2, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x81}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r1, 0x7c}, &(0x7f00000002c0)=0x8) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000240)='cgroup\x00', 0x0, &(0x7f0000000080)='q') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x800, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2b, &(0x7f00000000c0)=0x1ff, 0x4) [ 443.062495] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.069088] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:21 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x26}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003e2000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x22200, 0x0) getpeername$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) rseq(&(0x7f00000000c0), 0x3cb, 0x0, 0x0) prctl$intptr(0x29, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x57079f09, 0x3, 0x1}, 0x0, 0x3848000000000000}) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x3e) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000001000), &(0x7f0000000200)) read(r0, &(0x7f0000000400)=""/100, 0x64) 18:52:21 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x1) ioctl$int_out(r0, 0xc0305710, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e23, @loopback}}, 0xffff, 0xfffffffffffffc01, 0xfffffffffffffffb, "5653fa4e9b3a613259e631451832665eb82ef67462a66222b82e38d2f7f799209f48975ca892f9c0e71b1daf68969af9ff4de341f085f253fe85d25875c74aa04a0e75594b05d630191ee2973bb1a907"}, 0xd8) 18:52:21 executing program 0: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)) r1 = dup2(r0, r0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x12714, 0x2, 0x3000, 0x2000, &(0x7f0000435000/0x2000)=nil}) [ 443.200001] device bridge0 left promiscuous mode 18:52:21 executing program 4: getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000040), &(0x7f00000000c0)=0x8) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x2e1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) move_pages(r2, 0x1, &(0x7f0000000100)=[&(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000280)=""/148, 0x13d}], 0x1000000000000051, 0x0) preadv(r0, &(0x7f0000000480), 0x1fc, 0x0) 18:52:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470f80ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 443.245978] Unknown ioctl 1078481924 [ 443.291816] Unknown ioctl 1074025832 18:52:21 executing program 0: openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x1002, 0x0) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x0) close(0xffffffffffffffff) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x800, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000100)) 18:52:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f00000001c0)="27bb156a50882a4af2d56ae1891cd58d06a320525d8d38ad31cf844f95a4ac28379cb3565cd0bf796eb814f04eeec2d5addf512a052182fc683d4dd99a49e9017eb4cb90cf81619b456851c8bed7559a4bf9c8a1aee0c3c0329126152102752eba03ef14269f5a7acf7872f36e7f62639f111cf9f092d620cdf8546f27037e38db7caa48674d15bdaca1b97228225d5932c8ce56060f0fd8e7da77a596ee", 0x9e) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x8, @rand_addr}]}}}]}, 0x38}}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) [ 443.402856] Unknown ioctl 1078481924 [ 443.421031] Unknown ioctl 1074025832 18:52:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") set_mempolicy(0x4003, &(0x7f00003ccff8)=0x10003, 0x7742) mbind(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, &(0x7f000000b000)=0xfffffffffffffffd, 0x4, 0x0) mbind(&(0x7f000000a000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180), 0x1, 0x2) r1 = gettid() ptrace$getenv(0x4201, r1, 0x3, &(0x7f0000000000)) 18:52:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447001affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:21 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:21 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x26}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003e2000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x22200, 0x0) getpeername$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) rseq(&(0x7f00000000c0), 0x3cb, 0x0, 0x0) prctl$intptr(0x29, 0x2) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x57079f09, 0x3, 0x1}, 0x0, 0x3848000000000000}) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x3e) clone(0x0, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000001000), &(0x7f0000000200)) read(r0, &(0x7f0000000400)=""/100, 0x64) 18:52:21 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x2, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x81}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r1, 0x7c}, &(0x7f00000002c0)=0x8) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000240)='cgroup\x00', 0x0, &(0x7f0000000080)='q') r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x800, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2b, &(0x7f00000000c0)=0x1ff, 0x4) 18:52:21 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:21 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000140000000800470000600000000000009078ac14140001c0000007036c07030000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800651800000000"], 0x0) [ 443.856417] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.862856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.869662] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.876087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.882858] device bridge0 entered promiscuous mode [ 443.944364] Unknown ioctl 1078481924 [ 443.962310] netlink: 'syz-executor4': attribute type 8 has an invalid length. [ 443.973701] Unknown ioctl 1074025832 [ 443.983270] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.989778] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.015202] device bridge0 left promiscuous mode [ 444.301506] netlink: 'syz-executor4': attribute type 8 has an invalid length. [ 444.317094] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.323509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.330260] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.336705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.343567] device bridge0 entered promiscuous mode 18:52:22 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470059ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:22 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x208000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r1 = socket(0x1d, 0x5, 0x81ef) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') accept4(r1, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000000140)=0x80, 0x80800) 18:52:22 executing program 3: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0xfcda) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000140)=0x8000000939, 0x4) sendto$unix(r0, &(0x7f0000000080), 0x7272, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x40000000000012, &(0x7f0000000180)=0xfffffffffffffffd, 0xf8) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/175, 0xaf}], 0x1) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=""/103, &(0x7f00000001c0)=""/107, &(0x7f0000000240)=""/86, 0x10d001}) r2 = dup3(r0, r0, 0x80000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4002, 0x0) dup3(r0, r3, 0x80000) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000080)={0x0, r3}) 18:52:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:22 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20000, 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[], 0xffffff21) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f00000004c0)) 18:52:22 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0xb}}}, 0x0, 0x1, 0x0, 0x7fee9059, 0x4}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0xfd3c, 0x5, 0x0, 0x7, 0x3, 0x81, 0x8, 0xffff, r2}, 0x20) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0xd, 0x17, 0x8, "ace0738f135aedbc41242688e1dd9e26e6f5c7f698dd663bf282ba04ccfa89f21434ec8e0a822a3cf9a7246f4854abf4e707705a121496a979d3a0ef813f9f83", "676783a681297084c24b963626df47e9112ea756f11c039c5d907d97c3d6b19616d08631f56a7e64ca8ee0959dd8955b4d411dc9bcd8bf833c82651022335446", "ac244c38429547d791221cc9a2554b5ab6a94ed1d0ed37fb49d77e88871ef9da", [0x200, 0x9]}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000340)={@loopback, @rand_addr, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000003c0)={@local, 0x0}, &(0x7f0000000400)=0x14) accept(r1, &(0x7f0000000540)=@hci={0x1f, 0x0}, &(0x7f00000005c0)=0x80) r7 = accept4$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x14, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000780)=0xe8) getsockname$packet(r1, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000800)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000900)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000a00)=0xe8) getsockname$packet(r1, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a80)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000f40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ac0)={0x404, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x4}}, {{0x8, 0x1, r5}, {0x224, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xbe}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x4, 0x100000000, 0x1, 0x5}, {0x1ff, 0xc033, 0x5, 0xb448}, {0x1000, 0x4, 0x4, 0x3}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x25}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r8}, {0x1b0, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5a6f}}, {0x8, 0x6, r10}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x100000000, 0x100, 0x200, 0x8}, {0x9, 0xffffffffffffff3f, 0x3ff, 0x7f}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xaca}}}]}}]}, 0x404}, 0x1, 0x0, 0x0, 0x80}, 0x40) mount(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0)='./file1\x00', &(0x7f0000001000)='nsfs\x00', 0x60, &(0x7f0000001040)="e290443bb5a896293505046d08fa624f504eaa778c2bd6e84b767c5f") r13 = socket$inet(0x2, 0x801, 0x9) getxattr(&(0x7f0000001080)='./file1/file0\x00', &(0x7f00000010c0)=@random={'security.', 'em1selfposix_acl_accessposix_acl_accesseth0(@cpuset\x00'}, &(0x7f0000001100)=""/10, 0xa) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000001140)={0x10000, 0x1, 0x9}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f00000011c0)={r2, 0x4}, &(0x7f0000001200)=0x8) syz_genetlink_get_family_id$team(&(0x7f0000001240)='team\x00') ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000001280)) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f00000012c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r14, 0xe89a, &(0x7f0000001300)=""/187) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000013c0)=""/5) open(&(0x7f0000001400)='./file0\x00', 0x210080, 0x4c) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000001440)) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000014c0)={&(0x7f0000001480)='./file1/file0\x00', r1}, 0x10) open(&(0x7f0000001500)='./file1\x00', 0x1, 0xb) 18:52:22 executing program 4: r0 = socket$inet6(0xa, 0x21000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x2d, &(0x7f0000000180)=0x80, 0x4) socket$inet6(0xa, 0x2, 0x8000) 18:52:22 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:22 executing program 4: socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f0000000140)) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x2) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2066, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x501c00, 0x0) r0 = memfd_create(&(0x7f00000001c0)='\x00', 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400201) rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x40246f, {0xffffffbfffbff270}}, &(0x7f0000000380), 0x8, &(0x7f0000000100)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x2010, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') [ 444.460731] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.467264] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$setpipe(r2, 0x407, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="0f20e06635000100000f22e026d8f666b9800000c00f326635010000000f302e28696f260fe24e130f20e10f013f2e0f011b0fc72a660f73d401"}], 0xaaaaaaaaaaaab26, 0x0, &(0x7f0000000180), 0x109) accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) 18:52:22 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000580)='/dev/snd/pcmC#D#c\x00', 0x100000000000004b, 0x40000002) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000440)={0x0, 0xbd40}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000004c0)={r1, 0x3f}, 0x8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000600)=0xff, 0x4) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x80808, 0xfffffffffffffff7) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_adj\x00') r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$negate(0xd, r4, 0x0, r5) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000240)) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x2a, &(0x7f0000000500)=""/28, &(0x7f0000000400)=0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r6 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f00000002c0)={{0x3, 0x0, 0x5, 0x400, 'syz1\x00', 0x8000}, 0x2, 0x0, 0x6, r6, 0x2, 0x4, 'syz1\x00', &(0x7f0000000280)=['^\'\x00', 'oom_adj\x00'], 0xb, [], [0x82, 0xfffffffffffffff7, 0x0, 0x2]}) sendmmsg(r2, &(0x7f0000000440), 0x400000000000211, 0x810) 18:52:22 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x501880, 0x8) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) link(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) gettid() accept$packet(r0, &(0x7f0000000300), &(0x7f0000000400)=0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') fchmodat(r1, &(0x7f00000000c0)='./file0\x00', 0x142) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x0, 0x95, [], 0x3, &(0x7f00000003c0)=[{}, {}, {}], &(0x7f0000000440)=""/149}, &(0x7f0000000580)=0x78) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000140)=0x20) bind$can_raw(r2, &(0x7f0000000080), 0x10) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="ddffffff5c0700000500000021f97c59ccac82f24ab82f50fd0189ea244ab8381a76a6fa1cdc412f8ae21069fa8063ca390833cff3f16397b11154a69a5a012e9605c00ea835c9866b19169a8c4fe46f3f30df241861c58f949e41134152f11b034819"]) close(r2) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x3, 0x6, &(0x7f0000000280)=0x4}) [ 444.544624] device bridge0 left promiscuous mode 18:52:22 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x80000000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e21, @multicast1}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0xfffffffffffffff8, 0x8, 0x5, 0x8, r2}, 0x10) 18:52:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) getpgid(r1) r2 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={r3, 0x4}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r4 = socket(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) setsockopt$inet_int(r4, 0x0, 0x22, &(0x7f0000000300), 0x4) 18:52:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:22 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470017ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:22 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470059ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:22 executing program 0: pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x8001, 0x4) fadvise64(r1, 0x0, 0x0, 0x0) 18:52:22 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000200)=@sco, 0x7fffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/80, 0x50}], 0x1}}], 0x2, 0x0, 0x0) 18:52:22 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f00000000c0), 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) flock(r1, 0x6) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x40, &(0x7f0000000300), 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={r1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:52:22 executing program 5: timer_create(0x6, &(0x7f0000000380), &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000340), 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xe, &(0x7f00000001c0)=@raw=[@ldst={0x3, 0x3, 0x6, 0xf, 0x1, 0xffffffffffffffff, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x26}, @map={0x18, 0x7}, @generic={0x3, 0x7, 0x1, 0x10}, @exit, @call={0x85, 0x0, 0x0, 0x51}, @generic={0xfff, 0x0, 0x100, 0x657}], &(0x7f0000000240)='GPL\x00', 0x833, 0x0, 0x0, 0x40f00}, 0x48) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x800000001ff, 0x10000038f) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xffffffffffffffff, 0x10000) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0xffff}, 0xffffffffffffff95) semget(0x2, 0x2, 0xe4c74d3b47fd1840) listen(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000001900)={&(0x7f00000004c0)=@hci, 0x80, &(0x7f0000001880)}, 0x24000000) connect$l2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @multicast1}, 0x2, 0x3, 0x2, 0x1}}, 0x2e) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000180)) sendto$inet6(r3, &(0x7f0000000040), 0xfe30, 0x20000006, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @empty={[0xe00000000000000]}, 0x5}, 0x1c) 18:52:22 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:22 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470059ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 445.448198] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.454687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.461465] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.467882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.474721] device bridge0 entered promiscuous mode 18:52:23 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447003effe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:23 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={{0x0, r1/1000+10000}, {0x77359400}}) readv(r0, &(0x7f0000000140)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x292) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) 18:52:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:23 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r0, &(0x7f0000f46000)=[{&(0x7f0000120000)=""/4096, 0x1000}], 0x1) 18:52:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x17, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000040)={0x0, 0x7fff}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000000)={0x1, 0x3, 0xffffffffffffff92}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000040)={0x0, 0x7fff}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_ASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x8040ae69, &(0x7f0000000000)={0x1, 0x3, 0xffffffffffffff92}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000e07adcc"], 0x1}}, 0x0) membarrier(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 445.698014] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.704627] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.758919] device bridge0 left promiscuous mode 18:52:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x730000, 0x0}, 0x2c) close(0xffffffffffffffff) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28}, 0x10) 18:52:23 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=@raw, &(0x7f0000000180)='GPL\x00', 0x0, 0x97, &(0x7f0000000300)=""/151, 0x41000, 0x0, [], 0x0, 0x9}, 0x48) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f00000000c0)=0xfff, 0x100000000) 18:52:23 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470046ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0xa}) 18:52:23 executing program 5: write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x77359400}, 0x1, 0x8}], 0x18) r0 = syz_open_dev$evdev(&(0x7f00000015c0)='/dev/input/event#\x00', 0x2, 0x28002) r1 = socket$inet6(0xa, 0x3, 0x1) ioctl(r1, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 18:52:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000140), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000101fbff000000000000000002000000"], 0x14}}, 0x800) 18:52:24 executing program 0: 18:52:24 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:24 executing program 1: 18:52:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:24 executing program 4: 18:52:24 executing program 0: 18:52:24 executing program 3: 18:52:24 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470073ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 446.415312] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.421800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.428570] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.435002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.441791] device bridge0 entered promiscuous mode 18:52:24 executing program 4: 18:52:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RSTAT(r0, &(0x7f00000002c0)={0x53, 0x7d, 0x0, {0x0, 0x4c, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x4, 'self', 0x9, 'cpu.stat\x00', 0x6, 'teql0\x00', 0x6, 'teql0\x00'}}, 0xffffff77) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000000200)) tkill(r1, 0x1000000000016) 18:52:24 executing program 0: 18:52:24 executing program 5: accept(0xffffffffffffff9c, &(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0xc1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) gettid() sendto$unix(r0, &(0x7f0000000000), 0x4a, 0x20000050, 0x0, 0xfffffffffffffc89) 18:52:24 executing program 3: [ 446.549718] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.556247] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:24 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:24 executing program 4: 18:52:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$fiemap(r1, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000070000000000000080"]) [ 446.693885] device bridge0 left promiscuous mode 18:52:24 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="67660f384075800f01d166b8be0000000f23d80f21f86635400000e00f23f8a5440f20c0663502000000440f22c0670f22dd652680e7020fc71d0f01bfb3bf9a0020ae00", 0x44}], 0x1, 0x0, &(0x7f0000000200), 0x0) 18:52:25 executing program 4: socket$rds(0x15, 0x5, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x114, 0x2716, &(0x7f00000000c0)=""/13, &(0x7f0000000140)=0x106) 18:52:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev}, 0xba) 18:52:25 executing program 3: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="240000001a0007031dfffd946fa2830081200a0009000300001d85030c4ba3a20400ff7e", 0x24}], 0x1}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 18:52:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:25 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447005cffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:25 executing program 0: r0 = shmat(0x0, &(0x7f0000fea000/0x3000)=nil, 0x7000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003780)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$IPC_RMID(0x0, 0x0) shmdt(r0) 18:52:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) pipe2(&(0x7f0000000000), 0x0) pipe2(&(0x7f00000000c0), 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) flock(r1, 0x6) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f00000001c0)="650fc75c276766b882000f00d0c4423d3c56eef22ede9a002000000f01cf0f3042802100660f38802afb0f23d4", 0x2d}], 0x1, 0x40, &(0x7f0000000300), 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000180)={r1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:52:25 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) [ 447.081514] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.087916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.094705] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.101119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.107885] device bridge0 entered promiscuous mode 18:52:25 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x20}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev_mcast\x00') ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x5) fcntl$setlease(r0, 0x400, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400800, 0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:52:25 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x109000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040), 0x30f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f0000000140)="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", &(0x7f00000000c0)=' ', 0x1}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001180)="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") ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x6, 0x8]) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0xa, 0x0, @rand_addr}], 0x10) 18:52:25 executing program 3: r0 = getpid() capget(&(0x7f00000002c0)={0x20080522, r0}, &(0x7f0000000300)={0x400, 0x90, 0xffffffffffffff89, 0x4, 0x3f, 0x7}) mount$fuseblk(&(0x7f0000000400)='/dev/loop0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='fuseblk\x00', 0x0, &(0x7f0000000580)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}, {@blksize={'blksize'}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize'}}]}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='cpuset&md5sum\x00', 0xffffffffffffff9c}, 0x10) sync() getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', &(0x7f00000001c0)=""/218, 0xda) syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000700)) 18:52:25 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) socketpair$inet(0x2, 0xa, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x40}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000001c0)=""/196, 0xc4) [ 447.217032] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.223614] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.251653] device bridge0 left promiscuous mode 18:52:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 447.336741] sg_write: data in/out 1756/78 bytes for SCSI command 0x0-- guessing data in; [ 447.336741] program syz-executor4 not setting count and/or reply_len properly 18:52:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x2000000000048}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001f80)=[{{&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "351a8f00900997ee157876515832ebd2f27b60ad3abef2889ced0d8a5bef63f787d12dfea30ae1b9c46204f1ece3e7e35ffebfc20fd2cb6d518f632e53876e"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="6482", 0x2}], 0x1, &(0x7f0000000380)}}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000200)={'bridge_slave_1\x00', 0x8}) r2 = getpgid(0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x2, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000280)={0x0, 0x5}, 0x2) sched_setattr(r2, &(0x7f00000001c0)={0x30, 0x3, 0x1, 0x6, 0x6, 0xfff, 0xf10, 0x3}, 0x0) 18:52:25 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470038ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:25 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'erspan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00'}}) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000100)) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000140)={0x8}) [ 447.486030] sg_write: data in/out 1756/78 bytes for SCSI command 0x0-- guessing data in; [ 447.486030] program syz-executor4 not setting count and/or reply_len properly 18:52:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_DEV_DESTROY(r0, 0x5502) faccessat(r1, &(0x7f0000000040)='./bus\x00', 0x100, 0x500) 18:52:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001800030b00000000000000000a00000000000007000000000c00090008000000", @ANYRES32=0x0, @ANYBLOB="0400e8ff"], 0x2c}}, 0x0) 18:52:25 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:25 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x1101801) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x180) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f20d86635080000000f22d866b9120400000f320f01dfbaf80c66b8b0f20d8166efbafc0c66b80400000066ef0f20d86635200000000f22d86600ef66b8810000000f23c00f21f8663500000f000f23f8b82d010f00d0f08246f4000f07", 0x5e}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup2(r1, r0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040000000000000000000000000000000000040000000000380000000000000000000000000000000000000000000000008d0000000000000000008704"], 0x4a) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) 18:52:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a91199df0261df5cf1cdd8b55b062950b86bc01cac8464d4f8a906151", 0x20) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_names\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000000c0)) write$UHID_CREATE(r2, &(0x7f0000000300)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/103, 0x67}, 0x120) 18:52:25 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cpu.weight.nice\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x20000000000006) [ 447.909996] input:  as /devices/virtual/input/input34 [ 448.052933] input:  as /devices/virtual/input/input35 18:52:26 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:26 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001340), 0x9}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) flistxattr(r0, &(0x7f0000000080)=""/149, 0x95) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200400, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001300)=""/19, 0x13}, {&(0x7f0000001240)=""/135, 0x87}], 0x3, 0x0) 18:52:26 executing program 1: r0 = memfd_create(&(0x7f0000000300)='ppp0\x00', 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000380)={0x0}, &(0x7f0000000440)=0x186) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000004c0)={r1, 0x7, 0x5, 0x7ff}, 0x10) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a4cc80700315f85715070") timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) clone(0x200, &(0x7f0000000280), &(0x7f0000744000), &(0x7f0000001880), &(0x7f0000001900)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)) r3 = gettid() r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x240, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f00000003c0)={0x0, 0x0, 0x0, {}, 0x0, 0x1}) clock_gettime(0x0, &(0x7f0000000340)) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r5, 0x4068aea3, &(0x7f0000000240)={0x79}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000002c0)={@ipv4={[], [], @dev}}) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000400), 0x0) r7 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x7fffd) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000480), &(0x7f0000000580)="e80979fac53cd99db0dfb627b6a3efd2943fb83e940b1f14a813c9301965c81ddec2e9f08ff65f720f858a9fd2aa19b0a9f722babdb93f5fc72cf96fcc371a1734043dfd6311dd087d0aac5a397407338ee0c0482e65666bbed74bb52f5f2b386d28cec77efcc00fc63cc9f1764780db569c39fb2ef56407c34a437f382cea0b24c134a8c17e01364ac9480c93360436fe89d14ded32f61273af2cb5941b8c7283d115cefcb621082565cbec8a48b605ddc6c211963d5121d67507a82f87e58f9c651ba6113448fc5b9d47af0b96f0a990266a1a69fb14f2f5e40b924dcc16f608cd681dc012d19f103f72961fd5f77dbea50202ce3ddb"}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) tkill(r3, 0x1000000000016) open$dir(&(0x7f0000000180)='./file0\x00', 0x27e, 0x0) 18:52:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800, 0x800000000000000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0x7, 0x7ff, 0x2, 0xa2, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="72f90c00000000000000000000000000ffdf03000000"], 0x16) write$P9_RFLUSH(r1, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) unshare(0x40000600) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x0, 0x0, [], [], [], 0x3, 0xffc0000000000}) 18:52:26 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000000)) unshare(0x24020400) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8568, 0x12, 0x14, 0xc, "fc770292828383ab448ecc343aab65494dab6d8dfa10da4404a55af01e57e80f39070d4b54a79dd8b1a49617e81b72a43a262c355975dda384ee13db07cfdc2d", "d03e8712e8fcb42e5a69a5d45011bf294bf3461a7bafa0baee5cc471b462670e", [0xffffffffe609268e, 0x40]}) timerfd_create(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000800)="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") pread64(r1, &(0x7f0000000140)=""/99, 0x63, 0x1) 18:52:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470024ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 448.185849] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.192340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.199088] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.205503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.212280] device bridge0 entered promiscuous mode 18:52:26 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getegid() fstat(r0, &(0x7f00000001c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r2 = dup2(r1, r1) sendmsg$FOU_CMD_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000001080)=ANY=[@ANYBLOB], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0xffffffffffffffff) 18:52:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 448.358985] IPVS: ftp: loaded support on port[0] = 21 [ 448.366013] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.372641] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/connector\x00') ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) r3 = getuid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000180)=0x0) fstat(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000001c00)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40020004}, 0xc, &(0x7f0000001b80)=[{&(0x7f0000000240)={0x520, 0x26, 0x100, 0x70bd26, 0x25dfdbfd, "", [@typed={0xc, 0x36, @u64=0x1}, @generic="77300ba8fed00fd7c708520c39873156a67a1f8553053b2f75682e77bedb00248139b7013a99d53c2f385ca06d148a59dd0591357b29785d2e11656acea0c54c3a79f8d240923fa63c0fd140cebf645c3a41b362f1b001d83186473e9c7a8ac4e067cb86e4334cebbd307ec930f85b92125c8c630b42240c6901430583e9db8c6851ac2a808f29db99bbcbf9e743a4b0ca5f28d55558dc855ba909ad22dc52562029c24afe97dd305cc622a8c035995721dc27f6f57b1c", @typed={0x8, 0x34, @ipv4=@loopback}, @nested={0x2b4, 0x85, [@typed={0x8, 0x5, @u32=0x8ed}, @typed={0x8, 0x78, @ipv4=@multicast2}, @generic="8a3f218f846edb61148247eb1c5fa4b44fd4a89902c61dfb7486bfd279451b0b5cd970794c83fd09d3197e48668e5e21c7ae4952f74b9f90", @generic="d88d2dae0ea2636832e5", @generic="a3eb6d5da2e4eab4a199a023c303ef90003bb6ecf484ef7005071897e5e8a9e65cc1b5e756aaf665feb9ec4ecc", @generic="e420dca9488e2bbec94cfebd2fcb55b616bb4e06dded251dd6c0e34ce7832a0e591da1249ea96b68e95fa22458ae9d708ba85a04a5148d73566c50c66841be1a66061053b0642d7271b7737b470849ba519af973089f974f945b3a374159b940c18a5dab63dadce1b8faca35444702550473449fe61831815b9411c40b34ad6875da31b849248aedcd122fdbdcb515a65c99dcc95db2478054e640a9dd7e001972cdae541f6e0ab7cebf5d79e1c10d7b71f6d9431a404cb423c555c7434fcc22a5bf17d90cc986ad806367414bd7f3f60c4b4480", @generic="0b10e685abc90c7c5b849724046a085f755008fdb043588d61ddf198459233458e9c26be90c8f190a7b76b987cf0a9b62fec301093c8eb0454d91f4f52127606e999c97180f7e6cd8f4febf77e3e3a8d9332601ac15279b9a637d27bd03604143a08afabdc9d5180de02cb4e971376555c32bac98b071ca4b0ca68df42d9", @generic="edfb7c53e3138e2ded9d86b7a48769c848f0ed4d94cdbdc583e597c6ada7df5fcb94863287f07183e42e4fde5ab21218c4ff45db23340a03c052608c6253d2adc920694f049f00143e39c9398f7f5b07b6ee3e62860574f5958f1563a5d5e5b7842393904cae5507c6e08a85e2ff2887e3c8ea3f8eaf50d58b7669a9bbf79ebe2e54678ab5f3c0c8d702b9899740d6084b32750919a56e90ddcc8341630ebcae4af9a20076605301e89cc4118aad3fa2680ca00a14c6fa64c035b4ff0b4fcb7ede368308de677c66c9e4", @typed={0x14, 0x91, @ipv6=@local}]}, @nested={0xbc, 0x3e, [@generic="d283dec44209b9e1eebe6f5525741a41214791c54637dd9fb8b3a5410adc54161f08950a09f088d0a71127d005", @generic="ecb9ab1f38c9a4e83ca464a4caa43f892b3dd5d1bedb16", @generic="3670190fc9be6eb8df", @generic="fd2c3e33f4f3e726688415c5ae1de24e7009d0a510f08fc643653c9cb0574d5951af37add2d927cfef62f0257fbb3f453580f23b793d82b79db14e58d7d74e035a7b0b7f719e1381831cf48cf6733c18c6b0bc2fb3ce46e46bd05e2f4440cb991c", @typed={0x8, 0x13, @str='\x00'}]}, @nested={0x54, 0x53, [@typed={0x8, 0xc, @fd=r0}, @typed={0x8, 0x33, @pid=r2}, @typed={0x30, 0x35, @str="2f6578652f000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a"}, @typed={0x8, 0x65, @u32=0x2}, @typed={0x8, 0x51, @uid=r3}]}, @nested={0x80, 0xe, [@generic="3351a29bb4114000b10f8356eeee483735a34ef839c88426b2d1810e5ecaa720f9239ed7ee5034886db091ecc81990dfbae39e325dd7a0a3ec8f4e8a6513e85df53f3a845318786a4a5530610363c87ad5476b484459234da1cdcbc19219d9e9137f08935ab33fe19080c4e67b46ef35ef525942ef17e0503eba"]}]}, 0x520}, {&(0x7f0000000780)={0x1380, 0x42, 0x10, 0x70bd27, 0x25dfdbff, "", [@generic="d0b02a7e3fd81810499107a1f3ae8c3aad34e341dfd7562bee5c9596e676182eed6257fd0f546f73efc67794254aae0138be31178ba1a58247c2dd7a5e462b52fd6292abb574168c82cbb766502ba049d02dc39f9a368b6b97fdd0500616c804dcc7", @generic="ae658be124c25f71e938d92afa278a538b836f8cbdffe23d1c1de00bc5d57dbaaf24fd3640f2197617ff082f9138fd7527af9efd78e4237f3b5330df4e26a55c44d7d97a1d0c8c618aaa2481b0d157434601a7cd4a65af9f9539bffc109c673ea21c7c201751479c5a782ce3abd7bc4963c0eb10e484befe71a0f88cafb98e8b63829399941cfe8279431d250f78298fe7ec244d29022fe6a1f1ea1761052947fe26bdbfdcc14a1ab05b4911ed9279ef49a9bd203921cde458ea29eb05823c928e0f04fdc783648649673eaea9a29d338f46abec2c492f32d69807d9100d357207ac25f3e5d55efe7b3ab748719e", @typed={0x8, 0x96, @fd=r0}, @typed={0x30, 0x20, @str="2f6578652f000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a"}, @generic="dc917bf6a1a45664e12bb34b3a862d919388ebdf91ab5dec7e024f4b4d634dde946145a5daf0c466a5bf1ddd8834bdffd2ef65575d77d70f6497862735142d7876b0b90e0d01f643acf73e64e4988c1de0abcc99b52debb702753deec034f86fe519c0df96ebcf7f668b5687da511f6f0f8a0f21812bfd65b93586f083ba0faebb730f33fa0da91e9c81a71c433d7737c67ad5221c2fac749add3c7844e26488ae55475f0c3c4047c2088d1079fc042a2506a33dfefc16dcae2592c832bd3d29cd7b81243a7ba9afecfd8382c4ff565609737c", @nested={0x1114, 0x1e, [@generic="930c492bb2640e19e7a159df1dfbd196ff169700a581dd0b6873efdd838a777ad847f2054a5f5b36057151d9341327d9b41769c30893248f07ae62f17f23bf294da525b8d299e1c9698f030aa4f4cd94252b59f2a770f7d75356115b33346a0aff7565231a06a02da59aaffece1293cc11fec87cc68212e9c862159aa5a4efc5bd4e7c51950473e02812425601c15d4cf2f8512236ddc0a1b0a5fd213a7b841192128985a20f29b0bc36632f5d358f8132f3d23aae6264d95bcfc3f9c67ef6bd5a83c428057f469ee07ecbdd243e20122cca374deb811f084cddaf01aba98c99135671c2601b69e1a8ee98f88953b343a1c2e8cbec211cc62b623d77610616", @typed={0x8, 0x2, @pid=r4}, @generic="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", @typed={0x8, 0x1, @ipv4}]}]}, 0x1380}, {&(0x7f00000001c0)={0x18, 0x19, 0x800, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x28, @uid=r5}]}, 0x18}], 0x3, &(0x7f0000001bc0)=[@rights={0x28, 0x1, 0x1, [r1, r0, r0, r0, r0]}], 0x28, 0x20040011}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)="2f6578652f000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$SNDRV_TIMER_IOCTL_STATUS(r6, 0x80605414, &(0x7f0000000080)=""/104) [ 448.439756] device bridge0 left promiscuous mode 18:52:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470022ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:26 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470066ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:26 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 449.086938] IPVS: ftp: loaded support on port[0] = 21 [ 449.276945] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.283427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.290192] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.296628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.303344] device bridge0 entered promiscuous mode 18:52:27 executing program 4: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x1) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}}, 0x90) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0xa198) 18:52:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) r3 = memfd_create(&(0x7f0000000000)='@\x00', 0x2) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f00000000c0)="8371de080f20c06635100000000f22c0ba410066b83a14000066efeada070900a9d1b7660feb170f01cb0f019ff8ff0f019ccf0b0f015c00", 0x38}], 0x1, 0x0, &(0x7f00000003c0), 0x105) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:52:27 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:27 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470050ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:27 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:27 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)="2f70726f63847379732f6e65742f697076342f76732f6261636b75705f6f6e6c7980", 0x2, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x6b) prctl$void(0x20) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x3}, 0x20) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000001e40)={@mcast1}, &(0x7f0000001f00)=0x14) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000500)=0x0) process_vm_writev(r3, &(0x7f0000001ac0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/203, 0xcb}, {&(0x7f0000001640)=""/47, 0x2f}, {&(0x7f0000001680)=""/220, 0xdc}, {&(0x7f0000001780)=""/77, 0x4d}, {&(0x7f0000001800)=""/192, 0xc0}, {&(0x7f00000018c0)=""/214, 0xd6}, {&(0x7f00000019c0)=""/143, 0x8f}, {&(0x7f0000000100)=""/28, 0xfc}], 0x9, &(0x7f0000001dc0)=[{&(0x7f0000001b80)=""/170, 0xffffffa4}, {&(0x7f0000002c80)=""/4096, 0xfffffffffffffe88}, {&(0x7f0000001c40)=""/52, 0x1e7}, {&(0x7f0000001c80)=""/100, 0x64}, {&(0x7f0000001d00)=""/192, 0xc0}], 0x319, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x6, 0x2000) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000280)=0x6) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000001f40)="624873683008fffefeff0000000400") mq_open(&(0x7f0000001e80)='\x00', 0x40, 0x42, &(0x7f0000001ec0)={0x0, 0x7fff, 0x1ff, 0x23c, 0x3, 0x9e, 0x9, 0x1}) r5 = syz_open_dev$midi(&(0x7f0000000480)='/dev/midi#\x00', 0x0, 0x100) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f00000004c0)) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000001f80)={0x6, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e24, 0x1, 'lblc\x00', 0x3b, 0x100, 0x21}, 0x2c) ioctl$sock_SIOCETHTOOL(r6, 0x8922, &(0x7f0000000140)={"62726964676530000000008000", &(0x7f0000000040)=ANY=[]}) openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uhid\x00', 0x2, 0x0) ioctl$RTC_PIE_OFF(r5, 0x7006) process_vm_writev(0x0, &(0x7f0000002c40)=[{&(0x7f0000002bc0)=""/35, 0x23}, {&(0x7f0000002c00)=""/26, 0x1a}], 0x2, &(0x7f0000002e80), 0x0, 0x0) r7 = memfd_create(&(0x7f0000000000)="62726964676530000000008000", 0x2) mq_notify(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040)="2c4ad71efb9ce525a9f3ffa3f06136e5f4a6f132703c83f03e245566f388dc7e9306135ff660fcfeb07cbb89ed3982c20f81c092ae3badd0342f34fa0dd66bdcde8078ea469321062dab", &(0x7f0000000180)="9a305c99b738ed0d4388e5fac42fe5477fa0b957dc07a4527463237eb5d14eff2bc7381ed30721c0063ff8fd30367fc7ab8aab5b6fc5165c6a9fcdf76cabce2912e4d6941a5bfd24feb725311fb1814e1093cd3712286c4f10192052073dce532817ad6d15e560e53e0f2f66847a15737397490bbe993d989d3b869e982362c15fe0c6a2db3b3d25b5e9e9629c4e0b9678e9b1dddab6feee2d8d9a02dffa"}}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r6, r8, r9) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000002000)) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x10, r1, 0x0) [ 449.786106] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.792717] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.805171] device bridge0 left promiscuous mode [ 450.100441] bridge0: mtu greater than device maximum [ 450.107367] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.114690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.124765] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.131952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.141526] device bridge0 entered promiscuous mode [ 450.173349] bridge0: mtu greater than device maximum 18:52:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)={0x90000018}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000140)) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fcntl$dupfd(r4, 0x406, r1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0f0103f26d67f2f7320fc79b000000000f01cbc4c23dab8b0a000000f2a3381dd45266baf80cb8bcbd3f80ef66bafc0cb803000000ef0f239df20f5a5b00", 0x3e}], 0xaaaacd8, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000000080)=0x1) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0)=0x6) 18:52:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x4000000003, 0x300) getsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:52:29 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x6, 0x0, [0x277, 0x0, 0x4b564d01, 0x100a01], [0x0, 0x4b564d04]}) 18:52:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f00000001c0)={0x14, 0x14, 0x301, 0x0, 0x0, {0x1e}}, 0x14}}, 0x0) r1 = msgget$private(0x0, 0x2e54721085ff8fc6) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000140)={0x75, "6dee84b38cafd6f3c0fcabb0cd34253a09dcef751d978d074e4e1f6b3558b09065b89f996c8acad23969b29e46631722b9b634f2f4c5c6ea55a794cd9d296158eb734506cfcb6c244077e517cd6e7e074e866c08d20bf058184cf7f03442a8abec9107a2e8feaf86214cbbcac8a885bff10f444181"}) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000580)=""/71) 18:52:29 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470029ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:29 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:29 executing program 5: setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000180)=[{0x8, 0x4}, {0x2, 0xffffffffffff7b58}, {0x4, 0x80000001}, {0x2}, {0x2, 0x9}, {0x4, 0x3}], 0x6) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x1040}, {r0, 0x208}, {r2, 0x80}, {r2, 0x2041}, {r0, 0x200}, {r0}, {r0, 0x1000}], 0x7, 0x100) clock_gettime(0x0, &(0x7f00000015c0)={0x0, 0x0}) utimensat(r2, &(0x7f0000001580)='./file0\x00', &(0x7f0000001600)={{r3, r4/1000+30000}, {0x77359400}}, 0x100) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = dup3(r0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000001400)={0x0, @in6={{0xa, 0x4e24, 0x40, @ipv4={[], [], @multicast2}, 0x7}}, 0x10000, 0xffffffff00, 0x5, 0x38, 0x4}, &(0x7f0000000300)=0x98) listen(r1, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000140)={r6, 0xc1, 0x9, 0x0, 0xffffffff, 0xee18}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000380)={r6, 0x1, 0x1ff}, 0x8) acct(0x0) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f00000014c0)=""/137) recvfrom(r5, &(0x7f0000000400)=""/4096, 0x1000, 0x2, &(0x7f0000000240)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x80, 0x4) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast1, @rand_addr=0x5}, 0xc) 18:52:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000040), 0x1e) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7fffffff, 0x30}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r2}, 0x8) [ 451.336121] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.346161] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:29 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r1, &(0x7f0000007880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000800)="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", 0x261}], 0x1, &(0x7f0000000200)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}], 0x30}, {0x0, 0x0, &(0x7f0000001ac0)}, {0x0, 0x0, &(0x7f0000006880), 0x0, &(0x7f00000068c0), 0x0, 0x80}, {0x0, 0x0, &(0x7f0000007140), 0x0, &(0x7f0000007200)}], 0x4, 0x40000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000300)='tls\x00', 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r3, 0x74, "60cc0ffd861eec8d25a463f7edb491096ebe061fdde82dd441054f41c9537efd3332d0ea5ad97de98ceff33fd82c58f5c013ad3d3c3a3f3adc1de15f5a77d90a7b4b059fa5b72eac5418206c9232497bfc09f7e6740eb7890a7b0ff8203bebbcdfb805dec34eadc3e6ee0ae5886a9c8806efbc86"}, &(0x7f00000002c0)=0x7c) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40000, 0x0) fcntl$setstatus(r0, 0x4, 0x4800) write$P9_RLOCK(r4, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x2}, 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xc01, 0x0) 18:52:29 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0xffffffffffffff7f) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:29 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447005affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:29 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300), 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) 18:52:29 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0xffffffffffffff7f) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:29 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0x20}, @mcast1, @local, 0x800, 0x2, 0x80000001, 0x100, 0x0, 0x84000000, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r3 = socket$inet(0x10, 0x3, 0xc) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000a0a07031dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x1}, 0x0) 18:52:29 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x0, 0x14, 0x0, 0x0, 0x1ac, 0x0, 0x2, 0x0, 0x5]}, 0x33}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) vmsplice(r0, &(0x7f0000002680)=[{&(0x7f0000002580)}], 0x1, 0x3) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0), 0x6) socket$inet_tcp(0x2, 0x1, 0x0) [ 451.707306] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 452.325268] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.331799] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.338473] device bridge0 left promiscuous mode [ 452.490165] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 452.532109] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.538643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.545411] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.551854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.558541] device bridge0 entered promiscuous mode [ 452.571973] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.579396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.586110] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.592483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.599238] device bridge0 entered promiscuous mode [ 452.606621] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 452.630374] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.636907] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.643689] device bridge0 left promiscuous mode 18:52:30 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x2, 0x0, @rand_addr}, &(0x7f00000000c0)=0x10) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x8, @local, 0x4e24, 0x4, 'lblc\x00', 0xa, 0x7, 0x41}, 0x2c) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x48400, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x10, 0x2, @in={0x2, 0x0, @loopback}}}, 0xa0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x1, 0xc00) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f00000001c0)={0x60149469, 0x7fff, 0xc69, 0x100000001, 0x0, 0x9}) 18:52:30 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0xffffffffffffff7f) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:30 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470012ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:30 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x80000089a2, &(0x7f0000000040)={'bridge0\x00', @ifru_settings={0x16}}) ioctl$VT_RELDISP(r0, 0x5605) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x2, 0x8000) 18:52:30 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) [ 452.757927] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.764382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.771096] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.777512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.784341] device bridge0 entered promiscuous mode 18:52:30 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x7) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x100, 0x4) r1 = gettid() perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x401, 0x1, 0x0, 0x98, 0x0, 0x1, 0x800, 0x6, 0x8, 0x3, 0x8000, 0x84, 0xae0, 0x2, 0x129a8000, 0x3f, 0x100, 0x3, 0x3b, 0x5, 0x80e, 0xfffffffffffffffb, 0x10000, 0x80000000, 0xa7, 0x8001, 0x0, 0x1, 0x9, 0x5, 0x3ff, 0x8, 0x0, 0x100, 0x2f, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x5, 0x9}, 0x9, 0xaab, 0x1, 0x7, 0x1, 0x3ff, 0xffffffffffffffff}, r1, 0xb, r0, 0xb) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0x5, 0x1, 0x7, 0x3a453091, &(0x7f0000000100)=[{}]}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000001c0)) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x110, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000240)={0x5, 0x0, 0x10001, 0x101, '\x00', 0x5}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000280)={0x2b, @dev={0xac, 0x14, 0x14, 0x21}, 0x4e24, 0x3, 'rr\x00', 0x13, 0x100000000, 0x57}, 0x2c) write$FUSE_OPEN(r0, &(0x7f00000002c0)={0x20, 0xfffffffffffffffe, 0x4, {0x0, 0x4}}, 0x20) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSBRK(r2, 0x5427) getpgrp(r1) fanotify_mark(r2, 0x8, 0x0, r3, &(0x7f0000000340)='./file0\x00') ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x23) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000380)=0x3) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10) read(r2, &(0x7f0000000440)=""/8, 0x8) syncfs(r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x4000, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000004c0)) write$FUSE_INIT(r4, &(0x7f0000000500)={0x50, 0x0, 0x7, {0x7, 0x1b, 0x1b, 0x20000, 0x1000, 0x80000001, 0x9}}, 0x50) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0x4) splice(r3, &(0x7f0000000600)=0x55, r0, &(0x7f0000000640)=0x27, 0xf1, 0x1) lremovexattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='security.evm\x00') ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000700)=0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0x0, 0x8000}, &(0x7f0000000780)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000007c0)={r5, @in6={{0xa, 0x4e24, 0x4, @remote, 0x4}}, 0xffffffffffffece1, 0xd664}, &(0x7f0000000880)=0x90) 18:52:30 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 452.887993] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 452.917524] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.926388] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:30 executing program 5: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)="eba52f08ee6379c3bd77ea720684a6f045e69625c85035591d3b82c10655b83a1ba22e9979f84c7e617d53705e5e1b8c1ceb6b462fe67a9c089f1ad51f7a0cb877c0006638e42c81846a7e3d4af4709639eeceb4cb3983add4036476d641ad7b0227643a6598cefda5198e2ee177953dd9ebdf903f78e03f88f9859f08c21142dd2d90a54d0289788bdd7cd88621120e9b9620c399e4a59adda5f1e9e240a0e0d122", 0xa2, 0xfffffffffffffffb) r1 = request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)='posix_acl_access\x00', 0xfffffffffffffff8) keyctl$reject(0x13, r0, 0x9, 0xabd, r1) seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6, 0x0, 0x0, 0xfffffffffffffffd}]}) finit_module(0xffffffffffffffff, &(0x7f0000000380)=']wlan0\x00', 0x8000000000004) 18:52:30 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000100)="985b1fe52001a5c213d3c72f2859f5c300d81103feeb393ea0731772ae73d23088eaf1b062c551538c4d1df2eb5bc209e525f4aeb44cf8d6b24a50ca4ee631423fcc8b62f5e52462579927fb5ca71c33fe6ba49b1622496a8b684313ad5a89067e439399a2bf5fc4a62be70b3c043fea5a70fd7342f35d812633da93ef8d15e3", 0x80) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)) r3 = syz_open_pts(r2, 0xfffffffffffffffe) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000)) ioctl$TCFLSH(r3, 0x5411, 0x70c000) 18:52:30 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x40, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000240)={0x18, 0xf, 0x1, {{0x2, 0x1, 0x5}, 0x5}}, 0x18) ioctl(r0, 0x66, &(0x7f0000000280)="0a5cc80700315f8571ed5bcc895070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x4c0000, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x61) read(r2, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETS(r2, 0x541a, &(0x7f0000000000)) dup3(r3, r2, 0x0) exit_group(0x7ffffffd) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000140)={0xa, &(0x7f0000000100)=[{0x3, 0x9}, {0x3}, {0x3, 0xfffffffffffffff9}, {0x8000, 0x8000}, {0xffffffffffffffc0, 0x5}, {0x10001, 0x800}, {0x7, 0x8001}, {0x80, 0x5}, {0x6a, 0x3}, {0x8000, 0x2}]}) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$TCXONC(r3, 0x540a, 0x0) [ 453.003056] device bridge0 left promiscuous mode 18:52:31 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470075ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:31 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:31 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket(0xb, 0x80802, 0xbf) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa000003fe, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 453.114126] audit: type=1326 audit(1535309551.064:359): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23262 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0xffff0000 18:52:31 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447004affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 453.190050] audit: type=1326 audit(1535309551.140:360): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23262 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0xffff0000 [ 453.219176] rpcbind: RPC call returned error 22 18:52:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000601000/0x600000)=nil, 0x600000, &(0x7f0000000080)=""/144) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000002c0)={0x3000, 0x0, 0x7, 0x5, 0x9}) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x5, 0x608000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x0, 0x1006}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e21, 0x7, @remote, 0xffffffffffffffc1}, r3}}, 0x38) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0x1f, 0x4) mmap(&(0x7f0000833000/0x1000)=nil, 0x1000, 0xb, 0x10, r4, 0x0) readahead(r0, 0x7, 0x0) [ 453.236004] rpcbind: RPC call returned error 22 18:52:31 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:31 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/full\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000200)={{0x5}, {0x2}}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) lstat(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)) r2 = getpgrp(0x0) getpgrp(r2) gettid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000029c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc, &(0x7f00000044c0)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="100000002a0000002b7ad542dabd7000fcdbdf2547b2b6d3b0994b91ddef"], 0x1}], 0x1, &(0x7f00000029c0), 0x0, 0x100000}, 0x7fd) write$binfmt_misc(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="01630f52"], 0x4) sync_file_range(r1, 0x0, 0x4, 0x2) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000280)=""/20) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000007c0)={[], 0x8, 0xfff, 0x1, 0x0, 0x10001, 0x10f004, 0xf004, [], 0x4}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000140)="8cd04b54db9ec9a1539afe1f94439b8d083d28006822e785c3ffdad9b352080da8cc3656d5fd911f4f02a6f881baf252778ec846b0456a04ab8ee8488fac9b2ec1af3f") getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x80000001, 0x8}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x5, 0x3, 0x4, 0x400, r3}, &(0x7f00000001c0)=0x10) pipe(&(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x9, 0x8000, 0x3, 0x2, r4}, &(0x7f0000000300)=0x10) 18:52:31 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470024ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:31 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x800000) read(r0, &(0x7f0000000080)=""/206, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/70, 0xfffffe36) 18:52:31 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:31 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x800, @mcast1, 0x3}, 0x1c) r3 = accept4(r1, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) dup3(r1, r3, 0x0) 18:52:31 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447005dffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 453.863112] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.869641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.876389] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.882815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.889655] device bridge0 entered promiscuous mode [ 453.899054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:52:31 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3c1, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000000c0)) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB], &(0x7f0000000040)=0x8) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10) ioctl$TIOCNXCL(r1, 0x540d) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @rand_addr}, 0x10) shutdown(r2, 0x0) 18:52:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7}) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000000)="4dc9458d4accb39f71df131d6207921a96b3de073267f440ac82614c8e791504eb47d74ac4b0d561f0cc1459c979e39f7105b168d3778426365409e77dda10c8a193cfbdcfe6a2ec8426e133bc538a18fcf319d99ab95220a4249a54b20d9afc4cb070cdd1101be806a13933aac84bd1a68a84cefde546b038e864c70078795191a8e8516165ec144560b94124f2efcee33599be9e1db785603a5c7b909cbf875d5d1fc33aa49579c521d886f08ac27bab5960e3bc9b047172d2f945610531d00b3055a6dac1d36614becae5d71a2f24cb023b85ff8ff7a9e67ef855249e5c0808da6cdd85b553e248ac0d6ffe9b99f853db680cb499", 0xf6, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000100)={{}, {0x80}}) 18:52:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000140)="0a5cc80700315f85715070") r2 = socket$inet(0x10, 0x3, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000080)) unshare(0x10000400) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f00000000c0)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa283008100000002000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x78) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x11, @local, 0x0, 0x0, "64680000f0ff7c97ac76b6eecbfa00"}, 0x2c) 18:52:31 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) close(r0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000480)=ANY=[@ANYBLOB="000000ff7f000000"]) 18:52:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x549080) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) read(r1, &(0x7f0000000100)=""/108, 0x6c) add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440), &(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000000)={0x18b3de8df0906d8, {0x0, 0x1c9c380}, 0x4, 0x9}) 18:52:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000340)=0xbdb, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000037c0)=0xf10001, 0xfffffdef) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0xe3, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="739823047d00edee44000000000000000000000000000000000000000000000007000000f42d7c48333360"], &(0x7f00000000c0)=0x2b) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x1, 0xfffffffffffff362}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x0, &(0x7f0000000180), 0x0) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x10000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000240)=0x4, 0x4) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) setsockopt(r5, 0xffffffff, 0x7, &(0x7f0000000280)="cabc596ebfc6b9e50143e6c0567005187942db5a821fc93ac59d71e44f9e6d80f99713e11a30f7804cdbee976378cbe65ce598afcde6f149ccc4f3121e5320cb4fa0a8b922b1dbd089a8a09b13cd3b6f1e79702007ceec18b0045ab9124fff8da84ff9f8e4a2deff2be1", 0x6a) 18:52:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.bfq.weight\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4193, 0x200000) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000100)={[{0x7ff, 0x1f, 0x5, 0x6, 0x8, 0x8001, 0x8000, 0x1, 0xfffffffffffffbff, 0x5, 0x3838, 0x24, 0x3}, {0x7ff, 0x4, 0x100, 0x0, 0x6, 0x9, 0x8, 0xffff, 0x9, 0xef, 0x7, 0x400, 0x2}, {0x1ff, 0x2, 0x5, 0x2, 0x1000, 0x9c, 0x1, 0x3, 0x401, 0x3, 0xfffffffeffffffff, 0x7, 0xfffffffffffffe00}], 0x8}) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendfile(r2, r1, 0x0, 0x7) 18:52:32 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470028ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40000, 0x0) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="3c000000dd0000"]}) close(r2) close(r1) 18:52:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101002, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x5, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e20, @broadcast}, 0x0, 0xfffffffffffffffa, 0x4dce, 0x2, 0xacd9, &(0x7f00000000c0)='syzkaller0\x00', 0x6cdb19c2, 0x3, 0x2}) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0xfffffffffffffda7) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0xb2a, @empty, 0x7}}, 0x3, 0x7}, &(0x7f00000001c0)=0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3, 0x5}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) personality(0x5ffffff) uname(&(0x7f00000003c0)=""/176) [ 454.516920] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.523632] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.533011] device bridge0 left promiscuous mode 18:52:32 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x0, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000001180)={0x8001, {{0xa, 0x4e22, 0xf6d, @dev={0xfe, 0x80, [], 0xc}, 0xffffffffffffff00}}, {{0xa, 0x4e21, 0x0, @loopback, 0x200}}}, 0x108) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") getrandom(&(0x7f0000000180)=""/4096, 0x1000, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x3ffff}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x3}) 18:52:32 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470033ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000340)=0xbdb, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x4) ftruncate(r1, 0x1000000) sendfile(r0, r1, &(0x7f00000037c0)=0xf10001, 0xfffffdef) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0xe3, 0x4) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="739823047d00edee44000000000000000000000000000000000000000000000007000000f42d7c48333360"], &(0x7f00000000c0)=0x2b) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x1, 0xfffffffffffff362}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x0, &(0x7f0000000180), 0x0) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x10000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000240)=0x4, 0x4) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) setsockopt(r5, 0xffffffff, 0x7, &(0x7f0000000280)="cabc596ebfc6b9e50143e6c0567005187942db5a821fc93ac59d71e44f9e6d80f99713e11a30f7804cdbee976378cbe65ce598afcde6f149ccc4f3121e5320cb4fa0a8b922b1dbd089a8a09b13cd3b6f1e79702007ceec18b0045ab9124fff8da84ff9f8e4a2deff2be1", 0x6a) [ 454.826756] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.833226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.839979] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.846404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.853240] device bridge0 entered promiscuous mode [ 454.861130] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 18:52:32 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 455.230714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 455.240823] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.247346] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:33 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x20}, {0x6}]}) rt_sigpending(&(0x7f0000000000), 0x8) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000000}) 18:52:33 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470057ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:33 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470033ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:33 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-camellia-aesni,hmac(md4-generic))\x00'}, 0x58) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80000, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000100)={0x50, 0x3, 0x0, {0x2, 0x2f, 0x0, 'gcm_base(ctr-camellia-aesni,hmac(md4-generic))\x00'}}, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0xf) [ 455.280075] device bridge0 left promiscuous mode 18:52:33 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 455.401302] audit: type=1326 audit(1535309553.350:361): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23440 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 18:52:33 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:33 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470073ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:33 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470033ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:33 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000001fe8)) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x100000000, @empty, 0x7fff}}, 0x101, 0x2, 0x2, 0x5, 0x100000001}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={r2, @in={{0x2, 0x4e22, @local}}, 0x1, 0x3241ba0b}, &(0x7f0000000240)=0x90) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r3 = gettid() r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) tkill(r3, 0x7) 18:52:33 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0x0, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000080)="0f20e06635000001000f22e0baf80c66b8baa1678a66efbafc0ced0f080f01d16665660fe199ca00ba420066b80700000066ef3905baf80c66b88f21258366efbafc0cb000eeba2000ecf30f019a2a58", 0x50}], 0x1, 0x0, &(0x7f0000000140), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 455.966335] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.972856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.979655] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.986059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.992825] device bridge0 entered promiscuous mode 18:52:33 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x41, 0x0) ioctl$TCSETSF(r0, 0x40085112, &(0x7f0000000040)={0xfffffffffffffffe}) 18:52:33 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470006ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:34 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x202, 0x3) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/204, &(0x7f00000000c0)=0xcc) keyctl$join(0x1, &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}) 18:52:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 456.148306] audit: type=1326 audit(1535309554.098:362): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=23440 comm="syz-executor5" exe="/root/syz-executor5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 [ 456.169366] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.177366] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, &(0x7f00000000c0), 0x63, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_free(r1) readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 18:52:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x7) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000140007000000000000000aff0007667e279639a91d7bd91397917daf4204a00b32eadc00000000000001e3d8960f65b27ee8125f423682a9447015739d53d5000000"], 0x48}}, 0x0) 18:52:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x6d, &(0x7f0000000100)=""/87, &(0x7f0000000200)=0x57) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0xffff) 18:52:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:34 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) sync() personality(0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000011, 0x13, r2, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={[], 0x1e}, 'bcsf0\x00'}}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x78000) [ 456.235026] device bridge0 left promiscuous mode 18:52:34 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB='filter'], &(0x7f00000001c0)=0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x0, 0xffff, @dev}], 0x1c) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) 18:52:34 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470043ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:34 executing program 3: r0 = socket$inet6(0xa, 0x80803, 0xb7a) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'vcan0\x00', 0x2}) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x5) 18:52:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000200)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x9, &(0x7f0000000180)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 18:52:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:35 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x0, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:35 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x7fffffff, 0x100000000000a}, {}, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000280)={'broute\x00', 0x0, 0x3, 0xe6, [], 0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)=""/230}, &(0x7f00000000c0)=0x78) 18:52:35 executing program 3: r0 = epoll_create1(0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x0, 0x0, 0x80000000}) 18:52:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r0, 0x48000000008912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_open_dev$evdev(&(0x7f0000000600)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) r2 = dup3(r1, r1, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xe8, "bc021b8cd3cbe54d50b3fca336d04273e9164c650d83b87e73a48dbf73426f11007df74cd15a9b8f22bd7084fb079bada7be5951885d86b05a0a4d796ccce301b4ada245f82d18357d800aa68e9cd803a168561642379c1a303ade1502b3291375fa81216c04b8842591acaa4a6d444628242241cb08a3e15c2770bf3ae6a2923d8cf36681475dfef500d84a8af096d648ca2167b5790a77da21a6ece18d4149eb931668a927fbcf1cb808cb6d723c93dc9aa852da5be8dfbf7229634516959df559103f54330d10a3ce68a62e55864601e90a9cb9b6fd072625db7f3d142143cf28fc8e3e34f0c8"}, &(0x7f0000000000)=0xf0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x19}, 0xff}}}, 0x84) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000200)=""/202) 18:52:35 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000300)={0x1, 0x70, 0x8001, 0x7, 0x10000, 0x0, 0x0, 0x80000001, 0x80000, 0x4, 0x971d, 0x7, 0x101, 0x3, 0x4, 0x9, 0x7, 0x5, 0xffffffffffff0001, 0x2, 0x1ff, 0x1000, 0x7fffffff, 0xf074, 0x86, 0x1f, 0x3, 0x10000, 0x1000, 0x37fc, 0x50aee443, 0x3, 0x4, 0x4, 0x81, 0x0, 0x3, 0x101, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080), 0x7}, 0x2c0, 0x737, 0x2, 0x7, 0x5, 0x0, 0x40}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000380)={0x3, 0x3, {0xffffffffffffffff, 0x3, 0xbff8, 0x9b76755815e00ca1, 0x8}}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x40000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x2, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) 18:52:35 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470038ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 457.032883] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.039308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.046015] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.052437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.060073] device bridge0 entered promiscuous mode [ 457.066286] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 18:52:35 executing program 3: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000340)) r0 = gettid() rt_sigprocmask(0x0, &(0x7f000003b000), 0x0, 0x8) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)={0x0, r0}) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x4e24, @dev}, 'team0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r2 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) ioctl(r1, 0x7045, &(0x7f0000000080)="cc528548671d4936f1cad9cb12f5e183baa40f95835b23c316ff8be9f5eeecdc6592ba74c8d2796d8f71ea08715a7440cd31824a5c2a219763892e25f0629b1a3927c7790b9fa62bf285700a1ad1a7d6e9ad92cdd87dda908864fe1fb7c394488caacfe3f08d87af920953df3102528fe648") inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x0) 18:52:35 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x4000000008912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x81) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r2, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000100)='bond_slave_1\x00') mlock2(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) inotify_init() ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) mlock(&(0x7f0000003000/0x3000)=nil, 0x3000) r3 = semget$private(0x0, 0x4, 0x44) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)={0x1ff}) semctl$IPC_INFO(r3, 0x7, 0x3, &(0x7f0000000300)=""/4096) 18:52:35 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900090035000c00060000001900150006000000000000dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) ioctl(r0, 0xfffffffffffffeff, &(0x7f0000000080)="7a4932b0940e65c33cb7a3eb52e2dcaebbfb7a658b6423d86114cca5b659fa0bd285c29bfeb74e882462f021dbed3daf2514b5dd4205bbd6") 18:52:35 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x3f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r1, 0xffff}, &(0x7f0000000180)=0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0xd, 0x4) write(r2, &(0x7f0000000000), 0xc866) [ 457.202940] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.210910] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:35 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a), 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x200000) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000040)) r3 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) r5 = shmget$private(0x0, 0x4000, 0x1fff5, &(0x7f0000ffc000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x2000)=nil, 0x4000) io_submit(r4, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f000007d000)="b3", 0x1}]) 18:52:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:35 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447005cffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 457.389370] device bridge0 left promiscuous mode [ 457.411381] print_req_error: I/O error, dev loop0, sector 0 [ 457.417171] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 457.424924] print_req_error: I/O error, dev loop0, sector 8 [ 457.430702] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 457.438456] print_req_error: I/O error, dev loop0, sector 16 [ 457.444313] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 457.452069] print_req_error: I/O error, dev loop0, sector 24 18:52:35 executing program 1: syz_emit_ethernet(0x33f, &(0x7f00000002c0)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "b3593b", 0x8, 0x67, 0x0, @empty, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000040)) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xc54c, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000080)={{0x7e, @rand_addr=0x7f, 0x4e21, 0x1, 'lc\x00', 0x1, 0x1, 0x51}, {@empty, 0x4e24, 0x6, 0xae, 0x100, 0x80000000}}, 0x44) [ 457.457935] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 457.465690] print_req_error: I/O error, dev loop0, sector 32 [ 457.471538] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 457.479291] print_req_error: I/O error, dev loop0, sector 40 [ 457.485140] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 457.492884] print_req_error: I/O error, dev loop0, sector 48 [ 457.498742] Buffer I/O error on dev loop0, logical block 6, lost async page write 18:52:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") mkdir(&(0x7f0000000000)='./control\x00', 0x0) r1 = open(&(0x7f0000fbe000)='./control\x00', 0x0, 0x0) unshare(0x400) lstat(&(0x7f0000000240)='./control\x00', &(0x7f0000000280)) r2 = openat(r1, &(0x7f0000000040)='./control\x00', 0x20040, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x40049409, r2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) [ 457.506479] print_req_error: I/O error, dev loop0, sector 56 [ 457.512334] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 457.520091] print_req_error: I/O error, dev loop0, sector 64 [ 457.525949] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 457.533704] print_req_error: I/O error, dev loop0, sector 72 [ 457.539619] Buffer I/O error on dev loop0, logical block 9, lost async page write [ 458.079847] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.086288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.093036] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.099499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.106376] device bridge0 entered promiscuous mode [ 458.112183] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 458.119053] netlink: 13 bytes leftover after parsing attributes in process `syz-executor4'. 18:52:36 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) ptrace$getregset(0x4204, r0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=""/163, 0xa3}) mremap(&(0x7f0000b18000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000a94000/0x2000)=nil) 18:52:36 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:36 executing program 1: capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000080)) ioprio_set$pid(0x3, 0x0, 0x3) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x88) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr=0xfffffffffffffff7}, 0x4, 0x0, 0x3, 0x2}}, 0x2e) 18:52:36 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x0, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:36 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447005effe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000200)={0x2, 0x4000000000000d, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}}, @sadb_lifetime={0x4, 0x3, 0x9}]}, 0xa0}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000)=0x10be0000000000, 0x4) [ 458.129912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 458.165758] netlink: 13 bytes leftover after parsing attributes in process `syz-executor4'. 18:52:36 executing program 5: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto(r0, &(0x7f00000000c0)="c2f73593ba5879c1564a078203f6f03f601b906d20f6d0296e4c26f2082fe58d4137d1e5a6d24c556ba11055130fe7a9a67971aa5ef21110bcc273ad792b5b3c2513ab6b6d5c2067d7b72cc5611ed9a4e2ebdba3bd4790836752e7753ae6797dc310c13d8f5b51f655f39406c7d7012b7e42a75d72d8a0fd4bf623774417e10a0476d2792ab65cdaacba17a0cf54859f623886df4f74610cbd", 0x99, 0x4000001, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @loopback}, 0x4, 0x1, 0x3, 0x2}}, 0x80) io_setup(0x800, &(0x7f0000000040)=0x0) r3 = socket$key(0xf, 0x3, 0x2) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000080)=0x2) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000080), 0x1fb}]) 18:52:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000100), 0x84, 0x0, &(0x7f0000191000)={0x0, 0x1c9c380}, &(0x7f0000000000), 0x0) r0 = socket(0x1b, 0x0, 0xfffffffffffffffd) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0xf8, "7f45dbaf9ae308549f4bad5cd1093e312d55744b707af3ff3524d52ade8308fc4590d70184333160901f3745d4f81d5bf7a5cb671b6bd0a48c8d8ad4a4b62abbef0a797057729144c6a428096690d80e68f7ef7b6b5d97783bcb3fadac4bc70deb957b45955c7640995d758ec0669edd14b0f938673e5ff4c231dd3b75dce73f56ca363ee916a108a15a97978c07cd95431aecc26957eee587601e16b768badf81957f7c04ea41fc493eb00e56a6eece93698da74082c0e7229efd21b4671730914ea48e169d7edb8521832a3c81082511b46e69582130ec8adae111e32260b83f8560ba8ef4efac982bf3a1d1f17780eee2a506a9c55b66"}, &(0x7f0000000040)=0x11c) 18:52:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x100000001, &(0x7f0000000340)="025cc80700145f8f764070") clone(0x0, &(0x7f0000000580), &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000000080)) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000600)='fou\x00') r3 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9ef8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x100000003) r5 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r5, &(0x7f0000000100), 0x15) recvmsg(r4, &(0x7f0000000140)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=""/229, 0xe5}, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000100)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000240)=0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000540)) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x800009, 0x4, 0x2, 0x1f, r6}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000580)=0x8) fcntl$setstatus(r1, 0x4, 0x400) capset(&(0x7f00000001c0)={0x0, r6}, &(0x7f0000000200)={0x10001, 0x9, 0x7, 0x9, 0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0xffff, 0x9}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x21, &(0x7f0000000000)=""/8, &(0x7f0000000080)=0x1a08) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x800, 0x0) splice(r1, &(0x7f0000000380), r3, &(0x7f00000003c0), 0x9d, 0x8) 18:52:36 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) prctl$setptracer(0x59616d61, r3) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="66ff1a"], 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 458.314804] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.321500] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xb3) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000480)={0xbe, 0x81, 0x1f, "d70b1d85cd4a5facec7d618f281863ce42ca6824533178760d83c110b96b9f199dfd385d2b01235b620eab8f31fe23ced166ef492bae9d4631c020ed418094ff163a1bf3ae48b0d952fe2403352a6b700693ff8b1397559e09616db71bf5e1b3c2da2931c3649bd84be3e410fec665e7bac253684e9b7ca6fe8d1c37dc3b98a23d0ac4a51903cf96a32d162c45d5f2c71847091842675a8d201a38c572d4985c1943ea2708e22635470ab038252c3b827add7eec4b06d4aa68b448aefc11"}) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000440)='mountinfo\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={&(0x7f00000000c0), 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x3, 0x90a, 0x0, {}, {}, {0x0, 0x0, 0x20}, 0x1, @can={{0x1, 0x8}, 0x6, 0x2, 0x0, 0x0, "5beb522835c4f40d"}}, 0x48}}, 0x4000004) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x200, 0xa858, 0x7bcb6358, 0x4, 0x8}) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x4b, &(0x7f000012e000)}, 0x0) write$binfmt_elf32(r5, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000140)={0x6, 0x81, 0x49da, 0x1, 0x7ec2}) recvmmsg(r0, &(0x7f00000008c0)=[{{&(0x7f00000003c0)=@rc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)=""/162, 0xa2}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f0000000740)=""/137, 0x89}], 0x3, &(0x7f0000000840)=""/75, 0x4b, 0xffffffffffffff4c}, 0xcc0}], 0x1, 0x40010002, &(0x7f0000000900)) r6 = socket(0x1e, 0x805, 0x0) r7 = socket(0x1e, 0x805, 0x0) getpeername$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000380)={r8, 0x1, 0x6, @link_local}, 0x10) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000001c0)=@req3={0x2, 0x7, 0x2, 0x6, 0x0, 0x9, 0xec}, 0xafdc107096666ea7) 18:52:36 executing program 5: r0 = socket$inet6(0xa, 0x1, 0xdc4a) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x808, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000001c0)="7054a97f07090148f96e2f36c6ccee1e82ea6b903d4b9b6659ad13a8582ea09b7697c04e4c552cc2ba06e7c0377be028beecfc547a69c71772f4e1248b7fd40dcf017b66c64c2e9a81003fcd65ab607319f2a174f339813f605970c3cdb4fcf928e6d91bdd1316b86d79e972b7") ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000140)='cgroup\x00') bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendto$inet6(r0, &(0x7f0000000000)="05bb26b1084c0c3652bd264f7aa49b4753da9e5e0d43da46dc404e40d06d1837cd0d9fa0c81c07da3065", 0x2a, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @remote, 0x5}, 0x1c) listen(r0, 0x0) shutdown(r0, 0x0) accept4$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000400)=0xe8) r7 = geteuid() sendmsg$nl_route(r3, &(0x7f00000018c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001880)={&(0x7f0000000440)=@getlink={0x1404, 0x12, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x4402, 0x1904}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x20}, @IFLA_PORT_SELF={0x1380, 0x19, [@typed={0x8, 0x66, @pid=r2}, @generic="ff2a92a0b45b5ce3a4a2a8be4ec827780029196c3fdbce3f7e5def7c2dd63a3dbcd76342c4ed6267404ff4f15d6a46315eb7c31f3ef38645d1c3c5c2dcf5bad51a19e9f1a0e7a1e025bfff2f3facde3db677f7a27fc0be14c58bc0024d4eed13ae7305679df2c363f4c370ab263fe3c9b54f41953505a2621adb260325f50f6d8e2430c6ff42e72ad784017065e9c4ec3751634a65cf423df86b58d4d4a1f1bbac689c57cfb1705107b722320099fa96b4ccf1ab6813434945344a85ca6c7d09d41fd1d387253e3dcf50", @generic="0f56f4a05cf37eb176e8dd432905ffc45613a1bccc664abaa5f4b8ce28f1c4191d29297ede0d338fffdecf72767ffdd3f89ffccf8533daf1dff44c6cc3b24468a523340b4d6a620dcd932af0434370da56a357dd", @generic="acc00cc685fb2e836f1409ffc1db5a284d0b5644885de9fceb0e2a553ab34cb62f38a8cad00555855bb7a8caa92575a3f5e2f13647f4360c47971cf8a989f4da3c2b84c38a81624d350807", @nested={0xc0, 0x6c, [@generic="b28fcb65946ca7474cfd4a952f94db884b7aada5fc196ed61d9ff53609b419f506ecdcf52610879eaa105d0d2771dd93e1ef9422ed46e86f22a33f8fe8ec322f760f2e5414635ecc3ee58d8d9ec21e52034c013033ca376ea0d213548aea9e4269c593c9038f76e0bc4cef75449dd93d51ecd8df3327b77439df342c5c3779f46be69db3dbebdbc12d0cd125dc2ff90a1c6e1a4148a5778a3ac2888644f69b30df623d76ad70a97524f2566140f78e2d815a65bf6a429972d78f9f73"]}, @typed={0x14, 0x43, @str='trustedsystem\x00'}, @nested={0x1134, 0x6d, [@typed={0x8, 0x8a, @uid=r6}, @typed={0x8, 0x8b, @fd=r3}, @generic="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", @generic="ddc9a37be1f817263ccaea46e563029dd03d3ea148a774181412abba8512dcc69e26b49470b62ff2c0a5a949ad909487c8b571130d7a0352cc92afefd719de16213dccc5bc33b2b43f9c573e6e041684057f10eeaee1d1535142c8c51a7d97ef8cee5ae1529e190ca5ba8586e78f3f6212983f6c5f7244af45f133a8f85637b7d76feb316d10e74eba35bd", @generic="1713319d907ef68f96712a95f55bce09706898b25192dca4ee3c7c500962a0dbb95d65646477ffd0c156f8c03be1201e425ca89934ec9889c77380cf83ae5b6c13108f82d5164054833c1b519707", @typed={0x8, 0x3c, @uid=r7}, @generic="c880e1fdb2558db54113cdf2817c210bc4d1a43316a51d413f9364a71e05a20018e9536ff788d1a7958d873d5256e37a8d3309a5255a3170d446d1a5e5d7"]}]}, @IFLA_IFALIASn={0x4}, @IFLA_MAP={0x24, 0xe, {0x3, 0x8a, 0x2, 0x5, 0x6, 0x1}}, @IFLA_CARRIER={0x8, 0x21, 0xe95}, @IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_IF_NETNSID={0x8, 0x2e, 0xfe}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_OPERSTATE={0x8, 0x10, 0x6}]}, 0x1404}, 0x1, 0x0, 0x0, 0x44}, 0x20040800) socket$pptp(0x18, 0x1, 0x2) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000000c0)={0x4, 0xffffffff}) [ 458.442168] device bridge0 left promiscuous mode 18:52:36 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x5}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000040)=""/42) 18:52:36 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447006fffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 458.547160] Unknown ioctl 1075599392 18:52:36 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000000580), 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f03b3fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x3ff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0xe, 0x6}], 0x1) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f00000000c0)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000540)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000030000dc00000000000000819500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r3 = dup(r0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000200)) r4 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r1, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={r1}) [ 458.651651] Unknown ioctl -2143244695 18:52:36 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447003effe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:36 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 459.234125] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.240650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.247334] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.253748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.260442] device bridge0 entered promiscuous mode 18:52:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:37 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470062ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:37 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x0, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000080)={0x0, 0x0, 0x94ac}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r0, 0x40045566, 0x0) 18:52:37 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e20}, @in6={0xa, 0x4e24, 0x7f, @mcast1, 0xff}, @in={0x2, 0x4e20}, @in6={0xa, 0x4e23, 0x9, @ipv4={[], [], @broadcast}, 0x4}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x6, @mcast1, 0x1}, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x800}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @multicast1}], 0xd0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000340), 0x4) dup2(r0, r2) [ 459.313803] Unknown ioctl 1075599392 18:52:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x10000004e20, @multicast1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000e100000000000000819500200000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) write$binfmt_elf32(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="7f"], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x20) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r1}) write(r2, &(0x7f0000000640)="d3", 0x1) [ 459.348847] input: ¬” as /devices/virtual/input/input36 [ 459.379852] Unknown ioctl -2143244695 [ 459.405952] input: ¬” as /devices/virtual/input/input37 [ 459.501213] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.507793] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:37 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xfffffffffffffffa, 0x80) accept(r0, &(0x7f0000000000)=@ll, &(0x7f0000000080)=0x80) 18:52:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 459.559687] device bridge0 left promiscuous mode 18:52:37 executing program 0: process_vm_writev(0x0, &(0x7f0000000540), 0x0, &(0x7f0000002780)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xe4da4edc6683e319, 0x0) getsockname$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r1, &(0x7f0000000100), 0x100001d3, 0x400000000000) 18:52:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0xa, 0x7ff, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfc0004) r2 = accept4(r1, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000040)=0x10, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000500)=0x4, 0x4) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)={0x0, r3+30000000}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 18:52:37 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000040)="d5a28e0146edde1430e821c96017", 0x0, 0x4000000, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0xfffffffffffffff1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 18:52:37 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)=[@cred={0x20}, @cred={0x20}, @cred={0x20}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}], 0xa0}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x9}) syz_open_pts(r0, 0x400000) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) 18:52:37 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:37 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x214200, 0x4) setsockopt$inet_dccp_int(r0, 0x21, 0x14, &(0x7f0000000040)=0xfffffffffffffffc, 0x4) prctl$intptr(0x27, 0x8) ioctl$int_in(r0, 0x80000040045017, &(0x7f00000004c0)) 18:52:37 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@int=0x6, 0x4) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x0, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) getsockname$unix(r1, &(0x7f0000000200), &(0x7f0000000280)=0x6e) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000480), &(0x7f00000004c0)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x9}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0246e978543b04f80000"], &(0x7f00000006c0)=0x1) prctl$setfpexc(0xc, 0x1) r3 = msgget$private(0x0, 0x0) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000e80)=""/4096) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = getgid() setgid(r4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x700, 0x3e8, 0x140, 0x500, 0x500, 0x0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, &(0x7f00000003c0), {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x8000, 0x2}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d6, 0x4d3, 0x3, 0x20, 0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xffffffff}}}, {{@ipv6={@ipv4={[], [], @local}, @dev={0xfe, 0x80, [], 0x1e}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], [0xff0000ff, 0xffffffff, 0xffffffff, 0xff000000], 'bond0\x00', 'veth1\x00', {}, {0xff}, 0x2e, 0x5, 0x2}, 0x0, 0x138, 0x160, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x9}}, @common=@hbh={0x48, 'hbh\x00', 0x0, {0x100000001, 0x5, 0x1, [0x800, 0x40, 0x3, 0x7fff, 0x7, 0xdb11, 0x401, 0x1b1, 0x2, 0x3, 0x1, 0xfffffffffffffff8, 0x7f, 0xa000000000, 0xe, 0x1], 0x10}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x800, 0x7f}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@inet=@set1={0x28, 'set\x00', 0x1, {{0x1, 0x8, 0x800}}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x2, @ipv4, 0x4e21}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x760) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xa1}, 0x20, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0x4, 0x0, 0x3fe}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 18:52:37 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x2}, 0x10}}, 0x1) 18:52:37 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:38 executing program 4: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000080)=0x1800, 0x4) fcntl$notify(r0, 0x402, 0x10) mknod(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 18:52:38 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) r1 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)='#proc+:\x00', 0xfffffffffffffff8) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x5, 0x50001) ioctl$RTC_WIE_ON(r2, 0x700f) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000001c0)={0x8}, 0x4) keyctl$invalidate(0x15, r1) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_address={0x5, 0x9, 0xffffff80, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0x98}}, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000200)="9a6abfc807dc64905e1cb3bb5c12e37905246b7e6ed55ac8331484726ed1eabbf5a3978e31525c13a7cbe86fef9ccabfe784e77f11c8e04fb3312b499ebb54a969fb35d29243f74b1a696dd1f325feec0a1c5fb2a3aabfc8946c44a9a755cd0bea3d50e8") 18:52:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000300)="ca684876355d48f157fa87f44ced1b55d3b2f56aa41339f9a0391f08791e59584ebd51d7df0851d0184e293e40f939512b15ac7c6f2d24a87a") bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001900)="d93729f18d0055527c7c1abdcfc6ae4b70b02a5051b9d8f4315b12e8ad507d581e99e85ff1e06a9d669bd78bcd02142e1bd88d0f45182c90e9b451f9a51b8b8e2fe9bcbafc9362eb121e8f2feea1a6bb7e56348b2e8df519e198ed731940dd6514f8", 0x62}], 0x1, &(0x7f0000000000)}], 0x1, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni\x00'}, 0x58) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) bind(r2, &(0x7f0000000480)=@ll={0x11, 0x19, r3, 0x1, 0x9b7, 0x6, @local}, 0x80) sendmmsg(r2, &(0x7f00000002c0)=[{{&(0x7f0000000080)=@can={0x1d, r3}, 0x80, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x10}, 0xff}], 0x1, 0x8000) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000000)={0x8000000000000000, 0x3000, 0x2, 0x2, 0x1b}) getrandom(&(0x7f00000003c0)=""/16, 0x10, 0x3) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0xb0, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x17a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x97af}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4ef}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x65}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x908dbe075a3de655}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 18:52:38 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470021ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x2800, 0x0) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000080)=0x3f) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000100)=ANY=[@ANYBLOB="0b646229cf3c7717d20d6e74"]) 18:52:38 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x0, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:38 executing program 5: syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x1, 0x100000}, {0x80}, @ext={0x2, &(0x7f00000001c0)="8ac9"}}], 0x178) [ 460.194346] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.201060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.209622] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.216399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.224429] device bridge0 entered promiscuous mode 18:52:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:38 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x0, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) [ 460.439702] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.448219] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x20000000000000a, 0x803, 0xff) connect$inet6(r1, &(0x7f000004bfe4)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) 18:52:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80080000002, 0x549080) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x4dd9c879, 0x8, 0x8001, 0x4, 0x0, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000240)={{0x3f, @remote, 0x4e20, 0x4, 'fo\x00', 0x23, 0x0, 0x4f}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x4, 0x20}}, 0x44) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[{0x7}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x2) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000001c0)="d0bfdc56c8723ab16d05a6fe03cc4fb26b90a3f44959efffd4582a1f02000000000500000000000000085f24110d2cb72edccd0300000000000000c4d23ca9aea9cd31022b64c34dc11e7076accbb785f5f69c80475fde2b0e6660ed19d2066171d1de888c0eb6adc24eb1768631721b7a9a5377ba1b6200000000000001ff03c858fb8e443ea3f9b7eb833964c17f6dcdf231faed4063a20d28eb59633b7399d4d8cbd780b0223f278181025aac6bf6bab8b96d93d200cacc6603c00caf01485b39dcb2be0b474b6edad38cc226b9ae336097cb76283261f1659f298100a0cfc1b050d826be37c72319c9cf3f80e4f395d86c3ce7e78800") ioctl$TCGETA(r2, 0x5405, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x81003) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) 18:52:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)=0x0) get_robust_list(r1, &(0x7f0000000540)=&(0x7f0000000500)={&(0x7f0000000440)={&(0x7f0000000400)}, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)}}, &(0x7f0000000580)=0x18) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x1f, @dev={0xfe, 0x80, [], 0x1f}, 0x3}, @in6={0xa, 0x4e24, 0xf7be, @remote, 0x6}, @in={0x2, 0x4e23, @dev}], 0x48) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x11, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x3) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xa) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)={{0x1, 0x7ff, 0x5, 0x49a53b95, 0xffffffff, 0xffff}, 0x1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0xa4000, 0x0) semget(0x0, 0x4, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000001c0)=""/208, &(0x7f00000002c0)=0xd0) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)) getresuid(&(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) fstat(r0, &(0x7f0000001cc0)) getgroups(0x1, &(0x7f0000001d40)=[0xee01]) lstat(&(0x7f0000004900)='./file1\x00', &(0x7f0000004940)) getresgid(&(0x7f0000001e40), &(0x7f0000001e80), &(0x7f0000001ec0)) getresuid(&(0x7f0000001f00), &(0x7f0000001f40), &(0x7f0000001f80)) fstat(r2, &(0x7f0000001fc0)) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000002040)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000002140)=0xe8) fstat(r0, &(0x7f0000002180)) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000003a40)={{{@in=@remote, @in6=@local}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000003b40)=0xe8) lstat(&(0x7f0000001e00)='./file0/../file0\x00', &(0x7f0000002200)) fstat(r4, &(0x7f0000004040)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000004140)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000004240)=0xe8) fstat(r3, &(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getuid() lstat(&(0x7f0000004300)='./file0\x00', &(0x7f0000004340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = geteuid() lstat(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000004580)=[{&(0x7f0000003900)=@abs={0xc60d5c80c1ccdb1d, 0x0, 0x4e24}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003980)="2ef6612603df04e220b6a7ae59eeb303af4c395582bbd206061fbc65584dd211d243ffc8efd2461e0530ebe00487bcc24897fac80134c053de9eb091b064fe0926c599667aff545273a27eb1fcddc20406e99a13143c17a7516c2a8d3e2b7af4f3fd9a631582e6657a71f4", 0x6b}], 0x1, &(0x7f00000049c0)=ANY=[@ANYBLOB="28000000000000000100000001000000"], 0x10, 0x20000040}, {&(0x7f0000003d00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000003f00)="8fb0488f961ef396c6458eef40ceba9ee1bc010abd2c7b286644559d85242b23c17dc125e0edb200d61a1bd7a7d590ffd0070dafaac7467911be5278939bcf1a8d4c6124042773c0d589b7cc9485fb0e1aa927dbe5ae0072171f8f5637602e2bfa8c0b9abb5113f8aa4a5eb551b53beb42913f6ab59fbf511b33a9e73ea5c515e7924a1932d6259125663d0648ea646e7e78d69ac5755c06ef4c9451a1a8559bcb09474261aca9fd2e6867b81279f87492cefaeaa270a1ee8c19518666667d0ae3c6d1f8a5d9c55017c6cb7ba83e1602130cace9f5f9bdaf12449111a3f1f728f8628001d9010481ed350d63", 0xec}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0000000010000000000000000100000001000000e1bccd2fddd5f70be4e2340a3765869cb5339c7c6d20c0d58192d2fc66dacd6bef896d4602cf1dc0cb69a87c82b48b3159d689f2dc04d9b941099449e45df37ea3d6893afaf972ba38fb77b71e83d67e6a331a3bd156401f5d6fc49f1b422dbf2f02a8eba23be4c17a1a2811df2f853765589f2a4df5924ac9c454dd1922ff189f36cffa7be7426c23e44e4c795a17a3fdd140b167eec341c12e8b3c18c684e4167c30b4b3a9ee5b27f865e22255322f4a1b364fa48583b2e2f7e43e5104acf623ffe80774"], 0xc0, 0x4000}], 0x2, 0x80) 18:52:38 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447006dffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:38 executing program 5: openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000040)={[0x0, 0x1, 0x102004, 0x5004], 0xab, 0x20, 0x8}) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, 0x7, {0x1}}, 0x18) [ 460.653217] device bridge0 left promiscuous mode 18:52:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x2e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x10000, 0x80100) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300)=r0, 0xb7) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x4800) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000300), &(0x7f0000000340)=0x4) lremovexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.sockprotoname\x00') ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x7f, 0x1, 0x3, 0x0, 0xffffffffffffff9c}, 0x21d) getegid() r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000e49000)=0x4, 0x4) sendmsg(r3, &(0x7f0000eeefc8)={&(0x7f0000fef000)=@in6={0xa, 0x4e20, 0x0, @loopback}, 0x80, &(0x7f0000437000), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="209f47128e000000020000001d1a2d4ba2f2ff6a6104fffffffdfffffd0600009674d704a53e16c99919b4c27cbe36ab04355581cdd2d78c2c3302979b254f99865fc267cbf5f9f35c07e943b2fb0763dffd289e6b5897bcf7deb7527f4cf8f61bc719d622125e3492d68cecc861560408000000000000009e1a5497ddb31ba79f73e9e8f4af1b81ef731d61587c398dc3f8d52acf60d9b12b0a69cd662c873b726ac7c3417c5293e17765c5aa21958578a0c982192a38e1ccfd40875f6206e50500000000000000"], 0x20}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) connect$l2tp(r2, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote}, 0x0, 0x1, 0x2, 0x2}}, 0x2e) r5 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000280)={0xffffffffffffffff, 0x20000008}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f0000000080)={0x1000000000009, 0x8001}) syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x0, 0x402000) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x3f, 0x4, 0xfff, 0x401, 0xffffffff}, 0xc) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000380)) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x401}, 0xc) r6 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f0000000480)="080da006815ec66f8e164349f49f1a997bf5d31c8e1c535bbbf49ff965e1840df9c9f10e44727fda3c1d9c4eb099ce9d5dccec71c4644216554f36c9654652c37f57b9af867b0c7a887d07da70d37849619b047ecd7d8b5d057c51132b06e2fce8479a1165a683f3cd91224c5a4d34ca1917dec8aa8c90daa0db31730b8b0f644773847ad8cd7ae79a4d5d8124124bab42f9df80b22c57d466bbc120d0d2fda1d956b1192fd17bc468df23cde41ccc17ef9980a69593cc8479ff1bffda27b026fddb2089dbfe939a79ff3941297e9f2d1263e9df", 0xd4}], 0x1, 0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nullb0\x00', 0x600402, 0x0) 18:52:38 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:38 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x40000001, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2282, &(0x7f0000000140)) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 18:52:38 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470030ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:38 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f0000adf000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$alg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000002c0), 0x0, 0x1}, 0x0) 18:52:39 executing program 3: socketpair(0x18, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000080)="305dc092f80bb20d384806aad29363b39a610f6e7876d5a2559e99d5b20f0adc6c9ae5941550cf9c086f916fb9cfc8c0543cb83affc8954fbe10b455c956cc81424c7da0d7a3a8d9f5839eeb7277beff0d595f049afa3ae427eed0e48698048b0a33a7cdfd1cfa48ce98f71fb6abcdf1c6e13373", 0x74) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x80400) r4 = dup(r3) ioctl$TIOCSBRK(0xffffffffffffffff, 0x40044591) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000240)={0x1d61b927, {0x2, 0xd1, 0xff, 0x2, 0x1ff, 0x9f}}) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000140)=""/67) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = getpid() syz_open_procfs(r6, &(0x7f0000000340)='cmdline\x00') ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x8912, &(0x7f0000000200)="0a5cc80700315f85715070") r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f00000000c0)=0x8000000000004, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) signalfd4(r2, &(0x7f0000000300)={0x10000}, 0x8, 0x800) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) sendto$inet(r8, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @broadcast}, &(0x7f00000001c0)=0xc) poll(&(0x7f0000000200)=[{r9}], 0xa, 0x0) 18:52:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000001c0)=0x3f) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000007c0), 0xfffffcdb) sendto$inet(0xffffffffffffffff, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback}, 0x10) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180)) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="c744240000004000c74424024f000000c7442406000000000f041c24c4427d180508000000c4c245ae08c4e2850108b9800000c00f3235004000000f30d3559e67470f224205c814000066b89d000f00d0c423a95f2518410000e1", 0x5b}], 0x1, 0x0, &(0x7f0000000040), 0x0) 18:52:39 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 461.403048] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.409444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.416172] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.422629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.429357] device bridge0 entered promiscuous mode [ 461.436797] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.443460] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.818067] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.824482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.831155] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.837635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.844359] device bridge0 entered promiscuous mode 18:52:39 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447004cffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:39 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x0, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:39 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x0, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:39 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:39 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000100)="cd") r1 = semget$private(0x0, 0x4002, 0x0) semop(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000240)) 18:52:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") shmget$private(0x0, 0x3000, 0x1502, &(0x7f0000ffd000/0x3000)=nil) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x100, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) 18:52:39 executing program 3: r0 = memfd_create(&(0x7f0000000080)="3a2173656c696e75785e76626f786e6574306d696d655f74797065776c616e311b00", 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045000030000000000067907800000000ffffffff21009078ff00000018b98c421ceb25450000000000000000000000ac"], &(0x7f0000ea3000)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 18:52:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000000)=@in={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000080)="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", 0x17c}], 0x1, &(0x7f0000001240)}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000e0000000e00000004000000d8020000fffffffff0000000f0000000d8010000ffffffffffffffffc8020000c8020000c8020000ffffffff04000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000280052454a4543540000000000000000010100000000000000000000000000000000000000000000000000007f0000010000000000000000766574683000000000000000200000006772653000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ad000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000007f000001ffffffff00000000000000006c6f0000000000000000000000000000626f6e64300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000ab6b719019900d24c51736cf7b64d0f49398c63b5ddf585973fb89894b0de04392a85d341432b59b56b3b62c30232a151457a4401d77ce1d8782d9454e2e455d9c24683cd15543bb4e1bf8f3c5bcd9f8df7031b3fddf0119c00690f30b7a73384dcb162de147c303ca95aa3e0ace582a4b4290f1681daa0aa3b3653c2b1155b1b55b119395de61a863e8cab566ac51c21660e67257c8c9bc6e2bd076eea1ddfa0056ce76b48b487138b08666ecc6eeacdc6dccd79fb198fcd0943db01ba8447b00b0219d144f110089adac428b4fdca3"], 0x338) [ 462.012544] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.019196] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:40 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000000)={0x0, 0x0}) move_pages(r0, 0x4, &(0x7f0000000140)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000340)=0x1, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x440000, 0x0) write$cgroup_pid(r3, &(0x7f0000000080)=r2, 0x11) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYBLOB="840000009cee1e9974148e109882f3357b6ed83e1b7a017c8d1562754365422d827cebaf7cad5f2f2308a3e2001e065d82768a9dcc535e9d764bc45d1232e87942069cd480c5c4849ab979000000000000000500dd1ad37f434c1991e41a99e3880cc4cae2b175940c7c04d0148ef407959d3192a5d3bb2aa0b74ee2112985ecb3d59df7105913604207f4ce670edf82f0b5c2b4c4a23400109481a614447d8d0158c21734818a03b7670b88491500f469b468"], &(0x7f0000000380)=0x8c) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000500)={0x0, 0x4, 0x8, 0x41, 0x1, 0x5, 0xffffffff, 0x100, {0x0, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x19}, 0x4}}, 0x100000000, 0x8001, 0xfffffffffffffed2, 0x3, 0x1}}, &(0x7f00000003c0)=0xb0) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000005c0)={r4, 0x69, 0x8, 0x8, 0x4, 0x95f, 0x6, 0x3, {r5, @in6={{0xa, 0x4e20, 0x200000, @local, 0x5}}, 0x73ea, 0xcf, 0x0, 0x8, 0x9d7f}}, &(0x7f0000000680)=0xb0) clock_gettime(0x4, &(0x7f0000000240)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000400)=[{}, {{r6, r7/1000+10000}, 0x0, 0x8001, 0x5}], 0x30) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rfkill\x00', 0x400000, 0x0) fcntl$notify(r1, 0x402, 0x80000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xb, 0x100) sendto$inet(r1, &(0x7f0000a88f88), 0x0, 0x2000ff0f, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x6) close(r1) 18:52:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/88, 0x58}, {&(0x7f0000000000)=""/24, 0x18}], 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000080)='::2.le:\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 18:52:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") unshare(0x46000000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2000, 0x0) r2 = geteuid() r3 = getgid() write$FUSE_ATTR(r1, &(0x7f00000000c0)={0x78, 0x0, 0x8, {0xfffffffffffffffc, 0x5, 0x0, {0x1, 0x1, 0x385c, 0x2, 0x1, 0x8, 0x20e, 0xfffffffffffff4ea, 0xffffffff, 0x3ff, 0x8, r2, r3, 0xffffffffffffffe0, 0x7}}}, 0x78) [ 462.110494] device bridge0 left promiscuous mode 18:52:40 executing program 5: mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x20000000084) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x1000, [], 0x0, &(0x7f00000001c0), &(0x7f00000012c0)=""/4096}, &(0x7f0000001280)=0x78) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1f, 0x101800) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/129) 18:52:40 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470025ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 462.219469] libceph: parse_ips bad ip '::2.le' 18:52:40 executing program 5: pkey_free(0xffffffffffffffff) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000001100000000000000000000000400000000000000000000003e07000000000000000000000000000000000000040000000400000000000000ffffffe7000000000000000000000000000005001a0000800000000000000000000000005753a99761f7e5cb02a24bd9cd00fffe8000000000000000000000000000ff00ba535c3ca0c3c84a650143833f80000000010000000000000000000000000000000000"], 0x95}}, 0x0) [ 462.300427] IPVS: ftp: loaded support on port[0] = 21 18:52:40 executing program 5: r0 = socket(0x10, 0x4800000000000003, 0x2) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) capset(&(0x7f0000000000)={0x399f1336}, &(0x7f0000001fe8)={0x6, 0x2, 0x0, 0x0, 0x0, 0x7265}) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'erspan0\x00'}, {0x20, '@'}, {0x20, 'erspan0\x00'}, {0x20, 'erspan0\x00'}, {0x20, "b274727573746564af47504c"}, {0x20, 'erspan0\x00'}, {0x20, 'erspan0\x00'}, {0x20, 'nodev@/,'}, {0x20, 'erspan0\x00'}], 0xa, "32876fedf6962d54370873d5daf0feee003d0bf37b136f138b4f0d70d984e62c2325629dfac785352976dcc0c862c3f37cff30fc2e4ef397ae78f987b97e4f3b0048d1a6829a1c1a14d26f814e5daefee9d4b6697931d993a76944f3bcdef2b9175895bde0f40eee112848a8b3d073712f0160ede2ca8959253db0834df9f15885229d7f1f938a7387f2903000cf1c6a2b48b82de44f11d25a138d9480d46d20fbc09908e82f76787ccc2ff5c6d34661d920ce7ad57ed1d6e6a840"}, 0x114) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'erspan0\x00', @ifru_data=&(0x7f00000000c0)="a325d3c91116bf66fed2b246a94500aa6593352d29be1746fd84168b6ef37b32"}) 18:52:40 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447003cffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 462.648517] netlink: 48 bytes leftover after parsing attributes in process `syz-executor2'. [ 462.662369] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.670420] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.679429] device bridge0 left promiscuous mode [ 462.963723] libceph: parse_ips bad ip '::2.le' [ 463.042214] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.045372] IPVS: ftp: loaded support on port[0] = 21 [ 463.048698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.048915] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.066901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.073752] device bridge0 entered promiscuous mode [ 463.080513] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.087009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.093772] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.100136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.106851] device bridge0 entered promiscuous mode 18:52:41 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x0, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e24, 0x3, @mcast2, 0x80000000}, r2}}, 0x38) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000280)=0x4000000000007fff) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x31) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)) 18:52:41 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470054ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:41 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:41 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x0, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000300), 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00'}, 0x18) r2 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x80080000002, 0x549080) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x4dd9c879, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000380)={0x6, 0x24, 0x2, 0x3}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000240)={{0x3f, @remote, 0x4e20, 0x4, 'fo\x00', 0x23, 0x5, 0x4f}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x0, 0x0, 0x2, 0x4, 0x20}}, 0x44) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[{0x7}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x2) write$binfmt_misc(r4, &(0x7f0000000440)={'syz1'}, 0x1200e) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000001c0)="d0bfdc56c8723ab16d05a6fe03cc4fb26b90a3f44959efffd4582a1f02000000000500000000000000085f24110d2cb72edccd0300000000000000c4d23ca9aea9cd31022b64c34dc11e7076accbb785f5f69c80475fde2b0e6660ed19d2066171d1de888c0eb6adc24eb1768631721b7a9a5377ba1b6200000000000001ff03c858fb8e443ea3f9b7eb833964c17f6dcdf231faed4063a20d28eb59633b7399d4d8cbd780b0223f278181025aac6bf6bab8b96d93d200cacc6603c00caf01485b39dcb2be0b474b6edad38cc226b9ae336097cb76283261f1659f298100a0cfc1b050d826be37c72319c9cf3f80e4f395d86c3ce7e78800") ioctl$TCGETA(r3, 0x5405, &(0x7f0000000140)) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) memfd_create(&(0x7f00000002c0)="000000008c00000000000000000000", 0x1) 18:52:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000640)='/dev/snd/pcmC#D#c\x00', 0x5, 0x149140) write$9p(r1, &(0x7f0000000280)="00eb6a5676fd4bac258cd01c0d770f215011de2350682c110b0b48e07148db77c778585766b3", 0x26) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000680)={&(0x7f000000e000/0x2000)=nil, 0x2000}, &(0x7f00000006c0)=0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10800, 0x0) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0213040506e400002bbd7000fbdbdf2505001a00fe8000004000000000000000000000aa0000000052870040000000000000000112000414"], 0x38}}, 0x40000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) timer_create(0x5, &(0x7f00000002c0)={0x0, 0x20, 0x4, @thr={&(0x7f00000003c0)="e8bda3300202965bdefb7c9ac1e94b52c32bf4310a62980eea4efdee7fcd6ca4737f646f81e9e5e1a3e54dbbc74545bbb3a3b49db374be80f92bc54d14761ff7b0e9acf3d0a8d746bb60142cab2022b0562ae38c625e53004445a92ff09c7a6d7880dc1a87b924ee4ccb0e57a4861b1e6dcc322ae2e822f759848b0762ea0347970a10d85fb4ce6236a734d50a10afaf43acf99d912687880e0466623c44c4661da39c44568c6ede946d0c5470855695a85c69f1a7a9bea12a254ff97447d8f8b26a9e49946efa17df6a8e3a8bc18b9102e6cbcafa7b", &(0x7f00000004c0)="bf6a826f89ec67602d89cf3741dc2c20adf4596cd8b70f3b94ba17946c3f7ea94a315757742fb4d7e3cb16208907d283adb87ffd75abbbe1544af794b1ab4be0682e14d8373208d10fd69b9d5ede16c328f07427a59b513902719349db800e5891e157d2da2687a6f7785bf18896be6ac9b910296396c0d82c010172fd136ece3a2caecc1c23"}}, &(0x7f0000000300)=0x0) clock_gettime(0x200003, &(0x7f0000000740)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000600)={{r5, r6+10000000}, {r7, r8+30000000}}, &(0x7f0000000700)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000340)={0x74, 0x0, [0x3]}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0x2b5) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) [ 463.267873] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.274456] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:41 executing program 3: ioctl(0xffffffffffffffff, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="61a9"]) r2 = fcntl$dupfd(r1, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r3, 0x0, 0x0, @ib={0x1b, 0xfe1, 0xffffffffffff4f96, {"f2f4410c56f4777e3e987a371c2169b7"}, 0x2, 0x5, 0x4}}}, 0x90) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f0000000180)={0x0, 0x0, [0x7, 0x0, 0x5, 0x9]}) [ 463.321641] device bridge0 left promiscuous mode [ 463.382502] kvm: pic: level sensitive irq not supported [ 463.391812] kvm: pic: single mode not supported [ 463.420750] kvm: pic: single mode not supported 18:52:41 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470016ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 463.425602] kvm: pic: level sensitive irq not supported [ 463.448685] kvm: pic: level sensitive irq not supported [ 463.477878] kvm: pic: single mode not supported [ 463.483403] kvm: pic: level sensitive irq not supported [ 463.511992] kvm: pic: level sensitive irq not supported 18:52:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x2000}) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) shutdown(r0, 0x0) [ 463.534198] kvm: pic: level sensitive irq not supported [ 463.559444] kvm: pic: level sensitive irq not supported [ 463.999921] netlink: 48 bytes leftover after parsing attributes in process `syz-executor2'. [ 464.025133] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.031730] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.043934] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 464.053867] device bridge0 left promiscuous mode [ 464.423710] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.430276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.436981] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.443398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.450174] device bridge0 entered promiscuous mode [ 464.472006] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.478439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.485188] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.491717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.498743] device bridge0 entered promiscuous mode 18:52:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:43 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470070ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup3(r0, r0, 0x10000000080000) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x1, 0x6, 0x10, "1c5dcd627789a0d822a09729d93427c8528e8fdb654a842e4a82920f5e82ef911e329321e01e2e03470eb197354ef8c69a5d2f6ffd788f983a99f63a7c5d145b", "3bfa96164f77fa0930c1af525d4c2ca3899bca2c9b1e8ca574f274215256b282d8f03c53712e77d5019a3599b8987cd9082ebf08c254754e7580ac0052922f93", "c0cd6d42e4db348fd8d4b44853cba08e10ad7091f7ff81e965375b0eaf00015a", [0xfffffffffffffffa, 0xffff]}) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000000040), 0xf87abcc1d7534903, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) write$P9_RWRITE(r1, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x81}, 0xb) 18:52:43 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000000)={0xad5, 0x7a}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffa) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_proto_private(r3, 0x89e4, &(0x7f00000002c0)="b2c56468f23ed1c666346737e6181fa03723af99d95d15dbcfd49efda077ea343473eee5965ded63fca595ce94ce143e0f8e433679afd8a1b5f2f043f81a7c23827063503d87e514626fa8bed4a583f37a680aea5d811d51adfc0a66fe771b170c0644c0580b43c3925c06ed8879a5b6c28305c937f40462e7a5d4e7d89d710b4173f7ea22b6a796143871800278a46de88cfbaa5595bdb513ed09178e72e94c") add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="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", 0xfb, r2) 18:52:43 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) msgget$private(0x0, 0x40) unshare(0x24020400) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0)={0x36, 0x37, 0x7, 0x1d, 0x1, 0x63, 0x0, 0x5e, 0xffffffffffffffff}) getpid() ioctl$BLKPG(r0, 0x401870c8, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000001c0)}) 18:52:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') exit(0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) 18:52:43 executing program 0: syz_open_dev$mice(&(0x7f0000001280)='/dev/input/mice\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x4083fd) close(r0) 18:52:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], &(0x7f00000002c0)=0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) open(&(0x7f0000000100)='./file0\x00', 0x902, 0x2) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) recvmmsg(r1, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r2}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001a000102d7c01a1cc6ce000000000000000000000900"], 0x14}}, 0x0) [ 465.698315] binder_alloc: binder_alloc_mmap_handler: 24066 20000000-20004000 already mapped failed -16 18:52:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = syz_open_procfs(0x0, &(0x7f00000003c0)="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") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x10012, r1, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x80086603, &(0x7f0000000040)) [ 465.742157] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.750147] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:43 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0x1a200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x20000) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x2, 0x0, [0x1d9, 0x1]}) 18:52:43 executing program 5: ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000200)="dfc9660f380605660f635a030f20d86635200000000f22d83e0f08660f38094c90f30fbd8381250f23350f0767640fc79800000080", 0x35}], 0x1, 0xf, &(0x7f0000000200), 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x50, &(0x7f0000000180)}, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) lookup_dcookie(0x0, &(0x7f0000000540)=""/179, 0xb3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0xc201}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x0, @local}}, 0x0, 0x3, 0x0, "ab4b5f2b0541f822804ec39be89e8919c73be9472a6261d9313a98377fa5a094f700726a01d4db61f4da67a92ea58a160690a50b6439ef55f086105dc52ce6be484fcc41bdfe650db36efdbf5221fe8a"}, 0xd8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@local, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) [ 465.857449] device bridge0 left promiscuous mode 18:52:43 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470010ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 465.999931] *** Guest State *** [ 466.003482] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 466.012433] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 466.021312] CR3 = 0x0000000000000000 [ 466.025109] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 466.031156] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 466.037201] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 466.043934] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 466.051993] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 466.060030] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 466.068097] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 466.076143] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 466.084190] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 466.092232] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 466.100277] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 466.108333] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 466.116395] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 466.124439] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 466.130919] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 466.138430] Interruptibility = 00000000 ActivityState = 00000000 [ 466.144806] *** Host State *** 18:52:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 466.148094] RIP = 0xffffffff8120b1e4 RSP = 0xffff88018a487350 [ 466.154122] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 466.160621] FSBase=00007ff8a1f58700 GSBase=ffff8801db100000 TRBase=fffffe0000034000 [ 466.168470] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 466.174438] CR0=0000000080050033 CR3=00000001b49cc000 CR4=00000000001426e0 [ 466.181518] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff86c01380 [ 466.188304] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 466.194410] *** Control State *** [ 466.197973] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 466.204812] EntryControls=0000d1ff ExitControls=0023efff [ 466.210359] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 466.217331] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 466.224104] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 466.230754] reason=80000021 qualification=0000000000000000 [ 466.237127] IDTVectoring: info=00000000 errcode=00000000 [ 466.242684] TSC Offset = 0xffffff0453079ae8 [ 466.247065] TPR Threshold = 0x00 18:52:44 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447003bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 466.250499] EPT pointer = 0x00000001b141401e 18:52:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:44 executing program 5: r0 = socket$inet6(0xa, 0x2000000802, 0x0) eventfd2(0xffffffffffffc0b8, 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@mcast1, 0x800, 0x0, 0xff, 0x1}, 0x20) 18:52:44 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470078ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 466.493717] binder_alloc: binder_alloc_mmap_handler: 24066 20001000-20004000 already mapped failed -16 [ 466.523751] binder_alloc: binder_alloc_mmap_handler: 24066 20000000-20004000 already mapped failed -16 [ 466.568374] kvm [24095]: vcpu0, guest rIP: 0x0 kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x1, nop [ 466.760842] *** Guest State *** [ 466.764286] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 466.773201] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 466.782161] CR3 = 0x0000000000000000 [ 466.785946] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 466.791957] RFLAGS=0x0001a202 DR7 = 0x0000000000000400 [ 466.798000] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 466.804852] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 466.812900] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 466.820908] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 466.828952] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 466.836963] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 466.844983] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 466.852992] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 466.861113] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 466.869143] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 466.877167] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 466.885204] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 466.891675] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 466.899168] Interruptibility = 00000000 ActivityState = 00000000 [ 466.905435] *** Host State *** [ 466.908661] RIP = 0xffffffff8120b1e4 RSP = 0xffff8801c36d7350 [ 466.914720] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 466.921161] FSBase=00007ff8a1ef4700 GSBase=ffff8801db000000 TRBase=fffffe0000003000 [ 466.929007] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 466.934926] CR0=0000000080050033 CR3=00000001b49cc000 CR4=00000000001426f0 [ 466.941991] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff86c01380 [ 466.948690] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 466.954791] *** Control State *** [ 466.958325] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 466.965025] EntryControls=0000d1ff ExitControls=0023efff [ 466.970510] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 466.977469] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 466.984166] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 466.990779] reason=80000021 qualification=0000000000000000 [ 466.997144] IDTVectoring: info=00000000 errcode=00000000 [ 467.002644] TSC Offset = 0xffffff0453079ae8 [ 467.006987] TPR Threshold = 0x00 [ 467.010395] EPT pointer = 0x00000001b141401e [ 467.019224] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.025653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.032359] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.038731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.045537] device bridge0 entered promiscuous mode [ 467.051703] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 18:52:45 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0x0, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:45 executing program 4: ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a40)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000002980)=0xe8) getpgrp(r1) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000180)) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73797a31dba8815d87d75f69f4195193"], 0x1200e) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000005c0)={0x0, 0x1ff}, &(0x7f0000000600)=0xc) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f8571") ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000680)) 18:52:45 executing program 5: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000200)=[0x7e188eb3]) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x200, 0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xbc, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x6, @mcast2, 0x1}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x1, @ipv4={[], [], @loopback}, 0x9}, @in6={0xa, 0x4e24, 0x4800000000000, @mcast1, 0x200}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e22, @rand_addr=0x260cb3a5}, @in6={0xa, 0x4e24, 0x9, @mcast1, 0x7}, @in6={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, [], 0x1f}, 0x59}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r1, 0x8}, 0x8) 18:52:45 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470051ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:45 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, &(0x7f0000000000)="9041b298ee392056f681756ddabe5dcd0b6a9409231572e2fe05593769b411f756941830db8f4d183177ac852dd986eb0b8367651e97c73e8c3df8134e4211c85728d6b52659c0f437f7d7b79d11a7590d20f1c633e12fe39391504006067bf5cfca1908b24b08b51b64062c1fd2bba71ae5cee79209c6c98c8f245150f184312208f79f7f10513f85bb019efb04e34f640d1f9609e2f749768e0ff5def2ce3809051b11d2d139426d0b2d3fe3f97fdb31c0e41b3865bd54af711ce5a97ed0db674db78dd431c800f51f295f4e4fb1d5b82f4a67a86f97bd50aeb0ae", &(0x7f0000000300)=""/153}, 0x18) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x80, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14, 0x80800) recvfrom$packet(r1, &(0x7f00000002c0)=""/40, 0x28, 0x10040, &(0x7f0000000940)={0x11, 0x1b, r2, 0x1, 0x7f, 0x6, @random="eb4a559f044a"}, 0x14) 18:52:45 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x27fc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000000)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, 0x5, {0x8001, 0x0, 0x0, {0x4, 0x5, 0x2, 0x1, 0x200, 0x1, 0x1, 0x7, 0x80000001, 0xfffffffffffeffff, 0x0, r1, r2, 0x4, 0x7}}}, 0x78) 18:52:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") r1 = inotify_init1(0x7fff9) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) readv(r0, &(0x7f0000000040)=[{}, {&(0x7f0000000140)=""/188, 0xbc}, {&(0x7f0000000200)=""/186, 0xba}], 0x3) r3 = getpid() setpgid(r3, r2) 18:52:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x21, &(0x7f0000000080)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x401, @remote, 0x836e}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x9}], 0x68) 18:52:45 executing program 5: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setns(r0, 0x0) getsockname(0xffffffffffffff9c, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000580)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000005c0)=[{0x0, 0xe57c}, {0x7aa3156b0f0b06fe, 0x10000}, {0x3, 0xff}, {0x4, 0x49b2}, {0x2, 0x400}], 0x5) io_setup(0x8, &(0x7f0000000000)=0x0) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x2, 0x8000) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = dup3(r0, r0, 0x80000) io_submit(r2, 0x4, &(0x7f00000004c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000080)="17b2944501fe5f2270cc8299d9acbd8f65b57c816bb07e40b276fc88a7b0bda86db8fc672fe9ddde9dd8ea29ce", 0x2d, 0x1ff, 0x0, 0x0, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x5, r0, &(0x7f0000000140)="2aa801a6ec68a920518710c257fa156b4fdc934d9690ec559842f4410716aff2962923ca5fd8559801b6df4da5c71734c3b21d97442e9049ff77a4ea265a93356e0ee86c0ee70bf079bfed6de4e0abffa6c88f169813e4c07721c99eabc93de9eb8952c688e23e8cd0970aebfa7489ed90fdfa9a41fe2a12f03c7694a472c46f63abf6a7", 0x84, 0x20, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000240)="621433aa1663a068d58b870870acc81c574912714ae1b4ef52fa2897f36247cbc6b15b890b5062b0554361dcd03ee59948a148877199529e101dc00c9a5a9a81ffd91b396aecd19a6c0c9be1401ab485a2bc7ba520ade6e2dad37e56659a23e5c7d06ecf47ef4624f6fd669492ac4305254d72216114e8146a83c8766eac40b5259aa32d00", 0x85, 0x2, 0x0, 0x1, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffe, r0, &(0x7f0000000380)="ee97f0b66c7005c52593aa456b82aaf48de073618d9d3a9d3b3a5f65f4039ba0fc4e1bbc99ad5d0133a0f10791e5255acb108ed223d63c3a527a6bf20428252254dfacc7d7b9ebba4315278ef9f806bd4d355f78c86c7238c0600f0b1d235439a4ad735f9194ab04ca67b784eb332cb6869b5a139aed2ffcb3672c3334cedb7959c7bd8d50f22c7aaa8e254fbd58d8f79407e25fbb9bb4e725f6ead3940770a61d628f36e5220d6896788a9aa0b9a8264e96feb9d025efe6f05e10404feef380f1feb04abe01a721aa9bc48de21bd08f33b99be7f9838c26f45d88055f2f", 0xde, 0x5, 0x0, 0x0, r5}]) 18:52:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2001, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) recvfrom$packet(r1, &(0x7f0000000240)=""/199, 0xc7, 0x40002100, &(0x7f0000000480)={0x11, 0x18, r2, 0x1, 0x800, 0x6, @local}, 0x14) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4) clone(0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000c35ffc), &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x80287010, &(0x7f00000001c0)) 18:52:45 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) r2 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1f, 0x400200) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0xfffffffffffffff9, 0x1, 0x5, 0x400, 0x0, 0xaff, 0x20000, 0x1, 0x62d9, 0x1, 0x4, 0x9, 0xfffffffffffffffb, 0x6668, 0x9, 0xfffffffffffff000, 0x7fffffff, 0x8000, 0x100, 0x0, 0x5e23, 0x9, 0x0, 0x7, 0x9d, 0xfff, 0x3, 0x9, 0x5, 0x1c0, 0x1, 0x340357e2, 0x17, 0x3, 0x8, 0x1, 0x0, 0xfffffffffffffff7, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2400, 0x2, 0x20e1, 0x5, 0x1000, 0x7ff, 0x7}, r1, 0x0, r2, 0x1) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x50000, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) 18:52:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:45 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x7) preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x0) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x802, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, 0x400}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) mkdir(&(0x7f000082f000)='./control\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffffffd}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0x0) 18:52:45 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0x0, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x3, 0x0) ioctl$TIOCGPTPEER(r0, 0x5437, 0x0) 18:52:45 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470011ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 467.514874] input: syz1 as /devices/virtual/input/input38 18:52:45 executing program 5: r0 = socket(0x400020000000010, 0x2, 0x0) write(r0, &(0x7f0000a1cf6c)="1f00000054000d0000000000fc07ff1b07040404a6f3c10007000100010039", 0x1f) 18:52:45 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000e95fe0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/94, 0x43}], 0x1) readv(r2, &(0x7f0000000680)=[{&(0x7f0000000640)=""/55, 0x37}], 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000140)) 18:52:45 executing program 0: r0 = socket$inet6(0xa, 0x7, 0x1000000000000000) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 18:52:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 467.637662] input: syz1 as /devices/virtual/input/input39 [ 467.667242] PF_BRIDGE: br_mdb_parse() with unknown ifindex 18:52:45 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0x0, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000001440)='/dev/snd/seq\x00', 0x0, 0x60001) r1 = socket$inet6(0xa, 0x1000000000001, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x1) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000300)={'ip6tnl0\x00', 0x6}) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x8, 0x800}]}) r3 = dup2(r0, r0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x4) write$FUSE_STATFS(r3, &(0x7f0000000200)={0x60}, 0x60) ioctl(r1, 0x8000000008912, &(0x7f0000000080)="0a5cc80700315f85715070") pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)={0x9}, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f00000001c0)={&(0x7f0000000180), 0x8}) 18:52:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = memfd_create(&(0x7f0000000380)='em0\x00', 0x3) pipe(&(0x7f0000000540)={0xffffffffffffffff}) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x8012, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000580)={r3}) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e24, 0x2, @local, 0x8}}, 0x6, 0xffffffffffffffff, 0x4, "29f626bca4cc462b6bc4a11133b9742c1068b81599fae4fdcd4b2d66a475bdd4d09850fb8bcbb26220c44ff0d29c04e23442d4af71e5d0a0bfd17cb552342b32c1b5a5a03c0c6cce95b5715c4899dde6"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f00000005c0)=0x8, 0x4) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/217, 0xd9) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000100000000000000000000000000000000000000ffffe0000001fe80000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x15c}}, 0x0) r4 = dup2(r0, r0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x60a83cbf95b589ac) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000240)={0x1, 'bcsh0\x00', 0x4}, 0x18) 18:52:45 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) r2 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1f, 0x400200) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0xfffffffffffffff9, 0x1, 0x5, 0x400, 0x0, 0xaff, 0x20000, 0x1, 0x62d9, 0x1, 0x4, 0x9, 0xfffffffffffffffb, 0x6668, 0x9, 0xfffffffffffff000, 0x7fffffff, 0x8000, 0x100, 0x0, 0x5e23, 0x9, 0x0, 0x7, 0x9d, 0xfff, 0x3, 0x9, 0x5, 0x1c0, 0x1, 0x340357e2, 0x17, 0x3, 0x8, 0x1, 0x0, 0xfffffffffffffff7, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x2400, 0x2, 0x20e1, 0x5, 0x1000, 0x7ff, 0x7}, r1, 0x0, r2, 0x1) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x50000, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) 18:52:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc80700145f8f764070") r1 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e22, 0x9, @ipv4={[], [], @multicast1}}, {0xa, 0x4e24, 0x401, @loopback, 0x101}, 0x180, [0x8, 0xfffffffffffffffa, 0x0, 0x0, 0x200, 0x8001, 0x2cb, 0x3ff]}, 0x5c) sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005e0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) prctl$setendian(0x14, 0x0) 18:52:45 executing program 1: openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x0, r0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) ioprio_set$uid(0x0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x5, 0x80) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000bc0)={0x3, 0x0, 0x2080, {0x5000, 0x2001, 0x1}, [], "73cd95580d43e9a0989e015719dc2203fc5d18124178a8e29056c8230deacad2431899a38db146c872f65a7b06125dc58284c46d1fbadb016a373cc441a642bca6c0e797a6e887c1987d5e609afde2231d297f1d9d578117ebde2c8b1fa653cfe645b2b46a63b737c81cd5c3e5e1dbaafa41068dab92aa80863ad27bf45888567b9a745fc80f9f32052b887c4b0e58823c456121e90aa16f86dd84d8c3b9cab6d40c8b7758019f0e9fcd111485379e8c184863e535d6acac0e70cc21e8490c7e3938ba7d9bd089bc32ee5cca4c974bd11dd944180c49d3a8f24c265445282f4cb34a8caee65aa673dfe95c4a765b78469f0ba4e3a10496aca5ad4f7d5749ef7da88d7ef2a0c56d87d960ec29fa7c3b05de2afad5dfeb76e3dd00d8c5903388c06562e4bf0d6220af65251b3f04ca9cfee25384e7971d34edf69011ba4db5050c67562217a2050f9a2a38abf46784df3efbbeaecd1282e00b80c2d70a81f50e9cff4ba97dab58d7f8b08ab4b1fd52bf1e73f8889a36def9946e440a49eadb69e48724f39d845eb0686333d97bec6f4de14f4fff9bb7fd6b03c9e1e16fe23e76ce596b8791aa9b135d46dfcce0105c516be405c40c37ab8c6adfb5bccff0472a6bd66bbfc317f51bfe58a052121539240fb8dbdaaa34f088b78c762155fe5c3fb9c37e18226335d5dc844fd35b6147d1a9c3eabed8ddeb17994b8a1a72067415eee1e2b1889ab428f11c41345a515bc80b30ede65f2ddd675b15b93b975c83a2d1a17fa0fb96f89ca643f6367d7a53ba7b6197e72c33722b45399c45120fbb12400ff63eaa789441017882a1a9bdf6ee32b6029b7ba2d3631b78d6dd9d153fe2520b9117bc11fb2379a9811af0e6a4f90bf9185eeaf6533a684e79aec19cc72402370c9c154b7ca76b8bc9bf105c47a1ec694b921258605f1b9fa0f71b222f2cf3a236e7a5833fbf038127427b6dc46193f8d98825e92cb3ff3b726bec86632b38b197b92e70eee35586b579a2b1cbf224acddf86a55c276a1382a1c466a9d90a0aa2c3aa2bad3228ee215f36c6356df7bfe249f022d04a55cb9082797142cfea6b64f6216d97dfab7665d9f9faaa5012d3644c8e65e46613662e9621ca35ed90143ea6b812fb79a99497184882ea855c0abe698ad4569a18ef36a4a7ba6a99f6ec6ee46cd86dae50b2e95e6bc6d8701b24bb3d9dfae0e41e7afc700f9f2ad7496c035f53c40105a3c7c6400d81a5044c17d0666f7a788df017a8247aa236f655f6eddd76c4d17039f8d69b8b28c38c60756bcf4343280699efb9d830dc6615408428c62351768fb89544a945fa0016d28b25004f927644a3fc55831c4717b6061dfa256347dc024648aef24683e46829f303931ef0d6983529990fe637e1baf7949a07b7dc9052adad512a608b6b77fdfefaac8f29f25d7eb70c384d5aad92538e786b64a9e4161eb3b86e837f36697e2ab7a5c99c266e7d96d232d8fe7d410d798f607e0dc7944b9d6b4fb7855c86e92dc1d959f72b76e26106ac682e56d61183ec408fbe21b4625dec7c5acc37753625884c623b89e7331964908ed318375e395fd3b7494d6005d28e3225254bbb8a484a694221aa86b6ff6b8fb5d5bbc22e6401d01fdef432e23f7b000c1fddeebc6f6550a0bde795c3c3cd37bc86e9e78d5fe94666cc97482e2209d464104b4940a0bde0705087b84736031e8aa9e835479b9ca0d16f54bddf4c1df4918686a865a793d8d4d87b82872dd38b1c0306349b9abcd4e7d6cb4d40f1b59a15baa1f0719c5dcb2d3dd2820c97acd2ec938e2ab2116d74f4b315e285813b23ff1990b6d1d1170ac9f7651409d5ea6736f9b1f9e487965a9cc88a5bb6d8fe6c5de5adaf9bdb491605da3531b7de4f3fa6615e66819bf16bf4f729445513b03d729d9c4e9603ddec636008877002d055edad8c11d09b2bb9ba0a1b255da8f35e9b29232b0ac275ee49abaf50d62468bffc6b12ebcfc8fef28c3dab542b5e17a402a05b17dceccd8ca476790d2218d412ca66b9d4cb1b43c2290e5c4848bd2228fe9507051c489d773147b0a5b31aa219639ee784a543f001a481662b700d8610902fbe344d17f20c1b49ed54c5876088a6c88cdcaf43851a9da648b57b5dc96eb3ef8f66ba075a00180fed652d0ac9f6767bdfe284aa52711ca3cd8b274140f2ccecaa50a5d721bd077b07b9eeeb14477b06dfa6c4cbf68a42a609ab6cb8d820fb2b51dbecf82ab55b6350bf755fe8e4943f90a53435d2f0e2962cd2df1908bfcb01e95c558c387095f754a80b515c0d88103fefcd1e7f42964776274b387153d514170a4c9840e555e06888cc3febcc4d187a30949a32f3ec114ffaee3174203558e1fc0981a248e9a7b48db5220a7fd259867c9bb92d4d3ad62adb5b0e853edef1ebe00a5367b60db2f59f51ad5da10c06cc653e6c1c54b07eb7b678315cc73eaf4a71ccefbd42335f182d2aeb8d4be65bf1dc985ef801db0f8cdf8430977ca884a7394c049425c8853c1c79388585e59dd70cc6934db0ccaf581b8736df2e06b1b51093328ad2d1945c04b13a6fcb9cb521f1ec4277f31c6c28e6f5fcdfa5ddf1bf454e68a4cb62ce2880d93033e433f16ffd76a9cd029c16a0a1b13ae9fe9f4630124191f1003eb528397a8bebe543493c9b6dc2f12d33abe9da2936854b2728d701c0e4194939fb6b8ffd259fa84d870dfb91e2e2edadd04c1f61ba9c39b1fab8161beda038ce214307d93d712a8193bf6387fafd973012fc19a1756f7d1d6e982c8069a580ad435daade3b6462ec6b13bc8b260d21b028e84348450be8da3f31d737b44a65f06fcf8dead0f14922518b0a3acbe2398fdea3337b328f8fec4163ceb955db9c88441cbef8585351d3525972549fd6cd3424cd74d9ab61842afc92e345641a8f087d450b36294032ccfe366a6493343f6437cfdc12374b0feb4ae96f09de4e834d09b0ee6e6675867e6ade5e98d3734271ab7393de92aee7c3b36819f4c0a9e512898bddbc7b21606a6f28b4bc94030db3fc304f8abb8eb8d1ed99e2629f7008a83b55c8c54d8e005206cfabddc76e6bef33a6d838c5568ad3af62faf3bca84e410e9fc17f4aaf307952affc4bfeee92defaf42210d1ed3c3c6ae014efb07b839e94bb077afd82f79d4d5e653b0fac3bd8236a98d35f8f4986f3656054dc0b630218a1a483241148f1446fc6716aa83677306abdcf5ef12692044d949bed04dbe1346c686585a261e962bdff87e6a31662b32f77cd8d972253cf4253d5bc45e47029c41f22275c7d9ae751d14f61b8db0db033cd4c82e08ee20760034a11d5679e7c54eab79f73215bed2771bdf1e02992d9d9352ef5d31e0b25941a632cf93bc7adc7fcdc64289475aac02ead428176946aa503049ba938122f7fbbe74776e4a21000f189ea872b6df3df8624da929c64c1125bb5a4e36bf2014c1e048282c12a07c480186cb98a8c339cd9a4c0cf4464f1b040fc59393e76a974e18e3d0f1d4807247ebe0cc7207568f65de7e0edaf3f787ee44e0048aa20645f1f495448e63743a357ce62f7dcd094fef75347b9b9334e38136f1f6dd343a96a8bb421937657ca4843eb307982ba5177d58f897444fedd5e0dddc4f2bfc0719f4e692d775059c05e0da331f0739d677bdd89e2edf60d587d0c642e0026acccce898599d7b94add4e1e9e3ddc12d07d11aacf3c4b553631afd01d472f6f72cfabe0c7999e787daf88c19d7247b6705497f8aa39fa3d60852291a84de84381188e1592b7c199f3d975db3c54de76265889e45f1b76eb1c61fc1328c4ea62665762e954736def9625bf80b23b2b51c6d06fd4e177c5047cadab9322b7448d4de45d81aa4ea5d1cde0cf6ccc2dc9a39daf6e2185914ab3198856bf2a3cb5991e0f4b68ed57e985da85313421cc00aab0e0003cd6b7b02829ee1bdc2d24fdcb8c339fe2b3fb860ab7d30fa75e0e5fe735e3a5a67a92b472615bfc5915d86ca5ed9a7657960b1d12d9a9e4c90b60cc800d1ee6ca4e05695f73c469215d327b7776f2d7d0a98545e01ebf0cf0308577017b1c834fe42dd05ef9a59b0d6d9f547e172e01ad97c4082c99a29a0555bfb908c230cf33c77ab0012bad27565f2494ab75c2b86da4e02e6a5724a444c8f4cb733ad2e9dd774b92df5a2796c26e2cd3b07d965bd3f624830557614cb3a2abf6465f9dc910eb44acf0b96f6ade76955936776aeac301eab39ca2449a88074b5bca280e130ad43bc53a4c62f3d3f87555dbc31d6b4578fc75fcd31a79d099b158238ced8570437ff45e56fce0f6d9153802abfcfe14bf6988ea2fee6e2438e6bf8a0f191d34a3733feafc68240c00973cd690aac523e379affc7985caaa65ecf8d21ee3f85e4873aa4c8b489e22c9541aecf45c3e302e86fb90a3171c3794551f4c1c65fa2b18634e893e56c27c1f9e58cabad5a847618794381931f9863de7221ecf9f0391371c18f709e7a077da487f798a617f28614ecb09c179aaca884fa83212f190324092e63bc2c4211872d92b6840096c6f775ef4ddbc984634f03a3fb43d9f411b003189b94707316a0ad20b69060b8e90ba79bd2aa042310840ce4bc98b1f53950cfc181411c4e632d5ff9edcd2b623b5c295c5b913b24e3028c6eb7c244cf1ba60ffe7926ecf2da2958413ce8aefd6e9f3a16f8a84067da32204770ed31bc1ef8c846e0597db8180eb8d63fd7e5caac78359450ddbcbc4f029ca3ada75fedc4ab53e3cc984c034f4d72b7606e16a4cd5b6220984d1cc8ccffed9fecbdcf48904e7deaf158ecee3495c92209b8fac48ae269e7df65c4dfe207a6f759eae508c12da1609f584059b1f5e9a9d1fb945e6999c442ee2a0eeb0bbd896d88c98612bbd3dca9e3ece3aaaf80cf3c71f24eac249c7967304eacfc4519df9eaa684d349409d47adee734795a3d454a856e23f3cd8ef186e236be11c9719b3eadd99d53f461b6a8ad8c7d798902ce569c18c438d08852b666f38c619af379172c9bfcc839af155752fe0ba74bc5d0c8769027010e7dee4054ef3bb72d04e8bda636c5400c22ea0a218f9eed4f4387b3afe69cdded3ca4011105a225388dc37579c0b91577ef348839170df9fcd657fa60df7d13445473b2b0fd3fea0dea63f4ef2f476ea9055aa805071b2c365d526dcaab8cb19486e70c8df03ece32c200c1c2fb4acd0fc1166896a5e804a0eb7b736163973846f9c8a12738b5ebff0fc477cabf3a1a43f1d4690ba3b3f117a1ff383ccd8c6914a34296b3145ea623f4d1c4fd3852f15daad061fb15bbd3bd3fff6b4957c2d1aaad8217fb7206ccdc39af66377e5f5d063e5080f681b0c58e6df992d653f18fd9094d6744c52629210dfd5177cb32c85dd9b7b67393369de9c885309b2c31c2bfae9f62321b826ff74e69cc0b4f8539b112968ad4c4635157da259f4e07eeae4cb3bebcb525b3ae725b27444c60dbd62ebcfd25432d5306529886b143a422f471a14c901a753bf0fb89450fbca4ae98ba5352ecd99def1913662ca0dd9e2cb60de41b5350456ff65e56a4c25afb68aba95ccdc8650aa857ddea994099a8c6f64644566646536237073c8f291bc0505be49add9439743c043971c624e6e0640775a5126cb6286b80f00440ebf50c161cb8928e34ef9f03923bed16db7cf7fdddd3c792b0c7bff49ddb643758552f6084ff4c0d22703ccbb7c1c6e28062ccddc8f6cb803eab056cbc8318db815c5d66ac63b6b23054286fd6aaf0496f44c6775665d641e70420907cb7c8662f98e860c6cc9429", "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"}) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000080)={0x15, 0x2, 0x2}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000400)=0xc918) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000003c0)=0x7, 0x8) request_key(&(0x7f0000000940)="646e735f7265736f6c7665720005083f7605beb89ebb55f56950196fd8b8a6ebddf637ee27ef0fabbbad7523dacb0ab4baaf14787b652566f6eaf50a9d4cff3e30f2d07fd0118cf06573e05f283ef26ec0cc75cf93fe4c95c7185cb70df302c4c08871883fc063c014d46b8b27fd88a01e760bee664a475d69d12e2fc7e3dc680e3bb87b71d301fbf92cadf5537bc8774141ee7d7152d16c9ee5ef389b527a9b31679b1560e4680fcfd95743ed5305a984645fb4371e5e363f7df35cb72f6d9c953cd2ea3167c037567f7f99399e92ba02db513f40a4d44e072bf5ea9495287934a503a032610a0235c3530cfc99e27a1e10e28ed49beb223bbe910fd417a48e64dbdf97edb9363e6b5853e1323d6f78d0fb80969de2f5fec97acbb11c1ae97f54b74e3ef9d50e1fbc43cc27e537d18452001232814ac3970ee2938175a91f4e0ca28b803a350dbea3b68d6a71bc65b011a81834b809f86919e4499a53ff8a35993b333b9b2761a44bb4a888a90c078d0b923e28cdbf76aa3fb68394de930dddf27c48926ab9c66951b70ebd4063b510ae453059ff71853bcf5942b5140a111d4a2afbaf612c6415aceb9578cb0d1decc8001f6dfc9d6829dbed2a8dbbc4bc939196131bb3fb451d52778143fb3c2f4d17df3c295117e13889037aff061ff283cac330aa03e7d189f01bfd03e68532d5594ef0e4bf1d584c7eacfd53a7ae8ccecc1901c89f4db4a3f1925610f22dac4570169b7f9f4cbf3fa1376f0ce4ab31605a16aff95c1bda1b96b9ded911a38594c3d9b42e7712ac377f377cd30eda00efd15d718e20dba3e76c4850966353c04a178e3b857719f9d81dc0ef8776c46c47d38aad73498289bc0240", &(0x7f0000000040)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x29138c2e}, &(0x7f0000000300)="af2019dcc2380b4623dc8c7a581973a96d57452035fca47b18e7992f4c82e608a92c436783ee4e3264245238b946a4a11d39b7873e5f3296185625d49ae13974d13940d0c01a5029b35aec2234860f6525f00000000000000000", 0x0) 18:52:45 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470023ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:45 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)="520972757374e363757367725665783a4465", 0x0) 18:52:45 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x0, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) [ 468.051500] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 468.058701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 468.119630] netlink: 268 bytes leftover after parsing attributes in process `syz-executor0'. [ 468.137234] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 18:52:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pause() r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000500)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) tkill(r1, 0x1000000000016) 18:52:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 468.169473] input: syz1 as /devices/virtual/input/input40 [ 468.188917] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 18:52:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x100000000001d, 0x20000000003ff, 0x7f) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x5, 0x0) sendmsg(r1, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000)}, 0x0) 18:52:46 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470031ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:46 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:46 executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) close(0xffffffffffffffff) 18:52:46 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x21, &(0x7f0000000300)={@local, 0x2}, &(0x7f0000000340)=0x20) 18:52:46 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2001) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x0, 0x6, 0x4}) 18:52:46 executing program 3: socketpair$inet(0x2, 0x80000, 0x1800000000000000, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0xfffffffffffffff8, 0x13aa}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000003c0)={0xe26f, 0x3, 0x8000, 0x20, 0x49a, 0x3, 0x8, 0x5, r1}, 0x20) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) lseek(r2, 0xfffffffffffffffc, 0x4) 18:52:46 executing program 0: setrlimit(0x7, &(0x7f0000000080)={0xffffffffffffffff, 0x6}) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xff, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0xa}}, 0x20) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000200)=0x3, 0x4) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x1, r1, 0x10, 0x1, @ib={0x1b, 0x7, 0xffffffff, {"6221e2e2732737e22ea13dbbf8754a62"}, 0x0, 0xffffffffffffffff, 0x3ff}}}, 0xa0) socket$can_raw(0x1d, 0x3, 0x1) 18:52:46 executing program 4: r0 = perf_event_open(&(0x7f0000000a40)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x2405, &(0x7f0000000180)='vboxnet12#)[\x00') 18:52:46 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x100000000000, 0x0, @mcast2, 0x7}, 0x70) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x0, 0x7ff, 0xfff, 0x5, 0xce, 0x9, 0x5, 0x40, 0x2, 0x4, 0x0, 0x101}) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r2, &(0x7f0000008e40)=[{{&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f00000025c0)=[{&(0x7f00000024c0)="462191f2e307e3fa3ebd56c4c1a6a229984e0ac2911c5647cf86cb2172ab43715ff771ded67b64c4915cfe9f8453c7b50487c152daa3699fe4bf034609ab1db2d67bfbb9cdf3082e3b75fbefe4b71dc52e0a4a1dfd37c451c9935bb456548c5e6fdd504b2920f79fdce6ec1b339ff951f2034a4fb43ec332cd6a15ad546407c98f1f4e3980b6a5649817e61a664401ff7c19091c417a5becc9e3d8c422d3dbdb12c1e0a883716fb97fc1b5ed2321ce2798fbdabc5d2ae1a85f8e0aef267774744a285ec38735dea680da851658ba3394ee03ea9e67964a", 0xd7}], 0x1, &(0x7f0000002640), 0x0, 0x4004}, 0x6}, {{&(0x7f0000003a40)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x0, 0x1, {0xa, 0x4e20, 0x80, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f0000004c40), 0x0, &(0x7f0000004c80), 0x0, 0x4000}}, {{0x0, 0x0, &(0x7f0000008880)=[{&(0x7f0000007780)="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", 0x5f4}], 0x1, &(0x7f00000088c0), 0x0, 0x1}, 0x8000}], 0x3, 0x0) 18:52:46 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470014ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:46 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:46 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000340), 0x7f) 18:52:47 executing program 5: socketpair(0x11, 0x2, 0xfffffffffffffff8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fc) futex(&(0x7f0000000040), 0x2400000088, 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f00000000c0)=0xffffffffffffffff, 0x0) ftruncate(r0, 0x5) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f00000001c0)={0x2, 0x5, 0xe076, 0x5, 0x3aea, 0xfffffffffffffffa}) 18:52:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0xa, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r1 = getpgrp(0x0) setpriority(0x1, r1, 0x4) 18:52:47 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300), 0xfd40}, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r2, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000007d000)="b3", 0x1}]) 18:52:47 executing program 0: mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x2000) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x1, 0xbcd}) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000040)=0x8) 18:52:47 executing program 3: remap_file_pages(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x0, 0x5, 0x80000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x800) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000000)=ANY=[]) getcwd(&(0x7f0000000040)=""/11, 0xb) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000000)={'bridge_slave_0\x00', 0xffffffffffffffe1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:52:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000), 0x0) 18:52:47 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:47 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470044ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:47 executing program 0: syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2a) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x529, 0x142) write$evdev(r0, &(0x7f0000000000)=[{{0x77359400}, 0x6000000}], 0xff5f) futex(&(0x7f0000000080), 0x0, 0x2, &(0x7f0000000100), &(0x7f0000000140), 0x1) 18:52:47 executing program 1: seccomp(0x1, 0x4, &(0x7f0000000100)={0x39b}) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80103, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x100000001, 0x8, 0xffffffffffff8000}) ioctl$KDDISABIO(r0, 0x4b37) 18:52:47 executing program 4: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r0 = socket$kcm(0x29, 0x7, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x181, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000027, 0x0) 18:52:47 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x5, 0x1000}, {0x6, 0x9a5c, 0x1800}], 0x2, &(0x7f0000000080)={r1, r2+10000000}) clock_gettime(0x6, &(0x7f0000003140)) 18:52:47 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:47 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007440)=[{{&(0x7f0000005b80)=@nfc_llcp, 0x80, &(0x7f0000006200)=[{&(0x7f0000005c00)=""/217, 0xd9}], 0x1, &(0x7f0000006280)=""/4096, 0x1000}, 0x6}], 0x1, 0x0, &(0x7f0000007640)) write$cgroup_subtree(r0, &(0x7f0000001380)={[{0x2d, 'rdma'}, {0x0, 'memory'}, {0x2b, 'rdma'}, {0x2d, 'rdma'}, {0x2d, 'rdma'}, {0x2b, 'rdma'}, {0x0, 'cpu'}]}, 0x2b) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000280)=0x800) getpid() r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)="aa59ea7e5fabe3c2e5a8e6ee04ab6d50a805f9ee2c435fac05c36fd8f9b6aa3fa00db311237dd463ebc00fccbe5db5c5ba9d713cbfba762812b3b56116435476b8f00bc011fef1c084f2529e3435fca97b47865af39ad620b5f02cbeee85690d4cfe687bfb3ed80c25d8fa2e642aaeb653c6d41f591015b9a0f1cf43ede11f222d9492eed5", 0x85, 0xfffffffffffffff8) r3 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, r2, &(0x7f00000002c0)="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", 0x1000, r3) read(0xffffffffffffffff, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) epoll_create1(0x0) gettid() syz_open_pts(r1, 0x0) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ppoll(&(0x7f00000001c0)=[{r4}], 0x2000000000000127, &(0x7f0000000240)={0x77359400}, &(0x7f0000001340), 0x8) umount2(&(0x7f0000000140)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") 18:52:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000), 0x0) 18:52:47 executing program 1: rt_sigqueueinfo(0x0, 0x0, &(0x7f00000002c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x143000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x4, 0xd21249a7ecc62c5}, &(0x7f00000000c0)=0xc) iopl(0xfffffffffffff067) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r4, 0x20}, 0x8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000300)="c4e12dfbf60f3066bad00466edb8010000000f01d9b97b0a0000b80e640000ba000000000f3066baf80cb8f4fbbe86ef66bafc0c66ed66b87a008ec80f01c3410f30660ffa8e08000000", 0x4a}], 0x1, 0x8, &(0x7f0000000400), 0x0) 18:52:47 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447007dffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:47 executing program 5: r0 = socket$inet6(0xa, 0x40000000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x3, 0x4) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2000, 0x20) write$P9_RMKDIR(r1, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x10, 0x4, 0x4}}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x7, 0x4) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={[], [], @local}}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000180)=0x40000002, 0xb2ff30bac6710118) [ 469.548097] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.554700] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:47 executing program 0: ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}) r0 = socket$inet(0x10, 0x2, 0x2000000000000000) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 469.618764] device bridge0 left promiscuous mode 18:52:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000), 0x0) 18:52:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) sendmmsg(r1, &(0x7f0000007e00), 0x2c3723470660b86, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1) r2 = syz_open_dev$dspn(&(0x7f0000e5bff6)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f00000015c0)) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x3, @empty, 0x7}, 0x1c) readv(r2, &(0x7f0000000600)=[{&(0x7f0000001600)=""/4096, 0x100b}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000240)={0x1c, "ebfd2fd8df00dfa66f1c0050b20238a2b15b9449fd89f609f3cdc1c2"}) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0xfffffffffffffffa, 0x101, "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", 0xbf, 0x9, 0x9067, 0x3f, 0x9, 0x1, 0x20}, r4}}, 0x120) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) 18:52:47 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x428100) sched_yield() getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x5e0, 0x100000001}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @broadcast}}, 0xffffffff, 0x7, 0xffffffffffffff01, 0x6, 0x6}, 0x98) inotify_add_watch(r0, &(0x7f00000003c0)='./file0/../file0\x00', 0x480) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1000000000080, 0x10) r3 = inotify_add_watch(r2, &(0x7f0000000400)='./file0/../file0\x00', 0x80) inotify_rm_watch(r0, r3) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000640)) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000340)={0x28, 0x2, 0x0, {0x5, 0x6, 0x9}}, 0x28) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x100000000, 0x0, 0x4355, 0x9, 0x800000000000000, 0x401, 0x4, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r4, 0xffff, 0x6}, &(0x7f00000001c0)=0xc) clock_nanosleep(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000100)) 18:52:47 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470050ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:47 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x400) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400840, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) clock_getres(0x0, &(0x7f0000000040)) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440), 0x0) sendfile(r3, r1, &(0x7f0000000240), 0x2) fcntl$addseals(r0, 0x409, 0x4) 18:52:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) 18:52:48 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)=""/42) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) write(r4, &(0x7f00000002c0)="bad1e96ab38cd799217754fad20ed28818243358dde23afd1c3df3e8beadc55ad4d41a90b4feb2e3fa3b480a764eeaba53b62ea7c6c3901225eaeb8f0b24478e895266bec66de970726ae99d53348181b13e5c391c32337278beed4314a01d0d0e9c72b7ac8adc51861e6e03eb8ad9ad18132a0cd1f6891e77093dbdf7e4bd92d0e1815fe2291f8d5b2946be46fbedeb29211ed186c1dd554be4fd31c8", 0x9d) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000100)=0x8) write$P9_RREMOVE(r1, &(0x7f0000000140)={0x7, 0x7b, 0x2}, 0x7) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000040), 0x9c) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@loopback, @empty, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000200)={@mcast1, r5}, 0x14) write$UHID_INPUT(r2, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x1006) write$P9_RLOPEN(r1, &(0x7f0000000240)={0x18, 0xd, 0x2, {{0x0, 0x1, 0x2}, 0xfffffffffffffffb}}, 0x18) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0x8090ae81, 0x704000) 18:52:48 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) [ 470.428175] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.434678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.441421] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.447831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.454686] device bridge0 entered promiscuous mode [ 470.461061] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 470.468753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 18:52:48 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) 18:52:48 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447007affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:48 executing program 1: r0 = socket$inet6(0xa, 0x3239946c45481234, 0x7) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1000000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) r4 = add_key$keyring(&(0x7f00000013c0)='keyring\x00', &(0x7f0000001400)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r5 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000001380)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001340)="0000010000000000800d1a98263724da19be4401f07a03fc53a73daceb8783c8e2", 0xfef7, r4) r6 = add_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)="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", 0x1000, 0xfffffffffffffffb) keyctl$negate(0xd, r5, 0x8, r6) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f00000001c0)="66b9800000c00f326635002000000f30f4d207baf80c66b842f6198066efbafc0cb83800efbaf80c66b8c0ecbd8b66efbafc0c66b80f00000066ef0f20c06635200000000f22c066660f69fcba4300b8ac00ef0f08ba6100ed", 0x59}], 0x1, 0x0, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x2000004, 0x113, r1, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r3) 18:52:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x10000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000001c0)={0x9afc, 0x8, 0x4, 0x800, 0x9, 0xec55}) fgetxattr(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="627472660100000000"], &(0x7f0000000080)=""/66, 0x42) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x31a, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8) 18:52:48 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000015c0)={{0x3}}) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000340)=""/4096) 18:52:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5406, 0xfffffffffffffffc) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x5, 0x4) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x6) 18:52:48 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000240)={{}, {}, 0x6}) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000080)) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='\bI'], 0x1}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r2, 0x4, 0x4800) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) sendfile(r3, r2, &(0x7f0000000180), 0x1ffffffe0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000540)={0x3}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="2e2f6367726f75702e6370752f2e797a30f6", 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f75702e6e65742f73797a312775ca1e56b82a6b2c9610345bf0841f9c0102ea8317e1c2fd7ad819a4e039", 0x1ff) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000380)={0x6, &(0x7f00000002c0)=[{0x10001, 0xccb, 0x0, 0x101}, {0x7fff, 0x8, 0xdd6, 0xfff}, {0x2, 0x400, 0x8001, 0x10000}, {0xfffffffffffffff7, 0x7, 0x1}, {0x2, 0xffff, 0x5, 0x1}, {0x200, 0x0, 0xfff, 0x9}]}) write$binfmt_aout(r1, &(0x7f0000000f80)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x200000000, 0x200}, "0cf8e4dcd4287886bda79e0c7abb5d49ce01d6b8bb77ac1b5a6e51473d46e00f05f45227774264360d5030cb7fc6013b616888cbed58d0335ab135e76129d9edf840ddda4adb4ab25d0acd10408232a4c6f44dade18c824b401b20", [[], [], [], [], [], []]}, 0x92b33d9e3e99255b) 18:52:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1) 18:52:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'sit0\x00'}) setpgid(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x500, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'yam0\x00', 0x200}) 18:52:48 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x410000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @loopback}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000180)=0xe8) r3 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400140) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x6, r2, 0x1, 0x1, 0x6, @broadcast}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r4 = socket(0x2, 0x2, 0x0) shutdown(r4, 0x0) close(r4) r5 = epoll_create1(0x0) lseek(r3, 0x0, 0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f000000eff4)) epoll_wait(r5, &(0x7f000000affb)=[{}], 0x1, 0xfffffffffffffef7) close(r5) write$P9_RREMOVE(r3, &(0x7f0000000240)={0x7, 0x7b, 0x2}, 0x7) shutdown(r4, 0x1) 18:52:48 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:48 executing program 0: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xffff, 0x202000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r1, r2}) r3 = socket(0x10, 0x20000000802, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x140) write(r3, &(0x7f0000000040)="240000001a0025f000180004eeecfc0e80000000000000000000fdff0700020048050000", 0x24) 18:52:48 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002effe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:48 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000640)=""/43) read(r0, &(0x7f0000000700)=""/136, 0x88) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000540)={0x4, 0x100, [{0x5, 0x0, 0xc000000000000000}, {0x400, 0x0, 0x4}, {0x5, 0x0, 0x4f7}, {0x7, 0x0, 0x2}]}) setsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000680)=0x5, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x100, 0x0) recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000140)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x1, &(0x7f00000002c0)=""/183, 0xb7, 0x6}, 0x40000000) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000480)={@can={0x1d, r3}, {&(0x7f00000003c0)=""/109, 0x6d}, &(0x7f0000000440)}, 0xa0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x6, 0x4, 0x80000000087, 0x9, 0xfffffffffffffffd, r2}, 0xb) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r4, &(0x7f00000006c0)='a', &(0x7f0000000040)}, 0x20) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rfkill\x00', 0x420000, 0x0) 18:52:48 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca", 0x24}], 0x1) 18:52:49 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x1, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 18:52:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca", 0x24}], 0x1) 18:52:49 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447005fffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:49 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x10000000000000) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000003c0)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=@get={0xf8, 0x13, 0x308, 0x70bd2b, 0x25dfdbfd, {{'aegis128-generic\x00'}, [], [], 0x0, 0x400}, [{0x8, 0x1, 0x80000000}, {0x8, 0x1, 0xfffffffffffffff9}, {0x8, 0x1, 0x1}]}, 0xf8}, 0x1, 0x0, 0x0, 0x48090}, 0x24004010) mkdir(&(0x7f0000000180)='./file0/file1\x00', 0x2) rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') 18:52:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca", 0x24}], 0x1) 18:52:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000540)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000580)=0xc) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=@delneigh={0x38, 0x1d, 0x200, 0x70bd26, 0x25dfdbfe, {0x1c, 0x0, 0x0, r1, 0x89, 0x8, 0x3}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_CACHEINFO={0x14, 0x3, {0x17d00000000, 0x32f, 0x9, 0xeb9}}]}, 0x38}}, 0x0) r2 = dup2(r0, r0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x8001) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@loopback, @local}, &(0x7f0000000040)=0xc) 18:52:49 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447007cffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 471.627392] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 18:52:49 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff000000", 0x36}], 0x1) 18:52:49 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447005fffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 471.792822] device bridge0 left promiscuous mode [ 471.809392] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 471.832258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 471.902204] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 471.919649] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 471.934361] netlink: 'syz-executor0': attribute type 2 has an invalid length. [ 471.946909] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 471.973488] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 472.504147] netlink: 'syz-executor0': attribute type 2 has an invalid length. [ 472.512196] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:52:50 executing program 3: pselect6(0x40, &(0x7f0000000040)={0x5, 0x4, 0x1, 0x0, 0x49a, 0x9, 0x957f, 0xe4df}, &(0x7f0000000080)={0x7, 0x1, 0xd744, 0x0, 0x1, 0x0, 0x101, 0x7}, &(0x7f0000000100)={0x1, 0x2, 0x0, 0x10000000, 0x6, 0x8a4f, 0x5, 0x80}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={0xffffffffffffffff}, 0x8}) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000200)={'mangle\x00'}, &(0x7f0000000280)=0x54) 18:52:50 executing program 1: socket$inet(0x10, 0xfe00000000000007, 0x7ff) 18:52:50 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470076ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x80000001, 0x30000) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000080)={0x2, [0x4, 0x1]}) fsync(r0) syz_emit_ethernet(0xfffffffffffffc85, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000001c0)={0x100000000, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e24, @loopback}}}, 0x108) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x8, 0x4) 18:52:50 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x6, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000cd1000/0x3000)=nil, 0x3000, 0x0, 0x3050, r0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000100)=0xe8) connect$can_bcm(r0, &(0x7f0000000380)={0x1d, r2}, 0x10) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000200)=@req={0xffff, 0x924, 0x11600000000, 0x6}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0xfffffffffffffffd, 0x2, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0xf000, 0x110000}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400000000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x3, &(0x7f0000000200), 0x0) 18:52:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff000000", 0x36}], 0x1) 18:52:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x1, 0x4, 0x2, 0x6, 0x4, 0x5, 0x4, 0x3, 0x2, 0xff800000}, 0xb) ioctl(r0, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") clock_nanosleep(0xb, 0x0, &(0x7f0000000100), &(0x7f0000003c00)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xffffffffffff80f3, 0x400) recvmsg$kcm(r1, &(0x7f00000013c0)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000001280)=[{&(0x7f00000000c0)}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/69, 0x45}], 0x4, &(0x7f00000012c0)=""/195, 0xc3, 0x8}, 0x40) 18:52:50 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'veth1\x00', 0x100}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e21, @local}}, 0x9, 0x4, 0x7fffffff, "fa7db090bb3c0e0f9654b6e45e614253bb429dda7abfbb342798aaf3127940371b24db1ccf6ae1301fe9ea61a2920d5f8605ffcf6a2d4470b4fc2856b8ceef02c214ca9e9fd4f3945eba355d214d3f89"}, 0xd8) 18:52:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000080)) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) memfd_create(&(0x7f0000000040)='$\x00', 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)}, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 18:52:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x1023402, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000900)=0x0) fgetxattr(0xffffffffffffffff, &(0x7f00000009c0)=ANY=[@ANYBLOB="6f73322e6e67ce0000000000"], &(0x7f0000000a00)=""/181, 0xb5) syz_open_procfs$namespace(r2, &(0x7f0000000940)='ns/pid_for_children\x00') write$FUSE_INTERRUPT(r1, &(0x7f0000000400)={0x10, 0x0, 0x6}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'vlan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev, 'lo\x00'}}, 0x1e) socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg(r3, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000500)={0x10000009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x811, r5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x480000, 0x0) 18:52:50 executing program 0: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0x10001, {{0xa, 0x4e21, 0xfffffffffffffffb, @mcast2}}, 0x1, 0x2, [{{0xa, 0x4e23, 0x100000000, @empty, 0x81}}, {{0xa, 0x4e20, 0x2, @loopback, 0x400}}]}, 0x190) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1000000000005, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000140), 0x4) 18:52:50 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff000000", 0x36}], 0x1) 18:52:50 executing program 5: keyctl$setperm(0x5, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000100)={0x4b55}, 0x8) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x181000) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x6, 0x0, [{0x8000000b, 0x5, 0x0, 0x64, 0x0, 0x360000000000, 0x2}, {0xc000000f, 0xfea3, 0x5, 0x7fff, 0x4f69, 0x7fff, 0xff}, {0x2, 0x528bb461, 0x4, 0x0, 0xffffffff, 0x0, 0x7f}, {0xc0000007, 0x7fff, 0x4, 0x1, 0x1, 0xffff}, {0x0, 0x3, 0x7, 0x6, 0x8, 0x3, 0x7ff}, {0x80000008, 0x1000, 0x2, 0x4, 0x1f, 0x2, 0x8000}]}) [ 472.870707] QAT: Invalid ioctl 18:52:50 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447006cffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 472.959050] QAT: Invalid ioctl 18:52:51 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5", 0x3f}], 0x1) [ 473.024962] QAT: Invalid ioctl [ 473.035935] QAT: Invalid ioctl 18:52:51 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470076ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:51 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5", 0x3f}], 0x1) 18:52:51 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470065ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:51 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5", 0x3f}], 0x1) [ 474.221509] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.228126] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.240121] device bridge0 left promiscuous mode 18:52:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000040)={&(0x7f0000006240)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0x10}]]}}}]}, 0x3c}}, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x80000) setsockopt$inet6_opts(r1, 0x29, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="730404abad632e0200580800fe80fef387469b7625520005000000000000cb996dcce0e37d06dd2ed1e7"], 0x28) 18:52:52 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470066ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000", 0x44}], 0x1) [ 474.566610] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.573098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.579825] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.586216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.592944] device bridge0 entered promiscuous mode [ 474.602675] netlink: 'syz-executor4': attribute type 16 has an invalid length. 18:52:52 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:52 executing program 5: r0 = socket$kcm(0x29, 0x1000000000002, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x4ad8, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000500), 0x4) 18:52:52 executing program 3: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) r1 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000687000)=0x5c802861, 0x4) socket$kcm(0x29, 0x7, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1}) bind$inet6(r1, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000100), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x20000000, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) 18:52:52 executing program 1: getpgid(0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="29000000060000000000000000000000040000000000000003000000000000000000e1ffffff00000069127fbcdab56d0fb03b22af70c11f4cb25800000000000044dbc9e06ea03c325f77726e71bff4c99eef480ade32c4240209322903f5bad93a0c2f1e19cc82"], 0x68) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000800)='./file0//ile0\x00', &(0x7f0000000200)='cgrQup2\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x7fffffff}, 0x8) r1 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0xfb, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r2, 0x0, &(0x7f00000000c0)) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) inotify_add_watch(r1, &(0x7f0000000240)='./file0/file0\x00', 0x40000084) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rtc0\x00', 0x100000542, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x39044, 0x2000005) 18:52:52 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447003affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000", 0x44}], 0x1) 18:52:52 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470066ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 474.619949] netlink: 'syz-executor4': attribute type 16 has an invalid length. 18:52:52 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0xffffffffffffffc1) connect$can_bcm(r0, &(0x7f0000000140), 0x10) 18:52:52 executing program 5: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000280)='net/igmp6\x00') r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r1) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x2000000008}, 0x1c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f0000000440), 0x400000000000211, 0x810) ptrace$setregs(0xf, 0x0, 0x7ff, &(0x7f00000001c0)="edff007586427c72c53d2b710af9c19cebf95f5ced201ef6e700a14db7e1ec9b96d599235871605721fb702b5615904f2d4d4e68051947866b7cf815282460b03bf469dd9089a240cf948dbade3325078b3db90c59066a3c84112dad79eccaf104") fcntl$getown(r2, 0x9) 18:52:52 executing program 3: syz_extract_tcp_res(&(0x7f0000000080), 0x0, 0x0) 18:52:52 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000e4ffc8)={&(0x7f0000beb000)=@abs, 0x8, &(0x7f000000d000), 0x0, &(0x7f000053c000)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="b9000070"], 0x18}, 0x0) close(r2) pipe(&(0x7f0000000000)) close(r0) [ 474.790153] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.796709] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.815275] device bridge0 left promiscuous mode 18:52:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000", 0x44}], 0x1) 18:52:52 executing program 3: timer_create(0x6, &(0x7f0000000380)={0x0, 0x36}, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000340), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000003c0)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x3, 0x2, 0x0, 0xa, 0x40, 0x1}, @call={0x85, 0x0, 0x0, 0x26}, @generic={0x0, 0x7, 0x1, 0x10}, @exit, @call={0x85, 0x0, 0x0, 0x51}, @generic={0x0, 0x0, 0x100, 0x657}], &(0x7f0000000240)='GPL\x00', 0x833, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x8}, 0x48) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x800000001ff, 0x10000038f) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000140)={0x3, 0x1}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000001900)={&(0x7f00000004c0)=@hci, 0x80, &(0x7f0000001880)=[{&(0x7f00000016c0)}], 0x1}, 0x23fffffe) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="c87720313b92260935d61c2e1456877a094ea830f2d26f09a9c540be8fbfcea3908ae0ac0058e272334d87eef99790efa1c3fd33cb40e6378fb3c0053f506f1a309d3cbacf84ae5535b3397194011196045b46bc29eafb501045a41af41a84cb911b122e57e9e072e5a401bd0011c34934f281db3edc417f7e292e8ff0d5edeb8880acd70fca36fb09387b25d27e118d50e1f3abf959997f9ac1c5412d6efe0384dafe000cc26ba973cce3f461dd4744a0712dc721e9b08607cf46eb82947587f31e4d61fb694d2c4a9cb6051eb81b1e237c1b", 0xd3}, {&(0x7f0000001640)="6854bb17e64b2cfe449e6c7d7616b20610483b7573f5db719d8671ed4b8ece804030fec9c58a279b85a1cbed59f3d2652068cd7cf9c43a5e3c72af937656c034729a264b67133480aeededa99b15aa5eae1993208eb2dacdc2cf577b3a783d1e50cb1c9052a7aab304180a751018f35da2dae49a1e7c230357253e8cedf27b42259d470c2c01", 0x86}, {&(0x7f0000001700)="3c079945be60a454df8bbbbca21edc7cb57f2d0d4b2d959a6afb0ba31a5edafc6c50b6bbd6f0a03b38c292666b3a9b1a68e10de9ce5940cf0229bcf5fdfdbfe96416be615be3e6d7d2e0e0abcfe2276e39694d384bd7c756f872dae89217ddbff50b289ee30383cbd5b5c8195c6ca55a8f80bb33450420c8f680b05e5b0d2309ac922092d9850f7ccc", 0x89}, {&(0x7f0000000180)="285c6dd328fd311b176afefc31c1e1fe6ca33da5565ae919103319bee4ae9a31e69edd0d1c2280cab7044ab49cbf0f62fefb", 0x32}, {&(0x7f0000001940)="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", 0xfd}], 0x6, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0xfe30, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @empty={[0xe00000000000000]}, 0x5}, 0x1c) 18:52:52 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470048ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:53 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447003affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:53 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x100, 0x4) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 18:52:53 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002cffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:53 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x3e, @ipv4={[], [], @multicast2}}, 0x398) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(r1) accept4(r0, 0x0, &(0x7f0000000340)=0xfdce, 0x0) recvmmsg(r1, &(0x7f0000005740)=[{{&(0x7f00000027c0)=@hci, 0x80, &(0x7f0000002940)}}], 0x2, 0x0, 0x0) 18:52:53 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e0000000000", 0x46}], 0x1) 18:52:53 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447003affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:53 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r3, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r6}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r7 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r7) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:53 executing program 3: timer_create(0x6, &(0x7f0000000380)={0x0, 0x36}, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000340), 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000003c0)) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x3, 0x2, 0x0, 0xa, 0x40, 0x1}, @call={0x85, 0x0, 0x0, 0x26}, @generic={0x0, 0x7, 0x1, 0x10}, @exit, @call={0x85, 0x0, 0x0, 0x51}, @generic={0x0, 0x0, 0x100, 0x657}], &(0x7f0000000240)='GPL\x00', 0x833, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x8}, 0x48) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000340)=0x800000001ff, 0x10000038f) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000140)={0x3, 0x1}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000001900)={&(0x7f00000004c0)=@hci, 0x80, &(0x7f0000001880)=[{&(0x7f00000016c0)}], 0x1}, 0x23fffffe) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="c87720313b92260935d61c2e1456877a094ea830f2d26f09a9c540be8fbfcea3908ae0ac0058e272334d87eef99790efa1c3fd33cb40e6378fb3c0053f506f1a309d3cbacf84ae5535b3397194011196045b46bc29eafb501045a41af41a84cb911b122e57e9e072e5a401bd0011c34934f281db3edc417f7e292e8ff0d5edeb8880acd70fca36fb09387b25d27e118d50e1f3abf959997f9ac1c5412d6efe0384dafe000cc26ba973cce3f461dd4744a0712dc721e9b08607cf46eb82947587f31e4d61fb694d2c4a9cb6051eb81b1e237c1b", 0xd3}, {&(0x7f0000001640)="6854bb17e64b2cfe449e6c7d7616b20610483b7573f5db719d8671ed4b8ece804030fec9c58a279b85a1cbed59f3d2652068cd7cf9c43a5e3c72af937656c034729a264b67133480aeededa99b15aa5eae1993208eb2dacdc2cf577b3a783d1e50cb1c9052a7aab304180a751018f35da2dae49a1e7c230357253e8cedf27b42259d470c2c01", 0x86}, {&(0x7f0000001700)="3c079945be60a454df8bbbbca21edc7cb57f2d0d4b2d959a6afb0ba31a5edafc6c50b6bbd6f0a03b38c292666b3a9b1a68e10de9ce5940cf0229bcf5fdfdbfe96416be615be3e6d7d2e0e0abcfe2276e39694d384bd7c756f872dae89217ddbff50b289ee30383cbd5b5c8195c6ca55a8f80bb33450420c8f680b05e5b0d2309ac922092d9850f7ccc", 0x89}, {&(0x7f0000000180)="285c6dd328fd311b176afefc31c1e1fe6ca33da5565ae919103319bee4ae9a31e69edd0d1c2280cab7044ab49cbf0f62fefb", 0x32}, {&(0x7f0000001940)="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", 0xfd}], 0x6, 0x0) sendto$inet6(r2, &(0x7f0000000040), 0xfe30, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @empty={[0xe00000000000000]}, 0x5}, 0x1c) 18:52:53 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x2000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) r2 = getpgid(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001600)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001700)=0xe8) fstat(r0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fcntl$getown(0xffffffffffffff9c, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000017c0)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f00000018c0)=0xe8) r7 = getegid() getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x1, 0x80000000}, &(0x7f0000001500)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000001740)={r8, 0xa90, 0x10, "e274caaa1fd9fcb7301933855d2044e4"}, 0x18) sendmsg$unix(r0, &(0x7f0000001980)={&(0x7f0000001300)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001380)="2de7bc4d04486e0fc7c2b39f63a3e90ab7c7bbb97d1d98c917c62c3db9e7e3f3e921e386c514078b426eb8f2644bd59f8bd70a59f47272eac0b71a7015babcfe0f3e5fe0861362", 0x47}, {&(0x7f0000001400)="0e4bcc64973d954a3f8e9bfcbcf109c76ee90bcb4558736fb62b886bd49c7cc0fd7bccb80dd9c9a502ad0b8fb00d888c036a2c83430f0c7c2b22c8213e9f72bf7b6676fb34d4a1380d7abe02ab13439a9e06db5af93681ab23631718187d3245cf52daafcf7af587d1dfedddd8c929a74061b40a8a8607600d36d435f5ff8da4bc10101f0c2e9154cc23b7a35579d7c2069c5e7c91ea4a1dcd4f971fa0ec2966cc9947c5db543b989d084a315609f89f2eaf15cc3fe532e822a6f501a20f899b9ab007786610743ebe49e74c41f3a75b8f558e3fc2562c9636bb", 0xda}, {&(0x7f0000001500)}, {&(0x7f0000001540)="c7810c7bbec5054e2a57e5e2e24165350ada60980a65c3", 0x17}], 0x4, &(0x7f0000002b40)=ANY=[@ANYBLOB="18000000000000000100000001000000ae5420ddc40546100bd4dee5474ddb7ecd5bc69803c7a7e49807ac11e38baa6946259f3509b506000000b2aaccace42f81e3332078e6f783af6b79c9c4e37da8c2d70777d064598595fbb419ce1f78d09bf33ba8c52e2565abfd97109595d2ab8159af61e3b84949ce3e", @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="005d000020000000006a4f00010000000a000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x58}, 0x4000014) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000100)=[{}, {&(0x7f0000000200)=""/135, 0x87}], 0x2, &(0x7f00000002c0)=""/4096, 0x1000, 0x3f}, 0x10000) fsync(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x1000005) r11 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r11, 0x0, 0xa, &(0x7f0000001ac0)={'filter\x00'}, &(0x7f00000000c0)=0xfd76) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000001b40)="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", 0x1000, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000002c40)={0x90, 0xffffffffffffffda, 0x3, [{0x0, 0xfffffffffffff000, 0x5, 0xfff, '(em0['}, {0x2, 0x780, 0xc, 0x6, '/dev/audio#\x00'}, {0x6, 0x3, 0x0, 0x1000}, {0x3, 0x2, 0x7, 0x1, 'filter\x00'}]}, 0x90) [ 475.591402] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.597883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.604670] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.611085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.617820] device bridge0 entered promiscuous mode 18:52:53 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x420001, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000200)={0x2, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @remote}, 0x2, 0x100000000, 0x10000, 0x9, 0x9, &(0x7f0000000040)='eql\x00', 0x400, 0x61, 0x8}) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) mq_open(&(0x7f0000000280)="73797a3000000000000000000000000000000100000000000000000000000000000000008000", 0x80, 0x0, &(0x7f00000002c0)={0xfffffffffffffff9, 0x0, 0x1ff, 0x7fff, 0x5, 0x200, 0x0, 0xff}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0x5452, &(0x7f00000000c0)={{0xa, 0x0, 0x0, 0x0, "73797a3000000000000000000000000000000100000000000000000000000000000000008000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f559391133c552dd1c76c6e91f68e364a3238b17109db386e75830a143c5755ae184895c461436b09000000258c32a1"}) [ 475.812205] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.818785] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:53 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x200, 0x7, 0x0, 0x0, 0x0, 0x7f}) r2 = socket(0x0, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'syz0\x00', &(0x7f0000000180), 0x0, [], [0x0, 0x0, 0x8, 0x401]}) accept$packet(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000900)=0x1193) fstat(r2, &(0x7f00000005c0)) keyctl$unlink(0x9, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @broadcast, @loopback}, &(0x7f0000000340)=0xfffffffffffffc5a) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000003ac0)={@local, r3}, 0x14) syz_open_pts(r1, 0x4000) fcntl$setstatus(r0, 0x4, 0x10000000006810) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) getcwd(&(0x7f00000000c0)=""/114, 0x72) pread64(r0, &(0x7f0000003c00)=""/4096, 0x20004c00, 0x0) 18:52:53 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e0000000000", 0x46}], 0x1) 18:52:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4004ae8b, &(0x7f00000001c0)) 18:52:53 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470037ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:53 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400, 0x0) r2 = eventfd2(0x8, 0x80000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r1, 0x6, 0x80e1, r2}) [ 475.907664] device bridge0 left promiscuous mode 18:52:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x2100) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x8, 0x1}, &(0x7f00000001c0)=0x8) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x7, {0x7, 0x1b, 0x1, 0x24, 0x101, 0x9, 0x7f, 0x7}}, 0x50) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r1, 0x6b}, &(0x7f0000000240)=0x8) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x2, 0xd}}, 0x20) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0xffffffffffffffd3}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) io_setup(0x2, &(0x7f0000000380)=0x0) io_destroy(r3) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300), &(0x7f0000000340)=0x4) 18:52:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000000)=[{r0, 0x1000}, {r0, 0x4000}, {r0, 0x4}, {r0, 0x2200}, {r0, 0x8400}, {r0, 0x4000}, {r0}, {r0, 0x2030}], 0x8, 0x6) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x80}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={r2, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0x56, "6d5b2ec09ee9ecb8434ff33ab74c14cb73b661b2ab33db561c089a26b27915a9c9e16620b33fdcba04a284fc2be8d54c352abe7ef3653b8f247022a9d22ca6a455b37b939cdaeb857c5a74ebcbce2426572a750b9300"}, &(0x7f00000000c0)=0x5e) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3, 0x3}, &(0x7f0000000140)=0x8) 18:52:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e0000000000", 0x46}], 0x1) 18:52:54 executing program 3: r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x8, 0x4, 0x7, 0x14000000, 0x1, 0x4, 0x31}, 0xffffffffffffff13) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x6, 0x0, [{0x80, 0x2, 0x0, 0x0, @adapter={0xfa6a, 0x1000, 0x800, 0x3, 0x6}}, {0x6, 0x1, 0x0, 0x0, @msi={0x6a1d, 0x3, 0x1}}, {0x1, 0x0, 0x0, 0x0, @sint={0xc3f5, 0x1}}, {0x8, 0x3, 0x0, 0x0, @irqchip={0x3, 0x2}}, {0x4, 0x5, 0x0, 0x0, @sint={0x401, 0xffffffff}}, {0xffffffff80000001, 0x3, 0x0, 0x0, @irqchip={0xffffffff, 0x9}}]}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x80004000}, 0x1c) 18:52:54 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x10082, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000040)=""/38) preadv(r3, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/172, 0xac}], 0x1, 0x0) 18:52:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x91, "905ffc7e56dcbf7935fd84e939131079b5811f834c799759ab9d84b99f3508e5b1d707309fa3ac623c2863f143aa7eb02edffb7a40f1d8128699d966ff72acdd2a8c24a3bdb659fbed4da83dc215baebf92ce0144e3c09edc94145d87e8e5229d7fc53498f4d74d2a467b44369195e77e58b6d5dc0cd041c372e34c3b0047d285cc756971fdb748a3296ddb5fbfe601c2b"}, &(0x7f0000000000)=0x99) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r2, 0x0, 0x7, 0x1d7}, 0x10) r3 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000220007031dff39d5fd760500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 476.497828] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.504496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.512516] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.519363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.527916] device bridge0 entered promiscuous mode 18:52:54 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r3, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r6}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r7 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r7) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:54 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470022ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:54 executing program 1: r0 = memfd_create(&(0x7f0000000280)='vboxnet1/selfproc\x00', 0x1) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000300)=0x8, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)={@mcast2}, &(0x7f0000001500)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000180)=""/113, 0x71}], 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) r4 = dup2(r3, r2) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2a, "638a67435227dd1b4feab9fcad78fd0454db82670bdf5fb3e2a7337c2e04bccb197ccbc82a598b3dce39"}, &(0x7f00000000c0)=0x4e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={"0000007f0300", 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000240)) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg$inet_sctp(r4, &(0x7f0000007080)=[{&(0x7f0000000140)=@in6={0xa, 0x0, 0x4, @remote}, 0x1c, &(0x7f0000000540)}], 0x342, 0x0) 18:52:54 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="0a5cc8070031afa8b40a08d5bd805d55438ca8ca2fb3b088626fc887ca8cdaf34f4b3dfc7281f3a8267ad879e687926c32b83004f6") ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'bridge_slave_0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x14, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0xb, 0x5, 0x4) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) write$FUSE_POLL(r2, &(0x7f00000000c0)={0x18, 0x0, 0x5, {0x1ff}}, 0x18) bind$inet(r3, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) ioctl$int_in(r3, 0x5421, &(0x7f0000000900)=0x6) socket$vsock_dgram(0x28, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000a00), 0xff00, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback}, 0x10) 18:52:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000", 0x47}], 0x1) [ 476.577725] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 476.634304] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 18:52:54 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r3, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r6}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r7 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r7) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:54 executing program 5: r0 = socket$inet6(0xa, 0x802, 0x88) r1 = socket(0x11, 0x6, 0x126d7202) getpeername$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000100)=0x6e) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000b, &(0x7f0000000080)=0x80, 0x2a47ff56) [ 476.706693] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.714000] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:54 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/snmp6\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000000440)=0xe8) r3 = getuid() r4 = getgid() getgroups(0x6, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xee01, 0xee00]) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000900)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f0000000600000008050000c8020000000000000000000000000000e0010000700400007004000070040000700400007004000006000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000efff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="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", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0402000000000000280045434e000000000000000000000000000000000000000000000000000000200001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000500000000000000280054544c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800c00000000000000000000000000000000000000000000000000028004453435000000000000000000000000000000000000000000000000000003a00000000000000ac1414aae0000002ffffffffff0000006272696467655f736c6176655f300000766c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0002100000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000020000000000000028004453435000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x568) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x9, 0x3, 0x370, 0x0, 0x148, 0x148, 0x148, 0x148, 0x2a0, 0x2a0, 0x2a0, 0x2a0, 0x2a0, 0x3, &(0x7f0000000600), {[{{@uncond, 0x0, 0x118, 0x148, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0xc, 0x2000000000000000, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x800, 0xff, 0xdbda}, {0x3, 0x9, 0x7}, 0x9, 0x7fffffff}}}, {{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x5}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x7, 0x5, 0x0, 0xffffffff, 'pptp\x00', 'syz0\x00', 0x65a}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='jfs\x00', 0x80000, &(0x7f00000003c0)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mkdir(&(0x7f0000000100)='./file0/file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000000880)='./file0/file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000640)) umount2(&(0x7f0000000480)='./file0\x00', 0x2) [ 476.810283] device bridge0 left promiscuous mode 18:52:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000", 0x47}], 0x1) 18:52:54 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470046ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:54 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x484001, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x101000, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000340)={0x72, 0x0, 0xe8}) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000280)={0x7e, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffff9c}, [], {0x95, 0x0, 0x0, 0x14}}, &(0x7f0000000180)="4550d4141f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x1, 0xc3, &(0x7f0000000000)=""/195}, 0x48) 18:52:54 executing program 5: recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000280)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/149, 0x95}], 0x1, 0x0, 0x0, 0x1000}, 0x2000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000380)={r1, 0x8, 0x4, 0x100000001, 0x8, 0x5}, 0x14) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/122, 0x7a}], 0x1) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000400)='net^fib_trie\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000002c0), &(0x7f00000003c0)=0x4) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000000c0)={0xa, 0x4, 0xfa00, {r4}}, 0xc) sync_file_range(r3, 0x8, 0x5, 0x1) 18:52:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000000000", 0x47}], 0x1) 18:52:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') socket$inet6(0xa, 0x7, 0x6) preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000000c0)={{0x33, @remote, 0x4e23, 0x4, 'ovf\x00', 0x28, 0x2, 0x68}, {@rand_addr=0x5, 0x4e22, 0x10000, 0x80000001, 0x0, 0x10001}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) sendto(r1, &(0x7f0000000200)="995b59c3b3e7b3590671a20d7393b0e3ad9d575389888eb7d8a312dd6da59c1b21f2b795ab232b801f3026ecc6a94078a045a014bc560827ede7b5ee217848955bd6756f6126de214f3b44b791b2e1add63edb093eec835f729ae6e15674b4e66fc57142ed77761eccc2bd66136974372870fedbc00dd366467d0631fbfa65d6943ee67e4fd08db496b2237d750e198d8948e81421215dd2c76f5cf63fdd5f9489612b874576a3af79b3cd3276887f2e4772fd7c1592a823a8018829cebecb5aaf87b0c93d6bfec9ef8ed9b3c7a4f1623998980955d6e2de75c5a23b94ae6cf7cee5f91b393a8a9e4a55f4c252abf7d625edcf6db581b9265fbef54f3ee81f3249cb47e8f633cd31badfc8b7f7adf0cc9020f43329b25a5f3731fec6b1314a09df9aeb00914c9e49a3d2cff3f1bbe2a608ea34fc6e2ab17eaaf72c793656f7b44b45ad54572670669fd372234be1464db29305a932122a5b4aac039a4fb08d563709d5b8bf3aebe37b9d5ce381e3536a57fc5c345fb673a619c5b1e722ba2867ee986310780473eae334ffffb4fdabbacc61b5d8dc9b3e81f6532a5063deeb59a1a2db8609c49f593122a6779bf8e80141d4790be4b162a88c32065fc753b60d2465203a828344770b72b31f42078e7ee56c6806e2d90d7bfcda3e1c2366bbbaa05ad7447b6691a520e1051289240c63c6aec933d7574543ad1919693cb52b23efbeaa654cc06b786153dd3725c97635016c7f6ef6e66b14d22c74e6f124569d4dcfea26650a968fa376485656e985fa0575ebeb771f1d3fbd46a12e71318724d8f1e7167f8ca4bd9cf20574f5bc3d86d3d14a9d770a3021505c4fdf213f60dfa90b56b891e66c31cdecb9762eff943bf38f5c5e414ef2c3868e7bca881efe745d0e9207588a3693d740b277916333c9ad8eac2067802c60d299222077fd92069041d117ffbabc8dbd3a0abb02458bc2977cac19728c2312f41703fceb50df57c6b31667825bcf2e6a499819c93c8bdf7e2341e14756e98bf412a4af19a7dd22bdcbebb7d6708ea42d1f57b32b3cf34403896ff965d93859157cd744f0e9b996c5f2360eaa7b07bff67b4b8ff1bbe37296ec3abff8f5e31379ea7cabf5f02425bdb235bdd9f4af5ba3acdf3b8be3868f36e5d93ffd47e90b5546b1dc04c2e153e0fe91252501bd6795b109f3da6907ad11a85e9c9738b2037b9142435c15ee86511bb941d0443cea001914468d120cf1009e3e7f6beb46a462ccb36aa7780973d5de90edabdf98959556816d866ac5065f910b00310908e18b03b9e9ce88187e0e5ae20346d7e7cc3345bd6e02bd4b449a95eb03292916073ac0d5596c8f9bc3cb6d356b535d709faf51fb85df3ebb365422e8751df602e9f41b31bbd4f1a37977e133b9e6bb40cdc0f41159acc461aa8472a4c75214f184f8586fbb91169594e7de0f78bd05336a7cbbf4733dd9eafa6a3ffd1bc00d2393f1fddb12e2a8c908d7b726bd423d6cef852d09beb2846f099125b81897e770ab35e1c902a2469d27ea0d2a54a68fed0aec5a583a011126a802a932687d6b456a80ae1b45a8058df76bbb0dab5d02b0145659c9670dd24bf0f3d189b0273c590e177500056be3af59c0eac4a38a017be91aaa2209542d720ee9c1ca080dc81e55dc3685f29e0e8f9ef746a88a8cd6c7a5d49178afa50b0eec4f59f85a0e76f938288324dfae629df54ff04e7dea955be3f4f337045900ca8e5228cc77ba4621f62d2b1b83a4ddb31945e72a4000548ad929a693c21f07ba510724019a3a131c1367e31489563fcbf1eb558aa3820fa2aebf021472001dd82d1194f78205e11727817fb7dfc31c31b0ae80a68076903c8ddd8a17a44f6d87472c18996e132cc860012add236690a62cd57cdd8f88258c9ecb8d95f43f958ba0b05907902edfe90286c39f4823baa7eb9a39b8dce3842a3be5cc3d0d018c7823e4a67b06a040162afed305be5731f808a2288e63a5d798fdbaf6b18be8f273e53f9929c2eb740cd12fcc8727cc3680530d7ae6ef0aca30b407e52a5f5ca6bba04656e33fc33fda433616d5d4c594926007099bc99f4a61fa513ccab2f1ba539d938d70b9683039beafa85edf7c6274a06de316775752dbb64caf98a2ee6ae412aa50e75c4a093615dce290614b3886c9acea27487221df505824511746a2836587d759b3cd9817dc6f945c80029ce0a49a47004bdf7580c7797c05971d7f5385d396f6c477787930a80e45ec96f2e7ff2960d27f2a54fa895412838ae8c73a2a9f79442fa479a984f73b49270bd42a737fc0d2c595614965bd7a37dc210db5122a985478e906171c39c1df1fb5ca9550db0b63be430c2f9c570792b842c63b8a2d5b41254b1683cedf83f953d286195df369eecf51d87ef92c87078939f2de83fc3fe3645b4f35b062222bd365e99d265c540140427453309d007de2a71084853191b9c305f858786f51423595a01313875731fbbbe4195468d2b1b30cef705d6237eb233f75a7b8edd2a136b07d08dc5952db743211ae0aa65492356c5924d523a44436be6b5908d37d030079e497d356d5544349287c0bd0a799b681cd2b33cc66beba91006caef39400a975d198996dfed7f6190151a3d73bd164f45144ee232afa0c924667616c699bd9c9b4b92680291dc63f472869870bad4944e3013c077742d7a6ad89cbe4755afaf953be6392d118ca082594f4a651652e8d3d11c169747977ea0c6d31c6352bf848e9f210060aebc94bd7b44e5b747738e95e27cab7faf91dae3bdb05bccbd02b44e1de79bcb51bc7e8858a1b7d9f302c60de0d81cdd75aa281599f5104a2bed4139f1827aec0f45f9a9df6126f20dd2b28088652adb11a1d6fc8b54820f0f97ee98d427dd84927f5ee6f2aae9d1731fedd6b1e4e323d929fb30c55e5207b2957caffb92cdebe6de3802066ab459e2ff4bacc822a61c78fbd7483e62cb32e871518f56d9816e2dd150c6db7b95d8b36ef1359e443e9545a22ff4f172e86679c1c9c7a1af1d94b736d2e7196c086be80e27c4d1a41fdd9ddea5f562498fee48bafe625889c8307c2224c26750248e90d787a4cd892fa8895904382563c03eb3dfb21743d3a213cf3a4cce596c24449bf13bf8214928a4b3a9043f55cab8aa49c820d13d1a68b89bf8f7ff8a09980f4a8f239f9f30812112d05ce00a2c4dc5dbfe6f6f52fe88d31959eaeb1f5f659965a019b4e294582efe640751d6bd6966974b0b241667abb9b816cf6eec1e1d028793370c8103fbdbcad834423208cd1c9eb97e77a927aa3347ed513073df2e59e5dd1674e85ebbe988173dcd999d5fd87d4c495cee00a8293c24ba28dd74fff65e294058953d0d002051c8bb425a58bffc2e76d1c353d95c5c98d33ad5abd83189d0976c14f3d951e8132d988796a3d89befac713207016521d2713dc62f440979a0c7c1158540242c25422b9d568974893824912e54690d27eaf9195252e77d550314c666361651c4886ea3347022ce02388c879a894bba7117ad76b5ee3b737eee0660f50d91ecd60663c08c3840edaefa145f75d85d92bdc362b62f54815428b4d2408b7995d07a880ab1ce2bc2b858ea2ea8e5e30506db931172a6cc74a0ea25d0ed90c1d74b5b930a7d1f37eada153bd144e42cdf4d8839508cf3f9e2b01f54b76f4fc5f52fdd6002fb2594194a37371717f7534acb3f81c11d3ec08f6dab3fccd1b208ebb9cb0321357d6f840f9e3cb2148072b19f8f7f38cb563c3bdbdfd9f528c6a687b28647c9989927b39ac6f67092fee2efc030202523f33bf086c7e78c7493e8238a61091aafa081623c7adb302eaaa6f37df57cfc2da7232f4ce38a6db2d55cf9aebf47effa8c4ac9514f1edac67573dadd98977f780f4cdc0adc39fd5e2baa66e999171d1fc045cc743e7d505eeabd3e1e0efad8db20b0b6e1c5269ee1e8a580e6fbb1fb9819ef934523dadc26143d9d551ab746642de2705eb994e24fe20e97b8bfefc2673d6f66ce790af71e08097a634443828476a737256948cb7075754de22de5196ab931bfbeae8eb40a5dd8990e89c85b224a9b2d8eea50ebf9bc5f82492f36d397da982726a8a653e3395dc2a3d09a620d439a721ba2c54943288c4e8c67b3c17ad41348ca854e41ae4070d9cfafe7784d77c7719977ed7b68e1bacc77d76dfdbeb143047dc311346a853c115fbf1b21f8249077b065bb33c55bb7b713cfce383e77ffd31b7b5a6c3106beb946478282b596647c4331e67aefca5ec5b2f0b63ff71ea31567fa78ab3f653d1f98bc0a54d33f044f3625064e65e43ad15a3351266621aa354019e9c7bd4641a2a8d1f4cb5dfb016ce85848a1325c3a9f61ed795a8ad440b07297361c7cd93dc908d05d56884578d2e5bc7f7bfc1ba9e65079b8141ebcc794e61f8da84148c317fba5909b48bf3a95d86380cf4f83e3a90396948a195e0d5386791909d1ecb1666ddc30b97a544f49014c8993f4a510a92e36eb0781353e748747840a3d6ff7d9c6b5c840b564b6d3681f3cbd91744590b73fa2d2add19101b8c08ef562bc2c75fbf9987b2c7f40b0bfad8ff2f67360f5dc52d040af57a8a005fd17dfb4381d47469308999e6ab3cba2e5608322d79e614f9e112b1bdd49ff4349a27979c2aa1f05e315da23331f39ed5f86ed3f2788b77091d6a9f564a140ba115524f91cd7a8d6d72f7ecd8940f718ca87ac9d1a3ff051e0b1ef5798b462bbf7230f26a6370828095cf169c7a05b8cac849438274017522fed7d16ce11fd01530cde66a959b7f54b428334cf73a95a1cae6f80f6c9ba13ada138b528428fc9b34fa6e37d2148b3cadd08a80bce6c0d1b5b68fbd0747a264d9ea7e6e9cb0db21c43a7ac0e2f83fd61b97f7e287c53ddd012f47fa2adea07bbdf22f9f7246581e6d3471b6a0d442a8f8ac52d390f1ffc19bc88a1c24e65a522dd3045c4a667696601733c444604c666c4ed9449d9c442db465af8407699bf0a54736da1b37e40f1371ec393b15e1137165e92e35ee36720b50b6b349f21f663d0d48b76478cfcfe83f1627b38d8669bc3cede95ec61a675452a70a0c3eb78a50f5df6bd5c5c627336b8b34bd38647d4736775cc050794927212c9757be9f8de3954101ced1855f547c3f96536d8d36c74c0bc2b0d581207a162b2917aa3eb5671b8a4eef4b3c343d46ba5d299728c0878ff23b6953ae8026471f31e0c83262d1567dcf8bc30f34327d83229a98d4a73a416fd6fbca0ba31883fb345e47ffda575c83c45cd52635b78644d42ba998f984717e2349d0cd902b612caff1310dacf1994133a9c858915138e656338bc41e5dc5794950da7b3e309f6184cfd644bb17e4622c2ce610bc6d573caf01a4d5f875b19e814851b9d8daed8830934788db409b42023e507a3f62627c797ba8b2b9eef0d43dc26f72a8ce17a64d361153b46ec63268735e26ece44f9529de81a7e714e9dc8aa890f41d2f6699041bd231458ff9f44cfbb5841371bfbe5739471dd0ea85c872f46ca67dce286fb822cb77aaa166a255d7bc769773c9a8f8a4a518b0ac53f41e5d61d8e5ae06185e5d2fb633de7c087e81941320b118b283a16248c732e7f2f8d5438ed87d76fff82310bad37f0cae50f5cbdf3c70feee90cfde9cb4038aa97afef276f11cb095b16fcde3730c10c4034c456c018a9999fec47c6dbb7c7b1afd1969990e47e0f6ee9dd5ef9d08dc3315fa2bfb3f78aa5f447c0fac60520fc7e9f269c312ecb552668ea12092eba55010c8a070270c4ba32905d6", 0x1000, 0x4, &(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x80) 18:52:55 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xfd, 0x951c332a1656b71d) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x1}) ptrace$peekuser(0x3, 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)) 18:52:55 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470063ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 477.625713] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.632131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.638798] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.645174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.651918] device bridge0 entered promiscuous mode [ 477.658845] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.665449] bridge0: port 1(bridge_slave_0) entered disabled state 18:52:55 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:55 executing program 2 (fault-call:7 fault-nth:0): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',eroup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x1}, 0x50) r1 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003000), 0x1000) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, 0x3}, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x0) r4 = accept$alg(r1, 0x0, 0x0) splice(r4, &(0x7f00000003c0), r2, &(0x7f0000000480), 0x9, 0x8) write$FUSE_ENTRY(r0, &(0x7f0000000580)={0x90, 0x0, 0x2}, 0x90) getdents(r2, &(0x7f0000000240)=""/185, 0xb9) read$FUSE(r0, &(0x7f0000002000), 0x1000) write$FUSE_STATFS(r0, &(0x7f0000000100)={0x60, 0x0, 0x4, {{0x0, 0x0, 0x1}}}, 0x60) [ 477.672555] device bridge0 left promiscuous mode [ 477.744676] FAULT_INJECTION: forcing a failure. [ 477.744676] name failslab, interval 1, probability 0, space 0, times 0 [ 477.756198] CPU: 0 PID: 24952 Comm: syz-executor2 Not tainted 4.18.0+ #209 [ 477.763226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.772591] Call Trace: [ 477.775205] dump_stack+0x1c9/0x2b4 [ 477.778916] ? dump_stack_print_info.cold.2+0x52/0x52 [ 477.784139] should_fail.cold.4+0xa/0x11 [ 477.788222] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 477.793340] ? rcu_is_watching+0x8c/0x150 [ 477.797510] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 477.802111] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 477.806804] ? __local_bh_enable_ip+0x161/0x230 [ 477.811494] ? graph_lock+0x170/0x170 [ 477.815304] ? graph_lock+0x170/0x170 [ 477.819123] ? find_held_lock+0x36/0x1c0 [ 477.823227] ? check_same_owner+0x340/0x340 [ 477.827565] ? rcu_note_context_switch+0x680/0x680 [ 477.832520] ? _raw_spin_unlock_bh+0x30/0x40 [ 477.836959] __should_failslab+0x124/0x180 [ 477.841212] should_failslab+0x9/0x14 [ 477.845042] kmem_cache_alloc_node+0x256/0x720 [ 477.849639] ? __local_bh_enable_ip+0x161/0x230 [ 477.854339] ? _raw_spin_unlock_bh+0x30/0x40 [ 477.858786] __alloc_skb+0x119/0x770 [ 477.862526] ? skb_scrub_packet+0x490/0x490 [ 477.866878] ? netlink_insert+0x15d/0x3f0 [ 477.871041] ? __netlink_insert+0x13d0/0x13d0 [ 477.875544] ? retint_kernel+0x10/0x10 [ 477.879466] ? trace_hardirqs_on_caller+0xc0/0x2b0 [ 477.884471] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.890030] ? netlink_autobind.isra.34+0x23b/0x320 [ 477.895063] netlink_sendmsg+0xb29/0xfc0 [ 477.899157] ? netlink_unicast+0x760/0x760 [ 477.903412] ? security_socket_sendmsg+0x94/0xc0 [ 477.908188] ? netlink_unicast+0x760/0x760 [ 477.912437] sock_sendmsg+0xd5/0x120 [ 477.916186] sock_write_iter+0x362/0x5c0 [ 477.920265] ? sock_sendmsg+0x120/0x120 [ 477.924304] do_iter_readv_writev+0x8b0/0xa80 [ 477.928831] ? vfs_dedupe_file_range+0x670/0x670 [ 477.933624] ? rw_copy_check_uvector+0x30d/0x3e0 [ 477.938401] ? rw_verify_area+0x118/0x360 [ 477.942569] do_iter_write+0x185/0x5f0 [ 477.946487] ? dup_iter+0x270/0x270 [ 477.950117] ? proc_cwd_link+0x1d0/0x1d0 [ 477.954195] vfs_writev+0x1f1/0x360 [ 477.957842] ? __fget_light+0x2f7/0x440 [ 477.961833] ? vfs_iter_write+0xb0/0xb0 [ 477.965844] ? wait_for_completion+0x8d0/0x8d0 [ 477.970442] ? __lock_is_held+0xb5/0x140 [ 477.974520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 477.980066] ? __fdget_pos+0xde/0x200 [ 477.983880] ? __fdget_raw+0x20/0x20 [ 477.987625] ? __sb_end_write+0xac/0xe0 [ 477.991618] do_writev+0x11a/0x310 [ 477.995169] ? vfs_writev+0x360/0x360 [ 477.998971] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 478.004087] __x64_sys_writev+0x75/0xb0 [ 478.008074] do_syscall_64+0x1b9/0x820 [ 478.012006] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 478.017378] ? syscall_return_slowpath+0x5e0/0x5e0 [ 478.022315] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 478.027169] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 478.032195] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 478.037221] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 478.042767] ? prepare_exit_to_usermode+0x291/0x3b0 [ 478.047811] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 478.052665] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 478.057853] RIP: 0033:0x457089 [ 478.061062] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 478.079966] RSP: 002b:00007f47d3411c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 478.082453] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.087679] RAX: ffffffffffffffda RBX: 00007f47d34126d4 RCX: 0000000000457089 [ 478.087700] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000005 [ 478.087709] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 478.087717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 478.087726] R13: 00000000004d7908 R14: 00000000004c83c9 R15: 0000000000000000 [ 478.130701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.137437] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.143843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.150748] device bridge0 entered promiscuous mode [ 478.170484] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.178085] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.191241] device bridge0 left promiscuous mode 18:52:56 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=""/48, 0x30}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x0, 0x800) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@int=0x6, 0x4) 18:52:56 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0xfffffffffffffffe}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x6, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) 18:52:56 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470049ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:56 executing program 2 (fault-call:7 fault-nth:1): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:56 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r3, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r6}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r7 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r7) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r3, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r6}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r7 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r7) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x8000000000000000, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000100)=""/246) [ 478.387954] FAULT_INJECTION: forcing a failure. [ 478.387954] name failslab, interval 1, probability 0, space 0, times 0 [ 478.399287] CPU: 1 PID: 24977 Comm: syz-executor2 Not tainted 4.18.0+ #209 [ 478.406310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 478.415672] Call Trace: [ 478.418281] dump_stack+0x1c9/0x2b4 [ 478.421939] ? dump_stack_print_info.cold.2+0x52/0x52 [ 478.427204] should_fail.cold.4+0xa/0x11 [ 478.431298] ? __kernel_text_address+0xd/0x40 [ 478.435841] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 478.440973] ? __save_stack_trace+0x8d/0xf0 [ 478.445324] ? save_stack+0xa9/0xd0 [ 478.448975] ? save_stack+0x43/0xd0 [ 478.452621] ? kasan_kmalloc+0xc4/0xe0 [ 478.456538] ? find_held_lock+0x36/0x1c0 [ 478.460663] ? check_same_owner+0x340/0x340 [ 478.465003] ? rcu_note_context_switch+0x680/0x680 [ 478.470036] ? kmem_cache_alloc_node+0x217/0x720 [ 478.474830] __should_failslab+0x124/0x180 [ 478.479092] should_failslab+0x9/0x14 [ 478.482914] kmem_cache_alloc_node_trace+0x259/0x720 [ 478.488052] __kmalloc_node_track_caller+0x33/0x70 [ 478.493014] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 478.497797] __alloc_skb+0x155/0x770 [ 478.501535] ? skb_scrub_packet+0x490/0x490 [ 478.505893] ? netlink_insert+0x15d/0x3f0 [ 478.510076] ? __netlink_insert+0x13d0/0x13d0 [ 478.514636] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 478.520199] ? netlink_autobind.isra.34+0x23b/0x320 [ 478.525247] netlink_sendmsg+0xb29/0xfc0 [ 478.529353] ? netlink_unicast+0x760/0x760 [ 478.533659] ? security_socket_sendmsg+0x94/0xc0 18:52:56 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470059ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:56 executing program 5: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000080)={0x0, 0x0}) migrate_pages(r0, 0x3ff, &(0x7f00000000c0)=0xfffffffffffffffe, &(0x7f0000000100)=0x9) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000300)={0x5, {{0xa, 0x4e20, 0x0, @loopback, 0x10000}}}, 0xfffffffffffffe9d) r2 = dup3(r1, r1, 0x80000) setsockopt$inet_int(r2, 0x0, 0x7, &(0x7f0000000040)=0x3, 0x4) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8801, 0x0) ioctl$VT_ACTIVATE(r3, 0x5606, 0xffffffff00000001) [ 478.538434] ? netlink_unicast+0x760/0x760 [ 478.542699] sock_sendmsg+0xd5/0x120 [ 478.546433] sock_write_iter+0x362/0x5c0 [ 478.550529] ? sock_sendmsg+0x120/0x120 [ 478.554548] do_iter_readv_writev+0x8b0/0xa80 [ 478.559087] ? vfs_dedupe_file_range+0x670/0x670 [ 478.563876] ? rw_copy_check_uvector+0x30d/0x3e0 [ 478.568683] ? rw_verify_area+0x118/0x360 [ 478.572853] do_iter_write+0x185/0x5f0 [ 478.576781] ? dup_iter+0x270/0x270 [ 478.580450] ? proc_cwd_link+0x1d0/0x1d0 [ 478.584529] ? trace_hardirqs_off+0xb8/0x2b0 [ 478.588977] vfs_writev+0x1f1/0x360 [ 478.592641] ? __fget_light+0x2f7/0x440 [ 478.596658] ? vfs_iter_write+0xb0/0xb0 [ 478.600644] ? wait_for_completion+0x8d0/0x8d0 [ 478.605274] ? __lock_is_held+0xb5/0x140 [ 478.609376] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 478.614934] ? __fdget_pos+0xde/0x200 [ 478.618743] ? __fdget_raw+0x20/0x20 [ 478.622480] ? __sb_end_write+0xac/0xe0 [ 478.626475] do_writev+0x11a/0x310 [ 478.630037] ? vfs_writev+0x360/0x360 [ 478.633846] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 478.639399] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 478.644513] ? ksys_ioctl+0x81/0xd0 [ 478.648157] __x64_sys_writev+0x75/0xb0 [ 478.652161] do_syscall_64+0x1b9/0x820 [ 478.656061] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 478.661437] ? syscall_return_slowpath+0x5e0/0x5e0 [ 478.666378] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 478.671427] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 478.676481] ? recalc_sigpending_tsk+0x180/0x180 [ 478.681276] ? kasan_check_write+0x14/0x20 [ 478.685530] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 478.690397] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 478.695610] RIP: 0033:0x457089 [ 478.698815] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 478.717720] RSP: 002b:00007f47d33f0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 478.725441] RAX: ffffffffffffffda RBX: 00007f47d33f16d4 RCX: 0000000000457089 [ 478.732719] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000005 18:52:56 executing program 5: socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000180)) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="02183e5600000a0000000000f6e008fb189a0a3f0001000000000000000005000500000000000a00000000000000000000000000007180b1a8ff000000000000000000000000331da2d8253eed7c667bb57289f2e1a0eeb0fc129c4bb270ff9b5c6c0ba76232873341df081a7f44b236de4344538216685ad9"], 0x50}}, 0x0) 18:52:56 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470072ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 478.739993] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 478.747303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 478.754572] R13: 00000000004d7908 R14: 00000000004c83c9 R15: 0000000000000001 [ 478.769114] Unknown ioctl 22022 18:52:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4d}, 0x2c) r2 = dup2(r1, 0xffffffffffffffff) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0xb98, 0x1, 0x9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000000730a00ff3a72e1ab94419527000000009500000000000000"], &(0x7f0000000000)="1d4e4cc000", 0x20000, 0xffe3, &(0x7f00001a7f05)=""/251}, 0x48) 18:52:56 executing program 2 (fault-call:7 fault-nth:2): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 479.060213] FAULT_INJECTION: forcing a failure. [ 479.060213] name failslab, interval 1, probability 0, space 0, times 0 [ 479.071852] CPU: 0 PID: 25016 Comm: syz-executor2 Not tainted 4.18.0+ #209 [ 479.078886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.088239] Call Trace: [ 479.090894] dump_stack+0x1c9/0x2b4 [ 479.094540] ? dump_stack_print_info.cold.2+0x52/0x52 [ 479.099737] ? find_held_lock+0x36/0x1c0 [ 479.103824] should_fail.cold.4+0xa/0x11 [ 479.107934] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 479.113045] ? mark_held_locks+0xc9/0x160 [ 479.117204] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 479.121966] ? lockdep_hardirqs_on+0x421/0x5c0 [ 479.126562] ? trace_hardirqs_on_caller+0xc0/0x2b0 [ 479.131509] ? graph_lock+0x170/0x170 [ 479.135318] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 479.140079] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 479.145536] ? find_held_lock+0x36/0x1c0 [ 479.149620] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 479.154391] ? retint_kernel+0x10/0x10 [ 479.158311] ? rcu_note_context_switch+0x680/0x680 [ 479.163266] __should_failslab+0x124/0x180 [ 479.167518] should_failslab+0x9/0x14 [ 479.171322] kmem_cache_alloc_node+0x256/0x720 [ 479.175907] ? lock_downgrade+0x8f0/0x8f0 [ 479.180062] __alloc_skb+0x119/0x770 [ 479.183790] ? skb_scrub_packet+0x490/0x490 [ 479.188127] ? kasan_check_write+0x14/0x20 [ 479.192371] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 479.197323] ? wait_for_completion+0x8d0/0x8d0 [ 479.201927] ? lock_downgrade+0x8f0/0x8f0 [ 479.206091] netlink_dump+0x6e3/0xd50 [ 479.209920] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 479.214623] ? netlink_broadcast+0x50/0x50 [ 479.218886] __netlink_dump_start+0x4f1/0x6f0 [ 479.223400] inet_diag_handler_cmd+0x2ce/0x3f0 [ 479.227997] ? inet_diag_rcv_msg_compat+0x3f0/0x3f0 [ 479.233034] ? inet_diag_dump_compat+0x4b0/0x4b0 [ 479.237805] sock_diag_rcv_msg+0x31d/0x410 [ 479.242045] netlink_rcv_skb+0x172/0x440 [ 479.246135] ? sock_diag_bind+0x80/0x80 [ 479.250129] ? netlink_ack+0xbe0/0xbe0 [ 479.254017] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 479.258695] sock_diag_rcv+0x2a/0x40 [ 479.262417] netlink_unicast+0x5a0/0x760 [ 479.266493] ? netlink_attachskb+0x9a0/0x9a0 [ 479.270924] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.276460] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 479.281493] netlink_sendmsg+0xa18/0xfc0 [ 479.285574] ? find_held_lock+0x36/0x1c0 [ 479.289662] ? netlink_unicast+0x760/0x760 [ 479.293918] ? security_socket_sendmsg+0x94/0xc0 [ 479.298685] ? netlink_unicast+0x760/0x760 [ 479.302922] sock_sendmsg+0xd5/0x120 [ 479.306644] sock_write_iter+0x362/0x5c0 [ 479.310712] ? sock_sendmsg+0x120/0x120 [ 479.314700] do_iter_readv_writev+0x8b0/0xa80 [ 479.319202] ? vfs_dedupe_file_range+0x670/0x670 [ 479.323962] ? rw_copy_check_uvector+0x30d/0x3e0 [ 479.328724] ? rw_verify_area+0x118/0x360 [ 479.332883] do_iter_write+0x185/0x5f0 [ 479.336772] ? dup_iter+0x270/0x270 [ 479.340435] vfs_writev+0x1f1/0x360 [ 479.344064] ? __fget_light+0x2f7/0x440 [ 479.348049] ? vfs_iter_write+0xb0/0xb0 [ 479.352046] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.357596] ? __fdget_pos+0xde/0x200 [ 479.361416] ? __fdget_raw+0x20/0x20 [ 479.365131] ? trace_hardirqs_off+0xb8/0x2b0 [ 479.369539] ? __sb_end_write+0xac/0xe0 [ 479.373522] ? do_syscall_64+0x6be/0x820 [ 479.377594] ? trace_hardirqs_on+0x2c0/0x2c0 [ 479.382014] do_writev+0x11a/0x310 [ 479.385563] ? vfs_writev+0x360/0x360 [ 479.389403] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 479.394516] __x64_sys_writev+0x75/0xb0 [ 479.398533] do_syscall_64+0x1b9/0x820 [ 479.402430] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 479.407801] ? syscall_return_slowpath+0x5e0/0x5e0 [ 479.412730] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 479.417606] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 479.422631] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.428168] ? prepare_exit_to_usermode+0x291/0x3b0 [ 479.433187] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 479.438053] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 479.443245] RIP: 0033:0x457089 [ 479.446440] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 479.465350] RSP: 002b:00007f47d33f0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 479.473059] RAX: ffffffffffffffda RBX: 00007f47d33f16d4 RCX: 0000000000457089 [ 479.480324] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000005 [ 479.487599] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 479.494874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 479.502141] R13: 00000000004d7908 R14: 00000000004c83c9 R15: 0000000000000002 [ 479.513885] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.520369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.527116] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.533533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.540445] device bridge0 entered promiscuous mode [ 479.553411] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 18:52:57 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x0, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:57 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470074ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="8a5c010700315f85715070") r1 = socket(0x10, 0x20000000000003, 0x0) recvmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000740)=@can, 0x80, &(0x7f0000001840)=[{&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x2, &(0x7f0000001880)=""/45, 0x2d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000180)={&(0x7f00000000c0)=@in6, 0x80, &(0x7f0000000140), 0x0, 0x0, 0xfffffdfb}, 0x0) write(r1, &(0x7f0000000000)="220000005e000721004f4da761424d0bbc54b190243105ebd900001a000000000000", 0x22) setsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f0000000040)=0x2, 0xf9) ioctl$RTC_WIE_OFF(r1, 0x7010) 18:52:57 executing program 2 (fault-call:7 fault-nth:3): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 479.561192] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.567827] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.593700] device bridge0 left promiscuous mode [ 479.711891] FAULT_INJECTION: forcing a failure. [ 479.711891] name failslab, interval 1, probability 0, space 0, times 0 [ 479.723205] CPU: 1 PID: 25025 Comm: syz-executor2 Not tainted 4.18.0+ #209 [ 479.730236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 479.739601] Call Trace: [ 479.742198] dump_stack+0x1c9/0x2b4 [ 479.745864] ? dump_stack_print_info.cold.2+0x52/0x52 [ 479.751082] should_fail.cold.4+0xa/0x11 [ 479.755155] ? __kernel_text_address+0xd/0x40 [ 479.759676] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 479.764796] ? __save_stack_trace+0x8d/0xf0 [ 479.769147] ? graph_lock+0x170/0x170 [ 479.772963] ? save_stack+0x43/0xd0 [ 479.776616] ? kasan_kmalloc+0xc4/0xe0 [ 479.780528] ? find_held_lock+0x36/0x1c0 [ 479.784622] ? __lock_is_held+0xb5/0x140 [ 479.788715] ? check_same_owner+0x340/0x340 [ 479.793049] ? mark_held_locks+0xc9/0x160 [ 479.797219] ? rcu_note_context_switch+0x680/0x680 [ 479.802157] ? kmem_cache_alloc_node+0x217/0x720 [ 479.806927] __should_failslab+0x124/0x180 [ 479.811219] should_failslab+0x9/0x14 [ 479.815101] kmem_cache_alloc_node_trace+0x259/0x720 [ 479.820231] __kmalloc_node_track_caller+0x33/0x70 [ 479.825180] __kmalloc_reserve.isra.41+0x3a/0xe0 [ 479.829952] __alloc_skb+0x155/0x770 [ 479.833686] ? skb_scrub_packet+0x490/0x490 [ 479.838035] ? kasan_check_write+0x14/0x20 [ 479.842300] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 479.847256] ? wait_for_completion+0x8d0/0x8d0 [ 479.851849] ? lock_downgrade+0x8f0/0x8f0 [ 479.856033] netlink_dump+0x6e3/0xd50 [ 479.859844] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 479.864529] ? netlink_broadcast+0x50/0x50 [ 479.868789] __netlink_dump_start+0x4f1/0x6f0 [ 479.873305] ? kasan_check_read+0x11/0x20 [ 479.877472] inet_diag_handler_cmd+0x2ce/0x3f0 [ 479.882072] ? inet_diag_rcv_msg_compat+0x3f0/0x3f0 [ 479.887106] ? inet_diag_dump_compat+0x4b0/0x4b0 [ 479.891896] sock_diag_rcv_msg+0x31d/0x410 [ 479.896163] netlink_rcv_skb+0x172/0x440 [ 479.900253] ? sock_diag_bind+0x80/0x80 [ 479.904244] ? netlink_ack+0xbe0/0xbe0 [ 479.908142] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 479.912832] sock_diag_rcv+0x2a/0x40 [ 479.916548] netlink_unicast+0x5a0/0x760 [ 479.920647] ? netlink_attachskb+0x9a0/0x9a0 [ 479.925078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 479.930628] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 479.935674] netlink_sendmsg+0xa18/0xfc0 [ 479.939769] ? netlink_unicast+0x760/0x760 [ 479.944015] ? security_socket_sendmsg+0x94/0xc0 [ 479.948774] ? netlink_unicast+0x760/0x760 [ 479.953035] sock_sendmsg+0xd5/0x120 [ 479.956788] sock_write_iter+0x362/0x5c0 [ 479.960863] ? sock_sendmsg+0x120/0x120 [ 479.964877] do_iter_readv_writev+0x8b0/0xa80 [ 479.969396] ? vfs_dedupe_file_range+0x670/0x670 [ 479.974161] ? rw_copy_check_uvector+0x30d/0x3e0 [ 479.978932] ? rw_verify_area+0x118/0x360 [ 479.983108] do_iter_write+0x185/0x5f0 [ 479.987010] ? dup_iter+0x270/0x270 [ 479.990647] ? proc_cwd_link+0x1d0/0x1d0 [ 479.994721] ? trace_hardirqs_off+0xb8/0x2b0 [ 479.999140] vfs_writev+0x1f1/0x360 [ 480.002782] ? __fget_light+0x2f7/0x440 [ 480.006768] ? vfs_iter_write+0xb0/0xb0 [ 480.010761] ? wait_for_completion+0x8d0/0x8d0 [ 480.015355] ? __lock_is_held+0xb5/0x140 [ 480.019462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 480.024999] ? __fdget_pos+0xde/0x200 [ 480.028808] ? __fdget_raw+0x20/0x20 [ 480.032533] ? __sb_end_write+0xac/0xe0 [ 480.036527] do_writev+0x11a/0x310 [ 480.040086] ? vfs_writev+0x360/0x360 [ 480.043907] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 480.049029] __x64_sys_writev+0x75/0xb0 [ 480.053012] do_syscall_64+0x1b9/0x820 [ 480.056908] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 480.062282] ? syscall_return_slowpath+0x5e0/0x5e0 [ 480.067226] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 480.072252] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 480.077275] ? recalc_sigpending_tsk+0x180/0x180 [ 480.082059] ? kasan_check_write+0x14/0x20 [ 480.086298] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 480.091144] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 480.096340] RIP: 0033:0x457089 [ 480.099541] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 480.118438] RSP: 002b:00007f47d3411c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 480.126295] RAX: ffffffffffffffda RBX: 00007f47d34126d4 RCX: 0000000000457089 [ 480.133545] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000005 [ 480.140815] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 480.148072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 480.155331] R13: 00000000004d7908 R14: 00000000004c83c9 R15: 0000000000000003 18:52:58 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470027ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 480.168801] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.175294] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.182221] device bridge0 left promiscuous mode 18:52:58 executing program 2 (fault-call:7 fault-nth:4): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 480.563468] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.569994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.576791] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.583169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.589924] device bridge0 entered promiscuous mode [ 480.596748] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.603234] bridge0: port 2(bridge_slave_1) entered forwarding state 18:52:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080), 0x4) vmsplice(r1, &(0x7f0000000780)=[{&(0x7f0000000280)="cd", 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r3, 0x2001004000000016) write$FUSE_ATTR(r2, &(0x7f0000000200)={0x78}, 0x78) [ 480.609970] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.616420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.623063] device bridge0 entered promiscuous mode [ 480.640457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:52:58 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x200, 0xcb7d, r3, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r6}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r7 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r7) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:58 executing program 3: socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x8001, &(0x7f0000000600)="0ad0cf845cc807") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000240)={{0x0, 0x3}, {0x2c9}, 0x6, 0x7}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="0849a1bd3000ff"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000000)=@req) fcntl$setstatus(r1, 0x4, 0x4800) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendfile(r2, r1, &(0x7f0000000180), 0x100000001) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000540)={0x3, 0x5}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="2e2f6367726f75702e6370752f2e797a30f6", 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f75702e6e65742f73797a312775ca1e56b82a6b2c9610345bf0841f9c0102ea8317e1c2fd7ad819a4e039", 0x1ff) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000003c0), 0x4) 18:52:58 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470019ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="c00000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 480.659028] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.665532] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.680252] device bridge0 left promiscuous mode 18:52:58 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470047ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="c00e00001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:59 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xb) listen(r0, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) finit_module(r1, &(0x7f0000000040)='\x00', 0x2) close(r1) accept4(r0, 0x0, &(0x7f0000000340)=0xfdce, 0x0) recvmmsg(r1, &(0x7f0000005740)=[{{&(0x7f00000027c0)=@hci, 0x80, &(0x7f0000002940)}}], 0x1, 0x0, 0x0) 18:52:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470041ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 481.210088] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.216679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.223444] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.229900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.236736] device bridge0 entered promiscuous mode 18:52:59 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00'}, 0x1, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:52:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="00f0ff7f1400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:59 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r0 = memfd_create(&(0x7f0000000340)='keyringtrustedvmnet1\x00', 0x2) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x6, 0x2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000100)={[], 0x0, 0x5531fee, 0x0, 0x0, 0x9, 0x0, 0x1d000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffff9c, 0x4008af21, &(0x7f00000002c0)={0x3, r2}) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000480)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="66b8010000000f01c1baf80c66b8f8a2e28366efbafc0c66b8dd52aa7966ef6436f2a40f30dbd07c800f2169650f019d64d90f214d0f01df", 0x38}], 0x1, 0x0, &(0x7f0000000200), 0x10000000000000e2) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000300), 0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x0, 0x0) [ 481.255167] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.262805] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.293519] device bridge0 left promiscuous mode 18:52:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="0f0000001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470039ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:52:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}}}, &(0x7f00000003c0)=0xfffffffffffffea6) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000540)=""/252) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001000e2fa4bf39aa8b5c86d15df5fba00000000000015000000000066a1782761af84f5d27763fa5d8c4fde95adb8a371c4994052090d2360b8adbf70a58dcb7976728200c3abdb9f9097d11437a12f2c0d834de00aab5a5feb06e8fa7aeb1c319cee1dd62da72c728f1879d8f4f9e2d0d311c058538c6ab1b61e89dd07a5e373776c088042feb9ef0eee51cfa1690093565ce7bcd75411427637c2fb993f66f97af7b0cb28dbbd64cc178e915a83a9730ff526cb2d9bfd36c3c0d44cc8a1a45e565c046fadcc3b1a", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000240)={'ip6gre0\x00', 0x600}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x40, 0x200, 0x7fffffff, 0x2, r2}, &(0x7f0000000340)=0x10) ioctl$sock_ifreq(r1, 0x891a, &(0x7f0000000280)={'ifb0\x00', @ifru_ivalue=0x5}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'team_slave_0\x00\x00\x00`'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'sit0\x00'}) 18:52:59 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470052ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 482.145028] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.151566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.158324] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.164721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.171500] device bridge0 entered promiscuous mode [ 482.184712] bridge0: port 2(bridge_slave_1) entered disabled state 18:53:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0xc) ioctl(r0, 0x8912, &(0x7f0000000000)="0a26c8079a613c6e715070") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @local}, 0x1c) ioctl(r1, 0x4000008906, &(0x7f0000000200)) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000200), 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) recvmsg(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@ax25, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000002c0)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}, 0x6, 0x2}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0xfffffffffffffffe, 0xffff}, 0x8) 18:53:00 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="effdffff1400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 482.192802] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.210885] device bridge0 left promiscuous mode 18:53:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a9058f4b2b8a69d8240a1e59031e97ed20073d84764792b0ac62391d30f74afa5341305296600d7e68fe671fa9a448f6e36f61bd9282acd5fba78e69046addb2", "fb9aa667bee235a12aaeac8accfc6579169c6e9f7b5764c6be15e559d1c63d1e3416852bda39c4aff7fe49e73ae02ba1da6b73519486978b6f353b9393299974", "abe669e7b639ab37f8b5e6e64a63a7330574afadc27ead618e1da7e69b085b43"}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8000, 0x408000) readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=""/215, 0xd7) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000340)={r2, r3/1000+30000}, 0x10) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) 18:53:00 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447002affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:00 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="880100201400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000800)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x500005}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x90, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xf0}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffffe0}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x14}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x6b1337d98d75b2d0) r4 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) r5 = dup2(r2, r1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000000)={0x8, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000080)=0x3604) read(r4, &(0x7f0000000280)=""/116, 0x4f) 18:53:00 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) mount(&(0x7f00000000c0)='./file0//ile0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000280), 0x8) 18:53:00 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x0, 0x200, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) [ 482.579823] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.586289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.593118] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.599505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.606350] device bridge0 entered promiscuous mode 18:53:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) sendfile(r0, r0, &(0x7f00000000c0)=0x8000000000000000, 0x10001) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x175, 0xfa00, @id_resuseaddr={&(0x7f0000000140), r1}}, 0x3c2) 18:53:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000600), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x4040, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000180)={0x0, 0x20, [0x1, 0xd0c, 0x100000000, 0x8, 0xf5, 0x3fe0000000000000, 0x101, 0x5]}) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], 0x1f000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:53:00 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000cffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:00 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="e03f03001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:00 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x2) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000800)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x80000001, 0x549080) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) r3 = syz_open_dev$sndtimer(&(0x7f00000007c0)='/dev/snd/timer\x00', 0x0, 0x8000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x1, 0x4000) prctl$setfpexc(0xc, 0x0) getpgid(0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=0x0) r6 = getpgrp(r5) perf_event_open(&(0x7f0000000480)={0x5, 0x70, 0x7fffffff, 0x80000001, 0x401, 0x80000001, 0x0, 0x2, 0x2020, 0xa, 0x400, 0x5, 0x0, 0xb0d, 0xa49, 0x1fc00000000, 0x5e60e08a, 0xfffffffffffffc4f, 0x5, 0x80, 0x7, 0x1, 0x0, 0x7, 0x7, 0x1, 0x1, 0x8000, 0x3, 0x7ff, 0x4, 0x3, 0x1, 0x100000001, 0x200, 0x6, 0x1, 0x20, 0x0, 0x1, 0x1, @perf_config_ext={0xfff, 0x401}, 0x900, 0x7, 0x877, 0x6, 0x4, 0x1b6580000000000}, r6, 0x1, r2, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000780)=0x0) fadvise64(r3, 0x0, 0x1000, 0x2) tgkill(r7, r7, 0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000380)={0xc0, 0x8004, 0xa892, 0x5}, &(0x7f00000003c0)=0x10) memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) r8 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r8, 0xc0505405, &(0x7f0000000400)={{0xffffffffffffffff, 0x3, 0x6, 0x0, 0x101}, 0x1ff, 0x10000, 0x7f}) sendfile(r1, r4, &(0x7f00000ddff8), 0x102000002) 18:53:00 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470064ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:01 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000007fed)='/dev/snd/controlC#\x00', 0x4a0f, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f0000004000)) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x800) set_robust_list(&(0x7f0000000180)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x100, &(0x7f0000000140)={&(0x7f0000000100)}}, 0x18) 18:53:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="effd00001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) [ 483.315806] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.322348] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.329528] device bridge0 left promiscuous mode 18:53:01 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x4}, 0x4) sendto$inet(r0, &(0x7f0000000080)="b1f8ba404b590496b70b3c6fbb02eb0d3638b1b5fe4ff33b70332590d5b72eeac01cfe88", 0x24, 0x24044000, &(0x7f0000000100)={0x2, 0x4e23, @rand_addr}, 0x10) mount(&(0x7f000000a000)='./bus\x00', &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x3, &(0x7f0000000040)) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x8000) lremovexattr(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000240)=@known='system.advise\x00') faccessat(r1, &(0x7f0000000000)='./bus\x00', 0x3, 0x0) 18:53:01 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470055ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:01 executing program 4: r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x8000000000, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000540)=""/66, &(0x7f00000006c0)=0x42) sync_file_range(r1, 0x0, 0x0, 0x5) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000340)={0x0, &(0x7f00000002c0)}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"7665740000006000012a4d00bd6800", 0x43732e5398416f1a}) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x80, 0x0) r5 = dup2(r4, r2) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0)={0x3, 0x200, 0x9756, 0x4, 0x6, 0x8001, 0xa199, 0xff, 0x9, 0x0, 0x8}, 0xb) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000500), &(0x7f0000000640)=0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) memfd_create(&(0x7f0000000380)="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", 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) bind$can_raw(r1, &(0x7f00000002c0)={0x1d, r6}, 0x10) 18:53:01 executing program 3: r0 = socket$inet6(0xa, 0xd, 0xfffffffffffffdfe) r1 = dup(r0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4000000000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x21}}, 0x8, 0x3, 0x1, 0xa, 0xfff, 0xfffffffffffffffe, 0x1f}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) 18:53:01 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x0, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:53:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:01 executing program 5: ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) getresgid(&(0x7f0000000140), &(0x7f0000000200), &(0x7f00000002c0)=0x0) lchown(&(0x7f0000000080)='./file1\x00', r1, r2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0/file1/file0\x00') umount2(&(0x7f0000000380)='./file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) 18:53:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x200) ioctl$VT_WAITACTIVE(r1, 0x5607) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x5, 0x10001, 0x1ff, 0x3, 0x9, 0x4, 0x100000000, {0x0, @in6={{0xa, 0x4e23, 0x9, @remote, 0x3}}, 0x4, 0xa264, 0x1f, 0x69, 0x80000000}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x6}, &(0x7f0000000200)=0x8) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) [ 483.624404] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.630857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.637635] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.644012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.650783] device bridge0 entered promiscuous mode 18:53:01 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x80000000000034, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x54e9, 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x8) 18:53:01 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)=[@cred={0x20}, @cred={0x20}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, @rights={0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}], 0x80}], 0x1, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(0xffffffffffffffff, 0x4010ae94, &(0x7f0000002000)={0x0, 0x100}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006d40)=[{&(0x7f0000001c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001c80)="7de34b0b64c957feecc8fa4442900feed4260083b6bdf7bb50e0ef74956bb9a9b2316871bdeb254ec26f1c982c0a2d206d1c238b4a67f64fccc4054fbb72fd219e227172e26b", 0x46}, {&(0x7f0000001d40)="e938a50f2c4144cc5dd82c8a2d666bde1d632481c2e1043fb1ba3dc5c365afb409", 0x21}, {&(0x7f0000005000)="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", 0x1000}], 0x3, &(0x7f0000004480)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20}, @cred={0x20}, @cred={0x20}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20}, @cred={0x20}], 0x118}, {&(0x7f00000045c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004880)=[{&(0x7f0000004640)="ead216458bdbe0bd5e5a1b78ae99c2db9f7fd03342fd916c79f390a6cb997bf1dfc4ff0a673ec9b1abfed0714fc59aa9308d51c598d00ecb964269cdd75aa30b9dcf806fbc58b77779ceed5d817f82e8cb30f63fbe3a54011707325b05b7dbc565cdb35df7c141a2d9375b6186f2275ec965a8cedc126d30c3b18da92cb11e52960025946a85f9eb0e2be39392f6b6511cec668032de8e42b6bf1a316bf131df3a2ca9226c233d829523b11a1a4d797665aac7785e21f2b83031250cf9038ec5c2537badabf2fe5717988d0459413c3e5cdb556282b0a8c8d72923c7f711d8a4b50091ec45f740837823b6708916", 0xee}, {&(0x7f0000004800)="f7dde656a7f4213f7dae245c3a82d7aab30cfe350b499ad7b92b5fde38695758a830265ed5b93aed05ed1b4d11b9102b25f1c3446be2fb12f2ec650a5ad8ed3b7e2f4aa0d10fd673c4a70f70e137da89cd64d5398d73329570be885bda5c25b98d612c2347d96d96333358db", 0x6c}], 0x2, &(0x7f0000006100)=[@cred={0x20}, @cred={0x20}, @cred={0x20}, @cred={0x20}, @cred={0x20}, @cred={0x20}], 0xc0, 0x40}, {&(0x7f0000006200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006480)=[{&(0x7f0000006280)="d2a5e67b2430ee7c9ced1da590fbf53946b0092a1415483d77666af6f74deb740f148ce6d15fc821bd50ff027043eafe9e939647fe300ba72b4b862ec965ce093dd680f80110290a27e4af7c7f5f518d33ded87b62121715b67787", 0x5b}, {&(0x7f0000006380)="49abaa118cffed4743e6ef6ea21438cb3a9a0e4effe0d0acf0dcf6398924d77430378e6447a5f7741407c8a7b0eb19345a6b3f0b6a08717dac19d41e3021c032ea2817ab5e2cadb41991fe21a362f7f1bf79931185966a41f289acff4419e0a0f14e8ce980ee0925a2f1af7c64deb2c555aafb8b669d1cca4ddd1a844ca4c6fec2f24850fb51247526fa28ae261365231e4cab6a8692377c2efdb27d20e80e3b5670a09ecf3b583b12fe39bdca22b5ad928af7a2aff218", 0xb7}], 0x2, &(0x7f00000064c0)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}], 0x30, 0x40040}, {&(0x7f0000006500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006700)=[{&(0x7f0000006580)="085a3c1a225e74aa9bce1154015b386e4592171d7057b52d2563f3af052adacac0cb3673f6c6a153bbcc47bdef45671e26f31887c1afaf2415462dc407b67510d4790f58f41a9133c311c7e60d8292f9706c1671aafef689", 0x58}, {&(0x7f0000006680)="b359baf0fcc2ef5c536de1063d2b78b3a05fec2f190e05b3cc5166d9e57f44834f28467635318caba4df766bb2c47ffed171d42169ccba8b24f22f7dc52a212ba48117960031b41ef3760918861d406badd674d31a0d03d71c37fda08ce732b77c35758a60135553b1cc510026676cbac6c32a3f917a3d7ef33fbc7892190a88", 0x80}], 0x2, &(0x7f00000068c0)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20}], 0xd8, 0x4c000}, {&(0x7f00000069c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000006d00)=[{&(0x7f0000006a40)="157bb4392fe5931ac8afb5f754d690943f0be34e2a8b12b17b5d52f4b3afd5e67f679da76d6a3c4d5e3048faaff601583be6c8eea5e774fea4ab54e7f6e256a06add08ce8fccdcecf521c630cb7c7e6d422aceeaa04825cd303eaa6654d36a9fe090aabe996f69605395bb28495a48bcd5ccdbe42245b5b5f340ac15c0e8dea86f01f33e687dc6c76fa6fa1a2eecc37366530375bf5b9442746e0d70cc82dddf6e", 0xa1}, {&(0x7f0000006c00)="f02b7d25a064ddabd875a0c28ec0f8e7f7f4fe3c0a23fa4afd86902d66c95c72b5d1ebb62f13140af21e971fd4e5545c257b05645b173692f7de359ac23c5ab68f469211629a03ef43bd6c444cf279b79e01b94a81be08702f279eeab6e05d2e657e25ee7a4b463d19119d956ef6d3f298635f1acd38d9f38dd504c862cc55c99e0a257c2d9887b0c945f2c01a421957f64ffc5f6dbed80d1c1a786511e607074870ae3721e65527ad19cf7b4a01e00a1102cb927222d6fd783d0de0c1fbfa02e3006cbf26dbef3e093622988927dd50380832cacc7d041d3d1021b449978ebfb443c5298dad872d85d96753b7dd6ee7955e", 0xf2}], 0x2, 0x0, 0x0, 0x4000010}], 0x5, 0x20044000) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) r1 = socket$inet(0x2, 0x1, 0x7) sendmmsg(r1, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000300)}}], 0x1, 0x0) 18:53:01 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447005bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:01 executing program 1: r0 = socket$inet6(0xa, 0x8, 0x6) ioctl(r0, 0x8912, &(0x7f0000000480)="0a5cc80700315f85715070") r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) r2 = dup(r1) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000040)) 18:53:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x18912, &(0x7f0000000040)="8a5c010700315f857150701067728f0e7f41f3c093390204f91207fec755e9bf2bde542caac02e9b668bee3e2a7ec55abe75f01a68b924ae24b70480a6cd35ca33afd8a24d93300ed3493bffc5603d9d0ff0e54ec0e0c4603e9f8e2a405b25c2545a72d7e72045ddfa2bb2a89e32840492792fd654185bb97d559b05a17feded2c0d74a7f689e31a5635f80c5b6cfa213d78488078beaae6aa6b2011e7e27fe86b9c3b1b5e4d4cce9334d8f4966694529fd7f09e5f8c4655cebfa7ed406aedf32c51ff3e1c4e") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000140)=""/69, &(0x7f00000001c0)=0x45) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000016ff0)={&(0x7f0000000280)={0x18, 0x55, 0x3ef, 0x0, 0x0, {0x7}, [@generic="9f"]}, 0x18}}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x420240, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x4000, 0x1}) 18:53:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="4800000ec000190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:01 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpid() socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_buf(r2, 0x29, 0x2b, &(0x7f0000000040)=""/163, &(0x7f0000000140)=0xa3) getpriority(0xfffffffffffffffe, r1) ioctl$sock_ifreq(r0, 0x8b2b, &(0x7f0000000100)={'veth1_to_bridge\x00', @ifru_map}) [ 484.114124] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.120765] bridge0: port 1(bridge_slave_0) entered disabled state 18:53:02 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470069ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:02 executing program 3: 18:53:02 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84306910000003900070035000c00060000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) [ 484.170185] device bridge0 left promiscuous mode [ 484.508950] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.515912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.523761] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.530506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.538809] device bridge0 entered promiscuous mode [ 484.563734] PF_BRIDGE: br_mdb_parse() with unknown ifindex [ 484.577847] IPv6: Can't replace route, no match found [ 484.601846] PF_BRIDGE: br_mdb_parse() with unknown ifindex 18:53:02 executing program 4: r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x8000000000, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000540)=""/66, &(0x7f00000006c0)=0x42) sync_file_range(r1, 0x0, 0x0, 0x5) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000340)={0x0, &(0x7f00000002c0)}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"7665740000006000012a4d00bd6800", 0x43732e5398416f1a}) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x80, 0x0) r5 = dup2(r4, r2) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000001c0)={0x3, 0x200, 0x9756, 0x4, 0x6, 0x8001, 0xa199, 0xff, 0x9, 0x0, 0x8}, 0xb) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000500), &(0x7f0000000640)=0x4) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) memfd_create(&(0x7f0000000380)="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", 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000280)=0xe8) bind$can_raw(r1, &(0x7f00000002c0)={0x1d, r6}, 0x10) 18:53:02 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000022300190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:02 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x200, 0x14100) sendto$inet6(r0, &(0x7f0000000080)="872ae55c9c103990bf70b231436087275c23f4e6a82d8678e258576f1d2d2b30d4fe9be5ee450000", 0xffffff4d, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x4, @mcast1}, 0x190) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f00000000c0)="7efcd302837d5b11cce2ed1d264a447222307d7cf28fab82ce041fdcc21823e715af69bda03135ffeb672053acdce411ae07f0d33907db33cfeb353e", &(0x7f0000000100)=""/79}, 0x18) 18:53:02 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447006affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x200) ioctl$VT_WAITACTIVE(r1, 0x5607) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x5, 0x10001, 0x1ff, 0x3, 0x9, 0x4, 0x100000000, {0x0, @in6={{0xa, 0x4e23, 0x9, @remote, 0x3}}, 0x4, 0xa264, 0x1f, 0x69, 0x80000000}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x6}, &(0x7f0000000200)=0x8) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"}) 18:53:02 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x1, 0xffffffff, 0x0, 0x200, 0x7, 0x401, 0x8, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x8) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x40000, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x100000000, 0x1, 'syz0\x00', 0x4}, 0x1, 0x0, 0xcb7d, r4, 0x1, 0x1, "73797a30000000000000000000000000000000000000000000000000000000000000ecba0000000000000000000100", &(0x7f0000000180)=["2984657468302e6367726f75706500"], 0xf, [], [0x80000001, 0x9, 0x8, 0x401]}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x200, 0x0) r6 = dup3(r0, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in, @in6=@mcast1, 0x4e22, 0x7, 0x4e21, 0x0, 0x0, 0x0, 0x80, 0xff, 0x0, r7}, {0xb4, 0xffffffff, 0x7, 0x31, 0x6, 0x400, 0x100, 0x9}, {0x7, 0x7, 0x0, 0xf68}, 0x5, 0x6e6bb5, 0x1, 0x0, 0x2, 0x1}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3501, 0x3, 0x1, 0x2, 0xc723, 0x3, 0x20}}, 0xe8) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000380)={0x1f0e, 0xfffffffffffff95a, 0x3}) r8 = add_key(&(0x7f0000000800)='syzkaller\x00', &(0x7f0000000840)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000880)="d704017ae45a4b4aad8e7692daacdd71ea1051e2a20355e1581119a21b79e7df627bd147d135770e2c7584fda53c8b6bfd34a32ce52b184e34e950147f892cdc", 0x40, 0xfffffffffffffffa) keyctl$unlink(0x9, 0x0, r8) ioctl$VT_DISALLOCATE(r2, 0x5608) 18:53:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470069ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @gretap={{0x10, 0x1, 'gretap\x00'}, {0x4}}}]}, 0x34}}, 0x0) [ 484.747931] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.754501] bridge0: port 1(bridge_slave_0) entered disabled state 18:53:02 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000001c0)={'NETMAP\x00'}, &(0x7f0000000200)=0x1e) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl(r0, 0x8912, &(0x7f0000000180)="0a5cc80700315f85715070") r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x6) prctl$seccomp(0x16, 0x1, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x3, 0xffffffffffff0001, 0x1, 0x200}, {0xfff, 0xffffffffffffff01, 0x7, 0x100000000}, {0x3, 0x300000000000000, 0xfff, 0x200}, {0x8, 0x0, 0x7, 0x9}, {0x9, 0x0, 0x9, 0x2}, {0xaf, 0x7f, 0x48f0, 0x10001}, {0x6, 0x3, 0x1, 0x4}, {0x3, 0x4, 0x200, 0x647a212}]}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc0505510, &(0x7f0000001000)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000040)={0x100400, 0x200, 0x7, 0xfffffffffffffff8, 0x8, 0x6}) 18:53:02 executing program 1: r0 = semget$private(0x0, 0x4000000002, 0x0) semop(r0, &(0x7f0000000080)=[{0x0, 0x1f, 0x1800}, {}], 0xb3) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x7fff, 0x1000}, {0x0, 0xf9a4}], 0x2, &(0x7f0000000180)) semctl$SETVAL(r0, 0x4, 0x10, &(0x7f0000000100)=0x3) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0xfe0000, 0x400240) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x100c2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) 18:53:02 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)={0xa6, 0x29, 0x1, {0x7fffffff, [{{0x20, 0x1, 0x8}, 0x5, 0x7, 0x7, './file0'}, {{0x4, 0x2, 0x7}, 0x8, 0x80000001, 0x7, './file0'}, {{0x2, 0x2}, 0x5, 0x8000, 0x7, './file0'}, {{0x12, 0x2, 0x4}, 0x2, 0x7, 0x7, './file0'}, {{0x5, 0x0, 0x4}, 0x1, 0x3, 0x7, './file0'}]}}, 0xa6) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000240)={0x18, 0xf, 0x1, {{0x89, 0x0, 0x1}, 0x2}}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000200)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000280)=""/209, 0xd1}], 0x1) accept(r2, 0x0, &(0x7f0000000000)) sendmmsg(r2, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 484.843355] device bridge0 left promiscuous mode 18:53:02 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447000affe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:02 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480ec0001400190d09004beafd0d8c560a84470071ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:02 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000040)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470069ffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 18:53:02 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x80, 0x0, 0x2}, 0x2cd) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000140001010000b55e62a3c02b0000000000001e00"], 0x18}}, 0x0) 18:53:02 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)={0xa6, 0x29, 0x1, {0x7fffffff, [{{0x20, 0x1, 0x8}, 0x5, 0x7, 0x7, './file0'}, {{0x4, 0x2, 0x7}, 0x8, 0x80000001, 0x7, './file0'}, {{0x2, 0x2}, 0x5, 0x8000, 0x7, './file0'}, {{0x12, 0x2, 0x4}, 0x2, 0x7, 0x7, './file0'}, {{0x5, 0x0, 0x4}, 0x1, 0x3, 0x7, './file0'}]}}, 0xa6) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) write$P9_RLCREATE(r1, &(0x7f0000000240)={0x18, 0xf, 0x1, {{0x89, 0x0, 0x1}, 0x2}}, 0x18) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000200)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000280)=""/209, 0xd1}], 0x1) accept(r2, 0x0, &(0x7f0000000000)) sendmmsg(r2, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 484.986381] audit: type=1326 audit(1535309582.936:363): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=25352 comm="syz-executor0" exe="/root/syz-executor0" sig=9 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 [ 485.137081] ================================================================== [ 485.144668] BUG: KASAN: use-after-free in sctp_transport_get_next+0x11c/0x140 [ 485.151955] Read of size 8 at addr ffff8801b79065a0 by task syz-executor6/25375 [ 485.159396] [ 485.161056] CPU: 0 PID: 25375 Comm: syz-executor6 Not tainted 4.18.0+ #209 [ 485.168076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.177431] Call Trace: [ 485.180032] dump_stack+0x1c9/0x2b4 [ 485.183676] ? dump_stack_print_info.cold.2+0x52/0x52 [ 485.188885] ? printk+0xa7/0xcf [ 485.192211] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 485.196991] ? sctp_transport_get_next+0x11c/0x140 [ 485.201942] print_address_description+0x6c/0x20b [ 485.206806] ? sctp_transport_get_next+0x11c/0x140 [ 485.211761] kasan_report.cold.7+0x242/0x30d [ 485.216238] __asan_report_load8_noabort+0x14/0x20 [ 485.221212] sctp_transport_get_next+0x11c/0x140 [ 485.226000] sctp_for_each_transport+0x152/0x370 [ 485.230775] ? sctp_ep_dump+0xaa0/0xaa0 [ 485.234772] ? sctp_v6_copy_ip_options.cold.17+0x28/0x28 [ 485.240238] ? sctp_transport_get_next+0x140/0x140 [ 485.245178] ? sctp_for_each_endpoint+0x130/0x1c0 [ 485.250042] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 485.255079] ? sctp_for_each_endpoint+0x165/0x1c0 [ 485.259938] sctp_diag_dump+0x3a7/0x620 [ 485.263937] ? inet_diag_msg_sctpladdrs_fill+0x360/0x360 [ 485.269417] ? skb_scrub_packet+0x490/0x490 [ 485.273770] ? mutex_lock_nested+0x16/0x20 [ 485.278029] __inet_diag_dump+0xa8/0x140 [ 485.282112] inet_diag_dump+0x9b/0x110 [ 485.286032] netlink_dump+0x519/0xd50 [ 485.289852] ? netlink_broadcast+0x50/0x50 [ 485.294126] __netlink_dump_start+0x4f1/0x6f0 [ 485.298633] ? kasan_check_read+0x11/0x20 [ 485.302809] inet_diag_handler_cmd+0x2ce/0x3f0 [ 485.307442] ? inet_diag_rcv_msg_compat+0x3f0/0x3f0 [ 485.312621] ? inet_diag_dump_compat+0x4b0/0x4b0 [ 485.317411] sock_diag_rcv_msg+0x31d/0x410 [ 485.321674] netlink_rcv_skb+0x172/0x440 [ 485.325758] ? sock_diag_bind+0x80/0x80 [ 485.329735] ? netlink_ack+0xbe0/0xbe0 [ 485.333632] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 485.338315] sock_diag_rcv+0x2a/0x40 [ 485.342030] netlink_unicast+0x5a0/0x760 [ 485.346111] ? netlink_attachskb+0x9a0/0x9a0 [ 485.350547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 485.356088] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 485.361111] netlink_sendmsg+0xa18/0xfc0 [ 485.365178] ? find_held_lock+0x36/0x1c0 [ 485.369250] ? netlink_unicast+0x760/0x760 [ 485.373522] ? security_socket_sendmsg+0x94/0xc0 [ 485.378284] ? netlink_unicast+0x760/0x760 [ 485.382532] sock_sendmsg+0xd5/0x120 [ 485.386261] sock_write_iter+0x362/0x5c0 [ 485.390332] ? sock_sendmsg+0x120/0x120 [ 485.394331] do_iter_readv_writev+0x8b0/0xa80 [ 485.398843] ? vfs_dedupe_file_range+0x670/0x670 [ 485.403631] ? rw_copy_check_uvector+0x30d/0x3e0 [ 485.408400] ? rw_verify_area+0x118/0x360 [ 485.412575] do_iter_write+0x185/0x5f0 [ 485.416478] ? dup_iter+0x270/0x270 [ 485.420135] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 485.425273] vfs_writev+0x1f1/0x360 [ 485.428913] ? __fget_light+0x2f7/0x440 [ 485.432894] ? vfs_iter_write+0xb0/0xb0 [ 485.436887] ? __do_sys_perf_event_open+0x7bb/0x2f30 [ 485.442009] ? get_unused_fd_flags+0x1a0/0x1a0 [ 485.446638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 485.452185] ? __fdget_pos+0xde/0x200 [ 485.455994] ? __fdget_raw+0x20/0x20 [ 485.459722] ? trace_hardirqs_off+0xb8/0x2b0 [ 485.464165] ? do_syscall_64+0x6be/0x820 [ 485.468238] ? trace_hardirqs_on+0x2c0/0x2c0 [ 485.472659] do_writev+0x11a/0x310 [ 485.476210] ? vfs_writev+0x360/0x360 [ 485.480024] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 485.485159] __x64_sys_writev+0x75/0xb0 [ 485.489151] do_syscall_64+0x1b9/0x820 [ 485.493048] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 485.498449] ? syscall_return_slowpath+0x5e0/0x5e0 [ 485.503398] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 485.508425] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 485.513449] ? recalc_sigpending_tsk+0x180/0x180 [ 485.518216] ? kasan_check_write+0x14/0x20 [ 485.522471] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 485.527335] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 485.532532] RIP: 0033:0x457089 [ 485.535753] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 485.554657] RSP: 002b:00007f306191ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 485.562371] RAX: ffffffffffffffda RBX: 00007f306191b6d4 RCX: 0000000000457089 [ 485.569641] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000005 [ 485.576909] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 485.584181] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 485.591448] R13: 00000000004d7908 R14: 00000000004c83c9 R15: 0000000000000001 [ 485.598725] [ 485.600376] Allocated by task 25364: [ 485.604100] save_stack+0x43/0xd0 [ 485.607553] kasan_kmalloc+0xc4/0xe0 [ 485.611284] kmem_cache_alloc_trace+0x152/0x730 [ 485.615953] sctp_association_new+0x127/0x2290 [ 485.620545] sctp_sendmsg_new_asoc+0x39e/0x1200 [ 485.625231] sctp_sendmsg+0x18a5/0x1da0 [ 485.629233] inet_sendmsg+0x1a1/0x690 [ 485.633034] sock_sendmsg+0xd5/0x120 [ 485.636757] __sys_sendto+0x3d7/0x670 [ 485.640556] __x64_sys_sendto+0xe1/0x1a0 [ 485.644641] do_syscall_64+0x1b9/0x820 [ 485.648526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 485.653716] [ 485.655355] Freed by task 25362: [ 485.658748] save_stack+0x43/0xd0 [ 485.662198] __kasan_slab_free+0x11a/0x170 [ 485.666434] kasan_slab_free+0xe/0x10 [ 485.670228] kfree+0xd9/0x210 [ 485.673330] sctp_association_put+0x264/0x350 [ 485.677820] sctp_transport_put+0x193/0x200 [ 485.682135] sctp_rcv+0x133b/0x3ab0 [ 485.685756] sctp6_rcv+0x15/0x30 [ 485.689120] ip6_input_finish+0x407/0x1a40 [ 485.693362] ip6_input+0xe9/0x600 [ 485.697323] ip6_rcv_finish+0x17a/0x330 [ 485.701294] ipv6_rcv+0x11e/0x650 [ 485.704745] __netif_receive_skb_one_core+0x14d/0x200 [ 485.709942] __netif_receive_skb+0x2c/0x1e0 [ 485.714262] process_backlog+0x219/0x760 [ 485.718319] net_rx_action+0x799/0x1900 [ 485.722315] __do_softirq+0x2eb/0xa74 [ 485.726100] [ 485.727721] The buggy address belongs to the object at ffff8801b7906580 [ 485.727721] which belongs to the cache kmalloc-4096 of size 4096 [ 485.740560] The buggy address is located 32 bytes inside of [ 485.740560] 4096-byte region [ffff8801b7906580, ffff8801b7907580) [ 485.752454] The buggy address belongs to the page: [ 485.757380] page:ffffea0006de4180 count:1 mapcount:0 mapping:ffff8801dac00dc0 index:0x0 compound_mapcount: 0 [ 485.767364] flags: 0x2fffc0000008100(slab|head) [ 485.772051] raw: 02fffc0000008100 ffffea000637f308 ffffea0006cba688 ffff8801dac00dc0 [ 485.779934] raw: 0000000000000000 ffff8801b7906580 0000000100000001 0000000000000000 [ 485.787804] page dumped because: kasan: bad access detected [ 485.793502] [ 485.795121] Memory state around the buggy address: [ 485.800099] ffff8801b7906480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 485.807496] ffff8801b7906500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 485.814854] >ffff8801b7906580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 485.822243] ^ [ 485.826648] ffff8801b7906600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 485.834003] ffff8801b7906680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 485.841362] ================================================================== [ 485.848738] Disabling lock debugging due to kernel taint [ 485.862131] Kernel panic - not syncing: panic_on_warn set ... [ 485.862131] [ 485.869521] CPU: 0 PID: 25375 Comm: syz-executor6 Tainted: G B 4.18.0+ #209 [ 485.877916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 485.887254] Call Trace: [ 485.889836] dump_stack+0x1c9/0x2b4 [ 485.893465] ? dump_stack_print_info.cold.2+0x52/0x52 [ 485.898670] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 485.903426] panic+0x238/0x4e7 [ 485.906630] ? add_taint.cold.5+0x16/0x16 [ 485.910774] ? trace_hardirqs_on+0xb4/0x2c0 [ 485.915120] ? sctp_transport_get_next+0x11c/0x140 [ 485.920059] kasan_end_report+0x47/0x4f [ 485.924040] kasan_report.cold.7+0x76/0x30d [ 485.928397] __asan_report_load8_noabort+0x14/0x20 [ 485.933327] sctp_transport_get_next+0x11c/0x140 [ 485.938088] sctp_for_each_transport+0x152/0x370 [ 485.942842] ? sctp_ep_dump+0xaa0/0xaa0 [ 485.946858] ? sctp_v6_copy_ip_options.cold.17+0x28/0x28 [ 485.952326] ? sctp_transport_get_next+0x140/0x140 [ 485.957253] ? sctp_for_each_endpoint+0x130/0x1c0 [ 485.962099] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 485.967114] ? sctp_for_each_endpoint+0x165/0x1c0 [ 485.971958] sctp_diag_dump+0x3a7/0x620 [ 485.975935] ? inet_diag_msg_sctpladdrs_fill+0x360/0x360 [ 485.981386] ? skb_scrub_packet+0x490/0x490 [ 485.985714] ? mutex_lock_nested+0x16/0x20 [ 485.989948] __inet_diag_dump+0xa8/0x140 [ 485.994010] inet_diag_dump+0x9b/0x110 [ 485.997904] netlink_dump+0x519/0xd50 [ 486.001716] ? netlink_broadcast+0x50/0x50 [ 486.005975] __netlink_dump_start+0x4f1/0x6f0 [ 486.010467] ? kasan_check_read+0x11/0x20 [ 486.014634] inet_diag_handler_cmd+0x2ce/0x3f0 [ 486.019239] ? inet_diag_rcv_msg_compat+0x3f0/0x3f0 [ 486.024253] ? inet_diag_dump_compat+0x4b0/0x4b0 [ 486.029042] sock_diag_rcv_msg+0x31d/0x410 [ 486.033274] netlink_rcv_skb+0x172/0x440 [ 486.037354] ? sock_diag_bind+0x80/0x80 [ 486.041339] ? netlink_ack+0xbe0/0xbe0 [ 486.045218] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 486.049890] sock_diag_rcv+0x2a/0x40 [ 486.053609] netlink_unicast+0x5a0/0x760 [ 486.057673] ? netlink_attachskb+0x9a0/0x9a0 [ 486.062080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 486.067636] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 486.072651] netlink_sendmsg+0xa18/0xfc0 [ 486.076726] ? find_held_lock+0x36/0x1c0 [ 486.080786] ? netlink_unicast+0x760/0x760 [ 486.085045] ? security_socket_sendmsg+0x94/0xc0 [ 486.089795] ? netlink_unicast+0x760/0x760 [ 486.094041] sock_sendmsg+0xd5/0x120 [ 486.097752] sock_write_iter+0x362/0x5c0 [ 486.101814] ? sock_sendmsg+0x120/0x120 [ 486.105794] do_iter_readv_writev+0x8b0/0xa80 [ 486.110287] ? vfs_dedupe_file_range+0x670/0x670 [ 486.115041] ? rw_copy_check_uvector+0x30d/0x3e0 [ 486.119795] ? rw_verify_area+0x118/0x360 [ 486.123959] do_iter_write+0x185/0x5f0 [ 486.127842] ? dup_iter+0x270/0x270 [ 486.131472] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 486.136578] vfs_writev+0x1f1/0x360 [ 486.140215] ? __fget_light+0x2f7/0x440 [ 486.144213] ? vfs_iter_write+0xb0/0xb0 [ 486.148195] ? __do_sys_perf_event_open+0x7bb/0x2f30 [ 486.153293] ? get_unused_fd_flags+0x1a0/0x1a0 [ 486.157900] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 486.163446] ? __fdget_pos+0xde/0x200 [ 486.167246] ? __fdget_raw+0x20/0x20 [ 486.170957] ? trace_hardirqs_off+0xb8/0x2b0 [ 486.175359] ? do_syscall_64+0x6be/0x820 [ 486.179416] ? trace_hardirqs_on+0x2c0/0x2c0 [ 486.183822] do_writev+0x11a/0x310 [ 486.187375] ? vfs_writev+0x360/0x360 [ 486.191189] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 486.196292] __x64_sys_writev+0x75/0xb0 [ 486.200267] do_syscall_64+0x1b9/0x820 [ 486.204153] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 486.209512] ? syscall_return_slowpath+0x5e0/0x5e0 [ 486.214450] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 486.219464] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 486.224479] ? recalc_sigpending_tsk+0x180/0x180 [ 486.229231] ? kasan_check_write+0x14/0x20 [ 486.233489] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 486.238373] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 486.243561] RIP: 0033:0x457089 [ 486.246776] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 486.265674] RSP: 002b:00007f306191ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 486.273380] RAX: ffffffffffffffda RBX: 00007f306191b6d4 RCX: 0000000000457089 [ 486.280655] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000005 [ 486.287918] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 486.295184] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 486.302450] R13: 00000000004d7908 R14: 00000000004c83c9 R15: 0000000000000001 [ 486.310010] Dumping ftrace buffer: [ 486.313545] (ftrace buffer empty) [ 486.317231] Kernel Offset: disabled [ 486.320838] Rebooting in 86400 seconds..